Microsoft-Windows-ServerManager-DeploymentProvider

Event	Title	Channel	Sample	Rule
100	GetServerComponentAsync method started.	Debug	N	N
101	GetServerComponentAsync method returned Completed.	Debug	N	N
102	GetServerComponentAsync method returned InProgress.	Debug	N	N
103	GetServerComponentAsync method returned Failed.	Operational	N	N
104	GetEnumerationState method started.	Debug	N	N
105	GetEnumerationState method returned Completed.	Debug	N	N
106	GetEnumerationState method returned InProgress.	Debug	N	N
107	GetEnumerationState method returned Failed.	Operational	N	N
108	GetServerComponent request started on a separate thread.	Debug	N	N
109	GetServerComponent request ended on a separate thread.	Debug	N	N
110	Generic Deployment Error: message.	Debug	N	N
111	Starting a GetServerComponent request.	Operational	Y	N
112	Completed processing the GetServerComponent request.	Operational	Y	N
113	An error occured while processing the GetServerComponent.	Operational	N	N
114	An error occured while creating Wbem CIM entry: message ClassName: message2 …	Operational	N	N
115	Component ptzMessage has invalid DISM state value.	Debug	N	N
200	AddServerComponentAsync method started.	Debug	N	N
201	AddServerComponentAsync method returned InProgress.	Debug	N	N
202	AddServerComponentAsync method returned Failed.	Operational	N	N
203	Processing request to add Server Components: serverComponentNames.	Operational	Y	N
204	Add request complete.	Operational	Y	N
300	RemoveServerComponentAsync method started.	Debug	N	N
301	RemoveServerComponentAsync method returned InProgress.	Debug	N	N
302	RemoveServerComponentAsync method returned Failed.	Operational	N	N
303	Processing request to remove Server Components: serverComponentNames.	Operational	Y	N
304	Remove request complete.	Operational	Y	N
400	GetAlterationState method started.	Debug	N	N
401	GetAlterationState method ended.	Debug	N	N
402	GetAlterationState method returned InProgress.	Debug	N	N
403	GetAlterationState method returned Failed.	Operational	N	N
450	Calling MI_RefuseUnload method.	Debug	N	N
451	Calling MI_RequestUnload method.	Debug	N	N
452	CreateEvent method call failed.	Debug	N	N
453	CreateMutex method call failed.	Debug	N	N
454	MI_PostResult method call failed.	Debug	N	N
455	MI_Application_Initialize method call failed.	Debug	N	N
456	MI_Application_Close method call failed.	Debug	N	N
457	MI_RefuseUnload method call failed.	Debug	N	N
458	MI_RequestUnload method call failed.	Debug	N	N
459	The KeepAlive Callback method threw an exception.	Debug	N	N
460	Starting the KeepAlive Mechanism.	Debug	N	N
461	The KeepAlive Mechanism started on another thread.	Debug	N	N
462	The KeepAlive Mutex is in Abandoned state.	Debug	N	N
463	Loading Deployment provider.	Debug	N	N
464	Unloading Deployment provider.	Debug	N	N
465	Invalid Request GUID: ptzMessage.	Operational	N	N
466	A WMI operation failed.	Operational	N	N
467	Exception detected while reporting a failure.	Operational	N	N
500	ExecuteEnumerationCommand serverComponentNames Guid requestGuid.	Debug	N	N
501	ExecuteEnumerationCommand ReadFromCache serverComponentNames Guid requestGuid.	Debug	N	N
502	ExecuteEnumerationCommand SpawnThread serverComponentNames Guid requestGuid.	Debug	N	N
503	Enumerate Function Call serverComponentNames Guid requestGuid.	Debug	N	N
504	Component Repository LoadFromCache serverComponentNames.	Debug	N	N
505	Component Repository BuildRelationshipModel serverComponentNames.	Debug	N	N
506	Component Repository ScanSystem serverComponentNames.	Debug	N	N
507	Create DismSessionManager serverComponentNames.	Debug	N	N
508	LoadRepository delete existing components serverComponentNames.	Debug	N	N
509	LoadRepository DismGetFeaturesEx API serverComponentNames.	Debug	N	N
510	LoadRepository add updates serverComponentNames.	Debug	N	N
511	LoadRepository add components serverComponentNames.	Debug	N	N
512	LoadRepository validate components serverComponentNames.	Debug	N	N
513	Original Server components, Update WMI CLass definitions serverComponentNames …	Debug	N	N
514	Write component results to registry serverComponentNames Guid requestGuid.	Debug	N	N
515	Write ServiceReport to registry serverComponentNames Guid requestGuid.	Debug	N	N
516	Consequtive Get Status requests serverComponentNames Guid requestGuid.	Debug	N	N
517	Consequtive Get requests read from registry StartStop Guid requestGUID.	Debug	N	N
518	Consequtive Get requests build sorted component tree StartStop Guid requestGUID.	Debug	N	N
519	Consequtive Get request select based on component names StartStop Guid …	Debug	N	N
520	Consequtive Get request returning InProgress StartStop Guid requestGUID.	Debug	N	N
521	Add server component serverComponentNames Guid requestGuid.	Debug	N	N
522	Add server component on vhd serverComponentNames Guid requestGuid.	Debug	N	N
523	Reset component repository before Add serverComponentNames.	Debug	N	N
524	Prepare components for Add serverComponentNames.	Debug	N	N
525	Validate Mutual exclusion groups before add serverComponentNames.	Debug	N	N
526	Open Dism session for adding components serverComponentNames.	Debug	N	N
527	Get updates to deploy serverComponentNames.	Debug	N	N
528	DismEnableFeatures API serverComponentNames.	Debug	N	N
529	DismCommitImage API called after EnableFeatures serverComponentNames.	Debug	N	N
530	Refresh state fo modified components serverComponentNames.	Debug	N	N
531	Remove server component serverComponentNames Guid requestGuid.	Debug	N	N
532	Remove server component on vhd serverComponentNames Guid requestGuid.	Debug	N	N
533	Reset repository before removing components serverComponentNames.	Debug	N	N
534	Prepare components for remove serverComponentNames.	Debug	N	N
535	Create a list of components that are left installed after remove …	Debug	N	N
536	Refresh the state of the modified components after refresh serverComponentNames.	Debug	N	N
537	Get the list of updates to remove serverComponentNames.	Debug	N	N
538	Update the children of Dism updates for removal serverComponentNames.	Debug	N	N
539	Add unused dism updates to the list for removal serverComponentNames.	Debug	N	N
540	DismDisableFeatures API serverComponentNames.	Debug	N	N
541	DismCommitImage API for remove serverComponentNames.	Debug	N	N
542	Refresh the state of the modified components after refresh serverComponentNames.	Debug	N	N
543	Submit Alteration request serverComponentNames Guid requestGuid.	Debug	N	N
544	Convert Ids to unique names and save config data serverComponentNames Guid …	Debug	N	N
545	Validate component identities serverComponentNames Guid requestGuid.	Debug	N	N
546	Mount Image ptzMessage1 Image ptzMessage2.	Debug	N	N
547	Renmount Image ptzMessage1 Image ptzMessage2.	Debug	N	N
548	Unmount Image ptzMessage1 Image ptzMessage2.	Debug	N	N
549	UpdateImageInfo ptzMessage1 Image ptzMessage2.	Debug	N	N
550	CBS Restart Check ptzMessage.	Debug	N	N
1281	Unknown MUM2 element detected.	Operational	N	N
1282	Unknown MUM2 attribute detected.	Operational	N	N
1283	Server components require the Id property.	Operational	Y	N
1284	Server components require the UniqueName property.	Operational	N	N
1285	Server components require the DisplayName property.	Operational	Y	N
1286	Server components require the Description property.	Operational	Y	N
1287	Server component's parent not found.	Operational	N	N
1288	Server components require the Version property.	Operational	N	N
1289	Server component's deploys section contains an update that was not found.	Operational	N	N
1290	Mutual Exclusion conflict detected.	Operational	N	N
1291	Failed to parse MUM2 Xml blob for update message hResult: ErrorCode.	Operational	N	N
1292	Invalid MUM2 configuration status detected.	Operational	N	N
1293	Internal fatal error while parsing MUM2 data.	Debug	N	N
1294	Internal fatal error.	Debug	N	N
1295	CBS Session message status.	Operational	Y	N
1296	Task Start: ptzMessage.	Debug	N	N
1297	Task Stop: ptzMessage.	Debug	N	N
1298	Failed to read ConfigurationStatus from registry.	Operational	N	N
1299	Using existing component cache from memory.	Operational	Y	N
1300	Component cache read from registry.	Operational	Y	N
1301	Component cache loaded from Dism.	Operational	Y	N
1302	Unknown MUM2 value detected.	Operational	N	N
1303	Failed to parse MUM2 for feature ptzMessage.	Operational	N	N
1304	Found unknown update.	Debug	N	N
1305	Unable to find component ptzMessage1 referenced by component ptzMessage2.	Operational	N	N
1306	Component message has invalid ServerComponentType value.	Operational	N	N
1307	Failed to unmount image - ptzMessage.	Operational	N	N
1308	Internal fatal error.	Operational	N	N
1309	Partial install detected.	Operational	Y	N
1310	Invalid Mum2 detected for component ptzMessage.	Operational	N	N
1311	Invalid OptionalCompanionFor detected in registry.	Operational	N	N
1312	Failure loading OptionalCompanionFor from registry.	Operational	N	N
1313	Failed to load cache from registry.	Operational	N	N
1314	Update ptzMessage1 is not present.	Operational	N	N
1315	Exception Detected: ptzMessage1 ErrorID: ptzMessage2.	Operational	N	N
1316	Unknown Parent ptzMessage1 required by ptzMessage2.	Debug	N	N
1317	Unknown dependency ptzMessage1 required by ptzMessage2.	Operational	N	N
1318	Unknown optional tool ptzMessage1 for feature ptzMessage2.	Debug	N	N
1319	Component: message removed from Repository (Index: value).	Debug	N	N
1537	Unable to open installer session.	Operational	N	N
1538	Unable to initialize installer.	Operational	N	N
1539	Failed to obtain status information from mounted images.	Operational	N	N
1540	Failed to mount image.	Operational	N	N
1541	Failed read features from system.	Operational	N	N
1542	Failed read feature info.	Operational	N	N
1543	Failed get the last CBS session ID.	Operational	N	N
1544	Failed get the state from CBS session ID message.	Operational	N	N
1545	Failed to unmount image.	Operational	N	N
1546	Failed to remount image.	Operational	N	N
1547	Unable to install updates message.	Operational	N	N
1548	Unable to uninstall updates message.	Operational	N	N
1549	Dism session busy.	Debug	N	N
1550	Attempting to enable updates via Dism: ptzMessage.	Debug	N	N
1551	Attempting to disable updates via Dism: ptzMessage.	Debug	N	N
1552	CBS session busy.	Debug	N	N
1553	Internal fatal error.	Operational	N	N
1554	Error reading configuration status for message.	Operational	N	N
1555	Failed to load module message.	Operational	N	N
1556	Failed to resource ID value from module message.	Operational	N	N

Event ID 100: GetServerComponentAsync method started.

Channel: Debug
Task: GetServerComponentAsyncmethodcall.

Fields #

Name	Description
`requestGuid` GUID

Event ID 101: GetServerComponentAsync method returned Completed.

Channel: Debug
Task: GetServerComponentAsyncmethodcall.

Description

GetServerComponentAsync method returned Completed. Restart required: restartRequired.

Message #

GetServerComponentAsync method returned Completed.  Restart required: %1

Fields #

Name	Description
`restartRequired` Boolean
`requestGuid` GUID

Event ID 102: GetServerComponentAsync method returned InProgress.

Channel: Debug
Task: GetServerComponentAsyncmethodcall.

Description

GetServerComponentAsync method returned InProgress. ticks of totalTicks.

Message #

GetServerComponentAsync method returned InProgress. %1 of %2

Fields #

Name	Description
`ticks` UInt32
`totalTicks` UInt32
`requestGuid` GUID

Event ID 103: GetServerComponentAsync method returned Failed.

Channel: Operational
Task: GetServerComponentAsyncmethodcall.

Description

GetServerComponentAsync method returned Failed. Error: message.

Message #

GetServerComponentAsync method returned Failed. Error: %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 104: GetEnumerationState method started.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Fields #

Name	Description
`requestGuid` GUID

Event ID 105: GetEnumerationState method returned Completed.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Description

GetEnumerationState method returned Completed. Restart required: restartRequired.

Message #

GetEnumerationState method returned Completed. Restart required: %1

Fields #

Name	Description
`restartRequired` Boolean
`requestGuid` GUID

Event ID 106: GetEnumerationState method returned InProgress.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Description

GetEnumerationState method returned InProgress. ticks of totalTicks.

Message #

GetEnumerationState method returned InProgress. %1 of %2

Fields #

Name	Description
`ticks` UInt32
`totalTicks` UInt32
`requestGuid` GUID

Event ID 107: GetEnumerationState method returned Failed.

Channel: Operational
Task: GetEnumerationStatemethodcall.

Description

GetEnumerationState method returned Failed. Error: message.

Message #

GetEnumerationState method returned Failed. Error: %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 108: GetServerComponent request started on a separate thread.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Fields #

Name	Description
`requestGuid` GUID

Event ID 109: GetServerComponent request ended on a separate thread.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Fields #

Name	Description
`requestGuid` GUID

Event ID 110: Generic Deployment Error: message.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Generic Deployment Error: %1.

Fields #

Name	Description
`message` UnicodeString

Event ID 111: Starting a GetServerComponent request.

Channel: Operational
Level: Informational
Task: GetServerComponentrequestonaseparatethread.

Fields #

Name	Description
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 111,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:39:32.6978329+00:00",
    "event_record_id": 128,
    "correlation": {
      "ActivityID": "{D00B7DD7-F6B9-459C-BF07-A0E9EFB345E5}"
    },
    "execution": {
      "process_id": 5492,
      "thread_id": 1220
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-a.cell-a.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "requestGuid": "{8ea3b44f-0222-3086-30fb-a8a323a62c4f}"
  },
  "message": "Starting a GetServerComponent request."
}

Event ID 112: Completed processing the GetServerComponent request.

Channel: Operational
Level: Informational
Task: GetServerComponentrequestonaseparatethread.

Description

Completed processing the GetServerComponent request. Restart required: restartRequired.

Message #

Completed processing the GetServerComponent request.  Restart required: %1

Fields #

Name	Description
`restartRequired` Boolean
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 112,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:39:33.6421545+00:00",
    "event_record_id": 130,
    "correlation": {
      "ActivityID": "{D00B7DD7-F6B9-459C-BF07-A0E9EFB345E5}"
    },
    "execution": {
      "process_id": 5492,
      "thread_id": 1220
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-a.cell-a.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "restartRequired": "false",
    "requestGuid": "{8ea3b44f-0222-3086-30fb-a8a323a62c4f}"
  },
  "message": "Completed processing the GetServerComponent request.  Restart required: false"
}

Event ID 113: An error occured while processing the GetServerComponent.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

An error occured while processing the GetServerComponent. Error: message.

Message #

An error occured while processing the GetServerComponent. Error: %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 114: An error occured while creating Wbem CIM entry: message ClassName: message2 Error: ErrorCode.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

An error occured while creating Wbem CIM entry: %1 ClassName: %2 Error: %3

Fields #

Name	Description
`message` UnicodeString
`message2` UnicodeString
`ErrorCode` Int32

Event ID 115: Component ptzMessage has invalid DISM state value.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Message #

Component %1 has invalid DISM state %2

Fields #

Name	Description
`ptzMessage` UnicodeString
`value` UInt32

Event ID 200: AddServerComponentAsync method started.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Description

AddServerComponentAsync method started. Adding ClassNames: serverComponentNames.

Message #

AddServerComponentAsync method started. Adding ClassNames: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 201: AddServerComponentAsync method returned InProgress.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Description

AddServerComponentAsync method returned InProgress. ticks of totalTicks.

Message #

AddServerComponentAsync method returned InProgress. %1 of %2

Fields #

Name	Description
`ticks` UInt32
`totalTicks` UInt32
`requestGuid` GUID

Event ID 202: AddServerComponentAsync method returned Failed.

Channel: Operational
Task: AddServerComponentAsyncmethodcall.

Description

AddServerComponentAsync method returned Failed. message.

Message #

AddServerComponentAsync method returned Failed. %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 203: Processing request to add Server Components: serverComponentNames.

Channel: Operational
Level: Informational
Task: AddServerComponentAsyncmethodcall.

Message #

Processing request to add Server Components: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 203,
    "version": 0,
    "level": 4,
    "task": 4,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:22:17.6370726+00:00",
    "event_record_id": 252,
    "correlation": {
      "ActivityID": "{D898B15A-CBD7-4909-B3C8-28CB70F7649B}"
    },
    "execution": {
      "process_id": 3836,
      "thread_id": 5576
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "serverComponentNames": "MSMQ-Directory",
    "requestGuid": "{097e0ef5-bfa8-4759-8bdf-a2ffc179a12c}"
  },
  "message": "Processing request to add Server Components: MSMQ-Directory"
}

Event ID 204: Add request complete.

Channel: Operational
Level: Informational
Task: AddServerComponentAsyncmethodcall.

Description

Add request complete. Server Components added: serverComponentNames.

Message #

Add request complete. Server Components added: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 204,
    "version": 0,
    "level": 4,
    "task": 4,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:22:13.8270141+00:00",
    "event_record_id": 241,
    "correlation": {
      "ActivityID": "{7C9214A6-5157-47DF-947E-1EF53F560D70}"
    },
    "execution": {
      "process_id": 3836,
      "thread_id": 6564
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "serverComponentNames": "MSMQ;MSMQ-Services;MSMQ-Server;",
    "requestGuid": "{e59ba16b-7db0-4404-adba-ba89c4b70371}"
  },
  "message": "Add request complete. Server Components added: MSMQ;MSMQ-Services;MSMQ-Server;"
}

Event ID 300: RemoveServerComponentAsync method started.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Description

RemoveServerComponentAsync method started. Removing ClassNames: serverComponentNames.

Message #

RemoveServerComponentAsync method started. Removing ClassNames: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 301: RemoveServerComponentAsync method returned InProgress.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Description

RemoveServerComponentAsync method returned InProgress. ticks of totalTicks.

Message #

RemoveServerComponentAsync method returned InProgress. %1 of %2

Fields #

Name	Description
`ticks` UInt32
`totalTicks` UInt32
`requestGuid` GUID

Event ID 302: RemoveServerComponentAsync method returned Failed.

Channel: Operational
Task: RemoveServerComponentAsyncmethodcall.

Description

RemoveServerComponentAsync method returned Failed. Error: message.

Message #

RemoveServerComponentAsync method returned Failed. Error: %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 303: Processing request to remove Server Components: serverComponentNames.

Channel: Operational
Level: Informational
Task: RemoveServerComponentAsyncmethodcall.

Message #

Processing request to remove Server Components: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 303,
    "version": 0,
    "level": 4,
    "task": 5,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-05-30T02:16:26.3477743+00:00",
    "event_record_id": 4840,
    "correlation": {
      "ActivityID": "{76B98507-39CF-43CB-8B89-15A418D7FD9D}"
    },
    "execution": {
      "process_id": 13212,
      "thread_id": 6496
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "serverComponentNames": "Telnet-Client",
    "requestGuid": "{8aa9205a-b0bf-4b2e-95d5-81965f786340}"
  },
  "message": "Processing request to remove Server Components: Telnet-Client"
}

Event ID 304: Remove request complete.

Channel: Operational
Level: Informational
Task: RemoveServerComponentAsyncmethodcall.

Description

Remove request complete. Server Components removed: serverComponentNames.

Message #

Remove request complete. Server Components removed: %1

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 304,
    "version": 0,
    "level": 4,
    "task": 5,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-05-30T02:17:47.6996129+00:00",
    "event_record_id": 4859,
    "correlation": {
      "ActivityID": "{76B98507-39CF-43CB-8B89-15A418D7FD9D}"
    },
    "execution": {
      "process_id": 13212,
      "thread_id": 6496
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "serverComponentNames": "Telnet-Client;",
    "requestGuid": "{8aa9205a-b0bf-4b2e-95d5-81965f786340}"
  },
  "message": "Remove request complete. Server Components removed: Telnet-Client;"
}

Event ID 400: GetAlterationState method started.

Channel: Debug
Task: GetAlterationStatemethodcall.

Fields #

Name	Description
`requestGuid` GUID

Event ID 401: GetAlterationState method ended.

Channel: Debug
Task: GetAlterationStatemethodcall.

Description

GetAlterationState method ended. Reboot required: restartRequired.

Message #

GetAlterationState method ended. Reboot required: %1

Fields #

Name	Description
`restartRequired` Boolean
`requestGuid` GUID

Event ID 402: GetAlterationState method returned InProgress.

Channel: Debug
Task: GetAlterationStatemethodcall.

Description

GetAlterationState method returned InProgress. ticks of totalTicks.

Message #

GetAlterationState method returned InProgress. %1 of %2

Fields #

Name	Description
`ticks` UInt32
`totalTicks` UInt32
`requestGuid` GUID

Event ID 403: GetAlterationState method returned Failed.

Channel: Operational
Task: GetAlterationStatemethodcall.

Description

GetAlterationState method returned Failed. Error: message.

Message #

GetAlterationState method returned Failed. Error: %1

Fields #

Name	Description
`message` UnicodeString
`requestGuid` GUID

Event ID 450: Calling MI_RefuseUnload method.

Channel: Debug
Task: KeepAliveMechanismactions.

Fields #

Name	Description
`MI_ResultCode` UInt32

Event ID 451: Calling MI_RequestUnload method.

Channel: Debug
Task: KeepAliveMechanismactions.

Fields #

Name	Description
`MI_ResultCode` UInt32

Event ID 452: CreateEvent method call failed.

Channel: Debug

Fields #

Name	Description
`win32ErrorCode` UInt32
`errorMessage` UnicodeString

Event ID 453: CreateMutex method call failed.

Channel: Debug

Fields #

Name	Description
`win32ErrorCode` UInt32
`errorMessage` UnicodeString

Event ID 454: MI_PostResult method call failed.

Channel: Debug

Fields #

Name	Description
`MI_ResultCode` UInt32
`errorMessage` UnicodeString

Event ID 455: MI_Application_Initialize method call failed.

Channel: Debug

Fields #

Name	Description
`MI_ResultCode` UInt32
`errorMessage` UnicodeString

Event ID 456: MI_Application_Close method call failed.

Channel: Debug

Fields #

Name	Description
`MI_ResultCode` UInt32
`errorMessage` UnicodeString

Event ID 457: MI_RefuseUnload method call failed.

Channel: Debug

Fields #

Name	Description
`MI_ResultCode` UInt32
`errorMessage` UnicodeString

Event ID 458: MI_RequestUnload method call failed.

Channel: Debug

Fields #

Name	Description
`MI_ResultCode` UInt32
`errorMessage` UnicodeString

Event ID 459: The KeepAlive Callback method threw an exception.

Channel: Debug
Task: KeepAliveMechanismactions.

Fields #

Name	Description
`message` UnicodeString

Event ID 460: Starting the KeepAlive Mechanism.

Channel: Debug
Task: KeepAliveMechanismactions.

Fields #

Name	Description
`requestGuid` GUID

Event ID 461: The KeepAlive Mechanism started on another thread.

Channel: Debug
Task: KeepAliveMechanismactions.

Fields #

Name	Description
`requestGuid` GUID

Event ID 462: The KeepAlive Mutex is in Abandoned state.

Channel: Debug
Task: KeepAliveMechanismactions.

Event ID 463: Loading Deployment provider.

Channel: Debug
Task: ProviderLifecycleactions.

Event ID 464: Unloading Deployment provider.

Channel: Debug
Task: ProviderLifecycleactions.

Event ID 465: Invalid Request GUID: ptzMessage.

Channel: Operational
Task: GetServerComponentAsyncmethodcall.

Message #

Invalid Request GUID: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 466: A WMI operation failed.

Channel: Operational
Task: GetServerComponentAsyncmethodcall.

Description

A WMI operation failed. Op: message ErrorCode: value.

Message #

A WMI operation failed. Op: %1 ErrorCode: %2

Fields #

Name	Description
`message` UnicodeString
`value` UInt32

Event ID 467: Exception detected while reporting a failure.

Channel: Operational
Task: ProviderLifecycleactions.

Description

Exception detected while reporting a failure. Unable to recover. ptzMessage.

Message #

Exception detected while reporting a failure. Unable to recover. %1

Fields #

Name	Description
`ptzMessage` AnsiString

Event ID 500: ExecuteEnumerationCommand serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

ExecuteEnumerationCommand %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 501: ExecuteEnumerationCommand ReadFromCache serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

ExecuteEnumerationCommand ReadFromCache %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 502: ExecuteEnumerationCommand SpawnThread serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

ExecuteEnumerationCommand SpawnThread %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 503: Enumerate Function Call serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Enumerate Function Call %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 504: Component Repository LoadFromCache serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Component Repository LoadFromCache %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 505: Component Repository BuildRelationshipModel serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Component Repository BuildRelationshipModel %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 506: Component Repository ScanSystem serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Component Repository ScanSystem %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 507: Create DismSessionManager serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Create DismSessionManager %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 508: LoadRepository delete existing components serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

LoadRepository delete existing components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 509: LoadRepository DismGetFeaturesEx API serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

LoadRepository DismGetFeaturesEx API %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 510: LoadRepository add updates serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

LoadRepository add updates %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 511: LoadRepository add components serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

LoadRepository add components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 512: LoadRepository validate components serverComponentNames.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

LoadRepository validate components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 513: Original Server components, Update WMI CLass definitions serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Original Server components, Update WMI CLass definitions %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 514: Write component results to registry serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Write component results to registry %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 515: Write ServiceReport to registry serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Write ServiceReport to registry %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 516: Consequtive Get Status requests serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Consequtive Get Status requests %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 517: Consequtive Get requests read from registry StartStop Guid requestGUID.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Consequtive Get requests read from registry %1 Guid %2.

Fields #

Name	Description
`StartStop` UnicodeString
`requestGUID` UnicodeString

Event ID 518: Consequtive Get requests build sorted component tree StartStop Guid requestGUID.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Consequtive Get requests build sorted component tree %1 Guid %2.

Fields #

Name	Description
`StartStop` UnicodeString
`requestGUID` UnicodeString

Event ID 519: Consequtive Get request select based on component names StartStop Guid requestGUID.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Consequtive Get request select based on component names %1 Guid %2.

Fields #

Name	Description
`StartStop` UnicodeString
`requestGUID` UnicodeString

Event ID 520: Consequtive Get request returning InProgress StartStop Guid requestGUID.

Channel: Debug
Task: GetEnumerationStatemethodcall.

Message #

Consequtive Get request returning InProgress %1 Guid %2.

Fields #

Name	Description
`StartStop` UnicodeString
`requestGUID` UnicodeString

Event ID 521: Add server component serverComponentNames Guid requestGuid.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Add server component %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 522: Add server component on vhd serverComponentNames Guid requestGuid.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Add server component on vhd %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 523: Reset component repository before Add serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Reset component repository before Add %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 524: Prepare components for Add serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Prepare components for Add %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 525: Validate Mutual exclusion groups before add serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Validate Mutual exclusion groups before add %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 526: Open Dism session for adding components serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Open Dism session for adding components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 527: Get updates to deploy serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Get updates to deploy %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 528: DismEnableFeatures API serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

DismEnableFeatures API %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 529: DismCommitImage API called after EnableFeatures serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

DismCommitImage API called after EnableFeatures %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 530: Refresh state fo modified components serverComponentNames.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Refresh state fo modified components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 531: Remove server component serverComponentNames Guid requestGuid.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Remove server component %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 532: Remove server component on vhd serverComponentNames Guid requestGuid.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Remove server component on vhd %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 533: Reset repository before removing components serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Reset repository before removing components %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 534: Prepare components for remove serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Prepare components for remove %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 535: Create a list of components that are left installed after remove serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Create a list of components that are left installed after remove %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 536: Refresh the state of the modified components after refresh serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Refresh the state of the modified components after refresh %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 537: Get the list of updates to remove serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Get the list of updates to remove %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 538: Update the children of Dism updates for removal serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Update the children of Dism updates for removal %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 539: Add unused dism updates to the list for removal serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Add unused dism updates to the list for removal %1..

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 540: DismDisableFeatures API serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

DismDisableFeatures API %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 541: DismCommitImage API for remove serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

DismCommitImage API for remove %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 542: Refresh the state of the modified components after refresh serverComponentNames.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Refresh the state of the modified components after refresh %1.

Fields #

Name	Description
`serverComponentNames` UnicodeString

Event ID 543: Submit Alteration request serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Submit Alteration request %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 544: Convert Ids to unique names and save config data serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Convert Ids to unique names and save config data %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 545: Validate component identities serverComponentNames Guid requestGuid.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Validate component identities %1 Guid %2.

Fields #

Name	Description
`serverComponentNames` UnicodeString
`requestGuid` GUID

Event ID 546: Mount Image ptzMessage1 Image ptzMessage2.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Mount Image %1 Image %2.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 547: Renmount Image ptzMessage1 Image ptzMessage2.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Renmount Image %1 Image %2.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 548: Unmount Image ptzMessage1 Image ptzMessage2.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Unmount Image %1 Image %2.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 549: UpdateImageInfo ptzMessage1 Image ptzMessage2.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

UpdateImageInfo %1 Image %2.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 550: CBS Restart Check ptzMessage.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

CBS Restart Check %1.

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1281: Unknown MUM2 element detected.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Unknown MUM2 element detected. FeatureName: ptzMessage1 UnknownElement: ptzMessage2.

Message #

Unknown MUM2 element detected. FeatureName: %1 UnknownElement: %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1282: Unknown MUM2 attribute detected.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Unknown MUM2 attribute detected. FeatureName: ptzMessage1 Element: ptzMessage2 UnknownAttribute: ptzMessage3.

Message #

Unknown MUM2 attribute detected. FeatureName: %1 Element: %2 UnknownAttribute: %3

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString
`ptzMessage3` UnicodeString

Event ID 1283: Server components require the Id property.

Channel: Operational
Level: Warning
Task: GetServerComponentrequestonaseparatethread.

Description

Server components require the Id property. Container Update: ptzMessage.

Message #

Server components require the Id property. Container Update: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1283,
    "version": 0,
    "level": 3,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:31:51.5514834+00:00",
    "event_record_id": 265,
    "correlation": {
      "ActivityID": "{2028147C-8F73-4A61-98BD-67A80871CE7A}"
    },
    "execution": {
      "process_id": 7796,
      "thread_id": 1228
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ptzMessage": "NULL"
  },
  "message": "Server components require the Id property. Container Update: NULL"
}

Event ID 1284: Server components require the UniqueName property.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Server components require the UniqueName property. Feature: ptzMessage.

Message #

Server components require the UniqueName property. Feature: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1285: Server components require the DisplayName property.

Channel: Operational
Level: Warning
Task: GetServerComponentrequestonaseparatethread.

Description

Server components require the DisplayName property. Container Update: ptzMessage.

Message #

Server components require the DisplayName property. Container Update: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1285,
    "version": 0,
    "level": 3,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:31:51.5514818+00:00",
    "event_record_id": 264,
    "correlation": {
      "ActivityID": "{2028147C-8F73-4A61-98BD-67A80871CE7A}"
    },
    "execution": {
      "process_id": 7796,
      "thread_id": 1228
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ptzMessage": "Containers-SDN"
  },
  "message": "Server components require the DisplayName property. Container Update: Containers-SDN"
}

Event ID 1286: Server components require the Description property.

Channel: Operational
Level: Warning
Task: GetServerComponentrequestonaseparatethread.

Description

Server components require the Description property. Feature: ptzMessage.

Message #

Server components require the Description property. Feature: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1286,
    "version": 0,
    "level": 3,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:31:51.5514845+00:00",
    "event_record_id": 266,
    "correlation": {
      "ActivityID": "{2028147C-8F73-4A61-98BD-67A80871CE7A}"
    },
    "execution": {
      "process_id": 7796,
      "thread_id": 1228
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ptzMessage": "NULL"
  },
  "message": "Server components require the Description property. Feature: NULL"
}

Event ID 1287: Server component's parent not found.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Server component's parent not found. Container Update: ptzMessage.

Message #

Server component's parent not found. Container Update: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1288: Server components require the Version property.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Server components require the Version property. Container Update: ptzMessage.

Message #

Server components require the Version property. Container Update: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1289: Server component's deploys section contains an update that was not found.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Server component's deploys section contains an update that was not found. Container Update: ptzMessage1. Deploys Update: ptzMessage2.

Message #

Server component's deploys section contains an update that was not found. Container Update: %1. Deploys Update: %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1290: Mutual Exclusion conflict detected.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Mutual Exclusion conflict detected. Components "ptzMessage1" are all members of group "ptzMessage2".

Message #

Mutual Exclusion conflict detected. Components "%1" are all members of group "%2"

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1291: Failed to parse MUM2 Xml blob for update message hResult: ErrorCode.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Failed to parse MUM2 Xml blob for update %1 hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1292: Invalid MUM2 configuration status detected.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Invalid MUM2 configuration status detected. Missing registry value. FeatureName: ptzMessage.

Message #

Invalid MUM2 configuration status detected. Missing registry value. FeatureName: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1293: Internal fatal error while parsing MUM2 data.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Description

Internal fatal error while parsing MUM2 data. hResult: ErrorCode.

Message #

Internal fatal error while parsing MUM2 data. hResult: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1294: Internal fatal error.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Description

Internal fatal error. Op: message hResult: ErrorCode.

Message #

Internal fatal error. Op: %1 hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1295: CBS Session message status.

Channel: Operational
Level: Informational
Task: GetAlterationStatemethodcall.

Description

CBS Session message status. IsComplete: message2 hResult: ErrorCode.

Message #

CBS Session %1 status. IsComplete: %2 hResult: %3

Fields #

Name	Description
`message` UnicodeString
`message2` UnicodeString
`ErrorCode` Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "66AF9A38-2D94-11E0-A076-8534E0D72085",
    "event_source_name": "",
    "event_id": 1295,
    "version": 0,
    "level": 4,
    "task": 8,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-04T10:59:33.046918+00:00",
    "event_record_id": 127,
    "correlation": {
      "ActivityID": "850A3DF4-2180-4E89-9B18-809650BA5F7E"
    },
    "execution": {
      "process_id": 3636,
      "thread_id": 4928
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "WIN-TKC15D7KHUR",
    "security": {
      "user_id": "S-1-5-21-1958040314-2592322477-2606035944-500"
    }
  },
  "event_data": {
    "message": "30951442_3983739500",
    "message2": "FALSE",
    "ErrorCode": 0
  },
  "message": ""
}

References #

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 1296: Task Start: ptzMessage.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Task Start: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1297: Task Stop: ptzMessage.

Channel: Debug
Task: GetAlterationStatemethodcall.

Message #

Task Stop: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1298: Failed to read ConfigurationStatus from registry.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failed to read ConfigurationStatus from registry. Update ptzMessage1 Key: ptzMessage2 Value: ptzMessage3.

Message #

Failed to read ConfigurationStatus from registry. Update %1 Key: %2 Value: %3

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString
`ptzMessage3` UnicodeString

Event ID 1299: Using existing component cache from memory.

Channel: Operational
Level: Informational
Task: GetServerComponentrequestonaseparatethread.

Description

Using existing component cache from memory. Count: value.

Message #

Using existing component cache from memory. Count: %1

Fields #

Name	Description
`value` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1299,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:35:28.0166340+00:00",
    "event_record_id": 326,
    "correlation": {
      "ActivityID": "{75585847-816E-4AC8-938F-944453C24DC5}"
    },
    "execution": {
      "process_id": 1380,
      "thread_id": 636
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "value": "263"
  },
  "message": "Using existing component cache from memory. Count: 263"
}

Event ID 1300: Component cache read from registry.

Channel: Operational
Level: Informational
Task: GetServerComponentrequestonaseparatethread.

Description

Component cache read from registry. Count: value.

Message #

Component cache read from registry. Count: %1

Fields #

Name	Description
`value` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1300,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T05:39:32.7699900+00:00",
    "event_record_id": 129,
    "correlation": {
      "ActivityID": "{D00B7DD7-F6B9-459C-BF07-A0E9EFB345E5}"
    },
    "execution": {
      "process_id": 5492,
      "thread_id": 1220
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-a.cell-a.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "value": "263"
  },
  "message": "Component cache read from registry. Count: 263"
}

Event ID 1301: Component cache loaded from Dism.

Channel: Operational
Level: Informational
Task: GetServerComponentrequestonaseparatethread.

Description

Component cache loaded from Dism. Count: value.

Message #

Component cache loaded from Dism. Count: %1

Fields #

Name	Description
`value` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1301,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:31:51.7927219+00:00",
    "event_record_id": 268,
    "correlation": {
      "ActivityID": "{2028147C-8F73-4A61-98BD-67A80871CE7A}"
    },
    "execution": {
      "process_id": 7796,
      "thread_id": 1228
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "value": "263"
  },
  "message": "Component cache loaded from Dism. Count: 263"
}

Event ID 1302: Unknown MUM2 value detected.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Unknown MUM2 value detected. FeatureName: ptzMessage1 Attribute: ptzMessage2 UnknownValue: ptzMessage3.

Message #

Unknown MUM2 value detected. FeatureName: %1 Attribute: %2 UnknownValue: %3

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString
`ptzMessage3` UnicodeString

Event ID 1303: Failed to parse MUM2 for feature ptzMessage.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Failed to parse MUM2 for feature %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1304: Found unknown update.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Description

Found unknown update. FeatureName ptzMessage.

Message #

Found unknown update. FeatureName %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1305: Unable to find component ptzMessage1 referenced by component ptzMessage2.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Unable to find component %1 referenced by component %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1306: Component message has invalid ServerComponentType value.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Component message has invalid ServerComponentType value. This type is only valid if the component has a parent.

Message #

Component %1 has invalid ServerComponentType %2. This type is only valid if the component has a parent.

Fields #

Name	Description
`message` UnicodeString
`value` UInt32

Event ID 1307: Failed to unmount image - ptzMessage.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Failed to unmount image - %1.

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1308: Internal fatal error.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Internal fatal error. Op: message hResult: ErrorCode.

Message #

Internal fatal error. Op: %1 hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1309: Partial install detected.

Channel: Operational
Level: Warning
Task: GetServerComponentrequestonaseparatethread.

Description

Partial install detected. Component ptzMessage1 depends on uninstalled component ptzMessage2.

Message #

Partial install detected. Component %1 depends on uninstalled component %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-DeploymentProvider",
    "guid": "{66AF9A38-2D94-11E0-A076-8534E0D72085}",
    "event_source_name": "",
    "event_id": 1309,
    "version": 0,
    "level": 3,
    "task": 2,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T13:31:51.7919873+00:00",
    "event_record_id": 267,
    "correlation": {
      "ActivityID": "{2028147C-8F73-4A61-98BD-67A80871CE7A}"
    },
    "execution": {
      "process_id": 7796,
      "thread_id": 1228
    },
    "channel": "Microsoft-Windows-ServerManager-DeploymentProvider/Operational",
    "computer": "telemetry-DC-c.cell-c.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ptzMessage1": "PowerShell-V2",
    "ptzMessage2": "NET-Framework-Core"
  },
  "message": "Partial install detected. Component PowerShell-V2 depends on uninstalled component NET-Framework-Core"
}

Event ID 1310: Invalid Mum2 detected for component ptzMessage.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Invalid Mum2 detected for component %1.

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1311: Invalid OptionalCompanionFor detected in registry.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Event ID 1312: Failure loading OptionalCompanionFor from registry.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failure loading OptionalCompanionFor from registry. Error: ErrorCode.

Message #

Failure loading OptionalCompanionFor from registry. Error: %1.

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1313: Failed to load cache from registry.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failed to load cache from registry. Error: ErrorCode Attempting to load components from system.

Message #

Failed to load cache from registry. Error: %1 Attempting to load components from system.

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1314: Update ptzMessage1 is not present.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Update ptzMessage1 is not present. ServerComponent ptzMessage2 will be removed from the Role and Feature list.

Message #

Update %1 is not present. ServerComponent %2 will be removed from the Role and Feature list.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1315: Exception Detected: ptzMessage1 ErrorID: ptzMessage2.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Exception Detected: %1 ErrorID: %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1316: Unknown Parent ptzMessage1 required by ptzMessage2.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Description

Unknown Parent ptzMessage1 required by ptzMessage2. Removing ptzMessage2 from feature list.

Message #

Unknown Parent %1 required by %2. Removing %2 from feature list.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1317: Unknown dependency ptzMessage1 required by ptzMessage2.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Unknown dependency ptzMessage1 required by ptzMessage2. Removing ptzMessage2 from feature list.

Message #

Unknown dependency %1 required by %2. Removing %2 from feature list.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1318: Unknown optional tool ptzMessage1 for feature ptzMessage2.

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Message #

Unknown optional tool %1 for feature %2.

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1319: Component: message removed from Repository (Index: value).

Channel: Debug
Task: GetServerComponentrequestonaseparatethread.

Message #

Component: %1 removed from Repository (Index: %2).

Fields #

Name	Description
`message` UnicodeString
`value` UInt32

Event ID 1537: Unable to open installer session.

Channel: Operational
Task: Deploymentproviderinitialization.

Description

Unable to open installer session. Error Code: ErrorCode.

Message #

Unable to open installer session. Error Code: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1538: Unable to initialize installer.

Channel: Operational
Task: Deploymentproviderinitialization.

Description

Unable to initialize installer. Error Code: ErrorCode.

Message #

Unable to initialize installer. Error Code: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1539: Failed to obtain status information from mounted images.

Channel: Operational
Task: Deploymentproviderinitialization.

Description

Failed to obtain status information from mounted images. hResult: ErrorCode.

Message #

Failed to obtain status information from mounted images. hResult: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1540: Failed to mount image.

Channel: Operational
Task: Deploymentproviderinitialization.

Description

Failed to mount image. ImageFile: message MountPath: message2 hResult: ErrorCode.

Message #

Failed to mount image. ImageFile: %1 MountPath: %2 hResult: %3

Fields #

Name	Description
`message` UnicodeString
`message2` UnicodeString
`ErrorCode` Int32

Event ID 1541: Failed read features from system.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failed read features from system. hResult: ErrorCode.

Message #

Failed read features from system. hResult: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1542: Failed read feature info.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failed read feature info. Feature: message hResult: ErrorCode.

Message #

Failed read feature info. Feature: %1 hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1543: Failed get the last CBS session ID.

Channel: Operational
Task: GetAlterationStatemethodcall.

Description

Failed get the last CBS session ID. hResult: ErrorCode.

Message #

Failed get the last CBS session ID. hResult: %1

Fields #

Name	Description
`ErrorCode` Int32

Event ID 1544: Failed get the state from CBS session ID message.

Channel: Operational
Task: GetAlterationStatemethodcall.

Description

Failed get the state from CBS session ID message. hResult: ErrorCode.

Message #

Failed get the state from CBS session ID %1. hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1545: Failed to unmount image.

Channel: Operational
Task: Deploymentprovidershutdown.

Description

Failed to unmount image. ImageFile: message MountPath: message2 hResult: ErrorCode.

Message #

Failed to unmount image. ImageFile: %1 MountPath: %2 hResult: %3

Fields #

Name	Description
`message` UnicodeString
`message2` UnicodeString
`ErrorCode` Int32

Event ID 1546: Failed to remount image.

Channel: Operational
Task: Deploymentproviderinitialization.

Description

Failed to remount image. ImageFile: message MountPath: message2 hResult: ErrorCode.

Message #

Failed to remount image. ImageFile: %1 MountPath: %2 hResult: %3

Fields #

Name	Description
`message` UnicodeString
`message2` UnicodeString
`ErrorCode` Int32

Event ID 1547: Unable to install updates message.

Channel: Operational
Task: AddServerComponentAsyncmethodcall.

Description

Unable to install updates message. hResult: ErrorCode.

Message #

Unable to install updates %1. hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1548: Unable to uninstall updates message.

Channel: Operational
Task: RemoveServerComponentAsyncmethodcall.

Description

Unable to uninstall updates message. hResult: ErrorCode.

Message #

Unable to uninstall updates %1. hResult: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1549: Dism session busy.

Channel: Debug
Task: Deploymentproviderinitialization.

Description

Dism session busy. Retry: value.

Message #

Dism session busy. Retry: %1

Fields #

Name	Description
`value` UInt32

Event ID 1550: Attempting to enable updates via Dism: ptzMessage.

Channel: Debug
Task: AddServerComponentAsyncmethodcall.

Message #

Attempting to enable updates via Dism: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1551: Attempting to disable updates via Dism: ptzMessage.

Channel: Debug
Task: RemoveServerComponentAsyncmethodcall.

Message #

Attempting to disable updates via Dism: %1

Fields #

Name	Description
`ptzMessage` UnicodeString

Event ID 1552: CBS session busy.

Channel: Debug
Task: Deploymentproviderinitialization.

Description

CBS session busy. Retry: value.

Message #

CBS session busy. Retry: %1

Fields #

Name	Description
`value` UInt32

Event ID 1553: Internal fatal error.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Internal fatal error. Op: ptzMessage1 Message: ptzMessage2.

Message #

Internal fatal error. Op: %1 Message: %2

Fields #

Name	Description
`ptzMessage1` UnicodeString
`ptzMessage2` UnicodeString

Event ID 1554: Error reading configuration status for message.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Error reading configuration status for message. Error: ErrorCode.

Message #

Error reading configuration status for %1. Error: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1555: Failed to load module message.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Description

Failed to load module message. Error: ErrorCode.

Message #

Failed to load module %1. Error: %2

Fields #

Name	Description
`message` UnicodeString
`ErrorCode` Int32

Event ID 1556: Failed to resource ID value from module message.

Channel: Operational
Task: GetServerComponentrequestonaseparatethread.

Message #

Failed to resource ID %2 from module %1.

Fields #

Name	Description
`message` UnicodeString
`value` UInt32

Provenance

ETW provider GUID 66af9a38-2d94-11e0-a076-8534e0d72085

Defined in ServerManager.DeploymentProvider.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB