Microsoft-Windows-UserDataAccess-CEMAPI

Event	Title	Channel	Sample	Rule
1	Error: P1_HResult Location: P2_String Line Number: P3_UInt32.	Operational	N	N
2	Error Propagated: P1_HResult Location: P2_String Line Number: P3_UInt32.	Operational	N	N
3	Trace	Operational	N	N
4011	FOLDER_EMPTYFOLDERStart	Operational	N	N
4012	FOLDER_EMPTYFOLDERStop	Operational	N	N
4013	FOLDER_CREATEMESSAGEStart	Operational	N	N
4014	FOLDER_CREATEMESSAGEStop	Operational	N	N
4015	FOLDER_DELETEMESSAGESStart	Operational	N	N
4016	FOLDER_DELETEMESSAGESStop	Operational	N	N
4017	FOLDER_COPYMESSAGESStart	Operational	N	N
4018	FOLDER_COPYMESSAGESStop	Operational	N	N
4019	FOLDER_GETHIERARCHYTABLEStart	Operational	N	N
4020	FOLDER_GETHIERARCHYTABLEStop	Operational	N	N
4021	FOLDER_GETCONTENTSTABLEStart	Operational	N	N
4022	FOLDER_GETCONTENTSTABLEStop	Operational	N	N
4023	FOLDER_DELETEFOLDERStart	Operational	N	N
4024	FOLDER_DELETEFOLDERStop	Operational	N	N
4025	FOLDER_COPYFOLDERStart	Operational	N	N
4026	FOLDER_COPYFOLDERStop	Operational	N	N
4027	FOLDER_CREATEFOLDERStart	Operational	N	N
4028	FOLDER_CREATEFOLDERStop	Operational	N	N
4100	QUERYROWS_ATTACHMENTSStart	Operational	N	N
4101	QUERYROWS_ATTACHMENTSStop	Operational	N	N
4102	QUERYROWS_RECIPIENTSStart	Operational	N	N
4103	QUERYROWS_RECIPIENTSStop	Operational	N	N
4104	QUERYROWS_FOLDERCONTENTSStart	Operational	N	N
4105	QUERYROWS_FOLDERCONTENTSStop	Operational	N	N
4106	QUERYROWS_FOLDERHIERARCHYStart	Operational	N	N
4107	QUERYROWS_FOLDERHIERARCHYStop	Operational	N	N
4108	QUERYROWS_SEARCHFOLDERStart	Operational	N	N
4109	QUERYROWS_SEARCHFOLDERStop	Operational	N	N
4110	QUERYROWS_STORESStart	Operational	N	N
4111	QUERYROWS_STORESStop	Operational	N	N
4112	QUERYROWS_CONVERSATIONSStart	Operational	N	N
4113	QUERYROWS_CONVERSATIONSStop	Operational	N	N
4200	STORE_GETIDSFROMNAMESStart	Operational	N	N
4201	STORE_GETIDSFROMNAMESStop	Operational	N	N
4202	STORE_OPENFOLDERStart	Operational	N	N
4203	STORE_OPENFOLDERStop	Operational	N	N
4204	STORE_OPENMESSAGEStart	Operational	N	N
4205	STORE_OPENMESSAGEStop	Operational	N	N
4206	STORE_ISANCESTORStart	Operational	N	N
4207	STORE_ISANCESTORStop	Operational	N	N
4208	STORE_CREATESPECIALFOLDERSStart	Operational	N	N
4209	STORE_CREATESPECIALFOLDERSStop	Operational	N	N
4210	STORE_LOADRULESLISTStart	Operational	N	N
4211	STORE_LOADRULESLISTStop	Operational	N	N
4212	STORE_RUNRULESStart	Operational	N	N
4213	STORE_RUNRULESStop	Operational	N	N
4300	MAPILOGONEXStart	Operational	N	N
4301	MAPILOGONEXStop	Operational	N	N
4302	CTX_GETSTOREMANAGERStart	Operational	N	N
4303	CTX_GETSTOREMANAGERStop	Operational	N	N
4304	CTX_CREATESESSIONStart	Operational	N	N
4305	CTX_CREATESESSIONStop	Operational	N	N
4306	CTX_CREATEINSTANCEStart	Operational	N	N
4307	CTX_CREATEINSTANCEStop	Operational	N	N
4308	CTX_INITMESSAGESTORESStart	Operational	N	N
4309	CTX_INITMESSAGESTORESStop	Operational	N	N
4310	CTX_CREATESMSSTOREStart	Operational	N	N
4311	CTX_CREATESMSSTOREStop	Operational	N	N
4312	CTX_LOADDEFAULTMESSAGESTOREStart	Operational	N	N
4313	CTX_LOADDEFAULTMESSAGESTOREStop	Operational	N	N
4314	CTX_CREATEMESSAGESTOREStart	Operational	N	N
4315	CTX_CREATEMESSAGESTOREStop	Operational	N	N
4316	CTX_OPENENTRYStart	Operational	N	N
4317	CTX_OPENENTRYStop	Operational	N	N
4318	CTX_ADVISEStart	Operational	N	N
4319	CTX_ADVISEStop	Operational	N	N
4320	CTX_UNADVISEStart	Operational	N	N
4321	CTX_UNADVISEStop	Operational	N	N
4322	CTX_INITSTORESINKStart	Operational	N	N
4323	CTX_INITSTORESINKStop	Operational	N	N
4324	CTX_GETSTOREBYIDStart	Operational	N	N
4325	CTX_GETSTOREBYIDStop	Operational	N	N
4326	CTX_GETSTOREFROMDATABASEStart	Operational	N	N
4327	CTX_GETSTOREFROMDATABASEStop	Operational	N	N
4328	CTX_OPENMSGSTOREStart	Operational	N	N
4329	CTX_OPENMSGSTOREStop	Operational	N	N
4330	CTX_DELETEMSGSTOREStart	Operational	N	N
4331	CTX_DELETEMSGSTOREStop	Operational	N	N
4332	CTX_REFRESHRULECLIENTSStart	Operational	N	N
4333	CTX_REFRESHRULECLIENTSStop	Operational	N	N
4400	MSG_CREATEATTACHStart	Operational	N	N
4401	MSG_CREATEATTACHStop	Operational	N	N
4402	MSG_DELETEATTACHStart	Operational	N	N
4403	MSG_DELETEATTACHStop	Operational	N	N
4404	MSG_OPENATTACHStart	Operational	N	N
4405	MSG_OPENATTACHStop	Operational	N	N
4406	MSG_GETATTACHTABLEStart	Operational	N	N
4407	MSG_GETATTACHTABLEStop	Operational	N	N
4408	MSG_MODIFYRECIPIENTSStart	Operational	N	N
4409	MSG_MODIFYRECIPIENTSStop	Operational	N	N
4410	MSG_SUBMITMESSAGEStart	Operational	N	N
4411	MSG_SUBMITMESSAGEStop	Operational	N	N
4412	MSG_DELETERECIPIENTSStart	Operational	N	N
4413	MSG_DELETERECIPIENTSStop	Operational	N	N
4414	MSG_ADDRECIPIENTSStart	Operational	N	N
4415	MSG_ADDRECIPIENTSStop	Operational	N	N
4416	MSG_UPDATERECIPIENTTABLEStart	Operational	N	N
4417	MSG_UPDATERECIPIENTTABLEStop	Operational	N	N
4418	MSG_PREPROCESSWRITEStart	Operational	N	N
4419	MSG_PREPROCESSWRITEStop	Operational	N	N
4420	MSG_POSTPROCESSWRITEStart	Operational	N	N
4421	MSG_POSTPROCESSWRITEStop	Operational	N	N
4500	SETPROPSStart	Operational	N	N
4501	SETPROPSStop	Operational	N	N
4502	GETPROPSStart	Operational	N	N
4503	GETPROPSStop	Operational	N	N
4504	DELETEPROPSStart	Operational	N	N
4505	DELETEPROPSStop	Operational	N	N
4506	OPENSTREAMPROPERTYStart	Operational	N	N
4507	OPENSTREAMPROPERTYStop	Operational	N	N
4508	RUNRULEStart	Operational	N	N
4509	RUNRULEStop	Operational	N	N
4510	SESSION_GETSTORESTABLEStart	Operational	N	N
4511	SESSION_GETSTORESTABLEStop	Operational	N	N
4512	SINK_ONNOTIFYStart	Operational	N	N
4513	SINK_ONNOTIFYStop	Operational	N	N
4514	SINK_ONNOTIFYWRAPPERStart	Operational	N	N
4515	SINK_ONNOTIFYWRAPPERStop	Operational	N	N
4600	CONVERSATION_DELETEStart	Operational	N	N
4601	CONVERSATION_DELETEStop	Operational	N	N
4602	CONVERSATION_SOFTDELETEStart	Operational	N	N
4603	CONVERSATION_SOFTDELETEStop	Operational	N	N
4604	CONVERSATION_MSGPROPSETStart	Operational	N	N
4605	CONVERSATION_MSGPROPSETStop	Operational	N	N
4606	CONVERSATION_MSGPROPDELETEStart	Operational	N	N
4607	CONVERSATION_MSGPROPDELETEStop	Operational	N	N
4608	CONVERSATION_DELETEMESSAGESStart	Operational	N	N
4609	CONVERSATION_DELETEMESSAGESStop	Operational	N	N
4610	CONVERSATIONID_SETStart	Operational	N	N
4611	CONVERSATIONID_SETStop	Operational	N	N
4612	CONVERSATIONID_CREATEHASHStart	Operational	N	N
4613	CONVERSATIONID_CREATEHASHStop	Operational	N	N
4700	SHARECONTENTStart	Operational	N	N
4701	SHARECONTENTStop	Operational	N	N
4800	MAPI Context is being deleted	Operational	N	N
4801	MAPI Event is lost	Operational	N	N
4802	MAPI Event data error	Operational	N	N
4803	Unknown prop tag seen in ConvertDatabasePropertyTagsToMapiTags: Prop_Hex_UInt32.	Operational	N	N

Event ID 1: Error: P1_HResult Location: P2_String Line Number: P3_UInt32.

Channel: Operational

Message #

Error: %1 Location: %2 Line Number: %3

Fields #

Name	Description
`P1_HResult` Int32
`P2_String` AnsiString
`P3_UInt32` UInt32

Event ID 2: Error Propagated: P1_HResult Location: P2_String Line Number: P3_UInt32.

Channel: Operational

Message #

Error Propagated: %1 Location: %2 Line Number: %3

Fields #

Name	Description
`P1_HResult` Int32
`P2_String` AnsiString
`P3_UInt32` UInt32

Event ID 3: Trace

Channel: Operational
Task: Trace

Fields #

Name	Description
`Message` Pointer

Event ID 4011: FOLDER_EMPTYFOLDERStart

Channel: Operational
Task: FOLDER_EMPTYFOLDER
Opcode: Start

Event ID 4012: FOLDER_EMPTYFOLDERStop

Channel: Operational
Task: FOLDER_EMPTYFOLDER
Opcode: Stop

Event ID 4013: FOLDER_CREATEMESSAGEStart

Channel: Operational
Task: FOLDER_CREATEMESSAGE
Opcode: Start

Event ID 4014: FOLDER_CREATEMESSAGEStop

Channel: Operational
Task: FOLDER_CREATEMESSAGE
Opcode: Stop

Event ID 4015: FOLDER_DELETEMESSAGESStart

Channel: Operational
Task: FOLDER_DELETEMESSAGES
Opcode: Start

Event ID 4016: FOLDER_DELETEMESSAGESStop

Channel: Operational
Task: FOLDER_DELETEMESSAGES
Opcode: Stop

Event ID 4017: FOLDER_COPYMESSAGESStart

Channel: Operational
Task: FOLDER_COPYMESSAGES
Opcode: Start

Event ID 4018: FOLDER_COPYMESSAGESStop

Channel: Operational
Task: FOLDER_COPYMESSAGES
Opcode: Stop

Event ID 4019: FOLDER_GETHIERARCHYTABLEStart

Channel: Operational
Task: FOLDER_GETHIERARCHYTABLE
Opcode: Start

Event ID 4020: FOLDER_GETHIERARCHYTABLEStop

Channel: Operational
Task: FOLDER_GETHIERARCHYTABLE
Opcode: Stop

Event ID 4021: FOLDER_GETCONTENTSTABLEStart

Channel: Operational
Task: FOLDER_GETCONTENTSTABLE
Opcode: Start

Event ID 4022: FOLDER_GETCONTENTSTABLEStop

Channel: Operational
Task: FOLDER_GETCONTENTSTABLE
Opcode: Stop

Event ID 4023: FOLDER_DELETEFOLDERStart

Channel: Operational
Task: FOLDER_DELETEFOLDER
Opcode: Start

Event ID 4024: FOLDER_DELETEFOLDERStop

Channel: Operational
Task: FOLDER_DELETEFOLDER
Opcode: Stop

Event ID 4025: FOLDER_COPYFOLDERStart

Channel: Operational
Task: FOLDER_COPYFOLDER
Opcode: Start

Event ID 4026: FOLDER_COPYFOLDERStop

Channel: Operational
Task: FOLDER_COPYFOLDER
Opcode: Stop

Event ID 4027: FOLDER_CREATEFOLDERStart

Channel: Operational
Task: FOLDER_CREATEFOLDER
Opcode: Start

Event ID 4028: FOLDER_CREATEFOLDERStop

Channel: Operational
Task: FOLDER_CREATEFOLDER
Opcode: Stop

Event ID 4100: QUERYROWS_ATTACHMENTSStart

Channel: Operational
Task: QUERYROWS_ATTACHMENTS
Opcode: Start

Event ID 4101: QUERYROWS_ATTACHMENTSStop

Channel: Operational
Task: QUERYROWS_ATTACHMENTS
Opcode: Stop

Event ID 4102: QUERYROWS_RECIPIENTSStart

Channel: Operational
Task: QUERYROWS_RECIPIENTS
Opcode: Start

Event ID 4103: QUERYROWS_RECIPIENTSStop

Channel: Operational
Task: QUERYROWS_RECIPIENTS
Opcode: Stop

Event ID 4104: QUERYROWS_FOLDERCONTENTSStart

Channel: Operational
Task: QUERYROWS_FOLDERCONTENTS
Opcode: Start

Event ID 4105: QUERYROWS_FOLDERCONTENTSStop

Channel: Operational
Task: QUERYROWS_FOLDERCONTENTS
Opcode: Stop

Event ID 4106: QUERYROWS_FOLDERHIERARCHYStart

Channel: Operational
Task: QUERYROWS_FOLDERHIERARCHY
Opcode: Start

Event ID 4107: QUERYROWS_FOLDERHIERARCHYStop

Channel: Operational
Task: QUERYROWS_FOLDERHIERARCHY
Opcode: Stop

Event ID 4108: QUERYROWS_SEARCHFOLDERStart

Channel: Operational
Task: QUERYROWS_SEARCHFOLDER
Opcode: Start

Event ID 4109: QUERYROWS_SEARCHFOLDERStop

Channel: Operational
Task: QUERYROWS_SEARCHFOLDER
Opcode: Stop

Event ID 4110: QUERYROWS_STORESStart

Channel: Operational
Task: QUERYROWS_STORES
Opcode: Start

Event ID 4111: QUERYROWS_STORESStop

Channel: Operational
Task: QUERYROWS_STORES
Opcode: Stop

Event ID 4112: QUERYROWS_CONVERSATIONSStart

Channel: Operational
Task: QUERYROWS_CONVERSATIONS
Opcode: Start

Event ID 4113: QUERYROWS_CONVERSATIONSStop

Channel: Operational
Task: QUERYROWS_CONVERSATIONS
Opcode: Stop

Event ID 4200: STORE_GETIDSFROMNAMESStart

Channel: Operational
Task: STORE_GETIDSFROMNAMES
Opcode: Start

Event ID 4201: STORE_GETIDSFROMNAMESStop

Channel: Operational
Task: STORE_GETIDSFROMNAMES
Opcode: Stop

Event ID 4202: STORE_OPENFOLDERStart

Channel: Operational
Task: STORE_OPENFOLDER
Opcode: Start

Event ID 4203: STORE_OPENFOLDERStop

Channel: Operational
Task: STORE_OPENFOLDER
Opcode: Stop

Event ID 4204: STORE_OPENMESSAGEStart

Channel: Operational
Task: STORE_OPENMESSAGE
Opcode: Start

Event ID 4205: STORE_OPENMESSAGEStop

Channel: Operational
Task: STORE_OPENMESSAGE
Opcode: Stop

Event ID 4206: STORE_ISANCESTORStart

Channel: Operational
Task: STORE_ISANCESTOR
Opcode: Start

Event ID 4207: STORE_ISANCESTORStop

Channel: Operational
Task: STORE_ISANCESTOR
Opcode: Stop

Event ID 4208: STORE_CREATESPECIALFOLDERSStart

Channel: Operational
Task: STORE_CREATESPECIALFOLDERS
Opcode: Start

Event ID 4209: STORE_CREATESPECIALFOLDERSStop

Channel: Operational
Task: STORE_CREATESPECIALFOLDERS
Opcode: Stop

Event ID 4210: STORE_LOADRULESLISTStart

Channel: Operational
Task: STORE_LOADRULESLIST
Opcode: Start

Event ID 4211: STORE_LOADRULESLISTStop

Channel: Operational
Task: STORE_LOADRULESLIST
Opcode: Stop

Event ID 4212: STORE_RUNRULESStart

Channel: Operational
Task: STORE_RUNRULES
Opcode: Start

Event ID 4213: STORE_RUNRULESStop

Channel: Operational
Task: STORE_RUNRULES
Opcode: Stop

Event ID 4300: MAPILOGONEXStart

Channel: Operational
Task: MAPILOGONEX
Opcode: Start

Event ID 4301: MAPILOGONEXStop

Channel: Operational
Task: MAPILOGONEX
Opcode: Stop

Event ID 4302: CTX_GETSTOREMANAGERStart

Channel: Operational
Task: CTX_GETSTOREMANAGER
Opcode: Start

Event ID 4303: CTX_GETSTOREMANAGERStop

Channel: Operational
Task: CTX_GETSTOREMANAGER
Opcode: Stop

Event ID 4304: CTX_CREATESESSIONStart

Channel: Operational
Task: CTX_CREATESESSION
Opcode: Start

Event ID 4305: CTX_CREATESESSIONStop

Channel: Operational
Task: CTX_CREATESESSION
Opcode: Stop

Event ID 4306: CTX_CREATEINSTANCEStart

Channel: Operational
Task: CTX_CREATEINSTANCE
Opcode: Start

Event ID 4307: CTX_CREATEINSTANCEStop

Channel: Operational
Task: CTX_CREATEINSTANCE
Opcode: Stop

Event ID 4308: CTX_INITMESSAGESTORESStart

Channel: Operational
Task: CTX_INITMESSAGESTORES
Opcode: Start

Event ID 4309: CTX_INITMESSAGESTORESStop

Channel: Operational
Task: CTX_INITMESSAGESTORES
Opcode: Stop

Event ID 4310: CTX_CREATESMSSTOREStart

Channel: Operational
Task: CTX_CREATESMSSTORE
Opcode: Start

Event ID 4311: CTX_CREATESMSSTOREStop

Channel: Operational
Task: CTX_CREATESMSSTORE
Opcode: Stop

Event ID 4312: CTX_LOADDEFAULTMESSAGESTOREStart

Channel: Operational
Task: CTX_LOADDEFAULTMESSAGESTORE
Opcode: Start

Event ID 4313: CTX_LOADDEFAULTMESSAGESTOREStop

Channel: Operational
Task: CTX_LOADDEFAULTMESSAGESTORE
Opcode: Stop

Event ID 4314: CTX_CREATEMESSAGESTOREStart

Channel: Operational
Task: CTX_CREATEMESSAGESTORE
Opcode: Start

Event ID 4315: CTX_CREATEMESSAGESTOREStop

Channel: Operational
Task: CTX_CREATEMESSAGESTORE
Opcode: Stop

Event ID 4316: CTX_OPENENTRYStart

Channel: Operational
Task: CTX_OPENENTRY
Opcode: Start

Event ID 4317: CTX_OPENENTRYStop

Channel: Operational
Task: CTX_OPENENTRY
Opcode: Stop

Event ID 4318: CTX_ADVISEStart

Channel: Operational
Task: CTX_ADVISE
Opcode: Start

Event ID 4319: CTX_ADVISEStop

Channel: Operational
Task: CTX_ADVISE
Opcode: Stop

Event ID 4320: CTX_UNADVISEStart

Channel: Operational
Task: CTX_UNADVISE
Opcode: Start

Event ID 4321: CTX_UNADVISEStop

Channel: Operational
Task: CTX_UNADVISE
Opcode: Stop

Event ID 4322: CTX_INITSTORESINKStart

Channel: Operational
Task: CTX_INITSTORESINK
Opcode: Start

Event ID 4323: CTX_INITSTORESINKStop

Channel: Operational
Task: CTX_INITSTORESINK
Opcode: Stop

Event ID 4324: CTX_GETSTOREBYIDStart

Channel: Operational
Task: CTX_GETSTOREBYID
Opcode: Start

Event ID 4325: CTX_GETSTOREBYIDStop

Channel: Operational
Task: CTX_GETSTOREBYID
Opcode: Stop

Event ID 4326: CTX_GETSTOREFROMDATABASEStart

Channel: Operational
Task: CTX_GETSTOREFROMDATABASE
Opcode: Start

Event ID 4327: CTX_GETSTOREFROMDATABASEStop

Channel: Operational
Task: CTX_GETSTOREFROMDATABASE
Opcode: Stop

Event ID 4328: CTX_OPENMSGSTOREStart

Channel: Operational
Task: CTX_OPENMSGSTORE
Opcode: Start

Event ID 4329: CTX_OPENMSGSTOREStop

Channel: Operational
Task: CTX_OPENMSGSTORE
Opcode: Stop

Event ID 4330: CTX_DELETEMSGSTOREStart

Channel: Operational
Task: CTX_DELETEMSGSTORE
Opcode: Start

Event ID 4331: CTX_DELETEMSGSTOREStop

Channel: Operational
Task: CTX_DELETEMSGSTORE
Opcode: Stop

Event ID 4332: CTX_REFRESHRULECLIENTSStart

Channel: Operational
Task: CTX_REFRESHRULECLIENTS
Opcode: Start

Event ID 4333: CTX_REFRESHRULECLIENTSStop

Channel: Operational
Task: CTX_REFRESHRULECLIENTS
Opcode: Stop

Event ID 4400: MSG_CREATEATTACHStart

Channel: Operational
Task: MSG_CREATEATTACH
Opcode: Start

Event ID 4401: MSG_CREATEATTACHStop

Channel: Operational
Task: MSG_CREATEATTACH
Opcode: Stop

Event ID 4402: MSG_DELETEATTACHStart

Channel: Operational
Task: MSG_DELETEATTACH
Opcode: Start

Event ID 4403: MSG_DELETEATTACHStop

Channel: Operational
Task: MSG_DELETEATTACH
Opcode: Stop

Event ID 4404: MSG_OPENATTACHStart

Channel: Operational
Task: MSG_OPENATTACH
Opcode: Start

Event ID 4405: MSG_OPENATTACHStop

Channel: Operational
Task: MSG_OPENATTACH
Opcode: Stop

Event ID 4406: MSG_GETATTACHTABLEStart

Channel: Operational
Task: MSG_GETATTACHTABLE
Opcode: Start

Event ID 4407: MSG_GETATTACHTABLEStop

Channel: Operational
Task: MSG_GETATTACHTABLE
Opcode: Stop

Event ID 4408: MSG_MODIFYRECIPIENTSStart

Channel: Operational
Task: MSG_MODIFYRECIPIENTS
Opcode: Start

Event ID 4409: MSG_MODIFYRECIPIENTSStop

Channel: Operational
Task: MSG_MODIFYRECIPIENTS
Opcode: Stop

Event ID 4410: MSG_SUBMITMESSAGEStart

Channel: Operational
Task: MSG_SUBMITMESSAGE
Opcode: Start

Event ID 4411: MSG_SUBMITMESSAGEStop

Channel: Operational
Task: MSG_SUBMITMESSAGE
Opcode: Stop

Event ID 4412: MSG_DELETERECIPIENTSStart

Channel: Operational
Task: MSG_DELETERECIPIENTS
Opcode: Start

Event ID 4413: MSG_DELETERECIPIENTSStop

Channel: Operational
Task: MSG_DELETERECIPIENTS
Opcode: Stop

Event ID 4414: MSG_ADDRECIPIENTSStart

Channel: Operational
Task: MSG_ADDRECIPIENTS
Opcode: Start

Event ID 4415: MSG_ADDRECIPIENTSStop

Channel: Operational
Task: MSG_ADDRECIPIENTS
Opcode: Stop

Event ID 4416: MSG_UPDATERECIPIENTTABLEStart

Channel: Operational
Task: MSG_UPDATERECIPIENTTABLE
Opcode: Start

Event ID 4417: MSG_UPDATERECIPIENTTABLEStop

Channel: Operational
Task: MSG_UPDATERECIPIENTTABLE
Opcode: Stop

Event ID 4418: MSG_PREPROCESSWRITEStart

Channel: Operational
Task: MSG_PREPROCESSWRITE
Opcode: Start

Event ID 4419: MSG_PREPROCESSWRITEStop

Channel: Operational
Task: MSG_PREPROCESSWRITE
Opcode: Stop

Event ID 4420: MSG_POSTPROCESSWRITEStart

Channel: Operational
Task: MSG_POSTPROCESSWRITE
Opcode: Start

Event ID 4421: MSG_POSTPROCESSWRITEStop

Channel: Operational
Task: MSG_POSTPROCESSWRITE
Opcode: Stop

Event ID 4500: SETPROPSStart

Channel: Operational
Task: SETPROPS
Opcode: Start

Event ID 4501: SETPROPSStop

Channel: Operational
Task: SETPROPS
Opcode: Stop

Event ID 4502: GETPROPSStart

Channel: Operational
Task: GETPROPS
Opcode: Start

Event ID 4503: GETPROPSStop

Channel: Operational
Task: GETPROPS
Opcode: Stop

Event ID 4504: DELETEPROPSStart

Channel: Operational
Task: DELETEPROPS
Opcode: Start

Event ID 4505: DELETEPROPSStop

Channel: Operational
Task: DELETEPROPS
Opcode: Stop

Event ID 4506: OPENSTREAMPROPERTYStart

Channel: Operational
Task: OPENSTREAMPROPERTY
Opcode: Start

Event ID 4507: OPENSTREAMPROPERTYStop

Channel: Operational
Task: OPENSTREAMPROPERTY
Opcode: Stop

Event ID 4508: RUNRULEStart

Channel: Operational
Task: RUNRULE
Opcode: Start

Event ID 4509: RUNRULEStop

Channel: Operational
Task: RUNRULE
Opcode: Stop

Event ID 4510: SESSION_GETSTORESTABLEStart

Channel: Operational
Task: SESSION_GETSTORESTABLE
Opcode: Start

Event ID 4511: SESSION_GETSTORESTABLEStop

Channel: Operational
Task: SESSION_GETSTORESTABLE
Opcode: Stop

Event ID 4512: SINK_ONNOTIFYStart

Channel: Operational
Task: SINK_ONNOTIFY
Opcode: Start

Event ID 4513: SINK_ONNOTIFYStop

Channel: Operational
Task: SINK_ONNOTIFY
Opcode: Stop

Event ID 4514: SINK_ONNOTIFYWRAPPERStart

Channel: Operational
Task: SINK_ONNOTIFYWRAPPER
Opcode: Start

Event ID 4515: SINK_ONNOTIFYWRAPPERStop

Channel: Operational
Task: SINK_ONNOTIFYWRAPPER
Opcode: Stop

Event ID 4600: CONVERSATION_DELETEStart

Channel: Operational
Task: CONVERSATION_DELETE
Opcode: Start

Event ID 4601: CONVERSATION_DELETEStop

Channel: Operational
Task: CONVERSATION_DELETE
Opcode: Stop

Event ID 4602: CONVERSATION_SOFTDELETEStart

Channel: Operational
Task: CONVERSATION_SOFTDELETE
Opcode: Start

Event ID 4603: CONVERSATION_SOFTDELETEStop

Channel: Operational
Task: CONVERSATION_SOFTDELETE
Opcode: Stop

Event ID 4604: CONVERSATION_MSGPROPSETStart

Channel: Operational
Task: CONVERSATION_MSGPROPSET
Opcode: Start

Event ID 4605: CONVERSATION_MSGPROPSETStop

Channel: Operational
Task: CONVERSATION_MSGPROPSET
Opcode: Stop

Event ID 4606: CONVERSATION_MSGPROPDELETEStart

Channel: Operational
Task: CONVERSATION_MSGPROPDELETE
Opcode: Start

Event ID 4607: CONVERSATION_MSGPROPDELETEStop

Channel: Operational
Task: CONVERSATION_MSGPROPDELETE
Opcode: Stop

Event ID 4608: CONVERSATION_DELETEMESSAGESStart

Channel: Operational
Task: CONVERSATION_DELETEMESSAGES
Opcode: Start

Event ID 4609: CONVERSATION_DELETEMESSAGESStop

Channel: Operational
Task: CONVERSATION_DELETEMESSAGES
Opcode: Stop

Event ID 4610: CONVERSATIONID_SETStart

Channel: Operational
Task: CONVERSATIONID_SET
Opcode: Start

Event ID 4611: CONVERSATIONID_SETStop

Channel: Operational
Task: CONVERSATIONID_SET
Opcode: Stop

Event ID 4612: CONVERSATIONID_CREATEHASHStart

Channel: Operational
Task: CONVERSATIONID_CREATEHASH
Opcode: Start

Event ID 4613: CONVERSATIONID_CREATEHASHStop

Channel: Operational
Task: CONVERSATIONID_CREATEHASH
Opcode: Stop

Event ID 4700: SHARECONTENTStart

Channel: Operational
Task: SHARECONTENT
Opcode: Start

Event ID 4701: SHARECONTENTStop

Channel: Operational
Task: SHARECONTENT
Opcode: Stop

Event ID 4800: MAPI Context is being deleted

Channel: Operational

Event ID 4801: MAPI Event is lost

Channel: Operational

Event ID 4802: MAPI Event data error

Channel: Operational

Event ID 4803: Unknown prop tag seen in ConvertDatabasePropertyTagsToMapiTags: Prop_Hex_UInt32.

Channel: Operational

Message #

Unknown prop tag seen in ConvertDatabasePropertyTagsToMapiTags: %1

Fields #

Name	Description
`Prop_Hex_UInt32` UInt32

Provenance

ETW provider GUID 83a9277a-d2fc-4b34-bf81-8ceb4407824f

Defined in cemapi.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, captured 2026-06-02 — Manifest XML pack, 2.0 MB