Microsoft-Windows-RasClusterResource
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1001 | Importing RemoteAccess service configuration using ConfigurationFilename. | Operational | N | N |
| 1002 | RemoteAccess service configuration imported successfully from … | Operational | N | N |
| 1003 | Failed to import RemoteAccess service configuration from ConfigurationFilename. | Operational | N | N |
| 1004 | RemoteAccess service configuration successfully exported to … | Operational | N | N |
| 1005 | RemoteAccess service resource is becoming online with older configuration. | Operational | N | N |
| 1006 | Exporting RemoteAccess service configuration to ConfigurationFilename. | Operational | N | N |
| 1007 | Failed to export RemoteAccess service configuration to ConfigurationFilename. | Operational | N | N |
Event ID 1001: Importing RemoteAccess service configuration using ConfigurationFilename.
#Event ID 1002: RemoteAccess service configuration imported successfully from ConfigurationFilename.
#Event ID 1003: Failed to import RemoteAccess service configuration from ConfigurationFilename.
#Event ID 1004: RemoteAccess service configuration successfully exported to ConfigurationFilename.
#Event ID 1005: RemoteAccess service resource is becoming online with older configuration.
#Event ID 1006: Exporting RemoteAccess service configuration to ConfigurationFilename.
#Provenance
ETW provider GUID 215609b4-72ab-4e0e-96f8-4c503fc4be3d
Defined in RasClusterRes.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB