Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
DSM Service shutting down. Service uptime was 54 seconds, active worktime was 9205 MilliSeconds.	101	0		4	0	0	4611686018427387904	84	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	592	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:09:54 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 9205 milliseconds.	112	0		4	0	0	4611686018427387904	83	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	3088	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:09:09 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 91 seconds ago	100	0		4	0	0	4611686018427387904	82	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	592	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:09:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 53 seconds, active worktime was 8465 MilliSeconds.	101	0		4	0	0	4611686018427387904	81	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	3180	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:07:28 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 8437 milliseconds.	112	0		4	0	0	4611686018427387904	80	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	664	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:06:43 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 29 seconds ago	100	0		4	0	0	4611686018427387904	79	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	3180	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:06:34 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 131 seconds, active worktime was 86238 MilliSeconds.	101	0		4	0	0	4611686018427387904	78	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4904	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:06:05 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 86217 milliseconds.	112	0		4	0	0	4611686018427387904	77	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4892	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:05:20 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 76 seconds for a driver query/download/install on device 'SCSI\DISK&VEN_LIO-ORG&PROD_IBLOCK\1&1C121344&0&000100'	123	0		3	0	0	4611686018427387904	76	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4888	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:05:11 AM	7620b67a-1409-0003-309b-24760914d801		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 982 seconds ago	100	0		4	0	0	4611686018427387904	75	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4904	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 6:03:54 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 56 seconds, active worktime was 11468 MilliSeconds.	101	0		4	0	0	4611686018427387904	74	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	812	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:47:31 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 11468 milliseconds.	112	0		4	0	0	4611686018427387904	73	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	2332	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:46:46 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 86 seconds ago	100	0		4	0	0	4611686018427387904	72	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	812	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:46:34 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 62 seconds, active worktime was 17385 MilliSeconds.	101	0		4	0	0	4611686018427387904	71	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4484	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:45:08 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 17374 milliseconds.	112	0		4	0	0	4611686018427387904	70	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4080	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:44:23 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 16 seconds for a driver query/download/install on device '{8E7BD593-6E6C-4C52-86A6-77175494DD8E}\MSVHDHBA\1&3030E83&0&01'	123	0		3	0	0	4611686018427387904	69	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4080	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:44:22 AM	7620b67a-1409-0005-51b8-20760914d801		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 258 seconds ago	100	0		4	0	0	4611686018427387904	68	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	1440	4484	n-h2-789963-25.cbci-789963-25.local	S-1-5-18	1/28/2022 5:44:05 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 53 seconds, active worktime was 8969 MilliSeconds.	101	0		4	0	0	4611686018427387904	67	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	4356	n-h2-789963-25	S-1-5-18	1/28/2022 5:11:39 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 8969 milliseconds.	112	0		4	0	0	4611686018427387904	66	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	4236	n-h2-789963-25	S-1-5-18	1/28/2022 5:10:54 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 991 seconds ago	100	0		4	0	0	4611686018427387904	65	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	4356	n-h2-789963-25	S-1-5-18	1/28/2022 5:10:45 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 322 seconds, active worktime was 268265 MilliSeconds.	101	0		4	0	0	4611686018427387904	64	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1688	n-h2-789963-25	S-1-5-18	1/28/2022 4:54:14 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 267295 milliseconds.	112	0		4	0	0	4611686018427387904	63	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1916	n-h2-789963-25	S-1-5-18	1/28/2022 4:53:29 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'Microsoft XPS Document Writer' ({89ACCF61-7FF5-11EC-8785-FA163E16C0B0}) has been serviced, processed 4 tasks, wrote 42 properties, active worktime was 267014 milliseconds.	112	0		4	0	0	4611686018427387904	62	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	3728	n-h2-789963-25	S-1-5-18	1/28/2022 4:53:29 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'Microsoft Print to PDF' ({89ACCF62-7FF5-11EC-8785-FA163E16C0B0}) has been serviced, processed 4 tasks, wrote 42 properties, active worktime was 266724 milliseconds.	112	0		4	0	0	4611686018427387904	61	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1920	n-h2-789963-25	S-1-5-18	1/28/2022 4:53:28 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 257 seconds for a driver query/download/install on device 'VMBUS\{35FA2E29-EA23-4236-96AE-3A6EBACBA440}\{2450EE40-33BF-4FBD-892E-9FB06E9214CF}'	123	0		3	0	0	4611686018427387904	60	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1916	n-h2-789963-25	S-1-5-18	1/28/2022 4:53:20 AM	4b7ea94b-1402-0001-0aaa-7e4b0214d801		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({DE247281-8EE9-5306-BE82-25B0A91FEF44}) has been serviced, processed 2 tasks, wrote 42 properties, active worktime was 1630 milliseconds.	112	0		4	0	0	4611686018427387904	59	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	3736	n-h2-789963-25	S-1-5-18	1/28/2022 4:49:04 AM	4b7ea94b-1402-0001-08aa-7e4b0214d801		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({7F84558C-5F7F-548E-9B12-DE35E0EFD7CA}) has been serviced, processed 4 tasks, wrote 0 properties, active worktime was 1083 milliseconds.	112	0		4	0	0	4611686018427387904	58	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	3736	n-h2-789963-25	S-1-5-18	1/28/2022 4:49:03 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'Normal'	109	0		4	0	0	4611686018427387904	57	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1688	n-h2-789963-25	S-1-5-18	1/28/2022 4:49:02 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'N-H2-789963-25' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 1 tasks, wrote 35 properties, active worktime was 970 milliseconds.	112	0		4	0	0	4611686018427387904	56	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1920	n-h2-789963-25	S-1-5-18	1/28/2022 4:48:53 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({7F84558C-5F7F-548E-9B12-DE35E0EFD7CA}) has been serviced, processed 1 tasks, wrote 34 properties, active worktime was 956 milliseconds.	112	0		4	0	0	4611686018427387904	55	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1916	n-h2-789963-25	S-1-5-18	1/28/2022 4:48:53 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is OOBE, last session (or boot) was 0 seconds ago	100	0		4	0	0	4611686018427387904	54	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1688	n-h2-789963-25	S-1-5-18	1/28/2022 4:48:52 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'OOBE'	109	0		4	0	0	4611686018427387904	53	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	544	1688	n-h2-789963-25	S-1-5-18	1/28/2022 4:48:52 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'Setup'	109	0		4	0	0	4611686018427387904	52	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	528	1300	WIN-5T344G8GM1H	S-1-5-18	1/28/2022 4:46:59 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 127 seconds, active worktime was 79943 MilliSeconds.	101	0		4	0	0	4611686018427387904	51	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	92	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:43:37 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service is leaving the retry state, there have been 1 retry cycles in this session	106	0		4	0	0	4611686018427387904	50	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:42:52 AM	ad8d0f9c-9109-0001-cb10-8dad0991d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 1 tasks, wrote 35 properties, active worktime was 36574 milliseconds.	112	0		4	0	0	4611686018427387904	49	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:42:52 AM	ad8d0f9c-9109-0001-cb10-8dad0991d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 35 seconds for a driver query/download/install on device 'ROOT\WTLMDRV\0000'	123	0		3	0	0	4611686018427387904	48	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:42:52 AM	ad8d0f9c-9109-0001-cb10-8dad0991d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service is entering a retry sequence because soft (retryable) errors were encountered	105	0		4	0	0	4611686018427387904	47	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:42:13 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 4 tasks, wrote 35 properties, active worktime was 43306 milliseconds.	112	0		4	0	0	4611686018427387904	46	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:42:13 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A connection to the Windows Update service could not be established.	200	0		3	0	0	4611686018427387904	45	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:30 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network List Manager reports no connectivity to the internet.	202	0		3	0	0	4611686018427387904	44	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	1680	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:30 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 3 seconds ago	100	0		4	0	0	4611686018427387904	43	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	976	92	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:29 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 144 seconds, active worktime was 144507 MilliSeconds.	101	0		4	0	0	4611686018427387904	42	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	676	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:15 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 497 seconds ago	100	0		4	0	0	4611686018427387904	41	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	676	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:38:50 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 197 seconds, active worktime was 152779 MilliSeconds.	101	0		4	0	0	4611686018427387904	40	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	1012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:30:33 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 4 tasks, wrote 35 properties, active worktime was 152576 milliseconds.	112	0		4	0	0	4611686018427387904	39	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	1168	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:29:48 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 148 seconds for a driver query/download/install on device 'ROOT\VID\0000'	123	0		3	0	0	4611686018427387904	38	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	1992	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:29:44 AM	aff0bd57-9107-0001-7cbd-f0af0791d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 3 seconds ago	100	0		4	0	0	4611686018427387904	37	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	1012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:27:15 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 19 seconds, active worktime was 19449 MilliSeconds.	101	0		4	0	0	4611686018427387904	36	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	968	92	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:27:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 11 seconds ago	100	0		4	0	0	4611686018427387904	35	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	968	92	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:26:40 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 201 seconds, active worktime was 156289 MilliSeconds.	101	0		4	0	0	4611686018427387904	34	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	80	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:26:22 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 4 tasks, wrote 35 properties, active worktime was 156225 milliseconds.	112	0		4	0	0	4611686018427387904	33	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	1732	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:25:37 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 155 seconds for a driver query/download/install on device 'ROOT\MPIO\0000'	123	0		3	0	0	4611686018427387904	32	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	2028	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:25:36 AM	17f2f0cc-9107-0003-0cf1-f2170791d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 3 seconds ago	100	0		4	0	0	4611686018427387904	31	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	956	80	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:23:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 228 seconds, active worktime was 177596 MilliSeconds.	101	0		4	0	0	4611686018427387904	30	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1004	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:27:44 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service is leaving the retry state, there have been 2 retry cycles in this session	106	0		4	0	0	4611686018427387904	29	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:59 AM	9a81cb05-910f-0000-04cc-819a0f91d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 1 tasks, wrote 35 properties, active worktime was 176069 milliseconds.	112	0		4	0	0	4611686018427387904	28	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:59 AM	9a81cb05-910f-0000-04cc-819a0f91d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 167 seconds for a driver query/download/install on device 'VMBUS\{F8615163-DF3E-46C5-913F-F2D2F965ED0E}\{56979600-BA79-4B60-AB5F-394F8EB55CB5}'	123	0		3	0	0	4611686018427387904	27	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:50 AM	9a81cb05-910f-0000-04cc-819a0f91d301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 1 tasks, wrote 0 properties, active worktime was 0 milliseconds.	112	0		4	0	0	4611686018427387904	26	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:24:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A connection to the Windows Update service could not be established.	200	0		3	0	0	4611686018427387904	25	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:24:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network List Manager reports no connectivity to the internet.	202	0		3	0	0	4611686018427387904	24	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:24:00 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service is entering a retry sequence because soft (retryable) errors were encountered	105	0		4	0	0	4611686018427387904	23	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 6 tasks, wrote 35 properties, active worktime was 1499 milliseconds.	112	0		4	0	0	4611686018427387904	22	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A connection to the Windows Metadata and Internet Services (WMIS) could not be established.	201	0		3	0	0	4611686018427387904	21	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network List Manager reports no connectivity to the internet.	202	0		3	0	0	4611686018427387904	20	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A connection to the Windows Update service could not be established.	200	0		3	0	0	4611686018427387904	19	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network List Manager reports no connectivity to the internet.	202	0		3	0	0	4611686018427387904	18	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1812	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A connection to the Windows Update service could not be established.	200	0		3	0	0	4611686018427387904	17	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1788	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network List Manager reports no connectivity to the internet.	202	0		3	0	0	4611686018427387904	16	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1788	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:57 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is Normal, last session (or boot) was 2 seconds ago	100	0		4	0	0	4611686018427387904	15	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	964	1004	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:23:55 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM Service shutting down. Service uptime was 29115 seconds, active worktime was 29064348 MilliSeconds.	101	0		4	0	0	4611686018427387904	14	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1432	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:07:14 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 4 tasks, wrote 35 properties, active worktime was 264288 milliseconds.	112	0		4	0	0	4611686018427387904	13	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1548	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:29 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'Microsoft XPS Document Writer' ({0A568158-2954-F19C-89F3-03ACAEE1F85E}) has been serviced, processed 4 tasks, wrote 42 properties, active worktime was 257291 milliseconds.	112	0		4	0	0	4611686018427387904	12	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1544	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:28 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'Microsoft Print to PDF' ({D397268A-724C-B4EF-D641-C9234BA2948B}) has been serviced, processed 4 tasks, wrote 42 properties, active worktime was 260302 milliseconds.	112	0		4	0	0	4611686018427387904	11	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	2536	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:27 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({7F84558C-5F7F-548E-9B12-DE35E0EFD7CA}) has been serviced, processed 4 tasks, wrote 0 properties, active worktime was 262140 milliseconds.	112	0		4	0	0	4611686018427387904	10	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	2600	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:26 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 19 seconds for a driver query/download/install on device 'VMBUS\{CFA8B69E-5B4A-4CC0-B98B-8BA1A1F3F95A}\{58F75A6D-D949-4320-99E1-A2A2576D581C}'	123	0		3	0	0	4611686018427387904	9	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1548	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:25 PM	a4626349-8ea8-0001-d464-62a4a88ed301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service was delayed by 241 seconds for a driver query/download/install on device 'VMBUS\{35FA2E29-EA23-4236-96AE-3A6EBACBA440}\{2450EE40-33BF-4FBD-892E-9FB06E9214CF}'	123	0		3	0	0	4611686018427387904	8	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1548	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:06 PM	a4626349-8ea8-0001-d464-62a4a88ed301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({DE247281-8EE9-5306-BE82-25B0A91FEF44}) has been serviced, processed 2 tasks, wrote 42 properties, active worktime was 6309 milliseconds.	112	0		4	0	0	4611686018427387904	7	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1544	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:02:11 PM	a4626349-8ea8-0002-4964-62a4a88ed301		microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'Normal'	109	0		4	0	0	4611686018427387904	6	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1432	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:02:04 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'WIN-5T344G8GM1H' ({00000000-0000-0000-FFFF-FFFFFFFFFFFF}) has been serviced, processed 1 tasks, wrote 35 properties, active worktime was 28800012 milliseconds.	112	0		4	0	0	4611686018427387904	5	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1548	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:58 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Device 'NULL' ({7F84558C-5F7F-548E-9B12-DE35E0EFD7CA}) has been serviced, processed 1 tasks, wrote 34 properties, active worktime was 28800012 milliseconds.	112	0		4	0	0	4611686018427387904	4	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1544	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:58 PM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DSM service start, mode is OOBE, last session (or boot) was 0 seconds ago	100	0		4	0	0	4611686018427387904	3	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1432	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 9:01:58 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'OOBE'	109	0		4	0	0	4611686018427387904	2	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	924	1432	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 9:01:58 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DSM service has entered service mode 'Setup'	109	0		4	0	0	4611686018427387904	1	Microsoft-Windows-DeviceSetupManager	fcbb06bb-6a2a-46e3-abaa-246cb4e508b2	Microsoft-Windows-DeviceSetupManager/Admin	916	1164	WIN-PD8DQPRRTAO	S-1-5-18	1/17/2018 3:01:14 AM			microsoft-windows-devicesetupmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]