Microsoft-Windows-Workplace Join

Event	Title	Channel	Sample	Rule
100	Workplace Join discovery succeeded.	Admin	N	N
101	Workplace Join discovery will query redirect location from 'ServiceUri'.	Admin	N	N
102	Workplace Join discovery failed.	Admin	N	N
103	Workplace Join discovery failed.	Admin	N	N
104	Adding URI Uri to the 'ZoneUriIsAddedTo' zone in Internet Explorer failed with …	Admin	N	N
200	Workplace Join operation failed.	Admin	N	N
201	Workplace Join operation succeeded.	Admin	N	N
300	Workplace Leave operation failed.	Admin	N	N
301	Workplace Leave operation succeeded.	Admin	N	N
400	Auto workplace error.	Admin	N	N
401	MessageData.	Admin	N	N

Event ID 100: Workplace Join discovery succeeded.

Channel: Admin

Fields #

Name	Description
`ActivityId` UnicodeString
`JWT` UnicodeString

Event ID 101: Workplace Join discovery will query redirect location from 'ServiceUri'.

Channel: Admin

Message #

Workplace Join discovery will query redirect location from '%1'.

Fields #

Name	Description
`ServiceUri` UnicodeString

Event ID 102: Workplace Join discovery failed.

Channel: Admin

Message #

Workplace Join discovery failed.
Exit code: %1.
Error Message: %2
Could not connect to '%3'.

Fields #

Name	Description
`ExitCode` HexInt32
`ErrorMessage` UnicodeString
`ServiceUri` UnicodeString

Event ID 103: Workplace Join discovery failed.

Channel: Admin

Description

Workplace Join discovery failed. Server returned http status HttpStatus.

Message #

Workplace Join discovery failed. Server returned http status %1.
Service URI: %2

Fields #

Name	Description
`HttpStatus` Int32
`ServiceUri` UnicodeString
`TraceId` UnicodeString

Event ID 104: Adding URI Uri to the 'ZoneUriIsAddedTo' zone in Internet Explorer failed with error (HRESULT) ExitCode because it already exists in the 'ZoneUriExistsIn' zone.

Channel: Admin

Message #

Adding URI %4 to the '%2' zone in  Internet Explorer failed with error (HRESULT) %1 because it already exists in the '%3' zone.

Fields #

Name	Description
`ExitCode` HexInt32
`ZoneUriIsAddedTo` UnicodeString
`ZoneUriExistsIn` UnicodeString
`Uri` UnicodeString

Event ID 200: Workplace Join operation failed.

Channel: Admin

Description

Workplace Join operation failed. Activity Id: ActivityId.

Message #

Workplace Join operation failed. Activity Id: %2
Exit code: %1
Error Message: %4
Registration Service URI: %5

Fields #

Name	Description
`ExitCode` HexInt32
`ActivityId` UnicodeString
`SoapResponse` UnicodeString
`ErrorMessage` UnicodeString
`RegistrationServiceUri` UnicodeString

Event ID 201: Workplace Join operation succeeded.

Channel: Admin

Description

Workplace Join operation succeeded. Activity Id: ActivityId.

Message #

Workplace Join operation succeeded. Activity Id: %1
Registration Service URI: %3

Fields #

Name	Description
`ActivityId` UnicodeString
`SoapResponse` UnicodeString
`RegistrationServiceUri` UnicodeString

Event ID 300: Workplace Leave operation failed.

Channel: Admin

Message #

Workplace Leave operation failed.
Exit code %1
Error Message: %2

Fields #

Name	Description
`ExitCode` HexInt32
`ErrorMessage` UnicodeString

Event ID 301: Workplace Leave operation succeeded.

Channel: Admin

Event ID 400: Auto workplace error.

Channel: Admin

Message #

Auto workplace error:
Error Message: %3%4
Error code: %1
Error code interpretation: %2

Fields #

Name	Description
`ExitCode` HexInt32
`ErrorCodeText` UnicodeString
`ErrorMessage` UnicodeString
`ErrorData` UnicodeString

Event ID 401: MessageData.

Channel: Admin

Message #

%1%2

Fields #

Name	Description
`Message` UnicodeString
`Data` UnicodeString

Provenance

ETW provider GUID 76ab12d5-c986-4e60-9d7c-2a092b284cdd

Defined in deviceregistration.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02