Microsoft-Windows-Devices-Background

Event	Title	Channel	Sample	Rule
1	Application requested task TriggerID to service device Device.	System	N	N
2	Task TriggerID started servicing device Device (process TaskProcessID).	System	N	N
3	Task TriggerID canceled servicing of device Device because: Reason.	System	N	N
4	Task TriggerID finished servicing device Duration.	System	N	N
5	Task TriggerID request was denied.	System	N	N
6	Task TriggerID request failed.	System	N	N
10	Application requested task TriggerID to access device to access device Device.	System	N	N
11	Task TriggerID started accessing device Device (process TaskProcessID).	System	N	N
12	Task TriggerID canceled access of device Device because: Reason.	System	N	N
13	Task TriggerID finished accessing device Duration.	System	N	N
14	Task TriggerID request was denied.	System	N	N
15	Task TriggerID request failed.	System	N	N
20	DeviceTriggerPerformanceStart	Operational	N	N
21	DeviceTriggerPerformanceStop	Operational	N	N
22	DeviceTriggerPerformanceStop22	Operational	N	N
30	Package packageName is attempting to associate with aepId.	Operational	N	N

Event ID 1: Application requested task TriggerID to service device Device.

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask
Opcode: Start

Message #

%2 requested task %1 to service device %4.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString

Event ID 2: Task TriggerID started servicing device Device (process TaskProcessID).

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask

Message #

Task %1 started servicing device %3 (process %2).

Fields #

Name	Description
`TriggerID` GUID
`TaskProcessID` Int32
`Device` UnicodeString

Event ID 3: Task TriggerID canceled servicing of device Device because: Reason.

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask
Opcode: Stop

Message #

Task %1 canceled servicing of device %3 because: %2.

Fields #

Name	Description
`TriggerID` GUID
`Reason` UInt32
`Device` UnicodeString

Event ID 4: Task TriggerID finished servicing device Duration.

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask
Opcode: Stop

Message #

Task %1 finished servicing device %2.

Fields #

Name	Description
`TriggerID` GUID
`Duration` Int32

Event ID 5: Task TriggerID request was denied.

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask
Opcode: Stop

Description

Task TriggerID request was denied. Application cannot service device Device because: Reason.

Message #

Task %1 request was denied.  %2 cannot service device %4 because: %7.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString
`Reason` UInt32
`Error` Int32

Event ID 6: Task TriggerID request failed.

Channel: System
Task: Applicationinitiateddeviceservicing/updatetask
Opcode: Stop

Description

Task TriggerID request failed. Application cannot service Device because: Error.

Message #

Task %1 request failed.  %2 cannot service %4 because: %7.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString
`Error` Int32

Event ID 10: Application requested task TriggerID to access device to access device Device.

Channel: System
Task: Applicationinitiateddevicebackgroundtask
Opcode: Start

Message #

%2 requested task %1 to access device to access device %4.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString

Event ID 11: Task TriggerID started accessing device Device (process TaskProcessID).

Channel: System
Task: Applicationinitiateddevicebackgroundtask

Message #

Task %1 started accessing device %3 (process %2).

Fields #

Name	Description
`TriggerID` GUID
`TaskProcessID` Int32
`Device` UnicodeString

Event ID 12: Task TriggerID canceled access of device Device because: Reason.

Channel: System
Task: Applicationinitiateddevicebackgroundtask
Opcode: Stop

Message #

Task %1 canceled access of device %3 because: %2.

Fields #

Name	Description
`TriggerID` GUID
`Reason` UInt32
`Device` UnicodeString

Event ID 13: Task TriggerID finished accessing device Duration.

Channel: System
Task: Applicationinitiateddevicebackgroundtask
Opcode: Stop

Message #

Task %1 finished accessing device %2.

Fields #

Name	Description
`TriggerID` GUID
`Duration` Int32

Event ID 14: Task TriggerID request was denied.

Channel: System
Task: Applicationinitiateddevicebackgroundtask
Opcode: Stop

Description

Task TriggerID request was denied. Application cannot access device Device in the background because: Reason.

Message #

Task %1 request was denied.  %2 cannot access device %4 in the background because: %7.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString
`Reason` UInt32
`Error` Int32

Event ID 15: Task TriggerID request failed.

Channel: System
Task: Applicationinitiateddevicebackgroundtask
Opcode: Stop

Description

Task TriggerID request failed. Application cannot access device Device in the background because: Error.

Message #

Task %1 request failed.  %2 cannot access device %4 in the background because: %7.

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString
`Error` Int32

Event ID 20: DeviceTriggerPerformanceStart

Channel: Operational
Task: DeviceTriggerPerformance
Opcode: Start

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString

Event ID 21: DeviceTriggerPerformanceStop

Channel: Operational
Task: DeviceTriggerPerformance
Opcode: Stop

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString

Event ID 22: DeviceTriggerPerformanceStop22

Channel: Operational
Task: DeviceTriggerPerformance
Opcode: Stop

Fields #

Name	Description
`TriggerID` GUID
`Application` UnicodeString
`TaskType` UInt32
`Device` UnicodeString
`HardwareId` UnicodeString
`Arguments` UnicodeString

Event ID 30: Package packageName is attempting to associate with aepId.

Channel: Operational
Task: DeviceAttemptAssociationAudit

Message #

Package %1 is attempting to associate with %2

Fields #

Name	Description
`packageName` UnicodeString
`aepId` UnicodeString

Provenance

ETW provider GUID 64ef2b1c-4ae1-4e64-8599-1636e441ec88

Defined in deviceaccess.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3692, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB