Microsoft-Windows-LanguagePackSetup
72 events across 4 channels
Event ID 1000: CBS Client initialization failed.
#Event ID 1001: Application initialization failed.
#Event ID 1002: The Language Pack for Language has been disabled.
#Event ID 1003: CBS error Error reported while operating on UI Language Pack for Message.
#Event ID 1004: The command line argument Parameter is not valid.
#Event ID 1005: The command line argument Parameter is missing one or more required parameters.
#Event ID 1006: Invalid language Language specified as command line argument.
#Event ID 1007: No languages found or invalid path: Parameter.
#Event ID 1008: The file Language is not a valid Language Pack.
#Event ID 1009: Could not find language Language1.
#Event ID 1010: Error message suppressed from UI: Error.
#Event ID 1011: This computer must be restarted before attempting to install or remove languages
#Description
This computer must be restarted before attempting to install or remove languages.
Message #
Event ID 1012: The user does not have admin privilege.
#Description
The user does not have admin privilege. Please run this command using a user account with admin privilege.
Message #
Event ID 1013: The language pack for Language cannot be installed because it is already installed.
#Event ID 1014: The language pack for Language is not applicable for this system.
#Event ID 1015: The language pack version for Language does not match your current system.
#Event ID 1016: The language pack for Language1 cannot be installed because its parent language Language2 is not installed.
#Event ID 1017: The disk space needed to install language pack Language exceeds the available free disk space.
#Event ID 1018: CBS failed to install the language pack for Language.
#Event ID 1040: Cannot uninstall language pack for Language because it's not installed.
#Event ID 1041: You cannot uninstall language Language1 because the language is the parent language of language Language2.
#Event ID 1042: You cannot uninstall language Language because the language is the system installed UI language.
#Event ID 1043: CBS failed to remove the language pack for Language.
#Event ID 1060: Failed to change user UI language from Language1 to Language2.
#Event ID 1061: Failed to change system UI language from Language1 to Language2.
#Event ID 2000: Install of UI Language Pack for Language succeeded.
#Event ID 2001: Removal of UI Language Pack for Language succeeded.
#Event ID 2002: The call to NotifyUILanguageChange for language Language has failed with error Error.
#Event ID 2003: The call to NotifyUILanguageChange to change Machine UI language from PreviousLanguage to NewLanguage failed with error Error.
#Event ID 2004: Failed to change Machine UI language from PreviousLanguage to NewLanguage failed with error Error.
#Event ID 2005: UI Language Pack cleanup operation completed successfully
#Description
UI Language Pack cleanup operation completed successfully.
Message #
Event ID 2006: UI Language Pack cleanup operation failed
#Description
UI Language Pack cleanup operation failed.
Message #
Event ID 2007: Install of UI Language Pack for Language failed.
#Event ID 2008: Removal of UI Language Pack for Language failed.
#Event ID 2009: CBS installed language pack for Language successfully.
#Event ID 2010: CBS removed language pack for Language successfully.
#Event ID 2011: The call to notify NotifyUILanguageChange that a new language Language has been installed has failed with error Error.
#Event ID 2012: User UI language has been successfully changed from Language1 to Language2.
#Event ID 2013: System UI language has been successfully changed from Language1 to Language2.
#Event ID 2014: LpkSetup wizard operation has failed with error: Error.
#Event ID 2015: Validation for install of language Language has failed with error: Error.
#Event ID 2016: Validation for removal of language Language has failed with error: Error.
#Event ID 3000: Install of UI Language Pack for Language started.
#Event ID 3001: Removal of UI Language Pack for Language started.
#Event ID 3002: Actions for UI Language Pack for Language finished.
#Event ID 3005: Starts processing lpksetup command line
#Description
Starts processing lpksetup command line.
Message #
Event ID 3006: Finish processing lpksetup command line
#Description
Finish processing lpksetup command line.
Message #
Event ID 4000: LPRemove launched.
#Description
LPRemove launched.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LanguagePackSetup",
"guid": "{7237FFF9-A08A-4804-9C79-4A8704B70B87}",
"event_source_name": "",
"event_id": 4000,
"version": 0,
"level": 4,
"task": 35,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-06-13T05:39:33.6013808+00:00",
"event_record_id": 9,
"correlation": {},
"execution": {
"process_id": 5364,
"thread_id": 5764
},
"channel": "Microsoft-Windows-LanguagePackSetup/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "LPRemove launched."
}
Event ID 4001: LPRemove terminating.
#Description
LPRemove terminating.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-LanguagePackSetup",
"guid": "{7237FFF9-A08A-4804-9C79-4A8704B70B87}",
"event_source_name": "",
"event_id": 4001,
"version": 0,
"level": 4,
"task": 35,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-06-13T05:39:33.6047964+00:00",
"event_record_id": 10,
"correlation": {},
"execution": {
"process_id": 5364,
"thread_id": 5764
},
"channel": "Microsoft-Windows-LanguagePackSetup/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {},
"message": "LPRemove terminating."
}
Event ID 4002: Running in new boot (this is BootCount th boot lpremove tries to run).
#Event ID 4003: Run number BootCount across the boot CurrentSessionRunCount.
#Event ID 4004: Resetting run-time data due to new boot
#Description
Resetting run-time data due to new boot.
Message #
Event ID 4005: Maximum run attempt limit for a session (boot) reached.
#Description
Maximum run attempt limit for a session (boot) reached. Next run will be attempted on after machine reboots.
Message #
Event ID 4006: Maximum run attempt limit for overall amoutn of machine boots reached.
#Description
Maximum run attempt limit for overall amoutn of machine boots reached. Lpremove won't run again. This is error situation meaning all prior runs have failed.
Message #
Event ID 4007: LanguageCommitted value isn't set under System\CurrentControlSet\Control\MUI\UILanguages.
#Description
LanguageCommitted value isn't set under System\CurrentControlSet\Control\MUI\UILanguages.(lpremove is terminating).
Message #
Event ID 4008: lpremove failed launching lpksetup failed
#Description
lpremove failed launching lpksetup failed.
Message #
Event ID 4009: lpremove successfully launched lpksetup
#Description
lpremove successfully launched lpksetup.
Message #
Event ID 4010: LPRemove failed to obtain run data from registry.
#Description
LPRemove failed to obtain run data from registry. Unscheduling LpRemove.
Message #
Event ID 4011: LPRemove failed to incement run-data in registry.
#Description
LPRemove failed to incement run-data in registry. Unscheduling LpRemove.
Message #
Event ID 4012: LPRemove task failed to complete.
#Description
LPRemove task failed to complete. Next scheduled run will try to complete the task.
Message #
Event ID 4013: LPRemove encountered internal error.
#Description
LPRemove encountered internal error.
Message #
Event ID 4014: LPRemove failed to create a scheduled task for itself.
#Description
LPRemove failed to create a scheduled task for itself.
Message #
Event ID 4015: LPRemove executed in audit mode.
#Description
LPRemove executed in audit mode. No tasks were performed.
Message #
Event ID 4016: Generating pre-installed PRI files for Language.
#Event ID 5000: The OnUILanguageAdd callback was called with new language NewLanguage, previous language PreviousLanguage and flags Flags.
#Event ID 5001: The OnUILanguageRemove callback was called with new language NewLanguage, previous language PreviousLanguage and flags Flags.
#Event ID 5002: The OnUILanguageClear callback was called with new language NewLanguage, previous language PreviousLanguage and flags Flags.
#Event ID 5003: The OnMachineUILanguageInit callback was called with new language NewLanguage, previous language PreviousLanguage and flags Flags.
#Event ID 5004: The OnMachineUILanguageSwitch callback was called with new language NewLanguage, previous language PreviousLanguage and flags Flags.
#Event ID 5005: The test callback API CallbackAPIName failed with status ErrorStatus.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 7237fff9-a08a-4804-9c79-4a8704b70b87
Defined in lpksetup.exe, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2965, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02