Microsoft-Windows-SystemSettings

Event	Title	Channel	Sample	Rule
211	Global Toasts Setting has been changed: current setting is {isEnabled}.	Debug	N	N
212	Audio Setting has been changed: current setting is {isEnabled}.	Debug	N	N
213	Application Setting has been changed: AppId = {AppID}; Setting = {isEnabled}; …	Debug	N	N
214	AppList Visibility has changed: Visibility is set to: {isEnabled}.	Debug	N	N
215	Group Policy Visibility has changed: Visibility is set to: {isEnabled}.	Debug	N	N
216	Setting Sync has been scheduled for Package {PackageFamilyName} on behalf of App …	Debug	N	N
218	Lock Screen Toast Setting has been changed: current setting is {isEnabled}.	Debug	N	N
219	Title String of Global Toggle has been changed: Is Temporary Suspend …	Debug	N	N
500	Attempted to add device to workplace.	Operational	N	N
501	Attempted to remove device from workplace.	Operational	N	N
510	Attempted to turn on workplace device management.	Operational	N	N
511	Attempted to turn off workplace device management.	Operational	N	N
521	Dialog or Flyout with Flow id = {FlowId} started.	Debug	N	N
522	Dialog or Flyout with Flow id = {FlowId} stopped.	Debug	N	N

Event ID 211: Global Toasts Setting has been changed: current setting is {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 212: Audio Setting has been changed: current setting is {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 213: Application Setting has been changed: AppId = {AppID}; Setting = {isEnabled}; AppType = {AppType}.

Channel: Debug

Fields #

Name	Description
`AppID`
`isEnabled`
`AppType`

Event ID 214: AppList Visibility has changed: Visibility is set to: {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 215: Group Policy Visibility has changed: Visibility is set to: {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 216: Setting Sync has been scheduled for Package {PackageFamilyName} on behalf of App {AppUserModelID}.

Channel: Debug

Fields #

Name	Description
`PackageFamilyName`
`AppUserModelID`

Event ID 218: Lock Screen Toast Setting has been changed: current setting is {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 219: Title String of Global Toggle has been changed: Is Temporary Suspend {isEnabled}.

Channel: Debug

Fields #

Name	Description
`isEnabled`

Event ID 500: Attempted to add device to workplace.

Channel: Operational

Description

Attempted to add device to workplace. Result is {ResultCode} ending at phase {CorpDeviceOperationPhase}.

Message #

Attempted to add device to workplace. Result is {ResultCode} ending at phase {CorpDeviceOperationPhase}.

Fields #

Name	Description
`ResultCode`
`CorpDeviceOperationPhase`

Event ID 501: Attempted to remove device from workplace.

Channel: Operational

Description

Attempted to remove device from workplace. Result is {ResultCode}.

Message #

Attempted to remove device from workplace. Result is {ResultCode}.

Fields #

Name	Description
`ResultCode`

Event ID 510: Attempted to turn on workplace device management.

Channel: Operational

Description

Attempted to turn on workplace device management. Result is {ResultCode} ending at phase {CorpDeviceOperationPhase}.

Message #

Attempted to turn on workplace device management. Result is {ResultCode} ending at phase {CorpDeviceOperationPhase}.

Fields #

Name	Description
`ResultCode`
`CorpDeviceOperationPhase`

Event ID 511: Attempted to turn off workplace device management.

Channel: Operational

Description

Attempted to turn off workplace device management. Result is {ResultCode}.

Message #

Attempted to turn off workplace device management. Result is {ResultCode}.

Fields #

Name	Description
`ResultCode`

Event ID 521: Dialog or Flyout with Flow id = {FlowId} started.

Channel: Debug

Fields #

Name	Description
`FlowId`

Event ID 522: Dialog or Flyout with Flow id = {FlowId} stopped.

Channel: Debug

Fields #

Name	Description
`FlowId`