Microsoft-Windows-HomeGroup-ControlPanel
76 events across 2 channels
Event ID 5001: Core initialization failed.
#Event ID 5002: Page initialization failed.
#Event ID 5003: GetHomeGroupStatus failed.
#Event ID 5004: GetSharingFlags failed.
#Event ID 5005: PopulateSharedFolderList failed.
#Event ID 5006: Retrieve network discovery failed.
#Event ID 5007: Retrieve file sharing failed.
#Event ID 5008: Retrieve public folder failed.
#Event ID 5009: Retrieve printer sharing failed.
#Event ID 5010: Retrieve media sharing failed.
#Event ID 5011: Commit network discovery failed.
#Event ID 5012: Commit file sharing failed.
#Event ID 5013: Commit public folder failed.
#Event ID 5014: Commit printer sharing failed.
#Event ID 5015: Commit media sharing failed.
#Event ID 5016: Share folder failed.
#Event ID 5017: Retrieve printer sharing failed.
#Event ID 5018: Commit password protection failed.
#Event ID 5020: Commit public folder failed.
#Event ID 5021: Retrieving UI status from SSO failed.
#Event ID 5022: Failed to initialize homegroup printer monitor.
#Event ID 5023: Successfully installed homegroup printer
#Description
Successfully installed homegroup printer.
Message #
Event ID 5024: Successfully removed homegroup printer
#Description
Successfully removed homegroup printer.
Message #
Event ID 5025: Failed to install homegroup printer.
#Event ID 5028: Shared printer message received.
#Description
Shared printer message received. Attempting to install.
Message #
Event ID 5029: Shared printer message removed.
#Description
Shared printer message removed. Attempting to uninstall.
Message #
Event ID 5030: Failed to install printer.
#Description
Failed to install printer. Notifying user.
Message #
Event ID 6001: Initialization_CoreStart
#Event ID 6002: Initialization_CoreStop
#Event ID 6003: Initialization_PageStart
#Event ID 6004: Initialization_PageStop
#Event ID 6005: Initialization_HomeGroupPageStart
#Event ID 6006: Initialization_HomeGroupPageStop
#Event ID 6007: Initialization_AdvancedPageStart
#Event ID 6008: Initialization_AdvancedPageStop
#Event ID 6009: Initialization_CreateElevatedObjectsStart
#Event ID 6010: Initialization_CreateElevatedObjectsStop
#Event ID 6011: Settings_HomeGroupPageRetrieveStart
#Event ID 6012: Settings_HomeGroupPageRetrieveStop
#Event ID 6013: Settings_HomeGroupPageCommitStart
#Event ID 6014: Settings_HomeGroupPageCommitStop
#Event ID 6015: Settings_AdvancedPageRetrieveStart
#Event ID 6016: Settings_AdvancedPageRetrieveStop
#Event ID 6017: Settings_AdvancedPageCommitStart
#Event ID 6018: Settings_AdvancedPageCommitStop
#Event ID 6019: Notification_AvailableToJoin_EventStart
#Event ID 6020: Notification_AvailableToJoin_EventStop
#Event ID 6021: Notification_PasskeyChangeRequired_EventStart
#Event ID 6022: Notification_PasskeyChangeRequired_EventStop
#Event ID 6023: Notification_MergeRequired_EventStart
#Event ID 6024: Notification_MergeRequired_EventStop
#Event ID 6025: Notification_AvailableToJoin_BalloonStart
#Event ID 6026: Notification_AvailableToJoin_BalloonStop
#Event ID 6027: Notification_PasskeyChangeRequired_BalloonStart
#Event ID 6028: Notification_PasskeyChangeRequired_BalloonStop
#Event ID 6029: Notification_MergeRequired_BalloonStart
#Event ID 6030: Notification_MergeRequired_BalloonStop
#Event ID 6031: Action_LaunchCreateJoinStart
#Event ID 6032: Action_LaunchCreateJoinStop
#Event ID 7001: Initialization_BeginPageStart
#Event ID 7002: Initialization_BeginPageStop
#Event ID 7003: Initialization_PasskeyPageStart
#Event ID 7004: Initialization_PasskeyPageStop
#Event ID 7005: Initialization_FinishedPageStart
#Event ID 7006: Initialization_FinishedPageStop
#Event ID 7007: Initialization_ConfirmPageStart
#Event ID 7008: Initialization_ConfirmPageStop
#Event ID 7009: Action_PasswordGenerationStart
#Event ID 7010: Action_PasswordGenerationStop
#Event ID 7011: Action_DoCreateJoinChangeStart
#Event ID 7012: Action_DoCreateJoinChangeStop
#Event ID 7017: Initialization_SharingPageStart
#Event ID 7018: Initialization_SharingPageStop
#Event ID 8001: The homegroup state has changed.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 134ea407-755d-4a93-b8a6-f290cd155023
Defined in hgcpl.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02