Microsoft-Windows-FileHistory-Core
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 100 | File History operational state has changed | WHC | N | N |
| 200 | Unable to start a backup cycle for configuration ConfigFilePath. | BackupLog | N | N |
| 201 | Unable to scan user libraries for changes and perform backup of modified files … | BackupLog | N | N |
| 202 | Unusual condition was encountered during scanning user libraries for changes and … | BackupLog | N | N |
| 203 | Unable to finish a backup cycle for configuration ConfigFilePath. | BackupLog | N | N |
| 204 | Unusual condition was encountered during finalization of a backup cycle for … | BackupLog | N | N |
| 205 | Some files could not be restored. | BackupLog | N | N |
Event ID 100: File History operational state has changed
#Fields #
| Name | Description |
|---|---|
hc_stateid UInt32 | |
ProtectedUpToTime UnicodeString |
Event ID 200: Unable to start a backup cycle for configuration ConfigFilePath.
#Event ID 201: Unable to scan user libraries for changes and perform backup of modified files for configuration ConfigFilePath.
#Event ID 202: Unusual condition was encountered during scanning user libraries for changes and performing backup of modified files for configuration ConfigFilePath.
#Event ID 203: Unable to finish a backup cycle for configuration ConfigFilePath.
#Event ID 204: Unusual condition was encountered during finalization of a backup cycle for configuration ConfigFilePath.
#Provenance
ETW provider GUID b447b4db-7780-11e0-ada3-18a90531a85a
Defined in fhsvc.dll, which carries the event manifest.
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB