deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

more updates

Browse Source
This commit is contained in:
Brian Lich 2017-04-03 10:36:02 -07:00
parent 0800f1cac8
commit 1d6ee80aff
1 changed files with 0 additions and 346 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

346
windows/configure/basic-level-windows-diagnostic-events-and-fields.md
View File

@ -177,10 +177,6 @@ These fields are added whenever Ms.Device.DeviceInventoryChange is included in t
The following fields are available:
- **syncId** A string used to group StartSync, EndSync, Add, and Remove operations that belong together. This field is unique by Sync period and is used to disambiguate in situations where multiple agents perform overlapping inventories for the same object.
<<<<<<< HEAD
=======
- **objectInstanceId** Object identity used within the device scope. This is commonly going to be ProgramId, FileId or DeviceInstancePathId but is typically something unique to the objectType and in some cases is artificially created.
>>>>>>> master
- **objectType** Indicates the object type that the event applies to.
- **Action** The change that was invoked on a device inventory object.
- **inventoryId** Device ID used for Compatibility testing
@ -310,35 +306,14 @@ This event sends compatibility information about a file to help keep Windows up-
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file that is generating the events.
- **AvDisplayName** If it is an anti-virus app, this is its display name.
=======
- **objectInstanceId** A hash of the full file path including the file name.
- **AppraiserVersion** The version of the appraiser file that is generating the events.
- **AvDisplayName** If it is an anti-virus app, this is the the display name for the app. Example: System Center Endpoint Protection
>>>>>>> master
- **CompatModelIndex** The compatibility prediction for this file.
- **HasCitData** Is the file present in CIT data?
- **HasUpgradeExe** Does the anti-virus app have an upgrade.exe file?
- **IsAv** Is the file an anti-virus reporting EXE?
- **ResolveAttempted** This will always be an empty string when sending telemetry.
- **SdbEntries** An array of fields that indicates the SDB entries that apply to this file.
<<<<<<< HEAD
=======
- **SdbEntries_item_MigShimCommand** The command line to be passed to the MigShim if one is applicable.
- **SdbEntries_item_MigShimName** Example: DevenvDotnetCacheRebuildShim
- **SdbEntries_item_MigXmlName** Example: MicrosoftForefrontEndpointProtection__4_6__PART
- **SdbEntries_item_MigXmlType** Example: MIG_XML_TYPE_REMOVED
- **SdbEntries_item_ReinstallUpgradeMessage** Example: Resource: 10022
- **SdbEntries_item_SdbAppGuid** Example: {551f8360-14dd-4ea5-bd29-74b0c21abfde}
- **SdbEntries_item_SdbAppName** Example: Visual Studio
- **SdbEntries_item_SdbAppVendor** Example: Microsoft
- **SdbEntries_item_SdbBlockType** Example: ReinstallAfterUpgradeInfo
- **SdbEntries_item_SdbEntryGuid** Example: {84e92468-a463-4c02-93a6-20171694b8a8}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_MIG_FIXED
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DatasourceApplicationFileRemove
@ -365,10 +340,6 @@ This event sends compatibility data for a PNP device, to help keep Windows up-to
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** The Device Instance ID of the device (uniquely identifies a device in the system). Example: pci\ven_8086&dev_0085&subsys_13118086&rev_34\4&2dded11c&0&00e1
>>>>>>> master
- **AppraiserVersion** The version of the appraiser file generating the events.
- **ActiveNetworkConnection** Is the device an active network device?
- **CosDeviceRating** An enumeration that indicates if there is a driver on the target operating system.
@ -377,16 +348,6 @@ The following fields are available:
- **CosPopulatedFromId** The expected uplevel driver matching ID based on driver coverage data.
- **IsBootCritical** Is the device boot critical?
- **SdbEntries** An array of fields indicating the SDB entries that apply to this device.
<<<<<<< HEAD
=======
- **SdbEntries_item_SdbAppGuid** Example: {0ba2f09d-5288-45fa-be32-001857cc020f}
- **SdbEntries_item_SdbAppName** Example: Virtual Machine Manager Self-Service Client
- **SdbEntries_item_SdbAppVendor** Example: Microsoft Corporation
- **SdbEntries_item_SdbBlockType** Example: ReinstallAfterUpgrade
- **SdbEntries_item_SdbEntryGuid** Example: {2a1cc617-9ee0-4dff-b3c0-a09cfc13543a}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_REINSTALL_BLOCK
>>>>>>> master
- **UplevelInboxDriver** Is there a driver uplevel for this device?
- **WuDriverCoverage** Is there a driver uplevel for this device according to Windows Update?
- **WuDriverUpdateID** The Windows Update ID of the applicable uplevel driver.
@ -417,21 +378,8 @@ This event sends compatibility database data about driver packages to help keep
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this driver package.
=======
- **objectInstanceId** DriverPackageId that is used for uniquely identifying a driver package on a system.
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this driver package.
- **SdbEntries_item_SdbAppGuid** Example: {5f29791d-ad69-40a4-9783-6edbdf66bd4b}
- **SdbEntries_item_SdbAppName** Example: Microsoft PDF/XPS Printer
- **SdbEntries_item_SdbAppVendor** Example: Microsoft
- **SdbEntries_item_SdbBlockType** Example: BlockDriver
- **SdbEntries_item_SdbEntryGuid** Example: {380213ca-97c8-4fdc-b194-b4f714006796}
- **SdbEntries_item_SdbUpgradeMode** Example: Service
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DatasourceDriverPackageRemove
@ -458,21 +406,8 @@ This event sends blocking data about any compatibility blocking entries hit on t
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
=======
- **objectInstanceId** This will always be BlockingMatchingInfo.
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
- **SdbEntries_item_SdbAppGuid** Example: {4cca1f6c-74f8-4bfd-9fb4-3d4b65f23f98}
- **SdbEntries_item_SdbAppName** Example: Intel(R)DynamicPowerPerformanceManagement
- **SdbEntries_item_SdbAppVendor** Example: Intel
- **SdbEntries_item_SdbBlockType** Example: BlockUpgradeUntilUpdate
- **SdbEntries_item_SdbEntryGuid** Example: {4be49993-88ec-4003-b9a6-9f8812e94c50}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_UPGRADE_UNTIL_UPDATE_BLOCK
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoBlockRemove
@ -499,25 +434,8 @@ This event sends compatibility database information about non-blocking compatibi
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
=======
- **objectInstanceId** This will always be PassiveMatchingInfo.
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
- **SdbEntries_item_MigShimCommand** The command line to be passed to the MigShim if one is applicable.
- **SdbEntries_item_MigShimName** Example: MigrateVCRuntimeShim
- **SdbEntries_item_MigXmlName** Example: Intel_Rapid_Storage_Technolgy_Enterprise_Filter_Driver__3__PART
- **SdbEntries_item_MigXmlType** Example: MIG_XML_TYPE_FIXED
- **SdbEntries_item_SdbAppGuid** Example: {03760bce-35d7-47a3-b83b-de673fdb6ab4}
- **SdbEntries_item_SdbAppName** Example: VC Runtime
- **SdbEntries_item_SdbAppVendor** Example: Microsoft
- **SdbEntries_item_SdbBlockType** Example: BlockUpgradeUntilUpdate
- **SdbEntries_item_SdbEntryGuid** Example: {00b0c9b2-3f04-4795-a8ac-5b7bd5ea2ea8}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_MIG_FIXED
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPassiveRemove
@ -544,22 +462,8 @@ This event sends compatibility database information about entries requiring rein
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
=======
- **objectInstanceId** This will always be PostUpgradeMatchingInfo.
- **AppraiserVersion** The version of the appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this file.
- **SdbEntries_item_ReinstallUpgradeMessage** Example: Resource: 10022
- **SdbEntries_item_SdbAppGuid** Example: {0ba2f09d-5288-45fa-be32-001857cc020f}
- **SdbEntries_item_SdbAppName** Example: Virtual Machine Manager Self-Service Client
- **SdbEntries_item_SdbAppVendor** Example: Microsoft Corporation
- **SdbEntries_item_SdbBlockType** Example: ReinstallAfterUpgrade
- **SdbEntries_item_SdbEntryGuid** Example: {2a1cc617-9ee0-4dff-b3c0-a09cfc13543a}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
- **SdbEntries_item_SdbUxBlocktypeOverride** Example: SDB_UX_BLOCKTYPE_OVERRIDE_REINSTALL_BLOCK
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DataSourceMatchingInfoPostUpgradeRemove
@ -586,17 +490,8 @@ This event sends compatibility database information about the BIOS to help keep
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this BIOS.
=======
- **objectInstanceId** This will always be BIOS.
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **SdbEntries** An array of fields indicating the SDB entries that apply to this BIOS.
- **SdbEntries_item_SdbBlockType** Example: BiosBlock
- **SdbEntries_item_SdbEntryGuid** Example: {b77118fd-0d87-4f63-a836-d5c6bd8eed4c}
- **SdbEntries_item_SdbUpgradeMode** Example: Swap
>>>>>>> master
### Microsoft.Windows.Appraiser.General.DatasourceSystemBiosRemove
@ -623,14 +518,8 @@ This event sends compatibility decision data about a file to help keep Windows u
The following fields are available:
<<<<<<< HEAD
- **AppraiserVersion** The version of the appraiser file generating the events.
- **BlockAlreadyInbox** The uplevel runtime block on the file already existed on the current OS.
=======
- **objectInstanceId** A hash of the full file path, including the file name.
- **AppraiserVersion** The version of the appraiser file generating the events.
- **BlockAlreadyInbox** The uplevel runtime block on the file already existed on the current OS. Example: FALSE
>>>>>>> master
- **BlockingApplication** Are there any application issues that interfere with upgrade due to the file in question?
- **DisplayGenericMessage** Will be a generic message be shown for this file?
- **HardBlock** This file is blocked in the SDB.
@ -674,10 +563,6 @@ This event sends compatibility decision data about a PNP device to help keep Win
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This uniquely identifies a device in the system.
>>>>>>> master
- **AppraiserVersion** The version of the appraiser file generating the events.
- **AssociatedDriverIsBlocked** Is the driver associated with this PNP device blocked?
- **BlockAssociatedDriver** Should the driver associated with this PNP device be blocked?
@ -689,11 +574,7 @@ The following fields are available:
- **DriverAvailableOnline** Is there a driver for this PNP device on Windows Update?
- **DriverAvailableUplevel** Is there a driver on Windows Update or included with the operating system for this PNP device?
- **DriverBlockOverridden** Is there is a driver block on the device that has been overridden?
<<<<<<< HEAD
- **NeedsDismissAction** Will the user would need to dismiss a warning during Setup for this device?
=======
- **NeedsDismissAction** Will the user would need to dismiss something during Setup for this device?
>>>>>>> master
- **NotRegressed** Does the device have a problem code on the source OS that is no better than the one it would have on the target OS?
- **SdbDeviceBlockUpgrade** Is there an SDB block on the PNP device that blocks upgrade?
- **SdbDriverBlockOverridden** Is there an SDB block on the PNP device that blocks upgrade, but that block was overridden?
@ -723,10 +604,6 @@ This event sends decision data about driver package compatibility to help keep W
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** Used for uniquely identifying a driver package on a system.
>>>>>>> master
- **AppraiserVersion** The version of the appraiser file generating the events.
- **DriverBlockOverridden** Does the driver package have an SDB block that blocks it from migrating, but that block has been overridden?
- **DriverIsDeviceBlocked** Was the driver package was blocked because of a device block?
@ -759,10 +636,6 @@ This event sends compatibility decision data about blocking entries on the syste
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be BlockingMatchingInfo.
>>>>>>> master
- **AppraiserVersion** The version of the appraiser file generating the events.
- **BlockingApplication** Are there are any application issues that interfere with upgrade due to matching info blocks?
- **DisplayGenericMessage** Will a generic message be shown for this block?
@ -796,10 +669,6 @@ This event sends compatibility decision data about non-blocking entries on the s
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be PassiveMatchingInfo.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **BlockingApplication** Are there any application issues that interfere with upgrade due to matching info blocks?
- **MigApplication** Is there a matching info block with a mig for the current mode of upgrade?
@ -829,10 +698,6 @@ This event sends compatibility decision data about entries that require reinstal
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be PostUpgradeMatchingInfo.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **NeedsInstallPostUpgradeData** Will the file have a notification after upgrade to install a replacement for the app?
- **NeedsNotifyPostUpgradeData** Should a notification be shown for this file after upgrade?
@ -864,19 +729,11 @@ This event sends decision data about the presence of Windows Media Center, to he
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be MediaCenter.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **BlockingApplication** Is there any application issues that interfere with upgrade due to Windows Media Center?
- **MediaCenterActivelyUsed** If Windows Media Center is supported on the edition, has it been run at least once and are the MediaCenterIndicators are true?
- **MediaCenterInUse** Is Windows Media Center actively being used?
<<<<<<< HEAD
- **MediaCenterIndicators** Do any indicators imply that Windows Media Center is in active use?
=======
- **MediaCenterIndicators** Are any of the signals indicating that Windows Media Center is being used, such as default launcher, watched folders, extender accounts, etc...?
>>>>>>> master
- **MediaCenterPaidOrActivelyUsed** Is Windows Media Center actively being used or is it running on a supported edition?
- **NeedsDismissAction** Are there any actions that can be dismissed coming from Windows Media Center?
@ -905,10 +762,6 @@ This event sends compatibility decision data about the BIOS to help keep Windows
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Bios.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **Blocking** Is the device blocked from upgrade due to a BIOS block?
- **HasBiosBlock** Does the device have a BIOS block?
@ -932,31 +785,12 @@ The following fields are available:
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
<<<<<<< HEAD
=======
### Microsoft.Windows.Appraiser.General.DecisionSystemProcessorAdd
This event sends defunct data. It always reads false.
The following fields are available:
- **objectInstanceId** Will always be Processor.
- **AppraiserVersion** The version of the appraiser binary generating the events. Example: 10014361
- **Blocking** Will always be FALSE
- **ProcessorRequirementViolated** Will always be FALSE
>>>>>>> master
### Microsoft.Windows.Appraiser.General.EnterpriseScenarioWithDiagTrackServiceRunning
The event that indicates that Appraiser has been triggered to run an enterprise scenario while the DiagTrack service is installed. This event can only be sent if a special flag is used to trigger the enterprise scenario.
The following fields are available:
<<<<<<< HEAD
=======
- **CensusId** An ID for the system calculated from the CEIP, WER, and RAC IDs.
>>>>>>> master
- **Time** The client time of the event.
- **PCFP** An ID for the system calculated by hashing hardware identifiers.
@ -981,10 +815,6 @@ This event represents the basic metadata about a file on the system. The file m
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** A hash of the full file path including the file name.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets.
- **BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets.
@ -1026,10 +856,6 @@ This event sends data about the number of language packs installed on the system
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be LanguagePack.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **HasLanguagePack** Does this device have 2 or more language packs?
- **LanguagePackCount** How many language packs are installed?
@ -1059,10 +885,6 @@ This event sends true/false data about decision points used to understand whethe
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be MediaCenter.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **EverLaunched** Has Windows Media Center ever been launched?
- **HasConfiguredTv** Has the user configured a TV tuner through Windows Media Center?
@ -1097,10 +919,6 @@ This event sends basic metadata about the BIOS to determine whether it has a com
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Bios.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **BiosDate** The release date of the BIOS in UTC format.
- **BiosName** The name field from Win32_BIOS.
@ -1176,10 +994,6 @@ The following fields are available:
- **Time** The client time of the event.
- **PCFP** A unique hardware identifier that is calculated by hashing hardware identifiers.
- **IsOnlineRun** Was the device able to connect to Windows Update to get driver availability information?
<<<<<<< HEAD
=======
- **CensusId** An ID for the system calculated from the CEIP, WER, and RAC IDs.
>>>>>>> master
### Microsoft.Windows.Appraiser.General.IsOnlineWuDriverDataSource
@ -1192,10 +1006,6 @@ The following fields are available:
- **PCFP** A unique hardware identifier that is calculated by hashing hardware identifiers.
- **IsOnlineRun** Was the device able to connect to Windows Update to get driver availability information?
- **TargetVersion** The abbreviated name for the OS version against which Windows Update was queried.
<<<<<<< HEAD
=======
- **CensusId** An ID for the system calculated from the CEIP, WER, and RAC IDs.
>>>>>>> master
### Microsoft.Windows.Appraiser.General.RunContext
@ -1232,10 +1042,6 @@ This event sends data on the amount of memory on the system and whether it meets
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Memory.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **Blocking** Is the device from upgrade due to memory restrictions?
- **MemoryRequirementViolated** Was a memory requirement violated?
@ -1270,10 +1076,6 @@ This event sends data indicating whether the system supports the CompareExchange
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be CompareExchange128.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **Blocking** Is the upgrade blocked due to the processor?
- **CompareExchange128Support** Does the CPU support CompareExchange128?
@ -1303,10 +1105,6 @@ This event sends data indicating whether the system supports the LahfSahf CPU re
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be LahfSahf.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file generating the events.
- **Blocking** Is the upgrade blocked due to the processor?
- **LahfSahfSupport** Does the CPU support LAHF/SAHF?
@ -1336,10 +1134,6 @@ This event sends data indicating whether the system supports the NX CPU requirem
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be NX.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **Blocking** Is the upgrade blocked due to the processor?
- **NXDriverResult** The result of the driver used to do a non-deterministic check for NX support.
@ -1370,10 +1164,6 @@ This event sends data indicating whether the system supports the PrefetchW CPU r
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be PrefetchW.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **Blocking** Is the upgrade blocked due to the processor?
- **PrefetchWSupport** Does the processor support PrefetchW?
@ -1403,10 +1193,6 @@ This event sends data indicating whether the system supports the SSE2 CPU requir
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be SSE2.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **Blocking** Is the upgrade blocked due to the processor?
- **SSE2ProcessorSupport** Does the processor support SSE2?
@ -1436,10 +1222,6 @@ This event sends data indicating whether the system supports touch, to help keep
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Touch.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **IntegratedTouchDigitizerPresent** Is there an integrated touch digitizer?
- **MaximumTouches** The maximum number of touch points supported by the device hardware.
@ -1469,10 +1251,6 @@ This event sends data indicating whether the operating system is running from a
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Wim.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **IsWimBoot** Is the current operating system running from a compressed WIM file?
- **RegistryWimBootValue** The raw value from the registry that is used to indicate if the device is running from a WIM.
@ -1502,10 +1280,6 @@ This event sends data indicating whether the current operating system is activat
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be WindowsActivationStatus.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **WindowsIsLicensedApiValue** The result from the API that's used to indicate if operating system is activated.
- **WindowsNotActivatedDecision** Is the current operating system activated?
@ -1535,10 +1309,6 @@ This event sends data indicating whether the system has WLAN, and if so, whether
The following fields are available:
<<<<<<< HEAD
=======
- **objectInstanceId** This will always be Wlan.
>>>>>>> master
- **AppraiserVersion** The version of the Appraiser file that is generating the events.
- **Blocking** Is the upgrade blocked because of an emulated WLAN driver?
- **HasWlanBlock** Does the emulated WLAN driver have an upgrade block?
@ -2214,10 +1984,6 @@ This event sends inventory component versions for the Device Inventory data.
The following fields are available:
<<<<<<< HEAD
=======
- **aeinv.dll** The version of the App inventory component.
>>>>>>> master
- **devinv.dll** The file version of the Device inventory component.
- **aeinv** The version of the App inventory component.
- **devinv** The file version of the Device inventory component.
@ -2246,12 +2012,7 @@ The following fields are available:
- **InstallDateMsi** The install date if the application was installed via MSI. Passed as an array. Example: 4/11/2015 00:00:00
- **InstallDateFromLinkFile** The estimated date of install based on the links to the files. Passed as an array. Example: 4/8/2015 01:06:11
- **InstallDateArpLastModified** The date of the registry ARP key for a given application. Hints at install date but not always accurate. Passed as an array. Example: 4/11/2015 00:00:00
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **objectInstanceId** ProgramId (a hash of Name, Version, Publisher, and Language of an application used to identify it). Example: 00000144865763f3de24c2ae5a289fde6db300000904
>>>>>>> master
- **PackageFullName** The package full name for a Store application. Example: Microsoft.Hexic_1.2.0.36_x86__8wekyb3d8bbwe
- **InventoryVersion** The version of the inventory file generating the events.
- **StoreAppType** A sub-classification for the type of Windows Store app, such as UWP or Win8StoreApp.
@ -2263,11 +2024,7 @@ This event indicates that a new set of InventoryDevicePnpAdd events will be sent
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2277,11 +2034,7 @@ This event indicates that a new set of InventoryApplicationAdd events will be se
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2305,12 +2058,7 @@ The following fields are available:
- **DiscoveryMethod** The discovery method for the device container.
- **ModelNumber** The model number for the device container.
- **Manufacturer** The manufacturer name for the device container.
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **objectInstanceId** ContainerId. Example: {552dd320-0dae-2794-2b41-df42fee22488}
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2320,11 +2068,7 @@ This event indicates that the InventoryDeviceContainer object is no longer prese
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2334,11 +2078,7 @@ This event indicates that a new set of InventoryDeviceContainerAdd events will b
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2386,12 +2126,7 @@ The following fields are available:
- **audio.captureDriver** Audio device capture driver. Example: hdaudio.inf:db04a16ce4e8d6ee:HdAudModel:10.0.14887.1000:hdaudio\func_01
- **audio.renderDriver** Audio device render driver. Example: hdaudio.inf:db04a16ce4e8d6ee:HdAudModel:10.0.14889.1001:hdaudio\func_01
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **objectInstanceId** Device Instance ID of the PNP device. Example: hdaudio/func_01&ven_10ec&dev_0262&subsys_103c1309&rev_1002/4&12f2dd06&0&0001
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
- **Audio_CaptureDriver** The Audio device capture driver endpoint.
- **Audio_RenderDriver** The Audio device render driver endpoint.
@ -2399,19 +2134,11 @@ The following fields are available:
### Microsoft.Windows.Inventory.Core.InventoryDeviceMediaClassRemove
<<<<<<< HEAD
This event indicates that the InventoryDeviceMediaClassRemove object is no longer present.
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
This event indicates that the InventoryDeviceMediaClass object represented by the objectInstanceId is no longer present.
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2421,11 +2148,7 @@ This event indicates that a new set of InventoryDeviceMediaClassSAdd events will
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2459,12 +2182,7 @@ The following fields are available:
- **LowerFilters** Lower filter drivers IDs installed for the device.
- **UpperClassFilters** Upper filter class drivers IDs installed for the device.
- **UpperFilters** Upper filter drivers IDs installed for the device.
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **objectInstanceId** The Device Instance ID of the device (uniquely identifies a device in the system). Example: pci\ven_8086&dev_0085&subsys_13118086&rev_34\4&2dded11c&0&00e1
>>>>>>> master
- **DriverId** A unique identifier for the installed device.
- **DriverName** The name of the driver image file.
- **InventoryVersion** The version of the inventory file generating the events.
@ -2477,11 +2195,7 @@ This event indicates that the InventoryDevicePnpRemove object is no longer prese
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2491,11 +2205,7 @@ This event indicates that a new set of InventoryDevicePnpAdd events will be sent
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2521,12 +2231,7 @@ The following fields are available:
- **ProductVersion** The product version that is included in the driver file.
- **WdfVersion** The Windows Driver Framework version.
- **Service** The name of the service that is installed for the device.
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **objectInstanceId** Can be used to join with InventoryDevicePnp (on driverId, upperFilters, etc.). Example: 000038dbe54a022b6c73edbdb8bf5cba32a882d2df2a
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2536,11 +2241,7 @@ This event indicates that the InventoryDriverBinary object is no longer present.
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2550,11 +2251,7 @@ This event indicates that a new set of InventoryDriverBinaryAdd events will be s
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2572,29 +2269,17 @@ The following fields are available:
- **Version** The version of the driver package.
- **Provider** The provider for the driver package.
- **SubmissionId** The HLK submission ID for the driver package.
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
### Microsoft.Windows.Inventory.Core.InventoryDriverPackageRemove
<<<<<<< HEAD
This event indicates that the InventoryDriverPackageRemove object is no longer present.
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
This event indicates that the InventoryDriverPackage object represented by the objectInstanceId is no longer present. No object attributes are transmitted other than the objectInstanceId
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
@ -2604,50 +2289,27 @@ This event indicates that a new set of InventoryDriverPackageAdd events will be
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
- **InventoryVersion** The version of the inventory file generating the events.
### Microsoft.Windows.Inventory.Indicators.Checksum
<<<<<<< HEAD
This event summarizes the counts for the InventoryMiscellaneousUexIndicatorAdd events.
The following fields are available:
- **ChecksumDictionary** A count of each operating system indicator.
- **PCFP** Equivalent to the InventoryId field that is found in other core events.
=======
This event captures basic checksum data about the device inventory items stored in the cache for use in validating data completeness for Microsoft.Windows.Inventory.Core events.
The following fields are available:
- **CensusId** A unique hardware identifier.
- **ChecksumDictionary** A count of each operating system indicator.
- **PCFP** Microsoft.Windows.Inventory.Indicators
>>>>>>> master
### Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
<<<<<<< HEAD
These events represent the basic metadata about the OS indicators installed on the system which are used for keeping the device up-to-date.
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
This event captures basic checksum data about the device inventory items stored in the cache for use in validating data completeness for Microsoft.Windows.Inventory.Core events. The fields in this event may change over time, but they will always represent a count of a given object.
The following fields are available:
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
- **Value** Describes an operating system indicator that may be relevant for the device upgrade.
>>>>>>> master
- **IndicatorValue** The indicator value
@ -2657,11 +2319,7 @@ This event is a counterpart to InventoryMiscellaneousUexIndicatorAdd, indicating
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
### Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorStartSync
@ -2670,11 +2328,7 @@ This event indicates that a new set of InventoryMiscellaneousUexIndicatorAdd eve
The following fields are available:
<<<<<<< HEAD
- **PartB_Ms.Device.DeviceInventoryChange** See the Common Data Fields section.
=======
- **PartB_Ms.Device.DeviceInventoryChange** This field is replaced with the following fields: syncId, objectInstanceId, objectType, Action, and InventoryId.
>>>>>>> master
## OneDrive events