MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Next policy processing for CBCI-768862-1\N-H2-768862-1$ will be attempted in 110 minutes.531504004611686018427387904761Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed periodic policy processing for computer CBCI-768862-1\N-H2-768862-1$ in 0 seconds.800614024611686018427387904760Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904759Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904758Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904757Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904756Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904755Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904754Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904753Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 16 milliseconds.501704004611686018427387904752Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904751Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 36223 kbps. The slow link threshold is 500 kbps.531404004611686018427387904750Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 4527941 kbps.532704004611686018427387904749Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904748Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904747Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904746Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local Account Domain Name : cbci-768862-1.local DC Name : \\n-ad-768862-1.cbci-768862-1.local DC Domain Name : cbci-768862-1.local531004004611686018427387904745Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904744Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904743Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-768862-1.cbci-768862-1.local Domain Controller IP Address : 10.222.0.52530804004611686018427387904742Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-768862-1.cbci-768862-1.local The call completed in 0 milliseconds.501704004611686018427387904741Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-768862-1.cbci-768862-1.local401704004611686018427387904740Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904739Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904738Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904737Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local The call completed in 0 milliseconds.501704004611686018427387904736Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904735Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904734Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904733Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting periodic policy processing for computer CBCI-768862-1\N-H2-768862-1$. Activity id: {89E3BB0C-73F7-4596-A5FE-07B71101AD33}400614014611686018427387904732Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 5:52:49 AM89e3bb0c-73f7-4596-a5fe-07b71101ad33microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-768862-1\N-H2-768862-1$ will be attempted in 113 minutes.531504004611686018427387904731Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$ in 0 seconds.800414024611686018427387904730Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 31 milliseconds.501604024611686018427387904729Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904728Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904727Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904726Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904725Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904724Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904723Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904722Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904721Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904720Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904719Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 15056 kbps. The slow link threshold is 500 kbps.531404004611686018427387904718Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 1882059 kbps.532704004611686018427387904717Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904716Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904715Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904714Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local Account Domain Name : cbci-768862-1.local DC Name : \\n-ad-768862-1.cbci-768862-1.local DC Domain Name : cbci-768862-1.local531004004611686018427387904713Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904712Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904711Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-768862-1.cbci-768862-1.local Domain Controller IP Address : 10.222.0.52530804004611686018427387904710Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-768862-1.cbci-768862-1.local The call completed in 0 milliseconds.501704004611686018427387904709Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-768862-1.cbci-768862-1.local401704004611686018427387904708Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904707Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904706Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904705Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local The call completed in 0 milliseconds.501704004611686018427387904704Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904703Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904702Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904701Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$. Activity id: {7CA942A4-BA9A-464D-B1CC-D4056863127A}400414014611686018427387904700Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:49 AM7ca942a4-ba9a-464d-b1cc-d4056863127amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-768862-1\N-H2-768862-1$ will be attempted in 118 minutes.531504004611686018427387904699Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$ in 0 seconds.800414024611686018427387904698Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.501604024611686018427387904697Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904696Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904695Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904694Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904693Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904692Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904691Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904690Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904689Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904688Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904687Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 3536 kbps. The slow link threshold is 500 kbps.531404004611686018427387904686Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 442070 kbps.532704004611686018427387904685Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904684Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904683Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904682Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local Account Domain Name : cbci-768862-1.local DC Name : \\n-ad-768862-1.cbci-768862-1.local DC Domain Name : cbci-768862-1.local531004004611686018427387904681Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904680Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904679Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-768862-1.cbci-768862-1.local Domain Controller IP Address : 10.222.0.52530804004611686018427387904678Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-768862-1.cbci-768862-1.local The call completed in 0 milliseconds.501704004611686018427387904677Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-768862-1.cbci-768862-1.local401704004611686018427387904676Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904675Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904674Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904673Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local The call completed in 15 milliseconds.501704004611686018427387904672Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904671Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904670Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904669Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$. Activity id: {AB676E14-8451-4EF7-A62E-2AF657ED4D65}400414014611686018427387904668Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:39 AMab676e14-8451-4ef7-a62e-2af657ed4d65microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-768862-1\N-H2-768862-1$ will be attempted in 113 minutes.531504004611686018427387904667Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$ in 0 seconds.800414024611686018427387904666Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904665Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904664Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904663Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904662Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904661Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904660Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904659Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 0 milliseconds.501704004611686018427387904658Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904657Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 810391 kbps. The slow link threshold is 500 kbps.531404004611686018427387904656Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 101298966 kbps.532704004611686018427387904655Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904654Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904653Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904652Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local Account Domain Name : cbci-768862-1.local DC Name : \\n-ad-768862-1.cbci-768862-1.local DC Domain Name : cbci-768862-1.local531004004611686018427387904651Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904650Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 16 milliseconds.532604004611686018427387904649Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-768862-1.cbci-768862-1.local Domain Controller IP Address : 10.222.0.52530804004611686018427387904648Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-768862-1.cbci-768862-1.local The call completed in 0 milliseconds.501704004611686018427387904647Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-768862-1.cbci-768862-1.local401704004611686018427387904646Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904645Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904644Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904643Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local The call completed in 0 milliseconds.501704004611686018427387904642Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904641Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904640Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904639Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer CBCI-768862-1\N-H2-768862-1$. Activity id: {BF87708A-5499-4BA0-AFD3-2E04435F79DC}400414014611686018427387904638Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMbf87708a-5499-4ba0-afd3-2e04435f79dcmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Next policy processing for CBCI-768862-1\N-H2-768862-1$ will be attempted in 117 minutes.531504004611686018427387904637Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14803948n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904636Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904635Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904634Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for CBCI-768862-1\N-H2-768862-1$ in 0 seconds.800014024611686018427387904633Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Security Extension Processing in 421 milliseconds.501604024611686018427387904632Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904631Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904630Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904629Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904628Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904627Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904626Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904625Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904624Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904623Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904622Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904621Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904620Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904619Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904618Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904617Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Security Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Default Domain Policy 401604014611686018427387904616Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:13 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.501604024611686018427387904615Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904614Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904613Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904612Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904611Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904610Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904609Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904608Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904607Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy Default Domain Policy 531204004611686018427387904606Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904605Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904604Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system calls to access specified file completed. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini The call completed in 140 milliseconds.501704004611686018427387904603Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system calls to access specified file. \\cbci-768862-1.local\sysvol\cbci-768862-1.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini401704004611686018427387904602Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A fast link was detected. The Estimated bandwidth is 132258 kbps. The slow link threshold is 500 kbps.531404004611686018427387904601Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Estimated network bandwidth on one of the connections: 16532370 kbps.532704004611686018427387904600Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting to download policies.425704004611686018427387904599Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904598Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904597Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Account details: Account Name : CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local Account Domain Name : cbci-768862-1.local DC Name : \\n-ad-768862-1.cbci-768862-1.local DC Domain Name : cbci-768862-1.local531004004611686018427387904596Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Computer details: Computer role : 2 Network name : openstacklocal530904004611686018427387904595Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully discovered the Domain Controller in 0 milliseconds.532604004611686018427387904594Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Domain Controller details: Domain Controller Name : n-ad-768862-1.cbci-768862-1.local Domain Controller IP Address : 10.222.0.52530804004611686018427387904593Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LDAP call to connect and bind to Active Directory completed. n-ad-768862-1.cbci-768862-1.local The call completed in 0 milliseconds.501704004611686018427387904592Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making LDAP calls to connect and bind to Active Directory. n-ad-768862-1.cbci-768862-1.local401704004611686018427387904591Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieving Domain Controller details.532004004611686018427387904590Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy is trying to discover the Domain Controller information.432604004611686018427387904589Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This machine is configured to retrieve Group Policy files from a file share in an insecure way. UNC Path: \\cbci-768862-1.local\NETLOGON Mutual Authentication Enforced: false Integrity Enforced: false Guidance: The UNC path contains logon scripts and/or files that control system security policies. Microsoft recommends configuring Windows to require both mutual authentication and integrity when accessing files on this UNC path. For details on configuring Windows machines to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.900103004611686018427387904588Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This machine is configured to retrieve Group Policy files from a file share in an insecure way. UNC Path: \\cbci-768862-1.local\SYSVOL Mutual Authentication Enforced: false Integrity Enforced: false Guidance: The UNC path contains logon scripts and/or files that control system security policies. Microsoft recommends configuring Windows to require both mutual authentication and integrity when accessing files on this UNC path. For details on configuring Windows machines to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.900103004611686018427387904587Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Retrieved account information.532004004611686018427387904586Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system call to get account information completed. CN=N-H2-768862-1,CN=Computers,DC=cbci-768862-1,DC=local The call completed in 79 milliseconds.501704004611686018427387904585Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Making system call to get account information. 401704004611686018427387904584Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Attempting to retrieve the account information.532004004611686018427387904583Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904582Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for CBCI-768862-1\N-H2-768862-1$. Activity id: {12919AEC-7D83-44CC-9F78-BD3E483B34FE}400014014611686018427387904581Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AM12919aec-7d83-44cc-9f78-bd3e483b34femicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy waited for 4796 milliseconds for the network subsystem at computer boot.532204004611686018427387904580Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904579Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802484n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:07 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904578Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:07 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904577Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802392n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:07 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904576Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802392n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:07 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904575Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14802392n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:07 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 87c1db93-c960-4df8-8f73-de0b46cffa5e532104004611686018427387904574Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904573Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904572Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904571Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904570Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801512n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904569Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801508n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904568Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational14801508n-h2-768862-1.cbci-768862-1.localS-1-5-181/3/2021 3:59:06 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904567Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601092n-h2-768862-1S-1-5-181/3/2021 3:58:46 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904566Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational560596n-h2-768862-1S-1-5-181/3/2021 3:58:46 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904565Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904564Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904563Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\N-H2-768862-1$ in 0 seconds.800014024611686018427387904562Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904561Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904560Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904559Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904558Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601228n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 32 milliseconds.501604024611686018427387904557Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904556Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904555Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904554Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904553Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904552Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904551Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904550Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904549Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904548Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904547Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904546Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\N-H2-768862-1$. Activity id: {FBCA6B1B-0FF3-4B7C-A82B-437AB4D3698F}400014014611686018427387904545Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMfbca6b1b-0ff3-4b7c-a82b-437ab4d3698fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904544Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5603340n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904543Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5602408n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904542Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5602408n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904541Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5602408n-h2-768862-1S-1-5-181/3/2021 3:17:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 335366b9-8fc9-4f5b-9b42-01fc933461c5532104004611686018427387904540Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601964n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904539Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601964n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904538Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601964n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904537Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601964n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904536Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601964n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904535Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601084n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904534Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5601084n-h2-768862-1S-1-5-181/3/2021 3:17:44 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904533Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational58084WIN-5T344G8GM1HS-1-5-181/3/2021 3:17:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904532Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580548WIN-5T344G8GM1HS-1-5-181/3/2021 3:17:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 85b49ccd-7740-4def-83d9-037d5ddc4a48532104004611686018427387904531Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580936WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904530Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580936WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904529Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580936WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904528Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580936WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904527Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational580936WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904526Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5801528WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904525Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational5801528WIN-5T344G8GM1HS-1-5-181/3/2021 3:16:20 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904524Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761440WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904523Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976980WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904522Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976672WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904521Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904520Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763048WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904519Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9763048WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904518Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904517Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904516Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904515Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904514Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904513Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904512Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904511Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904510Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904509Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904508Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904507Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904506Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904505Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {523F618F-A541-4753-A681-3C0B79DB800A}400114014611686018427387904504Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM523f618f-a541-4753-a681-3c0b79db800amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904503Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904502Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904501Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904500Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904499Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762072WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800414024611686018427387904498Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 15 milliseconds.501604024611686018427387904497Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904496Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904495Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904494Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904493Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904492Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904491Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904490Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904489Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904488Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904487Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904486Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$. Activity id: {9663586B-26CE-4E7F-A115-7420EF71DDF6}400414014611686018427387904485Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762552WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:32 AM9663586b-26ce-4e7f-a115-7420ef71ddf6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904484Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904483Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904482Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904481Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904480Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904479Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904478Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904477Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904476Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904475Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904474Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904473Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {E1363503-0E2F-45F8-B60E-F5C745BC2310}400014014611686018427387904472Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMe1363503-0e2f-45f8-b60e-f5c745bc2310microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904471Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9762472WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904470Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904469Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904468Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 17681e6a-4ec2-473c-afdb-140f3267c9cb532104004611686018427387904467Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904466Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904465Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904464Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904463Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational976412WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904462Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904461Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9761240WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:29 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904460Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562904WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904459Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956960WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904458Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561504WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904457Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562760WIN-5T344G8GM1HS-1-5-181/19/2018 9:40:27 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904456Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562776WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904455Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562776WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904454Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904453Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904452Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904451Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904450Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904449Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904448Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904447Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904446Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904445Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904444Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904443Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904442Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904441Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {19830159-0802-4690-81DF-314FC75BBEC1}400114014611686018427387904440Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AM19830159-0802-4690-81df-314fc75bbec1microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904439Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904438Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956372WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904437Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904436Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904435Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800414024611686018427387904434Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 32 milliseconds.501604024611686018427387904433Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904432Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904431Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904430Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904429Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904428Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904427Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904426Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904425Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904424Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904423Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Background.534004004611686018427387904422Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting manual processing of policy for computer WORKGROUP\WIN-5T344G8GM1H$. Activity id: {96FB381F-0CD5-4B08-B375-7D41E6D4BD5A}400414014611686018427387904421Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562968WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AM96fb381f-0cd5-4b08-b375-7d41e6d4bd5amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904420Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904419Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904418Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904417Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.501604024611686018427387904416Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904415Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904414Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904413Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 401604014611686018427387904412Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904411Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904410Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904409Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904408Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904407Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904406Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904405Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904404Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904403Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904402Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904401Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904400Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904399Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FD8B735D-48A5-4AFF-82A0-4530749B9C93}400014014611686018427387904398Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMfd8b735d-48a5-4aff-82a0-4530749b9c93microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904397Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562948WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904396Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562624WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:17 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 2aee4e0b-fb00-4527-adc4-e481e4d19dcd532104004611686018427387904395Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904394Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904393Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904392Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904391Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956432WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904390Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561252WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904389Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561252WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:15 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904388Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9683324WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:59 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904387Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968972WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:59 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3bfff0c0-0165-424d-b905-a307b3220abe532104004611686018427387904386Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904385Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904384Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904383Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904382Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational968320WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904381Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9681240WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904380Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9681240WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904379Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9563144WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904378Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956960WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:19 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904377Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561996WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904376Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956404WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:18 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904375Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562512WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:05 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904374Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562512WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:05 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904373Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904372Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904371Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904370Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904369Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904368Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904367Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904366Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904365Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904364Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904363Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904362Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904361Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904360Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {916D7BC6-7539-48F2-9F9E-92FDF76145FA}400114014611686018427387904359Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AM916d7bc6-7539-48f2-9f9e-92fdf76145famicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904358Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904357Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562116WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904356Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904355Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904354Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562780WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904353Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904352Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904351Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904350Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904349Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904348Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904347Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904346Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904345Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904344Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904343Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904342Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904341Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904340Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904339Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FB64062E-023F-45C2-95F3-82A8FD38A036}400014014611686018427387904338Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMfb64062e-023f-45c2-95f3-82a8fd38a036microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904337Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904336Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904335Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9562964WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904334Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:03 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 55f227a2-e54b-46f6-a36f-59838b5d3374532104004611686018427387904333Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904332Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904331Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904330Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904329Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational956724WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904328Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561260WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904327Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9561260WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904326Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11803520WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904325Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801184WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904324Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802516WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904323Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802444WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904322Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802044WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904321Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802044WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904320Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904319Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904318Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904317Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904316Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904315Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904314Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904313Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904312Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904311Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904310Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904309Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904308Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904307Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {16838B39-BD55-4D5F-A3E3-5D47A754DEB8}400114014611686018427387904306Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AM16838b39-bd55-4d5f-a3e3-5d47a754deb8microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904305Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904304Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802804WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904303Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904302Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904301Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11802504WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:50 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904300Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904299Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904298Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904297Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904296Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904295Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904294Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904293Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904292Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904291Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904290Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904289Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {EF9DC327-237A-498F-A234-5DD260AC2188}400014014611686018427387904288Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMef9dc327-237a-498f-a234-5dd260ac2188microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904287Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904286Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904285Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801832WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904284Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801420WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 1bab69f4-e4b0-4881-969a-4be66736ab81532104004611686018427387904283Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904282Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904281Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904280Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904279Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801284WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904278Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801232WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904277Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11801232WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:48 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904276Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11923720WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904275Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921196WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904274Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904273Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922652WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:39 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904272Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921484WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904271Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921484WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904270Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904269Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904268Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904267Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904266Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904265Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904264Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904263Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904262Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904261Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904260Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904259Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904258Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904257Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {45025C4D-6F9D-4B05-92B5-93A82391A3DE}400114014611686018427387904256Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AM45025c4d-6f9d-4b05-92b5-93a82391a3demicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904255Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904254Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922816WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904253Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904252Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904251Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904250Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904249Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904248Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904247Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904246Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904245Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904244Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904243Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904242Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904241Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904240Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904239Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904238Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904237Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {A33A2B8C-390A-413D-8B21-12F16046F44F}400014014611686018427387904236Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMa33a2b8c-390a-413d-8b21-12f16046f44fmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904235Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904234Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904233Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904232Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922128WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904231Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:54 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: c59c478f-2ba4-4b8b-9216-af0e61f55471532104004611686018427387904230Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904229Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904228Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904227Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904226Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921412WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904225Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921288WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904224Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11921288WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:02 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904223Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational964772WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904222Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational964968WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904221Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641824WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904220Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641904WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:56 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904219Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641564WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904218Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641564WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904217Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904216Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904215Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904214Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904213Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904212Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904211Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904210Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904209Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904208Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904207Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904206Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904205Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904204Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {65CB5132-E893-416B-A63D-2BA652D6D6C6}400114014611686018427387904203Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AM65cb5132-e893-416b-a63d-2ba652d6d6c6microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904202Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904201Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9643028WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904200Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904199Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904198Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642404WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:01 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904197Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904196Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904195Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904194Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904193Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904192Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904191Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904190Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904189Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904188Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904187Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904186Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904185Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904184Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {ED5A8EC3-2E31-4880-B3CC-3D038F81C4A4}400014014611686018427387904183Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMed5a8ec3-2e31-4880-b3cc-3d038f81c4a4microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904182Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642824WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904181Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9642316WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:00 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 7ec6f95f-ca51-46fd-b628-91606dc57360532104004611686018427387904180Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904179Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904178Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904177Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904176Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational96488WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904175Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641176WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904174Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9641176WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:55 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904173Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761664WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904172Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761180WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904171Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11763168WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904170Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761724WIN-5T344G8GM1HS-1-5-181/16/2018 6:44:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904169Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762384WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904168Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762384WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904167Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904166Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904165Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904164Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904163Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904162Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904161Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904160Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904159Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904158Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904157Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904156Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904155Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904154Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {F99EA46F-75FC-4CE4-8726-97FC03D1B568}400114014611686018427387904153Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMf99ea46f-75fc-4ce4-8726-97fc03d1b568microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904152Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904151Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761692WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904150Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904149Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.532404004611686018427387904148Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762580WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:02 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904147Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904146Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904145Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.800014024611686018427387904144Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904143Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904142Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904141Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 531304004611686018427387904140Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None531204004611686018427387904139Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904138Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904137Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904136Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904135Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904134Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904133Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {FA8F8E72-590E-4AE5-9C6C-7D5C9F473623}400014014611686018427387904132Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMfa8f8e72-590e-4ae5-9c6c-7d5c9f473623microsoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904131Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904130Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.411704004611686018427387904129Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762728WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.532404004611686018427387904128Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11762640WIN-5T344G8GM1HS-1-5-181/16/2018 6:07:01 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3b55a67b-bb51-4c33-a51f-c935146e1612532104004611686018427387904127Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.532004004611686018427387904126Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.532004004611686018427387904125Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.532004004611686018427387904124Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.511604004611686018427387904123Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761392WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.411504004611686018427387904122Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761316WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.411604004611686018427387904121Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11761316WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:24 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.511504004611686018427387904120Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523660WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.532504004611686018427387904119Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521156WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.532404004611686018427387904118Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11525108WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.532404004611686018427387904117Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11525108WIN-5T344G8GM1HS-1-5-181/16/2018 6:02:38 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.633904004611686018427387904116Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522472WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:07 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.532404004611686018427387904115Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522472WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:07 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.535104004611686018427387904114Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.633804004611686018427387904113Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.511704004611686018427387904112Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.800114024611686018427387904111Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.532004004611686018427387904110Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.532004004611686018427387904109Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.532004004611686018427387904108Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None531304004611686018427387904107Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 531204004611686018427387904106Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.512604004611686018427387904105Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.525704004611686018427387904104Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.412604004611686018427387904103Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".531104004611686018427387904102Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.534004004611686018427387904101Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {B40A7D2E-EE0B-4AFD-8EF4-53A4B91BD98D}400114014611686018427387904100Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMb40a7d2e-ee0b-4afd-8ef4-53a4b91bd98dmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790499Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790498Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522784WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790497Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790496Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790495Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522600WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:06 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790494Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790493Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790492Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.80001402461168601842738790491Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790490Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790489Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790488Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 53130400461168601842738790487Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None53120400461168601842738790486Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790485Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790484Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790483Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790482Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790481Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790480Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790479Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790478Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {280DA8C2-EAC4-4740-9F29-D442B4641CDA}40001401461168601842738790477Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PM280da8c2-eac4-4740-9f29-d442b4641cdamicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790476Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11523056WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790475Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11522400WIN-5T344G8GM1HS-1-5-181/16/2018 5:43:05 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: ad8eaacf-9ac8-4b59-9d35-13bd2198340453210400461168601842738790474Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.53200400461168601842738790473Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.53200400461168601842738790472Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.53200400461168601842738790471Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.51160400461168601842738790470Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521364WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.41150400461168601842738790469Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521276WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.41160400461168601842738790468Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational11521276WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.51150400461168601842738790467Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9246040WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:50 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.53250400461168601842738790466Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational924928WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:50 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logoff from Winlogon for session 1.53240400461168601842738790465Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241564WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:49 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification EndShell from Winlogon for session 1.53240400461168601842738790464Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational924932WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:49 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon Start Shell handling completed.63390400461168601842738790463Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242368WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification StartShell from Winlogon for session 1.53240400461168601842738790462Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242368WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790461Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790460Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790459Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed user logon policy processing for WIN-5T344G8GM1H\Administrator in 0 seconds.80011402461168601842738790458Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed Registry Extension Processing in 16 milliseconds.50160402461168601842738790457Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790456Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790455Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790454Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting Registry Extension Processing. List of applicable Group Policy objects: (Changes were detected.) Local Group Policy 40160401461168601842738790453Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790452Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790451Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790450Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : None53130400461168601842738790449Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: Local Group Policy 53120400461168601842738790448Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790447Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790446Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790445Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790444Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790443Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting user logon Policy processing for WIN-5T344G8GM1H\Administrator. Activity id: {822AD6C6-A4A6-4A78-B264-65E46A20EFBB}40011401461168601842738790442Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PM822ad6c6-a4a6-4a78-b264-65e46a20efbbmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790441Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790440Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243756WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790439Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790438Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification Logon from Winlogon for session 1.53240400461168601842738790437Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:11 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session completed successfully.51170400461168601842738790436Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790435Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790434Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Completed computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$ in 0 seconds.80001402461168601842738790433Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Finished checking for non-system extensions.53200400461168601842738790432Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service configuration update to standalone is not required and will be skipped.53200400461168601842738790431Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Checking for Group Policy client extensions that are not part of the system.53200400461168601842738790430Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following Group Policy objects were not applicable because they were filtered out : Local Group Policy Not Applied (Empty) 53130400461168601842738790429Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
List of applicable Group Policy objects: None53120400461168601842738790428Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy successfully got applicable GPOs from the domain controller.51260400461168601842738790427Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed downloading policies.52570400461168601842738790426Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy receiving applicable GPOs from the domain controller.41260400461168601842738790425Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The loopback policy processing mode is "No loopback mode".53110400461168601842738790424Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790423Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9242872WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy processing mode is Foreground synchronous.53400400461168601842738790422Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting computer boot policy processing for WORKGROUP\WIN-5T344G8GM1H$. Activity id: {227CEB83-33CD-4922-AED0-D222BC464B1A}40001401461168601842738790421Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PM227ceb83-33cd-4922-aed0-d222bc464b1amicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group policy session returned to winlogon.53510400461168601842738790420Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Winlogon status reporting has completed.63380400461168601842738790419Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Session started.41170400461168601842738790418Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9243492WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received the notification CreateSession from Winlogon for session 1.53240400461168601842738790417Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241948WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:09 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: 3dbc3a1f-1e0f-497f-bf39-81527fa03b6753210400461168601842738790416Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.53200400461168601842738790415Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.53200400461168601842738790414Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.53200400461168601842738790413Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.51160400461168601842738790412Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241532WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.41150400461168601842738790411Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241732WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.41160400461168601842738790410Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9241732WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:58 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service stopped.5115040046116860184273879049Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9162760WIN-PD8DQPRRTAOS-1-5-181/16/2018 9:01:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy received Preshutdown notification from Service Control Manager.5325040046116860184273879048Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916920WIN-PD8DQPRRTAOS-1-5-181/16/2018 9:01:40 AMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A previous instance of the Group Policy Client Service was detected. Parameter: e9a66211-b3b2-4290-a071-282831c76b8b5321040046116860184273879047Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing service instance state to detect previous instances of the service.5320040046116860184273879046Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initializing and reading current service configuration for the Group Policy Client service.5320040046116860184273879045Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service is currently configured as a shared service.5320040046116860184273879044Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully completed the Group Policy Service initialization phase.5116040046116860184273879043Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational916944WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Group Policy Service started.4115040046116860184273879042Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9161452WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Started the Group Policy service initialization phase.4116040046116860184273879041Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9Microsoft-Windows-GroupPolicy/Operational9161452WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:14 PMmicrosoft-windows-grouppolicy/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]