Microsoft-Windows-Privacy-Auditing-ImproveInkingAndTyping

Event	Title	Channel	Sample	Rule
1000	Improve Inking and Typing setting on this device has successfully changed from …	Operational	N	N
1001	Improve Inking and Typing setting on this device has failed to change by …	Operational	N	N
1002	Improve Inking and Typing setting for user {CallerUserSid} successfully changed …	Operational	N	N
1003	Improve Inking and Typing setting for user {CallerUserSid} failed to change by …	Operational	N	N
1006	Improve Inking and Typing on this device default setting successfully created as …	Operational	N	N
1007	Improve Inking and Typing on this device default setting failed creation.	Operational	N	N
1008	Improve Inking and Typing setting default for user {TargetUserSid} successfully …	Operational	N	N
1009	Improve Inking and Typing setting default for user {TargetUserSid} failed …	Operational	N	N

Event ID 1000: Improve Inking and Typing setting on this device has successfully changed from {OldConsentValue} to {NewConsentValue} by {CallerProcessName}.

Channel: Operational

Fields #

Name	Description
`OldConsentValue`
`NewConsentValue`
`CallerProcessName`

Event ID 1001: Improve Inking and Typing setting on this device has failed to change by {CallerProcessName}.

Channel: Operational

Fields #

Name	Description
`CallerProcessName`

Event ID 1002: Improve Inking and Typing setting for user {CallerUserSid} successfully changed from {OldConsentValue} to {NewConsentValue} by {CallerProcessName}.

Channel: Operational

Fields #

Name	Description
`CallerUserSid`
`OldConsentValue`
`NewConsentValue`
`CallerProcessName`

Event ID 1003: Improve Inking and Typing setting for user {CallerUserSid} failed to change by {CallerProcessName}.

Channel: Operational

Fields #

Name	Description
`CallerUserSid`
`CallerProcessName`

Event ID 1006: Improve Inking and Typing on this device default setting successfully created as {NewConsentValue}.

Channel: Operational

Fields #

Name	Description
`NewConsentValue`

Event ID 1007: Improve Inking and Typing on this device default setting failed creation.

Channel: Operational

Event ID 1008: Improve Inking and Typing setting default for user {TargetUserSid} successfully created as {NewConsentValue}.

Channel: Operational

Fields #

Name	Description
`TargetUserSid`	SID of the target account.
`NewConsentValue`

Event ID 1009: Improve Inking and Typing setting default for user {TargetUserSid} failed creation.

Channel: Operational

Fields #

Name	Description
`TargetUserSid`	SID of the target account.