detection.wiki

Microsoft-Windows-WindowsToGo-StartupOptions

EventTitleChannelSampleRule
8193The Windows To Go startup options setting has been changed.SystemNN
8194There was an error changing the Windows To Go startup options setting.SystemNN
8195The Windows To Go startup options setting could not be changed because the PC …SystemNN

Event ID 8193: The Windows To Go startup options setting has been changed.

#
Channel
System

Description

The Windows To Go startup options setting has been changed. Current setting: State.

Message #

The Windows To Go startup options setting has been changed. Current setting: %1

Fields #

NameDescription
State UInt32

Event ID 8194: There was an error changing the Windows To Go startup options setting.

#
Channel
System

Description

There was an error changing the Windows To Go startup options setting. Error: ErrorCode.

Message #

There was an error changing the Windows To Go startup options setting. Error: %1

Fields #

NameDescription
ErrorCode UInt32

Event ID 8195: The Windows To Go startup options setting could not be changed because the PC has multiple internal bootable disks.

#
Channel
System

Provenance

ETW provider GUID 2e6cb42e-161d-413b-a6c1-84ca4c1e5890

Defined in pwlauncher.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB