Microsoft-Windows-DiskDiagnosticResolver
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Windows Disk Diagnostic Resolver started with administrative privileges. | Operational | N | N |
| 2 | Windows Disk Diagnostic Resolver started without administrative privileges. | Operational | N | N |
| 3 | Windows Disk Diagnostic is exiting silently because it is disabled by Group … | Operational | N | N |
| 4 | Windows Disk Diagnostic Resolver is exiting because the user requested … | Operational | N | N |
| 5 | Windows Disk Diagnostic Resolver is exiting because no S. | Operational | N | N |
| 6 | Windows Disk Diagnostic Resolver was disabled successfully. | Operational | N | N |
| 7 | Windows Disk Diagnostic Resolver could not be disabled. | Operational | N | N |
| 8 | Windows Disk Diagnostic Resolver launched backup at the user's request. | Operational | N | N |
| 9 | Windows Disk Diagnostic Resolver deleted stale entries from the S. | Operational | N | N |
| 10 | Windows Disk Diagnostic Resolver suppressed all active S. | Operational | N | N |
Event ID 1: Windows Disk Diagnostic Resolver started with administrative privileges.
#Event ID 2: Windows Disk Diagnostic Resolver started without administrative privileges.
#Event ID 3: Windows Disk Diagnostic is exiting silently because it is disabled by Group Policy.
#Event ID 4: Windows Disk Diagnostic Resolver is exiting because the user requested suppression of any S.
#Description
Windows Disk Diagnostic Resolver is exiting because the user requested suppression of any S.M.A.R.T. faults that were detected.
Message #
Event ID 5: Windows Disk Diagnostic Resolver is exiting because no S.
#Description
Windows Disk Diagnostic Resolver is exiting because no S.M.A.R.T. faults were detected on this computer.
Message #
Event ID 6: Windows Disk Diagnostic Resolver was disabled successfully.
#Event ID 7: Windows Disk Diagnostic Resolver could not be disabled.
#Event ID 8: Windows Disk Diagnostic Resolver launched backup at the user's request.
#Provenance
ETW provider GUID 6b1ffe48-5b1e-4793-9f7f-ae926454499d
Defined in dfdwiz.exe, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB