Microsoft-Windows-ShellCommon-StartLayoutPopulation
126 events across 2 channels
Event ID 1: Initialization of collection: collectionName has started.
#Description
Initialization of collection: collectionName has started. Reason: initializationReason.
Message #
Fields #
| Name | Description |
|---|---|
collectionName UnicodeString | |
initializationReason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1,
"version": 0,
"level": 4,
"task": 1,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.0319186+00:00",
"event_record_id": 60,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"collectionName": "Start.TileGrid",
"initializationReason": "1"
},
"message": "Initialization of collection: Start.TileGrid has started. Reason: 1"
}
Event ID 2: The collection named value is being reset.
#Event ID 3: The following selection data was used to choose an initial collection: layoutSelectionSerializedString.
#Description
The following selection data was used to choose an initial collection: layoutSelectionSerializedString.
Message #
Fields #
| Name | Description |
|---|---|
layoutSelectionSerializedString UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 3,
"version": 0,
"level": 4,
"task": 3,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.0450251+00:00",
"event_record_id": 61,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"layoutSelectionSerializedString": "\nRegion Codes:US \nSKUs:6 \nOffice SKUs: <not set>\nGroup Cell Width: <not set>\nPreInstalledAppsEnabled: 0\nTargetedContentTilesEnabled: 0\nEducationModeEnabled: 0\nCommercialDevice: 1\n"
},
"message": "The following selection data was used to choose an initial collection: \nRegion Codes:US \nSKUs:6 \nOffice SKUs: <not set>\nGroup Cell Width: <not set>\nPreInstalledAppsEnabled: 0\nTargetedContentTilesEnabled: 0\nEducationModeEnabled: 0\nCommercialDevice: 1\n"
}
Event ID 4: Initialization of the Start collection has started in the logon tasks
#Description
Initialization of the Start collection has started in the logon tasks.
Message #
Event ID 5: Initialization of the Start collection has finished in the logon tasks with the following result: TaskHResultValue.
#Event ID 6: The collection initialization pipeline is attempting to find an initial collection.
#Description
The collection initialization pipeline is attempting to find an initial collection.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 6,
"version": 0,
"level": 4,
"task": 5,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.0799978+00:00",
"event_record_id": 62,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The collection initialization pipeline is attempting to find an initial collection."
}
Event ID 7: The collection initialization pipeline got an initial collection from the specified collection provider named: layoutProviderName.
#Event ID 8: The collection initialization pipeline got an initial collection from the following provider: layoutProviderName.
#Description
The collection initialization pipeline got an initial collection from the following provider: layoutProviderName.
Message #
Fields #
| Name | Description |
|---|---|
layoutProviderName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 8,
"version": 0,
"level": 4,
"task": 5,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4117890+00:00",
"event_record_id": 63,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"layoutProviderName": "LocalXmlStartCollectionProvider"
},
"message": "The collection initialization pipeline got an initial collection from the following provider: LocalXmlStartCollectionProvider"
}
Event ID 9: The collection initialization pipeline failed to find an initial collection that matched the selection criteria
#Description
The collection initialization pipeline failed to find an initial collection that matched the selection criteria.
Message #
Event ID 10: Starting post processing of the selected initial collection.
#Description
Starting post processing of the selected initial collection.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 10,
"version": 0,
"level": 4,
"task": 6,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4117911+00:00",
"event_record_id": 64,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "Starting post processing of the selected initial collection."
}
Event ID 11: The layoutProviderName post processor has succesfully completed its post processing of the initial collection.
#Description
The layoutProviderName post processor has succesfully completed its post processing of the initial collection.
Message #
Fields #
| Name | Description |
|---|---|
layoutProviderName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 11,
"version": 0,
"level": 4,
"task": 6,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4225498+00:00",
"event_record_id": 69,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"layoutProviderName": "MfuModificationPostProcessor"
},
"message": "The MfuModificationPostProcessor post processor has succesfully completed its post processing of the initial collection."
}
Event ID 12: The layoutProviderName post processor encountered the following error when post processing the initial collection: HResultValue.
#Event ID 13: Post processing of the selection initial collection complete.
#Description
Post processing of the selection initial collection complete.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 13,
"version": 0,
"level": 4,
"task": 6,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4225516+00:00",
"event_record_id": 70,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "Post processing of the selection initial collection complete."
}
Event ID 14: The collection initialization pipeline is starting to write the collection data to permanent storage.
#Description
The collection initialization pipeline is starting to write the collection data to permanent storage.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 14,
"version": 0,
"level": 4,
"task": 8,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4227682+00:00",
"event_record_id": 71,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The collection initialization pipeline is starting to write the collection data to permanent storage."
}
Event ID 15: The collection is being written to the value data store.
#Description
The collection is being written to the value data store.
Message #
Fields #
| Name | Description |
|---|---|
value UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 15,
"version": 0,
"level": 4,
"task": 8,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4646567+00:00",
"event_record_id": 73,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"value": "CDS"
},
"message": "The collection is being written to the CDS data store"
}
Event ID 16: The tileIdentifier tile was successfully written to storage.
#Description
The tileIdentifier tile was successfully written to storage.
Message #
Fields #
| Name | Description |
|---|---|
tileIdentifier UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 16,
"version": 0,
"level": 4,
"task": 8,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.5951835+00:00",
"event_record_id": 93,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"tileIdentifier": "W~%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk"
},
"message": "The W~%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk tile was successfully written to storage."
}
Event ID 17: Attempting to write the tileIdentifier tile to storage encountered the following error: failureDetails.
#Event ID 18: The collection initialization pipeline has finished writing the collection data to permanent storage.
#Description
The collection initialization pipeline has finished writing the collection data to permanent storage.
Message #
Fields #
| Name | Description |
|---|---|
TaskHResultValue UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 18,
"version": 0,
"level": 4,
"task": 8,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.5954769+00:00",
"event_record_id": 95,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"TaskHResultValue": "0"
},
"message": "The collection initialization pipeline has finished writing the collection data to permanent storage."
}
Event ID 19: A secondary tile in the chosen layout with the following information is being initialized: tileData.
#Event ID 20: Secondary tile initialization complete.
#Description
Secondary tile initialization complete.
Message #
Event ID 21: The following error occurred while initializing a secondary tile: failureDetails.
#Event ID 22: The following error occurred while initializing parsing an xml file: TaskHResultValue.
#Event ID 23: The installation of the app for the placeholder tile tileIdentifier has been initiated due to tile activation.
#Event ID 24: Placeholder tile app installation has completed.
#Description
Placeholder tile app installation has completed.
Message #
Event ID 25: The lifecycle event indicating a placeholder tile installation has succeeded was seen.
#Description
The lifecycle event indicating a placeholder tile installation has succeeded was seen.
Message #
Event ID 26: The automatic installation of placeholder tiles has started.
#Description
The automatic installation of placeholder tiles has started.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 26,
"version": 0,
"level": 4,
"task": 11,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:19.8141017+00:00",
"event_record_id": 99,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-2944-DFAF92EEDC01}"
},
"execution": {
"process_id": 7564,
"thread_id": 7588
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The automatic installation of placeholder tiles has started."
}
Event ID 27: The automatic installation of placeholder tiles is complete.
#Description
The automatic installation of placeholder tiles is complete.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 27,
"version": 0,
"level": 4,
"task": 11,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:19.8141698+00:00",
"event_record_id": 101,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-2944-DFAF92EEDC01}"
},
"execution": {
"process_id": 7564,
"thread_id": 7588
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The automatic installation of placeholder tiles is complete."
}
Event ID 28: The following placeholder tile's automatic installation was filtered out as the application is already installed: tileIdentifier.
#Event ID 29: The following placeholder tile's automatic installation was skipped due to the application's size: tileAumid Application size: appSize.
#Event ID 30: The installation of the app for placeholder tile tileAumid has been successfully queued with the Store.
#Event ID 31: appSize apps have been queued for auto-install.
#Description
appSize apps have been queued for auto-install.
Message #
Fields #
| Name | Description |
|---|---|
appSize UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 31,
"version": 0,
"level": 4,
"task": 11,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:19.8141185+00:00",
"event_record_id": 100,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-2944-DFAF92EEDC01}"
},
"execution": {
"process_id": 7564,
"thread_id": 7588
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"appSize": "0"
},
"message": "0 apps have been queued for auto-install."
}
Event ID 32: The installation of the app for placeholder tile tileIdentifier encountered an error.
#Event ID 33: Starting to retrieve Store metadata for the following applications: value.
#Event ID 34: Store app metadata retrieval successful.
#Description
Store app metadata retrieval successful.
Message #
Event ID 35: An error occurred while retrieving Store metadata: TaskHResultValue.
#Event ID 36: The CDSLayoutInitializationPolicy is determining whether is should provide the initial collection.
#Description
The CDSLayoutInitializationPolicy is determining whether is should provide the initial collection.
Message #
Event ID 37: The CDSLayoutInitializationPolicy has completed determining whether is should provide the initial collection.
#Description
The CDSLayoutInitializationPolicy has completed determining whether is should provide the initial collection.
Message #
Event ID 38: The following tile was detected in the cloud CDS collection but did not appear in the final local CDS collection: value.
#Event ID 39: Starting to retrieve Store assets for the following applications: value.
#Event ID 40: Finished retrieving Store assets for the applications.
#Description
Finished retrieving Store assets for the applications.
Message #
Event ID 41: The following asset was downloaded: value.
#Event ID 42: The UnattendLayoutParser encountered an error processing the following tile: value.
#Event ID 43: Registry keys indicate an OS upgrade needs to be processed.
#Description
Registry keys indicate an OS upgrade needs to be processed.
Message #
Event ID 44: There was a data inconsistency in the upgrade registry keys.
#Description
There was a data inconsistency in the upgrade registry keys. The OS upgrade will not be processed.
Message #
Event ID 45: The following folder was successfully writen to the collection: containerName X:containerXPosition Y:containerYPosition.
#Event ID 46: An error occurred writing the following folder to the collection: containerName X:containerXPosition Y:containerYPosition Error:failureDetails.
#Event ID 47: The collection initialization background task has started processing.
#Description
The collection initialization background task has started processing.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 47,
"version": 0,
"level": 4,
"task": 17,
"opcode": 1,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:19.7070537+00:00",
"event_record_id": 98,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-2944-DFAF92EEDC01}"
},
"execution": {
"process_id": 7564,
"thread_id": 7588
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The collection initialization background task has started processing."
}
Event ID 48: The collection initialization background task has completed processing.
#Description
The collection initialization background task has completed processing.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 48,
"version": 0,
"level": 4,
"task": 17,
"opcode": 2,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:19.8184014+00:00",
"event_record_id": 102,
"correlation": {
"ActivityID": "{AFDF3271-EE92-0000-2944-DFAF92EEDC01}"
},
"execution": {
"process_id": 7564,
"thread_id": 7588
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "The collection initialization background task has completed processing."
}
Event ID 49: The following tile was registered for background processing: value.
#Event ID 50: The TDLMigrationInitialCollectionProvider is attempting to create an initial collection from the TDL data.
#Description
The TDLMigrationInitialCollectionProvider is attempting to create an initial collection from the TDL data.
Message #
Event ID 51: The TDLMigrationInitialCollectionProvider is has successfully created an initial collection from the TDL data.
#Description
The TDLMigrationInitialCollectionProvider is has successfully created an initial collection from the TDL data.
Message #
Event ID 52: A tile with the following data was migrated from TDL: tileData.
#Event ID 53: A tile with the following identifier failed to migrate due to invalid properties: tileIdentifier.
#Event ID 54: A group with the following data was migrated from TDL: groupData.
#Event ID 55: A group with the following data failed to migrate: groupData.
#Event ID 56: The following group was successfully writen to the collection: containerName X:containerXPosition Y:containerYPosition.
#Description
The following group was successfully writen to the collection: containerName X:containerXPosition Y:containerYPosition.
Message #
Fields #
| Name | Description |
|---|---|
containerName UnicodeString | |
containerXPosition UInt32 | |
containerYPosition UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 56,
"version": 0,
"level": 4,
"task": 8,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.5952040+00:00",
"event_record_id": 94,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"containerName": "Windows Server",
"containerXPosition": "4294967295",
"containerYPosition": "4294967295"
},
"message": "The following group was successfully writen to the collection: Windows Server X:4294967295 Y:4294967295."
}
Event ID 57: An error occurred writing the following group to the collection: containerName X:containerXPosition Y:containerYPosition Error:failureDetails.
#Event ID 58: StartNonLayoutProperties migration failed with HRESULT: TaskHResultValue.
#Event ID 59: TryMigrateTDLData was called even though the migration is already complete.
#Description
TryMigrateTDLData was called even though the migration is already complete.
Message #
Event ID 60: The following error occurred trying to parse the local default layout file.
#Event ID 61: No layouts were found in the local default layout file.
#Description
No layouts were found in the local default layout file.
Message #
Event ID 62: None of the layouts in the local default layout file matched the selection criteria.
#Event ID 63: GetCollection was called for collection value which does not exist and will be initialized.
#Description
GetCollection was called for collection value which does not exist and will be initialized.
Message #
Fields #
| Name | Description |
|---|---|
value UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 63,
"version": 0,
"level": 4,
"task": 20,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:16.9107238+00:00",
"event_record_id": 59,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"value": "Start.TileGrid"
},
"message": "GetCollection was called for collection Start.TileGrid which does not exist and will be initialized."
}
Event ID 64: The following error occurred while parsing a layout xml file: value.
#Event ID 65: The collection 'value1' was initialized from process 'value2' without explicit permission.
#Event ID 66: The Start tile layout was reset to recover from reliability issues.
#Description
The Start tile layout was reset to recover from reliability issues.
Message #
Event ID 1000: CuratedTileCollectionTransformer is creating a container for collection it hasn't seen before.
#Description
CuratedTileCollectionTransformer is creating a container for collection it hasn't seen before.
Message #
Event ID 1001: CuratedTileCollectionTransformer has created a container for collection it hasn't seen before.
#Description
CuratedTileCollectionTransformer has created a container for collection it hasn't seen before.
Message #
Event ID 1002: A CuratedTile has been initialized for the identifier:itemName with GUID :itemId.
#Event ID 1004: A CuratedGroup has been initialized for the identifier:itemId with Name :itemName, contained group count:groupCount, contained tile count: tileCount.
#Event ID 1005: A CuratedRoot has been initialized for the identifier:itemId with Name :itemName, contained group count:groupCount, contained tile count: tileCount.
#Event ID 1100: Created group with guid:itemId under parent containerId in collection: collectionName.
#Description
Created group with guid:itemId under parent containerId in collection: collectionName.
Message #
Fields #
| Name | Description |
|---|---|
itemId GUID | |
containerId GUID | |
collectionName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1100,
"version": 0,
"level": 4,
"task": 1001,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4648581+00:00",
"event_record_id": 74,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"itemId": "{84dee251-5b5e-4095-952f-b487d6b87f24}",
"containerId": "{00000000-0000-0000-0000-000000000000}",
"collectionName": "Start.TileGrid"
},
"message": "Created group with guid:{84dee251-5b5e-4095-952f-b487d6b87f24} under parent {00000000-0000-0000-0000-000000000000} in collection: Start.TileGrid."
}
Event ID 1101: Removed group named:itemName with guid:itemId from parent: containerId in collection: collectionName.
#Event ID 1102: Created tile identifier:itemName and guid:itemId and added it to parent: containerId in collection: collectionName.
#Description
Created tile identifier:itemName and guid:itemId and added it to parent: containerId in collection: collectionName.
Message #
Fields #
| Name | Description |
|---|---|
itemName UnicodeString | |
itemId GUID | |
containerId GUID | |
collectionName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1102,
"version": 0,
"level": 4,
"task": 1001,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.5945308+00:00",
"event_record_id": 92,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"itemName": "W~Microsoft.Windows.Explorer",
"itemId": "{711b277d-acc9-4256-b088-fc229a8c447b}",
"containerId": "{84dee251-5b5e-4095-952f-b487d6b87f24}",
"collectionName": "Start.TileGrid"
},
"message": "Created tile identifier:W~Microsoft.Windows.Explorer and guid:{711b277d-acc9-4256-b088-fc229a8c447b} and added it to parent: {84dee251-5b5e-4095-952f-b487d6b87f24} in collection: Start.TileGrid."
}
Event ID 1103: Added tile identifier:itemName and guid:itemId to parent: containerId in collection: collectionName.
#Event ID 1104: Removed tile identifier:itemName and guid:itemId from parent: containerId in collection: collectionName.
#Description
Removed tile identifier:itemName and guid:itemId from parent: containerId in collection: collectionName.
Message #
Fields #
| Name | Description |
|---|---|
itemName UnicodeString | |
itemId GUID | |
containerId GUID | |
collectionName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "97CA8142-10B1-4BAA-9FBB-70A7D11231C3",
"event_source_name": "",
"event_id": 1104,
"version": 0,
"level": 4,
"task": 1001,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2023-11-05T22:31:05.500051+00:00",
"event_record_id": 89,
"correlation": {},
"execution": {
"process_id": 5484,
"thread_id": 3168
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"itemName": "P~Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge",
"itemId": "EF66609D-0926-4126-A9BD-C551B16F89A6",
"containerId": "063A7277-5D2A-47C9-BE79-DBED598C456E",
"collectionName": "Start.TileGrid"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 1105: Added group named:itemName with guid:itemId to parent: containerId in collection: collectionName.
#Event ID 1106: Item added to root named:value.
#Description
Item added to root named:value.
Message #
Fields #
| Name | Description |
|---|---|
value UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1106,
"version": 0,
"level": 4,
"task": 1002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4644922+00:00",
"event_record_id": 72,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 1988
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {
"value": "Start.TileGrid"
},
"message": "Item added to root named:Start.TileGrid."
}
Event ID 1107: Item removed from root named:value.
#Event ID 1200: An update to the tile with identifier:itemName and guid:itemId was saved locally and communicated to listeners.
#Event ID 1202: An update to the group with identifier:itemName and guid:itemId was saved locally and communicated to listeners.
#Event ID 1203: An update to the root with identifier:itemName and guid:itemId was saved locally and communicated to listeners.
#Event ID 1204: The container containerId could not find the group with GUID:itemId in collection: collectionName.
#Event ID 1205: A container containerId could not find the tile with GUID:itemId in collection: collectionName.
#Event ID 1206: A missing item with GUID:itemId was created.
#Event ID 1207: A container containerId was able to resolve the missing group with GUID:itemId in collection: collectionName.
#Event ID 1208: A container containerId was able to resolve the missing tile with GUID:itemId in collection: collectionName.
#Event ID 1209: A container itemId was waiting to fire a change notification, but was destroyed.
#Event ID 1250: An update to the tile with identifier:savedVersion and guid:itemId was saved to CDS.
#Event ID 1252: An update to the group with identifier:savedVersion and guid:itemId was saved to CDS.
#Event ID 1253: An update to the root with identifier:savedVersion and guid:itemId was saved to CDS.
#Event ID 1254: An update to the root container was saved to CDS.
#Description
An update to the root container was saved to CDS.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1254,
"version": 0,
"level": 4,
"task": 1002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-28T11:13:17.4666451+00:00",
"event_record_id": 75,
"correlation": {},
"execution": {
"process_id": 7160,
"thread_id": 6708
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "An update to the root container was saved to CDS."
}
Event ID 1300: An update to the root with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1301: An update to the group with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1303: An update to the tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1400: Removed tileIdentifier due to data source reconciliation.
#Event ID 1401: Tile tileIdentifier was resurrected into collection collectionName.
#Event ID 1402: Data Store Cache secondary data reconciliation start.
#Description
Data Store Cache secondary data reconciliation start.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1402,
"version": 0,
"level": 4,
"task": 1002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-29T16:34:11.3389792+00:00",
"event_record_id": 143,
"correlation": {},
"execution": {
"process_id": 6972,
"thread_id": 7160
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "Data Store Cache secondary data reconciliation start."
}
Event ID 1403: Data Store Cache secondary data reconciliation end.
#Description
Data Store Cache secondary data reconciliation end.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "{97CA8142-10B1-4BAA-9FBB-70A7D11231C3}",
"event_source_name": "",
"event_id": 1403,
"version": 0,
"level": 4,
"task": 1002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-05-29T16:34:11.3465271+00:00",
"event_record_id": 144,
"correlation": {},
"execution": {
"process_id": 6972,
"thread_id": 7160
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
}
},
"event_data": {},
"message": "Data Store Cache secondary data reconciliation end."
}
Event ID 1404: Unified Tile value appeared in the UTM.
#Event ID 1405: Unified Tile value removed from the UTM.
#Event ID 1900: A failed update to the tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1901: The Start Layout Root is pinned, but is missing from its collection container.
#Description
The Start Layout Root is pinned, but is missing from its collection container.
Message #
Event ID 1902: A failed update to the tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1903: A failed update to the tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 1904: A tile with the following data ID is supposed to exist, but has no data: value.
#Event ID 1905: A group with the following data ID is supposed to exist, but has no data: value.
#Event ID 1906: A tile with the following data ID exists, but has default data: value.
#Event ID 2052: The CloudInitialCollectionProvider encountered a retrieval error: {failureDetails}.
#Event ID 2053: An error occurred trying to parse the content from the subscription: {TaskHResultValue}.
#Event ID 2101: An update to the placeholder tile with identifier:itemName and guid:itemId was saved locally and communicated to listeners.
#Event ID 2102: An update to the placeholder tile with identifier:itemName and guid:itemId was saved to CDS with version savedVersion.
#Event ID 2103: An update to the placeholder tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 2110: The data for the logo of placeholder tile with identifier:itemName was loaded.
#Event ID 2111: The logo of placeholder tile with identifier:itemName and size:size was saved locally and communicated to listeners.
#Event ID 2112: The logo of placeholder tile with identifier:itemName and size:size was saved to CDS.
#Event ID 2150: A failed update to the placeholder tile with identifier:itemName and guid:itemId was received from CDS.
#Event ID 2151: An image asset was successfully download to the following location: value.
#Description
An image asset was successfully download to the following location: value.
Message #
Fields #
| Name | Description |
|---|---|
value UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "97CA8142-10B1-4BAA-9FBB-70A7D11231C3",
"event_source_name": "",
"event_id": 2151,
"version": 0,
"level": 4,
"task": 3002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2026-03-11T07:21:35.322114+00:00",
"event_record_id": 97,
"correlation": {
"ActivityID": "FFEB3A56-8B67-4992-AC5D-B64F927535F4"
},
"execution": {
"process_id": 10328,
"thread_id": 4196
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-21-3407486967-1585450050-1838039599-1000"
}
},
"event_data": {
"value": "C:\\Users\\localuser\\AppData\\Local\\PlaceholderTileLogoFolder\\9PNRBTZXMB4Z\\044X044.png"
},
"message": ""
}
Event ID 2152: Install progress state changed for package:packageFamilyName to state:InstallState.
#Description
Install progress state changed for package:packageFamilyName to state:InstallState.
Message #
Fields #
| Name | Description |
|---|---|
packageFamilyName UnicodeString | |
InstallState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "97CA8142-10B1-4BAA-9FBB-70A7D11231C3",
"event_source_name": "",
"event_id": 2152,
"version": 0,
"level": 4,
"task": 3002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2023-11-06T01:39:00.181570+00:00",
"event_record_id": 98,
"correlation": {},
"execution": {
"process_id": 6356,
"thread_id": 14020
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"packageFamilyName": "SpotifyAB.SpotifyMusic_zpdnekdrzrea0",
"InstallState": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2153: Install completed for package:packageFamilyName with state: InstallState.
#Description
Install completed for package:packageFamilyName with state: InstallState.
Message #
Fields #
| Name | Description |
|---|---|
packageFamilyName UnicodeString | |
InstallState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ShellCommon-StartLayoutPopulation",
"guid": "97CA8142-10B1-4BAA-9FBB-70A7D11231C3",
"event_source_name": "",
"event_id": 2153,
"version": 0,
"level": 4,
"task": 3002,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2023-11-06T01:42:46.303623+00:00",
"event_record_id": 99,
"correlation": {
"ActivityID": "E4DB489E-1037-0000-5148-EDE43710DA01"
},
"execution": {
"process_id": 6356,
"thread_id": 20696
},
"channel": "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"packageFamilyName": "SpotifyAB.SpotifyMusic_zpdnekdrzrea0",
"InstallState": 4
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 2154: Pacakge:value is already installed, installation cancelled.
#Event ID 3000: RetailDemoCollectionProvider is attempting to determine if it can provide an initial collection.
#Description
RetailDemoCollectionProvider is attempting to determine if it can provide an initial collection.
Message #
Event ID 3001: RetailDemoCollectionProvider has completed determining if it can provide an initial collection.
#Description
RetailDemoCollectionProvider has completed determining if it can provide an initial collection.
Message #
Event ID 3002: RetailDemoCollectionProvider successfully parsed an initial collection.
#Description
RetailDemoCollectionProvider successfully parsed an initial collection.
Message #
Event ID 3050: RetailDemoCollectionProvider hit an error parsing the xml.
#Description
RetailDemoCollectionProvider hit an error parsing the xml.
Message #
Event ID 3051: RetailDemoCollectionProvider successfully parsed the xml but found no valid layouts.
#Description
RetailDemoCollectionProvider successfully parsed the xml but found no valid layouts.
Message #
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 97ca8142-10b1-4baa-9fbb-70a7d11231c3
Defined in Windows.Shell.StartLayoutPopulationEvents.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02