MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Next policy processing for CBCI-705658-16\N-H1-705658-16$ will be attempted in 97 minutes.531504004611686018427387904765Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed periodic policy processing for computer CBCI-705658-16\N-H1-705658-16$ in 0 seconds.800614024611686018427387904764Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904763Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904762Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904761Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904760Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904759Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904758Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904757Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904756Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904755Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 36223 kbps. The slow link threshold is 500 kbps.531404004611686018427387904754Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 4527941 kbps.532704004611686018427387904753Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:19 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904752Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904751Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904750Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local Account Domain Name : cbci-705658-16.local DC Name : \\n-ad-705658-16.cbci-705658-16.local DC Domain Name : cbci-705658-16.local531004004611686018427387904749Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904748Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904747Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-705658-16.cbci-705658-16.local Domain Controller IP Address : 10.222.0.82530804004611686018427387904746Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-705658-16.cbci-705658-16.local The call completed in 0 milliseconds.501704004611686018427387904745Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-705658-16.cbci-705658-16.local401704004611686018427387904744Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904743Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904742Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904741Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local The call completed in 0 milliseconds.501704004611686018427387904740Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904739Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904738Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904737Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting periodic policy processing for computer CBCI-705658-16\N-H1-705658-16$. Activity id: {326DD5C4-6084-44A3-A9F6-697DF2CACE28}400614014611686018427387904736Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 8:14:18 PM326dd5c4-6084-44a3-a9f6-697df2cace28microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-705658-16\N-H1-705658-16$ will be attempted in 115 minutes.531504004611686018427387904735Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$ in 0 seconds.800414024611686018427387904734Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 15 milliseconds.501604024611686018427387904733Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904732Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904731Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904730Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904729Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:19 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904728Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904727Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904726Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904725Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904724Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904723Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 10362 kbps. The slow link threshold is 500 kbps.531404004611686018427387904722Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 1295299 kbps.532704004611686018427387904721Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error: Bandwidth estimation failure: Failed to query Intranet capability. Error code 0x15.732002004611686018427387904720Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904719Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904718Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904717Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local Account Domain Name : cbci-705658-16.local DC Name : \\n-ad-705658-16.cbci-705658-16.local DC Domain Name : cbci-705658-16.local531004004611686018427387904716Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904715Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904714Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-705658-16.cbci-705658-16.local Domain Controller IP Address : 10.222.0.82530804004611686018427387904713Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-705658-16.cbci-705658-16.local The call completed in 0 milliseconds.501704004611686018427387904712Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-705658-16.cbci-705658-16.local401704004611686018427387904711Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904710Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904709Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904708Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local The call completed in 0 milliseconds.501704004611686018427387904707Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904706Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904705Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904704Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$. Activity id: {5BB05625-60E4-4DFB-96D8-BC54E6853E5D}400414014611686018427387904703Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:18 PM5bb05625-60e4-4dfb-96d8-bc54e6853e5dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-705658-16\N-H1-705658-16$ will be attempted in 101 minutes.531504004611686018427387904702Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$ in 0 seconds.800414024611686018427387904701Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 31 milliseconds.501604024611686018427387904700Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904699Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904698Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904697Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904696Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904695Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904694Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904693Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904692Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904691Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904690Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 4420 kbps. The slow link threshold is 500 kbps.531404004611686018427387904689Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 552507 kbps.532704004611686018427387904688Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error: Bandwidth estimation failure: Failed to query Intranet capability. Error code 0x15.732002004611686018427387904687Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904686Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904685Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904684Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local Account Domain Name : cbci-705658-16.local DC Name : \\n-ad-705658-16.cbci-705658-16.local DC Domain Name : cbci-705658-16.local531004004611686018427387904683Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904682Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 16 milliseconds.532604004611686018427387904681Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-705658-16.cbci-705658-16.local Domain Controller IP Address : 10.222.0.82530804004611686018427387904680Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-705658-16.cbci-705658-16.local The call completed in 16 milliseconds.501704004611686018427387904679Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-705658-16.cbci-705658-16.local401704004611686018427387904678Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904677Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904676Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904675Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local The call completed in 0 milliseconds.501704004611686018427387904674Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904673Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904672Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904671Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$. Activity id: {89AA3F4C-8023-4F24-9E27-380C41C41444}400414014611686018427387904670Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:19:09 PM89aa3f4c-8023-4f24-9e27-380c41c41444microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-705658-16\N-H1-705658-16$ will be attempted in 106 minutes.531504004611686018427387904669Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$ in 0 seconds.800414024611686018427387904668Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 110 milliseconds.501604024611686018427387904667Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904666Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904665Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904664Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904663Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904662Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904661Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904660Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904659Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904658Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904657Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 36096 kbps. The slow link threshold is 500 kbps.531404004611686018427387904656Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 4512054 kbps.532704004611686018427387904655Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error: Bandwidth estimation failure: Failed to query Intranet capability. Error code 0x15.732002004611686018427387904654Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904653Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904652Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904651Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local Account Domain Name : cbci-705658-16.local DC Name : \\n-ad-705658-16.cbci-705658-16.local DC Domain Name : cbci-705658-16.local531004004611686018427387904650Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904649Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 109 milliseconds.532604004611686018427387904648Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-705658-16.cbci-705658-16.local Domain Controller IP Address : 10.222.0.82530804004611686018427387904647Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-705658-16.cbci-705658-16.local The call completed in 0 milliseconds.501704004611686018427387904646Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-705658-16.cbci-705658-16.local401704004611686018427387904645Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904644Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904643Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904642Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local The call completed in 0 milliseconds.501704004611686018427387904641Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904640Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904639Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904638Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-705658-16\N-H1-705658-16$. Activity id: {69AF990F-CAE2-480B-BFC0-D574128C4A69}400414014611686018427387904637Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM69af990f-cae2-480b-bfc0-d574128c4a69microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-705658-16\N-H1-705658-16$ will be attempted in 95 minutes.531504004611686018427387904636Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083688n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904635Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904634Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904633Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for CBCI-705658-16\N-H1-705658-16$ in 3 seconds.800014024611686018427387904632Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Security Extension Processing in 1594 milliseconds.501604024611686018427387904631Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904630Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904629Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904628Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:42 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904627Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904626Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904625Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904624Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904623Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904622Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904621Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904620Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904619Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904618Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904617Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904616Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Security Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Default Domain Policy 401604014611686018427387904615Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 63 milliseconds.501604024611686018427387904614Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904613Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904612Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904611Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904610Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904609Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904608Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904607Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:40 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904606Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904605Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904604Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904603Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 16 milliseconds.501704004611686018427387904602Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-705658-16.local\sysvol\cbci-705658-16.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904601Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 211621 kbps. The slow link threshold is 500 kbps.531404004611686018427387904600Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 26452712 kbps.532704004611686018427387904599Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error: Bandwidth estimation failure: Failed to query Intranet capability. Error code 0x15.732002004611686018427387904598Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904597Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:39 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904596Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904595Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local Account Domain Name : cbci-705658-16.local DC Name : \\n-ad-705658-16.cbci-705658-16.local DC Domain Name : cbci-705658-16.local531004004611686018427387904594Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904593Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 16 milliseconds.532604004611686018427387904592Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-705658-16.cbci-705658-16.local Domain Controller IP Address : 10.222.0.82530804004611686018427387904591Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-705658-16.cbci-705658-16.local The call completed in 16 milliseconds.501704004611686018427387904590Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-705658-16.cbci-705658-16.local401704004611686018427387904589Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904588Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904587Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904586Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H1-705658-16,CN=Computers,DC=cbci-705658-16,DC=local The call completed in 0 milliseconds.501704004611686018427387904585Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904584Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904583Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904582Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for CBCI-705658-16\N-H1-705658-16$. Activity id: {03A78E60-8A8F-4701-9D76-1508AA25220C}400014014611686018427387904581Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PM03a78e60-8a8f-4701-9d76-1508aa25220cmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy waited for 78 milliseconds for the network subsystem at computer boot.532204004611686018427387904580Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904579Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15083068n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904578Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082448n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904577Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082936n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904576Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082936n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904575Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15082936n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 35a9c984-e897-4fb9-930f-2bf6c5f0d32e532104004611686018427387904574Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081560n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904573Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081560n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904572Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081560n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904571Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081560n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904570Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081560n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904569Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081528n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904568Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational15081528n-h1-705658-16.cbci-705658-16.localS-1-5-181/28/2021 6:18:37 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904567Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5964500n-h1-705658-16S-1-5-181/28/2021 6:18:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904566Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational596588n-h1-705658-16S-1-5-181/28/2021 6:18:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904565Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904564Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904563Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\N-H1-705658-16$ in 0 seconds.800014024611686018427387904562Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 31 milliseconds.501604024611686018427387904561Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904560Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904559Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904558Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904557Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904556Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904555Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904554Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904553Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904552Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904551Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904550Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904549Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904548Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904547Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904546Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\N-H1-705658-16$. Activity id: {7E3CE0D5-89C6-4A6F-B4EC-5C58772F586A}400014014611686018427387904545Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PM7e3ce0d5-89c6-4a6f-b4ec-5c58772f586amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904544Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904543Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904542Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5963572n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904541Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962752n-h1-705658-16S-1-5-181/28/2021 5:37:21 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: be3a27fb-fa4e-4caf-ad28-0f584ac55639532104004611686018427387904540Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5961008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904539Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5961008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904538Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5961008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904537Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5961008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904536Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5961008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904535Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904534Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5962008n-h1-705658-16S-1-5-181/28/2021 5:37:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904533Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524504WIN-5T344G8GM1HS-1-5-181/28/2021 5:36:28 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904532Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524520WIN-5T344G8GM1HS-1-5-181/28/2021 5:36:28 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3c15aee3-59ce-4d2a-9e2e-a038b4d3aec2532104004611686018427387904531Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524516WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904530Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524516WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904529Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524516WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904528Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524516WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904527Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational524516WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904526Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5241472WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904525Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5241472WIN-5T344G8GM1HS-1-5-181/28/2021 5:35:13 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904524Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761440WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904523Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976980WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904522Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976672WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904521Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904520Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763048WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904519Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763048WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904518Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904517Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904516Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904515Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904514Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904513Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904512Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904511Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904510Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904509Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904508Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904507Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904506Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904505Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {523F618F-A541-4753-A681-3C0B79DB800A}400114014611686018427387904504Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904503Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904502Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904501Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904500Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904499Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800414024611686018427387904498Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 15 milliseconds.501604024611686018427387904497Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904496Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904495Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904494Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904493Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904492Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904491Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904490Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904489Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904488Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904487Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904486Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$. Activity id: {9663586B-26CE-4E7F-A115-7420EF71DDF6}400414014611686018427387904485Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904484Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904483Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904482Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904481Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904480Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904479Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904478Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904477Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904476Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904475Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904474Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904473Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {E1363503-0E2F-45F8-B60E-F5C745BC2310}400014014611686018427387904472Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904471Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904470Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904469Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904468Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 17681e6a-4ec2-473c-afdb-140f3267c9cb532104004611686018427387904467Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904466Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904465Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904464Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904463Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904462Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904461Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904460Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562904WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904459Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956960WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904458Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561504WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904457Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562760WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904456Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562776WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904455Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562776WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904454Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904453Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904452Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904451Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904450Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904449Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904448Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904447Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904446Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904445Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904444Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904443Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904442Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904441Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {19830159-0802-4690-81DF-314FC75BBEC1}400114014611686018427387904440Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904439Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904438Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904437Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904436Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904435Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800414024611686018427387904434Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 32 milliseconds.501604024611686018427387904433Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904432Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904431Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904430Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904429Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904428Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904427Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904426Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904425Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904424Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904423Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904422Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$. Activity id: {96FB381F-0CD5-4B08-B375-7D41E6D4BD5A}400414014611686018427387904421Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904420Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904419Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904418Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904417Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.501604024611686018427387904416Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904415Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904414Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904413Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904412Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904411Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904410Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904409Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904408Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904407Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904406Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904405Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904404Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904403Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904402Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904401Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904400Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904399Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FD8B735D-48A5-4AFF-82A0-4530749B9C93}400014014611686018427387904398Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904397Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904396Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 2aee4e0b-fb00-4527-adc4-e481e4d19dcd532104004611686018427387904395Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904394Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904393Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904392Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904391Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904390Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561252WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904389Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561252WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904388Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9683324WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:59 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904387Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968972WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:59 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3bfff0c0-0165-424d-b905-a307b3220abe532104004611686018427387904386Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904385Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904384Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904383Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904382Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904381Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9681240WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904380Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9681240WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904379Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9563144WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904378Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956960WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904377Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561996WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904376Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956404WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904375Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562512WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:05 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904374Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562512WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:05 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904373Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904372Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904371Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904370Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904369Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904368Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904367Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904366Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904365Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904364Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904363Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904362Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904361Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904360Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {916D7BC6-7539-48F2-9F9E-92FDF76145FA}400114014611686018427387904359Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904358Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904357Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904356Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904355Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904354Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904353Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904352Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904351Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904350Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904349Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904348Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904347Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904346Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904345Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904344Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904343Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904342Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904341Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904340Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904339Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FB64062E-023F-45C2-95F3-82A8FD38A036}400014014611686018427387904338Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904337Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904336Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904335Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904334Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 55f227a2-e54b-46f6-a36f-59838b5d3374532104004611686018427387904333Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904332Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904331Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904330Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904329Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904328Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561260WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904327Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561260WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904326Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11803520WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904325Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801184WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904324Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802516WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904323Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802444WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904322Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802044WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904321Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802044WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904320Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904319Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904318Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904317Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904316Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904315Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904314Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904313Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904312Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904311Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904310Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904309Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904308Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904307Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {16838B39-BD55-4D5F-A3E3-5D47A754DEB8}400114014611686018427387904306Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904305Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904304Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904303Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904302Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904301Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904300Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904299Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904298Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904297Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904296Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904295Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904294Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904293Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904292Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904291Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904290Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904289Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {EF9DC327-237A-498F-A234-5DD260AC2188}400014014611686018427387904288Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904287Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904286Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904285Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904284Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 1bab69f4-e4b0-4881-969a-4be66736ab81532104004611686018427387904283Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904282Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904281Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904280Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904279Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904278Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801232WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904277Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801232WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904276Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11923720WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904275Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921196WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904274Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904273Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922652WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904272Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921484WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904271Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921484WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904270Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904269Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904268Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904267Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904266Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904265Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904264Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904263Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904262Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904261Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904260Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904259Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904258Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904257Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {45025C4D-6F9D-4B05-92B5-93A82391A3DE}400114014611686018427387904256Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904255Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904254Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904253Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904252Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904251Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904250Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904249Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904248Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904247Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904246Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904245Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904244Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904243Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904242Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904241Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904240Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904239Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904238Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904237Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {A33A2B8C-390A-413D-8B21-12F16046F44F}400014014611686018427387904236Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904235Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904234Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904233Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904232Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904231Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: c59c478f-2ba4-4b8b-9216-af0e61f55471532104004611686018427387904230Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904229Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904228Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904227Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904226Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904225Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921288WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904224Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921288WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904223Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational964772WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904222Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational964968WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904221Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641824WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904220Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641904WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904219Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641564WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904218Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641564WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904217Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904216Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904215Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904214Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904213Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904212Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904211Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904210Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904209Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904208Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904207Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904206Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904205Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904204Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {65CB5132-E893-416B-A63D-2BA652D6D6C6}400114014611686018427387904203Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904202Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904201Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904200Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904199Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904198Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904197Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904196Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904195Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904194Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904193Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904192Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904191Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904190Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904189Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904188Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904187Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904186Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904185Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904184Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {ED5A8EC3-2E31-4880-B3CC-3D038F81C4A4}400014014611686018427387904183Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904182Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904181Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 7ec6f95f-ca51-46fd-b628-91606dc57360532104004611686018427387904180Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904179Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904178Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904177Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904176Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904175Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641176WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904174Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641176WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904173Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761664WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904172Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761180WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904171Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11763168WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904170Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761724WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904169Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762384WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904168Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762384WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904167Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904166Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904165Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904164Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904163Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904162Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904161Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904160Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904159Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904158Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904157Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904156Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904155Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904154Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {F99EA46F-75FC-4CE4-8726-97FC03D1B568}400114014611686018427387904153Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904152Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904151Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904150Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904149Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904148Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904147Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904146Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904145Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904144Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904143Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904142Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904141Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904140Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904139Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904138Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904137Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904136Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904135Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904134Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904133Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FA8F8E72-590E-4AE5-9C6C-7D5C9F473623}400014014611686018427387904132Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904131Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904130Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904129Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904128Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3b55a67b-bb51-4c33-a51f-c935146e1612532104004611686018427387904127Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904126Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904125Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904124Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904123Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904122Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761316WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904121Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761316WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904120Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523660WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904119Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521156WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904118Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11525108WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904117Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11525108WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904116Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522472WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:07 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904115Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522472WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:07 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904114Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904113Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904112Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904111Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904110Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904109Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904108Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904107Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904106Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904105Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904104Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904103Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904102Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904101Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {B40A7D2E-EE0B-4AFD-8EF4-53A4B91BD98D}400114014611686018427387904100Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790499Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790498Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790497Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790496Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790495Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790494Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790493Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790492Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.80001402461168601842738790491Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790490Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790489Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790488Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 53130400461168601842738790487Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None53120400461168601842738790486Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790485Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790484Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790483Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790482Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790481Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790480Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790479Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790478Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {280DA8C2-EAC4-4740-9F29-D442B4641CDA}40001401461168601842738790477Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790476Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790475Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: ad8eaacf-9ac8-4b59-9d35-13bd2198340453210400461168601842738790474Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.53200400461168601842738790473Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.53200400461168601842738790472Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.53200400461168601842738790471Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.51160400461168601842738790470Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.41150400461168601842738790469Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521276WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.41160400461168601842738790468Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521276WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.51150400461168601842738790467Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9246040WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:50 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.53250400461168601842738790466Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational924928WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:50 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.53240400461168601842738790465Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241564WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:49 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.53240400461168601842738790464Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational924932WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:49 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.63390400461168601842738790463Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242368WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.53240400461168601842738790462Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242368WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790461Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790460Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790459Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.80011402461168601842738790458Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.50160402461168601842738790457Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790456Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790455Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790454Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 40160401461168601842738790453Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790452Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790451Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790450Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None53130400461168601842738790449Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 53120400461168601842738790448Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790447Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790446Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790445Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790444Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790443Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {822AD6C6-A4A6-4A78-B264-65E46A20EFBB}40011401461168601842738790442Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790441Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790440Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790439Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790438Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790437Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790436Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790435Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790434Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.80001402461168601842738790433Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790432Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790431Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790430Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 53130400461168601842738790429Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None53120400461168601842738790428Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790427Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790426Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790425Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790424Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790423Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790422Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {227CEB83-33CD-4922-AED0-D222BC464B1A}40001401461168601842738790421Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790420Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790419Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790418Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790417Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3dbc3a1f-1e0f-497f-bf39-81527fa03b6753210400461168601842738790416Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.53200400461168601842738790415Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.53200400461168601842738790414Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.53200400461168601842738790413Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.51160400461168601842738790412Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.41150400461168601842738790411Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241732WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.41160400461168601842738790410Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241732WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.5115040046116860184273879049Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9162760WIN-PD8DQPRRTAOS-1-5-181/16/2018 9:01:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.5325040046116860184273879048Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916920WIN-PD8DQPRRTAOS-1-5-181/16/2018 9:01:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: e9a66211-b3b2-4290-a071-282831c76b8b5321040046116860184273879047Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.5320040046116860184273879046Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.5320040046116860184273879045Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.5320040046116860184273879044Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.5116040046116860184273879043Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.4115040046116860184273879042Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9161452WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.4116040046116860184273879041Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9161452WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]