Microsoft-Windows-Hyper-V-UiDevices

70 events across 3 channels

Event	Title	Channel	Sample
1500	[Virtual machine VmId]	Operational	N
1500	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
1510	[Virtual machine VmId]	Operational	N
1510	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
1520	[Virtual machine VmId]	Operational	N
1520	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
1530	[Virtual machine VmId]	Operational	N
1530	[Virtual machine VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
12460	'VmName' could not initialize machine remoting system	Operational	N
12460	'VmName' could not initialize machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12461	Could not initialize machine remoting system	Operational	N
12461	Could not initialize machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12480	'VmName' failure in machine remoting system	Operational	N
12480	'VmName' failure in machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12481	Failure in machine remoting system	Operational	N
12481	Failure in machine remoting system.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12530	'VmName' device Device could not allocate guest physical address space	Operational	N
12530	'VmName' device Device could not allocate guest physical address space.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12531	Device Device could not allocate guest physical address space	Operational	N
12531	Device Device could not allocate guest physical address space.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12540	'VmName' device Device experienced a protocol error indicative of a deep system …	Operational	N
12540	'VmName' device Device experienced a protocol error indicative of a deep system …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12541	Device Device experienced a protocol error indicative of a deep system problem	Operational	N
12541	Device Device experienced a protocol error indicative of a deep system problem.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12550	'VmName' device Device found bad data on restoring	Operational	N
12550	'VmName' device Device found bad data on restoring.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12551	Device Device found bad data on restoring	Operational	N
12551	Device Device found bad data on restoring.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32700	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational	N
32700	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32701	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational	N
32701	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32702	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational	N
32702	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32703	The Device device on VmName virtual machine experienced a VMBus pipe error	Operational	N
32703	The Device device on VmName virtual machine experienced a VMBus pipe error …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32704	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational	N
32704	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32705	The Device device on VmName virtual machine experienced an error ErrorCode when …	Operational	N
32705	The Device device on VmName virtual machine experienced an error ErrorCode when …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32706	The horizontal resolution is below the minimum value of 100	Operational	N
32706	The horizontal resolution is below the minimum value of 100.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32707	The horizontal resolution is above the maximum value of 7680	Operational	N
32707	The horizontal resolution is above the maximum value of 7680.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32708	The horizontal resolution must be an even number	Operational	N
32708	The horizontal resolution must be an even number.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32709	The vertical resolution is below the minimum value of 100	Operational	N
32709	The vertical resolution is below the minimum value of 100.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32710	The vertical resolution is above the maximum value of 7680	Operational	N
32710	The vertical resolution is above the maximum value of 7680.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32711	The vertical resolution must be an even number	Operational	N
32711	The vertical resolution must be an even number.	Microsoft-Windows-Hyper-V-Worker-Admin	N
32712	At least one of horizontal and vertical resolutions must be equal to or larger …	Operational	N
32712	At least one of horizontal and vertical resolutions must be equal to or larger …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32713	At least one of horizontal and vertical resolutions must be equal to or smaller …	Operational	N
32713	At least one of horizontal and vertical resolutions must be equal to or smaller …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32714	The resolution type must be Maximum (2), Single (3) or Default (4)	Operational	N
32714	The resolution type must be Maximum (2), Single (3) or Default (4).	Microsoft-Windows-Hyper-V-Worker-Admin	N
32715	The VmName virtual machine must be turned off when setting resolution type, …	Operational	N
32715	The VmName virtual machine must be turned off when setting resolution type, …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32716	The configuration version of VmName virtual machine does not support setting …	Operational	N
32716	The configuration version of VmName virtual machine does not support setting …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32717	The configuration version of the virtual machine does not support setting the …	Operational	N
32717	The configuration version of the virtual machine does not support setting the …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32718	HorizontalResolution or VerticalResolution cannot be set when ResolutionType is …	Operational	N
32718	HorizontalResolution or VerticalResolution cannot be set when ResolutionType is …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32719	The virtual machine VmName cannot load device Device because there are no …	Operational	N
32719	The virtual machine VmName cannot load device Device because there are no …	Microsoft-Windows-Hyper-V-Worker-Admin	N
32720	The device Device cannot be loaded because there are no mutually support …	Operational	N
32720	The device Device cannot be loaded because there are no mutually support …	Microsoft-Windows-Hyper-V-Worker-Admin	N

Event ID 1500: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1500: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1510: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1510: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1520: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1520: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1530: [Virtual machine VmId]

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

[Virtual machine ].

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1530: [Virtual machine VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Description

[Virtual machine VmId] TraceData.

Message #

[Virtual machine %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 12460: 'VmName' could not initialize machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' could not initialize machine remoting system. Error: 'ErrorCodeString'(ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12460: 'VmName' could not initialize machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' could not initialize machine remoting system. Error: 'ErrorCodeString'(ErrorCode). (Virtual machine ID VmId).

Message #

'%1' could not initialize machine remoting system. Error: '%3'(%4). (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12461: Could not initialize machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Could not initialize machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12461: Could not initialize machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Could not initialize machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Message #

Could not initialize machine remoting system. Error: '%3' (%4).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12480: 'VmName' failure in machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12480: 'VmName' failure in machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).

Message #

'%1' failure in machine remoting system. Error: '%3' (%4). (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12481: Failure in machine remoting system

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12481: Failure in machine remoting system.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Failure in machine remoting system. Error: 'ErrorCodeString' (ErrorCode).

Message #

Failure in machine remoting system. Error: '%3' (%4).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12530: 'VmName' device Device could not allocate guest physical address space

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device could not allocate guest physical address space. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12530: 'VmName' device Device could not allocate guest physical address space.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device could not allocate guest physical address space. (Virtual machine ID VmId).

Message #

'%1' device %3 could not allocate guest physical address space. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12531: Device Device could not allocate guest physical address space

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device could not allocate guest physical address space.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12531: Device Device could not allocate guest physical address space.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device could not allocate guest physical address space.

Message #

Device %3 could not allocate guest physical address space.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12540: 'VmName' device Device experienced a protocol error indicative of a deep system problem

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device experienced a protocol error indicative of a deep system problem. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12540: 'VmName' device Device experienced a protocol error indicative of a deep system problem.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device experienced a protocol error indicative of a deep system problem. (Virtual machine ID VmId).

Message #

'%1' device %3 experienced a protocol error indicative of a deep system problem. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12541: Device Device experienced a protocol error indicative of a deep system problem

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device experienced a protocol error indicative of a deep system problem.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12541: Device Device experienced a protocol error indicative of a deep system problem.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device experienced a protocol error indicative of a deep system problem.

Message #

Device %3 experienced a protocol error indicative of a deep system problem.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12550: 'VmName' device Device found bad data on restoring

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

'VmName' device Device found bad data on restoring. (Virtual machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12550: 'VmName' device Device found bad data on restoring.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' device Device found bad data on restoring. (Virtual machine ID VmId).

Message #

'%1' device %3 found bad data on restoring. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12551: Device Device found bad data on restoring

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

Device found bad data on restoring.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 12551: Device Device found bad data on restoring.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Device Device found bad data on restoring.

Message #

Device %3 found bad data on restoring.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString

Event ID 32700: The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when sending a VMBus message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32700: The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when sending a VMBus message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when sending a VMBus message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32701: The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing an incoming message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32701: The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing an incoming message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing an incoming message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32702: The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when completing an outgoing message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32702: The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when completing an outgoing message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when completing an outgoing message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32703: The Device device on VmName virtual machine experienced a VMBus pipe error

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced a VMBus pipe error . (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32703: The Device device on VmName virtual machine experienced a VMBus pipe error ErrorCode.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced a VMBus pipe error ErrorCode. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced a VMBus pipe error %5. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32704: The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing a cursor shape update message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32704: The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing a cursor shape update message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing a cursor shape update message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32705: The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device on virtual machine experienced an error when processing a dirty region message. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32705: The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The Device device on VmName virtual machine experienced an error ErrorCode when processing a dirty region message. (Virtual machine ID VmId).

Message #

The %3 device on %1 virtual machine experienced an error %5 when processing a dirty region message. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`ContextParam1` UInt32
`ContextParam2` UInt32
`ContextParam3` UInt32

Event ID 32706: The horizontal resolution is below the minimum value of 100

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution is below the minimum value of 100.

Event ID 32706: The horizontal resolution is below the minimum value of 100.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution is below the minimum value of 100.

Message #

The horizontal resolution is below the minimum value of 100.

Event ID 32707: The horizontal resolution is above the maximum value of 7680

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution is above the maximum value of 7680.

Event ID 32707: The horizontal resolution is above the maximum value of 7680.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution is above the maximum value of 7680.

Message #

The horizontal resolution is above the maximum value of 7680.

Event ID 32708: The horizontal resolution must be an even number

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The horizontal resolution must be an even number.

Event ID 32708: The horizontal resolution must be an even number.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The horizontal resolution must be an even number.

Message #

The horizontal resolution must be an even number.

Event ID 32709: The vertical resolution is below the minimum value of 100

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution is below the minimum value of 100.

Event ID 32709: The vertical resolution is below the minimum value of 100.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution is below the minimum value of 100.

Message #

The vertical resolution is below the minimum value of 100.

Event ID 32710: The vertical resolution is above the maximum value of 7680

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution is above the maximum value of 7680.

Event ID 32710: The vertical resolution is above the maximum value of 7680.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution is above the maximum value of 7680.

Message #

The vertical resolution is above the maximum value of 7680.

Event ID 32711: The vertical resolution must be an even number

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The vertical resolution must be an even number.

Event ID 32711: The vertical resolution must be an even number.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The vertical resolution must be an even number.

Message #

The vertical resolution must be an even number.

Event ID 32712: At least one of horizontal and vertical resolutions must be equal to or larger than 640

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Event ID 32712: At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Message #

At least one of horizontal and vertical resolutions must be equal to or larger than 640.

Event ID 32713: At least one of horizontal and vertical resolutions must be equal to or smaller than 4320

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Event ID 32713: At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Message #

At least one of horizontal and vertical resolutions must be equal to or smaller than 4320.

Event ID 32714: The resolution type must be Maximum (2), Single (3) or Default (4)

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Event ID 32714: The resolution type must be Maximum (2), Single (3) or Default (4).

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Message #

The resolution type must be Maximum (2), Single (3) or Default (4). Please run 'Get-Help Set-VMVideo -Detailed' for details.

Event ID 32715: The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32715: The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The VmName virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID VmId).

Message #

The %1 virtual machine must be turned off when setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32716: The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The configuration version of virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32716: The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The configuration version of VmName virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID VmId).

Message #

The configuration version of %1 virtual machine does not support setting resolution type, horizontal resolution or vertical resolution. (Virtual machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString

Event ID 32717: The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Event ID 32717: The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Message #

The configuration version of the virtual machine does not support setting the property LockOnDisconnect to non-default value.

Event ID 32718: HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Event ID 32718: HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Message #

HorizontalResolution or VerticalResolution cannot be set when ResolutionType is Default.

Event ID 32719: The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The virtual machine cannot load device because there are no mutually supported protocol versions. The server version is and the client version is (Virtual machine ID ).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32719: The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions. The server version is ServerVersion and the client version is ClientVersion (Virtual machine ID VmId).

Message #

The virtual machine %1 cannot load device %3 because there are no mutually supported protocol versions. The server version is %4 and the client version is %5 (Virtual machine ID %2).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32720: The device Device cannot be loaded because there are no mutually support protocol versions between the server and client

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Operational

Description

The device cannot be loaded because there are no mutually support protocol versions between the server and client.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Event ID 32720: The device Device cannot be loaded because there are no mutually support protocol versions between the server and client.

Provider: Microsoft-Windows-Hyper-V-UiDevices
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The device Device cannot be loaded because there are no mutually support protocol versions between the server and client.

Message #

The device %3 cannot be loaded because there are no mutually support protocol versions between the server and client.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`Device` UnicodeString
`ServerVersion` UnicodeString
`ClientVersion` UnicodeString

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 339aad0a-4124-4968-8147-4cbbb1f8b3d5

Defined in VmUiDevices.dll, which carries the event manifest.

Observed on:

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02

Downloads

Microsoft-Windows-Hyper-V-UiDevices registered manifest XML (in the Win11-26200.6584 manifest pack, 2.0 MB) manifest-xml

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)