Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
App Readiness service has stopped. | 101 | 0 | | 4 | 13 | 2 | -9223301668110598143 | 113 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1952 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:33:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'SYSTEM\NT AUTHORITY' has changed mode from 'AfterLogon' to 'LoggingOff' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 112 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1952 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:33:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' succeeded. (0.0625505 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 111 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' succeeded for SYSTEM\NT AUTHORITY. (0.0625505 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 110 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' was selected as the next task. (Priority=PreShell) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 109 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=PreShell) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 108 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 107 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 106 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1996 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has started. | 100 | 0 | | 4 | 13 | 1 | -9223301668110598143 | 105 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 1696 | 1752 | n-h2-765311-8 | S-1-5-18 | 12/31/2020 8:23:56 AM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has stopped. | 101 | 0 | | 4 | 13 | 2 | -9223301668110598143 | 104 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2908 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:53:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'SYSTEM\NT AUTHORITY' has changed mode from 'AfterLogon' to 'LoggingOff' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 103 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2908 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:53:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'AfterLogon' to 'LoggingOff' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 102 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2908 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:53:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 101 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:39 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' succeeded for Administrator. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 100 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:39 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' was selected as the next task. (Priority=Low) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 99 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:39 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' was selected as the next task for Administrator. (Priority=Low) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 98 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:39 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 97 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for Administrator. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 96 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWClosePolicyStore returns 0. | 234 | 0 | | 4 | 1 | 2 | -9223301668110598142 | 95 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWClosePolicyStore starts. | 233 | 0 | | 4 | 1 | 1 | -9223301668110598142 | 94 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'FirstLogon' to 'AfterLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 93 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'BeforeLogon' to 'FirstLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 92 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:11 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' succeeded. (2.0625807 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 91 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' succeeded for Administrator. (2.0625807 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 90 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Activity for 'Administrator' has been suspended and will resume at ?2018?-?01?-?16T17:43:39.842000000Z. | 216 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 89 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 3116 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy' install succeeded for Administrator. (0.4062742 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 88 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy' install succeeded for Administrator. (1.843823 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 87 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.AccountsControl_cw5n1h2txyewy' install succeeded for Administrator. (0.5781249 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 86 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:09 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.Cortana_cw5n1h2txyewy' install succeeded for Administrator. (1.0781816 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 85 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:08 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' was selected as the next task. (Priority=UserLogonGroup) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 84 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:07 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' was selected as the next task for Administrator. (Priority=UserLogonGroup) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 83 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:07 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWOpenPolicyStore returns 0. | 232 | 0 | | 4 | 1 | 2 | -9223301668110598142 | 82 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:07 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWOpenPolicyStore starts. | 231 | 0 | | 4 | 1 | 1 | -9223301668110598142 | 81 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:07 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'AfterLogon' to 'BeforeLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 80 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:07 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 79 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 78 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-4' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 77 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-4' succeeded for SYSTEM\NT AUTHORITY. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 76 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has been notified of new apps. (Source: CBS, Error: The operation completed successfully.) | 109 | 0 | | 4 | 17 | 2 | -9223372036854775807 | 75 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2676 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-4' was selected as the next task. (Priority=SystemTask) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 74 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-4' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=SystemTask) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 73 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:03 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 72 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 71 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-3' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 70 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-3' succeeded for SYSTEM\NT AUTHORITY. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 69 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has been notified of new apps. (Source: CBS, Error: The operation completed successfully.) | 109 | 0 | | 4 | 17 | 2 | -9223372036854775807 | 68 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2676 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-3' was selected as the next task. (Priority=SystemTask) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 67 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-3' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=SystemTask) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 66 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 65 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 64 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-2' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 63 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-2' succeeded for SYSTEM\NT AUTHORITY. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 62 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has been notified of new apps. (Source: CBS, Error: The operation completed successfully.) | 109 | 0 | | 4 | 17 | 2 | -9223372036854775807 | 61 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2676 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-2' was selected as the next task. (Priority=SystemTask) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 60 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-2' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=SystemTask) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 59 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 58 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 57 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-1' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 56 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-1' succeeded for SYSTEM\NT AUTHORITY. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 55 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2932 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has been notified of new apps. (Source: CBS, Error: The operation completed successfully.) | 109 | 0 | | 4 | 17 | 2 | -9223372036854775807 | 54 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2676 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-1' was selected as the next task. (Priority=SystemTask) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 53 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'packageChanges-1' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=SystemTask) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 52 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has started. | 100 | 0 | | 4 | 13 | 1 | -9223301668110598143 | 51 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2532 | 2944 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:43:02 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has stopped. | 101 | 0 | | 4 | 13 | 2 | -9223301668110598143 | 50 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2780 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:22:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'SYSTEM\NT AUTHORITY' has changed mode from 'AfterLogon' to 'LoggingOff' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 49 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2780 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:22:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'AfterLogon' to 'LoggingOff' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 48 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2780 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:22:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 47 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2644 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:18:16 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' succeeded for Administrator. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 46 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2644 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:18:16 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' was selected as the next task. (Priority=Low) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 45 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3144 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:18:16 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:OemFirstRun' was selected as the next task for Administrator. (Priority=Low) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 44 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3144 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:18:16 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 43 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:18 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for Administrator. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 42 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:18 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWClosePolicyStore returns 0. | 234 | 0 | | 4 | 1 | 2 | -9223301668110598142 | 41 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:18 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWClosePolicyStore starts. | 233 | 0 | | 4 | 1 | 1 | -9223301668110598142 | 40 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:18 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'FirstLogon' to 'AfterLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 39 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:18 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserFirstLogon' succeeded. (0.0297522 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 38 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserFirstLogon' succeeded for Administrator. (0.0297522 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 37 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Activity for 'Administrator' has been suspended and will resume at ?2018?-?01?-?16T17:18:15.995000000Z. | 216 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 36 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2948 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserFirstLogon' was selected as the next task. (Priority=High) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 35 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserFirstLogon' was selected as the next task for Administrator. (Priority=High) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 34 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'BeforeLogon' to 'FirstLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 33 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' succeeded. (1.7672238 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 32 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' succeeded for Administrator. (1.7672238 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 31 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Windows.PrintDialog_cw5n1h2txyewy' install succeeded for Administrator. (0.2220199 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 30 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Windows.MiracastView_cw5n1h2txyewy' install succeeded for Administrator. (0.1933793 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 29 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.XboxGameCallableUI_cw5n1h2txyewy' install succeeded for Administrator. (0.2381512 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 28 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy' install succeeded for Administrator. (0.2378889 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 27 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy' install succeeded for Administrator. (0.224098 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 26 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy' install succeeded for Administrator. (0.2226786 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 25 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.LockApp_cw5n1h2txyewy' install succeeded for Administrator. (0.2972066 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 24 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.AccountsControl_cw5n1h2txyewy' install succeeded for Administrator. (0.3272758 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 23 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:15 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy' install succeeded for Administrator. (0.7857481 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 22 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.Cortana_cw5n1h2txyewy' install succeeded for Administrator. (0.5485371 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 21 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'windows.immersivecontrolpanel_cw5n1h2txyewy' install succeeded for Administrator. (0.1630867 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 20 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:PreRoamingGroup' succeeded. (1.8288267 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 19 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:PreRoamingGroup' succeeded for Administrator. (1.8288267 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 18 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 3380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' was selected as the next task. (Priority=UserLogonGroup) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 17 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:UserLogon' was selected as the next task for Administrator. (Priority=UserLogonGroup) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 16 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy' install succeeded for Administrator. (0.308682 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 15 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy' install succeeded for Administrator. (1.7399337 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 14 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:14 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'Microsoft.BioEnrollment_cw5n1h2txyewy' install succeeded for Administrator. (1.5201447 seconds) | 213 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 13 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:13 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:PreRoamingGroup' was selected as the next task. (Priority=PreRoamingGroup) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 12 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:12 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:PreRoamingGroup' was selected as the next task for Administrator. (Priority=PreRoamingGroup) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 11 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2788 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:12 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWOpenPolicyStore returns 0. | 232 | 0 | | 4 | 1 | 2 | -9223301668110598142 | 10 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:12 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Stop | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
FWOpenPolicyStore starts. | 231 | 0 | | 4 | 1 | 1 | -9223301668110598142 | 9 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:12 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
For 'Administrator' has changed mode from 'AfterLogon' to 'BeforeLogon' | 209 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 8 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:12 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' succeeded. (0 seconds) | 228 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 7 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' succeeded for SYSTEM\NT AUTHORITY. (0 seconds) | 220 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 6 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' was selected as the next task. (Priority=PreShell) | 229 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 5 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'ART:AppxPreRegistration' was selected as the next task for SYSTEM\NT AUTHORITY. (Priority=PreShell) | 227 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 4 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed all tasks for user. | 230 | 0 | | 4 | 1 | 0 | -9223301668110598142 | 3 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has completed tasks for SYSTEM\NT AUTHORITY. | 211 | 0 | | 4 | 1 | 0 | -9223372036854775806 | 2 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2784 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
App Readiness service has started. | 100 | 0 | | 4 | 13 | 1 | -9223301668110598143 | 1 | Microsoft-Windows-AppReadiness | f0be35f8-237b-4814-86b5-ade51192e503 | Microsoft-Windows-AppReadiness/Admin | 2740 | 2756 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:01 PM | | | microsoft-windows-appreadiness/admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Start | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |