Microsoft-Windows-TaskbarCPL

Event	Title	Channel	Sample	Rule
0	TaskbarCPL_OpenStart	Diagnostic	N	N
1	TaskbarCPL_OpenStop	Diagnostic	N	N
2	TaskbarCPL_CancelStart	Diagnostic	N	N
3	TaskbarCPL_CancelStop	Diagnostic	N	N

Event ID 0: TaskbarCPL_OpenStart

Channel: Diagnostic
Task: TaskbarCPL_Open
Opcode: Start

Event ID 1: TaskbarCPL_OpenStop

Channel: Diagnostic
Task: TaskbarCPL_Open
Opcode: Stop

Event ID 2: TaskbarCPL_CancelStart

Channel: Diagnostic
Task: TaskbarCPL_Cancel
Opcode: Start

Event ID 3: TaskbarCPL_CancelStop

Channel: Diagnostic
Task: TaskbarCPL_Cancel
Opcode: Stop

Provenance

ETW provider GUID 05d7b0f0-2121-4eff-bf6b-ed3f69b894d7

Defined in taskbarcpl.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.3323, captured 2026-06-02 — Manifest XML pack, 2.0 MB