Microsoft-Windows-NetworkProvider

Event ID 1000: Ignoring UNC Hardening Configuration Entry: Unsupported registry value type.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
UnsupportedRegistryValueType

Message #

Ignoring UNC Hardening Configuration Entry: Unsupported registry value type.

Registry Value Path: %2@%4

Registry Value Type: %5

Guidance:
UNC Hardening configuration only supports registry values of types REG_SZ and REG_MULTI_SZ.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
RegistryKeyLength UInt16
RegistryKey UnicodeString
RegistryValueNameLength UInt16
RegistryValueName UnicodeString
RegistryValueType UInt32

Event ID 1001: Ignoring UNC Hardening Configuration Entry: Unable to parse UNC Path.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
InvalidUNCPath

Message #

Ignoring UNC Hardening Configuration Entry: Unable to parse UNC Path.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
The registry value name is not a valid UNC path.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString

Event ID 1002: Ignoring UNC Hardening Configuration Entry: Unsupported UNC Path.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
UnsupportedUNCPath

Message #

Ignoring UNC Hardening Configuration Entry: Unsupported UNC Path.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
UNC Hardening is only supported at server or share granularity. If only a fraction of the resources available on a share require additional security, consider relocating contents that require additional security to a different share.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString

Event ID 1003: Ignoring UNC Hardening Configuration Property: Unsupported property name.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
UnsupportedPropertyName

Message #

Ignoring UNC Hardening Configuration Property: Unsupported property name.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: %7

Guidance:
The specified property name does not match a UNC Hardening property supported on the current version of Windows and will be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
PropertyNameLength UInt16
PropertyName UnicodeString
PropertyValue UInt64

Event ID 1004: Ignoring UNC Hardening Configuration Property: Unsupported property name.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
UnsupportedPropertyName

Message #

Ignoring UNC Hardening Configuration Property: Unsupported property name.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: '%8'

Guidance:
The specified property name does not match a UNC Hardening property supported on the current version of Windows and will be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
PropertyNameLength UInt16
PropertyName UnicodeString
PropertyValueLength UInt16
PropertyValue UnicodeString

Event ID 1005: Ignoring UNC Hardening Configuration Property: Unsupported property value.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
UnsupportedPropertyValue

Message #

Ignoring UNC Hardening Configuration Property: Unsupported property value.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: '%8'

Guidance:
The specified property name expects a boolean value should be assigned a value of 0 (disabled) or 1 (enabled).

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
PropertyNameLength UInt16
PropertyName UnicodeString
PropertyValueLength UInt16
PropertyValue UnicodeString

Event ID 1006: Unable to parse UNC Hardening Configuration Entry: Unknown Error.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
InvalidSyntax

Message #

Unable to parse UNC Hardening Configuration Entry: Unknown Error.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
The UNC Hardening configuration for the path contains invalid syntax and may be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString

Event ID 1007: Unable to parse UNC Hardening Configuration Entry: Unexpected token.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
InvalidSyntax

Message #

Unable to parse UNC Hardening Configuration Entry: Unexpected token.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
ExpectedToken UInt32
FoundTokenLength UInt16
FoundToken UnicodeString

Event ID 1008: Unable to parse UNC Hardening Configuration Entry: Unable to parse integer.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
InvalidSyntax

Message #

Unable to parse UNC Hardening Configuration Entry: Unable to parse integer.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored. The value found token was parsed as an integer, but was found to contain illegal digits.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
ExpectedToken UInt32
FoundTokenLength UInt16
FoundToken UnicodeString

Event ID 1009: Unable to parse UNC Hardening Configuration Entry: Unable to parse string.

#
Channel
Operational
Task
UNCHardeningConfiguration
Opcode
InvalidSyntax

Message #

Unable to parse UNC Hardening Configuration Entry: Unable to parse string.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored. The value found token was parsed as an string, but was not terminated or exceeded the maximum allowable string length.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields #

NameDescription
UncPathLength UInt16
UncPath UnicodeString
UncHardeningConfigurationLength UInt32
UncHardeningConfiguration UnicodeString
ExpectedToken UInt32
FoundTokenLength UInt16
FoundToken UnicodeString

Event ID 1101: An administrator has enabled remote mailslots, which are off by default.

#
Channel
System

Description

An administrator has enabled remote mailslots, which are off by default. Microsoft does not recommend enabling remote mailslots. To disable remote mailslots, please run the command: Set-SmbClientConfiguration -EnableMailslots $FALSE

Message #

An administrator has enabled remote mailslots, which are off by default. Microsoft does not recommend enabling remote mailslots. To disable remote mailslots, please run the command: Set-SmbClientConfiguration -EnableMailslots $FALSE

Event ID 1102: An administrator has disabled remote mailslots.

#
Channel
System

Event ID 1103: An administrator has enabled remote mailslots by policy.

#
Channel
System

Description

An administrator has enabled remote mailslots by policy. Microsoft does not recommend enabling remote mailslots.

Message #

An administrator has enabled remote mailslots by policy. Microsoft does not recommend enabling remote mailslots.

Event ID 1104: An administrator has disabled remote mailslots by policy.

#
Channel
System

Provenance

ETW provider GUID 1e9a4978-78c2-441e-8858-75b5d1326bc5

Defined in mup.sys, the binary that emits these events.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB