API tools faq
paste
aveyo

wnf_17763.1.csv

aveyo
Oct 22nd, 2018
767
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 188.16 KB | None | 0 0
raw download clone embed print report
  1. Name,id1,id2,Hex,Description
  2. WNF_A2A_APPURIHANDLER_INSTALLED,A3BC0875,41877C2C,7508BCA32C7C8741, An app implementing windows.AppUriHandler contract has been installed.
  3. WNF_AA_CURATED_TILE_COLLECTION_STATUS,A3BC1075,41C60F2C,7510BCA32C0FC641, Curate tile collection for all allowed apps for current AssignedAccess account has been created.
  4. WNF_AA_LOCKDOWN_CHANGED,A3BC0875,41C60F2C,7508BCA32C0FC641, Mobile lockdown configuration has been changed.
  5. WNF_AA_MDM_STATUS_EVENT_LOGGED,A3BC1875,41C60F2C,7518BCA32C0FC641, Events are logged to the assigned access status trace logging.
  6. WNF_AAD_DEVICE_REGISTRATION_STATUS_CHANGE,A3BC0875,41820F2C,7508BCA32C0F8241, This event is signalled when device changes status of registration in Azure Active Directory.
  7. WNF_ACC_EC_ENABLED,A3BC0835,41850D2C,3508BCA32C0D8541, This event is bool signaled to indicate the EC accessibility feature enabled state.
  8. WNF_ACHK_SP_CORRUPTION_DETECTED,A3BC0875,A8E0D2C,7508BCA32C0D8E0A, Event fired when we scan the System Partition and find corruption.
  9. WNF_ACT_DATA_UPDATED,A3BC0835,41920D2C,3508BCA32C0D9241, Indicates Activity Data has been updated.
  10. WNF_AFD_IGNORE_ORDERLY_RELEASE_CHANGE,A3BC0875,4182082C,7508BCA32C088241, A system entity has requested a change in AFD's orderly release behavior.
  11. WNF_AI_PACKAGEINSTALL,A3BC1075,41C6072C,7510BCA32C07C641, This event is signalled when a package install operation completes.
  12. WNF_AI_PACKAGEUNINSTALL,A3BC2075,41C6072C,7520BCA32C07C641, This event is signalled when a package uninstall operation completes.
  13. WNF_AI_PACKAGEUPDATE,A3BC1875,41C6072C,7518BCA32C07C641, This event is signalled when a package update operation completes.
  14. WNF_AI_USERTILE,A3BC0875,41C6072C,7508BCA32C07C641, AppInstallation state name to receive RAW notifications.
  15. WNF_AOW_BOOT_PROGRESS,A3BC0875,4191012C,7508BCA32C019141, This state is incremented when a discrete part of the AoW boot sequence has completed. Security: WNF_STATE_SUBSCRIBE (1) by everyone (WD) and app containers (S-1-15-2-1); WNF_STATE_SUBSCRIBE | WNF_STATE_PUBLISH (3) by Local System (SY) and the Interactive User account (IU).
  16. WNF_APXI_CRITICAL_PACKAGES_INSTALLED,A3BC0875,89E1E2C,7508BCA32C1E9E08, This event is fired when all critical packages (those that need to be installed before the shell is displayed) have installed.
  17. WNF_AUDC_CAPTURE,A3BC4075,2821B2C,7540BCA32C1B8202, Reports the number of; and process ids of all applications currently capturing audio. Returns a WNF_CAPTURE_STREAM_EVENT_HEADER data structure.
  18. WNF_AUDC_CHAT_APP_CONTEXT,A3BC6075,2821B2C,7560BCA32C1B8202, Publishes a list of the current chat applications on the device.
  19. WNF_AUDC_CPUSET_ID,A3BC08B5,2821B2C,B508BCA32C1B8202, This state holds the CPU Set ID for audio threads. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  20. WNF_AUDC_CPUSET_ID_SYSTEM,A3BC2875,2821B2C,7528BCA32C1B8202, This state keeps other system services apprised of the audio-reserved CPU set ID.
  21. WNF_AUDC_DEFAULT_RENDER_ENDPOINT_PROPERTIES,A3BC5875,2821B2C,7558BCA32C1B8202, Reports certain properties of the default render multimedia endpoint whenever the default endpoint changes or a property of interest changes on the default render endpoint.
  22. WNF_AUDC_HEALTH_PROBLEM,A3BC2075,2821B2C,7520BCA32C1B8202, State for problems detected in the audio core.
  23. WNF_AUDC_PHONECALL_ACTIVE,A3BC1075,2821B2C,7510BCA32C1B8202, This state indicates an active phone call; which can be from a cellular call or active Communications category audio streams.
  24. WNF_AUDC_RENDER,A3BC3075,2821B2C,7530BCA32C1B8202, Reports the number of; and all endpoints currently rendering audio. Returns a WNF_STREAM_EVENT_HEADER data structure.
  25. WNF_AUDC_RINGERVIBRATE_STATE_CHANGED,A3BC4875,2821B2C,7548BCA32C1B8202, Reports the changes to the Ringervibrate state of the device.
  26. WNF_AUDC_SPATIAL_STATUS,A3BC5075,2821B2C,7550BCA32C1B8202, Reports for each spatial audio endpoint if spatial audio is currently being rendered. Returns a WNF_SPATIAL_STATUS_HEADER data structure.
  27. WNF_AUDC_TUNER_DEVICE_AVAILABILITY,A3BC1875,2821B2C,7518BCA32C1B8202, This notification indicates whether or not the tuner endpoint is available.
  28. WNF_AUDC_VOLUME_CONTEXT,A3BC3875,2821B2C,7538BCA32C1B8202, This notification is raised when contextual volume for endpoints have changed.
  29. WNF_AVA_SOUNDDETECTOR_PATTERN_MATCH,A3BC0875,4187182C,7508BCA32C188741, This notification is used to signal that a match has been detected for Voice Activation.
  30. WNF_AVLC_DRIVER_REQUEST,A3BC0875,28A182C,7508BCA32C188A02, A driver requst permission for volume limit change.
  31. WNF_AVLC_SHOW_VOLUMELIMITWARNING,A3BC1875,28A182C,7518BCA32C188A02, This event informs the system that we need to show reached volume limit warning message.
  32. WNF_AVLC_VOLUME_WARNING_ACCEPTED,A3BC1075,28A182C,7510BCA32C188A02, This event propagates the user's choice from the warning dialog.
  33. WNF_BCST_APP_BROADCAST_STREAM_STATE,A3BC0875,15950D2F,7508BCA32F0D9515, Contains the current stream state information for the app broadcast service.
  34. WNF_BI_APPLICATION_SERVICING_START_CHANNEL,A3BC3875,41C6072F,7538BCA32F07C641, BI application servicing start system state notification channel.
  35. WNF_BI_APPLICATION_SERVICING_STOP_CHANNEL,A3BC4075,41C6072F,7540BCA32F07C641, BI application servicing stop system state notification channel.
  36. WNF_BI_APPLICATION_UNINSTALL_CHANNEL,A3BC3075,41C6072F,7530BCA32F07C641, BI application uninstall system state notification channel.
  37. WNF_BI_BI_READY,A3BC6835,41C6072F,3568BCA32F07C641, Indicates that BI is ready and also publish channels list for each session.
  38. WNF_BI_BROKER_WAKEUP_CHANNEL,A3BC0875,41C6072F,7508BCA32F07C641, Background work execution trigger.
  39. WNF_BI_EVENT_DELETION,A3BC5075,41C6072F,7550BCA32F07C641, BI event deletion system state notification channel.
  40. WNF_BI_LOCK_SCREEN_UPDATE_CHANNEL,A3BC4875,41C6072F,7548BCA32F07C641, BI lock screen update system state notification channel.
  41. WNF_BI_NETWORK_LIMITED_CHANNEL,A3BC8075,41C6072F,7580BCA32F07C641, Notification that the system is entering or exiting a network limited standby.
  42. WNF_BI_NOTIFY_NEW_SESSION,A3BC7075,41C6072F,7570BCA32F07C641, BI notify new session system state notification channel.
  43. WNF_BI_PSM_TEST_HOOK_CHANNEL,A3BC5875,41C6072F,7558BCA32F07C641, PSM policy test hook.
  44. WNF_BI_QUERY_APP_USAGE,A3BC7875,41C6072F,7578BCA32F07C641, PSM notification to clients for querying application performance usage.
  45. WNF_BI_QUIET_MODE_UPDATE_CHANNEL,A3BC6075,41C6072F,7560BCA32F07C641, BI Quiet Mode update system state notification channel.
  46. WNF_BI_SESSION_CONNECT_CHANNEL,A3BC2075,41C6072F,7520BCA32F07C641, BI session connect system state notification channel.
  47. WNF_BI_SESSION_DISCONNECT_CHANNEL,A3BC2875,41C6072F,7528BCA32F07C641, BI session disconnect system state notification channel.
  48. WNF_BI_USER_LOGOFF_CHANNEL,A3BC1875,41C6072F,7518BCA32F07C641, BI user logoff system state notification channel.
  49. WNF_BI_USER_LOGON_CHANNEL,A3BC1075,41C6072F,7510BCA32F07C641, BI user logon system state notification channel.
  50. WNF_BLTH_BLUETOOTH_AUDIO_GATEWAY_STATUS,A3BC1075,992022F,7510BCA32F029209, State name for Bluetooth Audio Gateway status notification. A 32-bit bitmask of BLUETOOTH_AUDIO_GATEWAY_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTAGService in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml.
  51. WNF_BLTH_BLUETOOTH_AVRCP_VOLUME_CHANGED,A3BC4075,992022F,7540BCA32F029209, Notification that the user has changed the volume level using AVRCP on a Bluetooth peripheral.
  52. WNF_BLTH_BLUETOOTH_CONNECTION_STATE_CHANGE,A3BC2075,992022F,7520BCA32F029209, Indicates when a Bluetooth Device gets connected and disconnected.
  53. WNF_BLTH_BLUETOOTH_DEVICE_BATTERY_IS_LOW,A3BC4875,992022F,7548BCA32F029209, Notification that a Bluetooth device's battery is low.
  54. WNF_BLTH_BLUETOOTH_DEVICE_DOCK_STATUS,A3BC6075,992022F,7560BCA32F029209, Aggregated status for one or more Bluetooth peripheral charging docks located on the system.
  55. WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_INVALIDATE_TOKEN,A3BC3075,992022F,7530BCA32F029209, Indicates that a legacy Gatt client request was no longer present. The previously granted access token to be revoked is returned.
  56. WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_REQUEST,A3BC2875,992022F,7528BCA32F029209, Indicates that a legacy Gatt client request is present. The local radio and remote device BTH_ADDR are returned.
  57. WNF_BLTH_BLUETOOTH_LE_ADV_SCANNING_STATUS,A3BC5075,992022F,7550BCA32F029209, Exposes the status of Bluetooth LE Advertisement scanning.
  58. WNF_BLTH_BLUETOOTH_MAP_STATUS,A3BC1875,992022F,7518BCA32F029209, State name for Bluetooth MAP status notification. A 32-bit bitmask of BLUETOOTH_MAP_STATUS enum are returned.
  59. WNF_BLTH_BLUETOOTH_QUICKPAIR_STATUS_CHANGED,A3BC3875,992022F,7538BCA32F029209, Notification that the user requested a change to the status of the QuickPair engine.
  60. WNF_BLTH_BLUETOOTH_SHOW_PBAP_CONSENT,A3BC5875,992022F,7558BCA32F029209, Signals for the PBAP Consent UI to be shown.
  61. WNF_BLTH_BLUETOOTH_STATUS,A3BC0875,992022F,7508BCA32F029209, State name for Bluetooth overall status notification. Flags from the BLUETOOTH_GLOBAL_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTConnMgr in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml.
  62. WNF_BMP_BG_PLAYBACK_REVOKED,A3BC1075,4196032F,7510BCA32F039641, The following tasks aren't able to play under current policy.
  63. WNF_BMP_BG_PLAYSTATE_CHANGED,A3BC0875,4196032F,7508BCA32F039641, The background media player's playstate has changed.
  64. WNF_BOOT_DIRTY_SHUTDOWN,A3BC0875,1589012F,7508BCA32F018915, The state is published once the previous shutdown was not clean.
  65. WNF_BOOT_INVALID_TIME_SOURCE,A3BC1075,1589012F,7510BCA32F018915, The state is published if system time is initialized with a backup time source.
  66. WNF_BOOT_MEMORY_PARTITIONS_RESTORE,A3BC1875,1589012F,7518BCA32F018915, The state reflects memory partiton restoration state (nothing to restore; restore in progress; restore completed; failure).
  67. WNF_BRI_ACTIVE_WINDOW,A3BC0875,418F1C2F,7508BCA32F1C8F41, Notifies brightness classes of the active window in order to apply their brightness preferences.
  68. WNF_CAM_ACTIVITY_ACCESS_CHANGED,A3BCD875,418B0F2E,75D8BCA32E0F8B41,
  69. WNF_CAM_APPDIAGNOSTICS_ACCESS_CHANGED,A3BC0875,418B0F2E,7508BCA32E0F8B41, Event fired when access to the corresponding named app capability changes.
  70. WNF_CAM_APPOINTMENTS_ACCESS_CHANGED,A3BC1075,418B0F2E,7510BCA32E0F8B41,
  71. WNF_CAM_BLUETOOTH_ACCESS_CHANGED,A3BC1875,418B0F2E,7518BCA32E0F8B41,
  72. WNF_CAM_BLUETOOTHSYNC_ACCESS_CHANGED,A3BCE075,418B0F2E,75E0BCA32E0F8B41,
  73. WNF_CAM_BROADFILESYSTEMACCESS_ACCESS_CHANGED,A3BCD075,418B0F2E,75D0BCA32E0F8B41,
  74. WNF_CAM_CAMERA_ACCESS_CHANGED,A3BC2075,418B0F2E,7520BCA32E0F8B41,
  75. WNF_CAM_CELLULARDATA_ACCESS_CHANGED,A3BC2875,418B0F2E,7528BCA32E0F8B41,
  76. WNF_CAM_CHAT_ACCESS_CHANGED,A3BC3075,418B0F2E,7530BCA32E0F8B41,
  77. WNF_CAM_CONTACTS_ACCESS_CHANGED,A3BC3875,418B0F2E,7538BCA32E0F8B41,
  78. WNF_CAM_DOCUMENTSLIBRARY_ACCESS_CHANGED,A3BCB075,418B0F2E,75B0BCA32E0F8B41,
  79. WNF_CAM_EMAIL_ACCESS_CHANGED,A3BC4075,418B0F2E,7540BCA32E0F8B41,
  80. WNF_CAM_GAZEINPUT_ACCESS_CHANGED,A3BCC875,418B0F2E,75C8BCA32E0F8B41,
  81. WNF_CAM_HID_ACCESS_CHANGED,A3BC4875,418B0F2E,7548BCA32E0F8B41,
  82. WNF_CAM_LOCATION_ACCESS_CHANGED,A3BC5075,418B0F2E,7550BCA32E0F8B41,
  83. WNF_CAM_MICROPHONE_ACCESS_CHANGED,A3BC5875,418B0F2E,7558BCA32E0F8B41,
  84. WNF_CAM_PHONECALL_ACCESS_CHANGED,A3BC6075,418B0F2E,7560BCA32E0F8B41,
  85. WNF_CAM_PHONECALLHISTORY_ACCESS_CHANGED,A3BC6875,418B0F2E,7568BCA32E0F8B41,
  86. WNF_CAM_PICTURESLIBRARY_ACCESS_CHANGED,A3BCB875,418B0F2E,75B8BCA32E0F8B41,
  87. WNF_CAM_POS_ACCESS_CHANGED,A3BC7075,418B0F2E,7570BCA32E0F8B41,
  88. WNF_CAM_RADIOS_ACCESS_CHANGED,A3BC7875,418B0F2E,7578BCA32E0F8B41,
  89. WNF_CAM_SENSORSCUSTOM_ACCESS_CHANGED,A3BC8075,418B0F2E,7580BCA32E0F8B41,
  90. WNF_CAM_SERIAL_ACCESS_CHANGED,A3BC8875,418B0F2E,7588BCA32E0F8B41,
  91. WNF_CAM_USB_ACCESS_CHANGED,A3BC9075,418B0F2E,7590BCA32E0F8B41,
  92. WNF_CAM_USERACCOUNTINFO_ACCESS_CHANGED,A3BC9875,418B0F2E,7598BCA32E0F8B41,
  93. WNF_CAM_USERDATATASKS_ACCESS_CHANGED,A3BCA075,418B0F2E,75A0BCA32E0F8B41,
  94. WNF_CAM_USERNOTIFICATIONLISTENER_ACCESS_CHANGED,A3BCA875,418B0F2E,75A8BCA32E0F8B41,
  95. WNF_CAM_VIDEOSLIBRARY_ACCESS_CHANGED,A3BCC075,418B0F2E,75C0BCA32E0F8B41,
  96. WNF_CAM_WIFIDIRECT_ACCESS_CHANGED,A3BCE875,418B0F2E,75E8BCA32E0F8B41,
  97. WNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGED,A3BC0875,12960F2E,7508BCA32E0F9612, Central Access Policies have been updated.
  98. WNF_CCTL_BUTTON_REQUESTS,A3BC08B5,D920D2E,B508BCA32E0D920D, A button press has caused a request.
  99. WNF_CDP_ALLOW_CLIPBOARDHISTORY_POLICY_CHANGE,A3BC8075,41960A2E,7580BCA32E0A9641, Indicates clipboard history policy has changed.
  100. WNF_CDP_ALLOW_CROSSDEVICECLIPBOARD_POLICY_CHANGE,A3BC8875,41960A2E,7588BCA32E0A9641, Indicates cross device clipboard policy has changed.
  101. WNF_CDP_CDP_ACTIVITIES_RECIEVED,A3BC3075,41960A2E,7530BCA32E0A9641, Indicates CDP service received new activities.
  102. WNF_CDP_CDP_LOCAL_ACTIVITIES_RECIEVED,A3BC6875,41960A2E,7568BCA32E0A9641, Indicates CDP service received local activities.
  103. WNF_CDP_CDP_MESSAGES_QUEUED,A3BC2875,41960A2E,7528BCA32E0A9641, Indicates CDP service queued the message(s) for designated applications.
  104. WNF_CDP_CDP_NOTIFICATION_ACTION_FORWARD_FAILURE,A3BC4075,41960A2E,7540BCA32E0A9641, Indicates failure either delivering or invoking a Notification Action on a remote device.
  105. WNF_CDP_CDPSVC_READY,A3BC0875,41960A2E,7508BCA32E0A9641, Indicates CDP Service is ready.
  106. WNF_CDP_CDPSVC_STOPPING,A3BC1075,41960A2E,7510BCA32E0A9641, Indicates CDP Service is stopping.
  107. WNF_CDP_CDPUSERSVC_READY,A3BC1835,41960A2E,3518BCA32E0A9641, Indicates CDP User Service is ready.
  108. WNF_CDP_CDPUSERSVC_STOPPING,A3BC2035,41960A2E,3520BCA32E0A9641, Indicates CDP User Service is stopping.
  109. WNF_CDP_ENABLE_ACTIVITYFEED_POLICY_CHANGE,A3BC5875,41960A2E,7558BCA32E0A9641, Indicates whether ActivityFeed is enabled. It is responsible for mirroring different activity types (as applicable) across device graph of the user.
  110. WNF_CDP_PUBLISH_USER_ACTIVITIES_POLICY_CHANGE,A3BC6075,41960A2E,7560BCA32E0A9641, Indicates the settings policy (enabled/disabled) for 'User Activity' publishing has changed.
  111. WNF_CDP_UPLOAD_USER_ACTIVITIES_POLICY_CHANGE,A3BC7875,41960A2E,7578BCA32E0A9641, Indicates the settings policy (enabled/disabled) for 'User Activity' upload has changed.
  112. WNF_CDP_USER_NEAR_SHARE_SETTING_CHANGE,A3BC5035,41960A2E,3550BCA32E0A9641, Indicates that the user has changed Near Share authorization setting.
  113. WNF_CDP_USER_RESOURCE_INFO_CHANGED,A3BC7075,41960A2E,7570BCA32E0A9641, Indicates the persisted values associated with a resource has changed.
  114. WNF_CDP_USER_ROME_SETTING_CHANGE,A3BC4835,41960A2E,3548BCA32E0A9641, Indicates that the user has changed Rome SDK authorization setting.
  115. WNF_CDP_USERAUTH_POLICY_CHANGE,A3BC3875,41960A2E,7538BCA32E0A9641, Indicates that the user has changed the CDP policy.
  116. WNF_CELL_AIRPLANEMODE,A3BC3075,D8A0B2E,7530BCA32E0B8A0D, The current state of airplanemode. SDDL comes from ID_CAP_CELL_WNF; WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  117. WNF_CELL_AIRPLANEMODE_DETAILS,A3BC9075,D8A0B2E,7590BCA32E0B8A0D, The current state of airplanemode details. SDDL comes from ID_CAP_CELL_WNF; WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  118. WNF_CELL_AVAILABLE_OPERATORS_CAN0,A3BC5075,D8A0B2E,7550BCA32E0B8A0D, List of available operators for the first cellular can; an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  119. WNF_CELL_AVAILABLE_OPERATORS_CAN1,A3BD5875,D8A0B2E,7558BDA32E0B8A0D, List of available operators for the second cellular can; an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  120. WNF_CELL_CALLFORWARDING_STATUS_CAN0,A3BD0075,D8A0B2E,7500BDA32E0B8A0D, Call-forwarding status for the first cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  121. WNF_CELL_CALLFORWARDING_STATUS_CAN1,A3BDE075,D8A0B2E,75E0BDA32E0B8A0D, Call-forwarding status for the second cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  122. WNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0,A3BE5875,D8A0B2E,7558BEA32E0B8A0D, Indication that all executors have been configured and that there are no outstanding configurations pending in the modem. SDDL comes from WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  123. WNF_CELL_CAN_STATE_CAN0,A3BC8075,D8A0B2E,7580BCA32E0B8A0D, Can state (between CellManager and CellUX) for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  124. WNF_CELL_CAN_STATE_CAN1,A3BD9075,D8A0B2E,7590BDA32E0B8A0D, Can state (between CellManager and CellUX) for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  125. WNF_CELL_CDMA_ACTIVATION_CAN0,A3BC4075,D8A0B2E,7540BCA32E0B8A0D, Activation; PRL; and provisioning state for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  126. WNF_CELL_CDMA_ACTIVATION_CAN1,A3BD4875,D8A0B2E,7548BDA32E0B8A0D, Activation; PRL; and provisioning state for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  127. WNF_CELL_CONFIGURED_LINES_CAN0,A3BDF475,D8A0B2E,75F4BDA32E0B8A0D, Configured lines for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF; ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  128. WNF_CELL_CONFIGURED_LINES_CAN1,A3BDFC75,D8A0B2E,75FCBDA32E0B8A0D, Configured lines for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF; ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  129. WNF_CELL_CSP_WWAN_PLUS_READYNESS,A3BCF875,D8A0B2E,75F8BCA32E0B8A0D, CM CSPWWAN+ readyness state. SDDL comes from ID_CAP_CMCSPWWAN_PLUS in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  130. WNF_CELL_DATA_ENABLED_BY_USER_MODEM0,A3BC6475,D8A0B2E,7564BCA32E0B8A0D, Cellular data enabled state as set by user. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  131. WNF_CELL_DEVICE_INFO_CAN0,A3BC5875,D8A0B2E,7558BCA32E0B8A0D, Device info (RIL_GetDeviceInfo) for the first cellular can; as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  132. WNF_CELL_DEVICE_INFO_CAN1,A3BD6075,D8A0B2E,7560BDA32E0B8A0D, Device info (RIL_GetDeviceInfo) for the second cellular can; as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  133. WNF_CELL_EMERGENCY_CALLBACK_MODE_STATUS,A3BE6875,D8A0B2E,7568BEA32E0B8A0D, Indication about the current emergency callback mode. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  134. WNF_CELL_HOME_OPERATOR_CAN0,A3BCC075,D8A0B2E,75C0BCA32E0B8A0D, MCC; MNC (or SID; NID) of the 'home' operator. SDDL comes from ID_CAP_CAMERA; ID_CAP_CELL_WNF; ID_CAP_ISV_CAMERA and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  135. WNF_CELL_HOME_OPERATOR_CAN1,A3BDA875,D8A0B2E,75A8BDA32E0B8A0D, MCC; MNC (or SID; NID) of the 'home' operator. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  136. WNF_CELL_HOME_PRL_ID_CAN0,A3BCC875,D8A0B2E,75C8BCA32E0B8A0D, PRL ID of 'home' operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  137. WNF_CELL_HOME_PRL_ID_CAN1,A3BDB075,D8A0B2E,75B0BDA32E0B8A0D,
  138. WNF_CELL_IMS_STATUS_CAN0,A3BE8075,D8A0B2E,7580BEA32E0B8A0D, Current IMS registration for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  139. WNF_CELL_IMS_STATUS_CAN1,A3BE8875,D8A0B2E,7588BEA32E0B8A0D, Current IMS registration for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  140. WNF_CELL_IMSI_CAN0,A3BE2075,D8A0B2E,7520BEA32E0B8A0D, IMSI for the first cellular can; as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  141. WNF_CELL_IMSI_CAN1,A3BE2875,D8A0B2E,7528BEA32E0B8A0D,
  142. WNF_CELL_IWLAN_AVAILABILITY_CAN0,A3BE9075,D8A0B2E,7590BEA32E0B8A0D, iWLAN availability for Can 0; value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  143. WNF_CELL_IWLAN_AVAILABILITY_CAN1,A3BE9875,D8A0B2E,7598BEA32E0B8A0D, iWLAN availability for Can 1; value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  144. WNF_CELL_LEGACY_SETTINGS_MIGRATION,A3BE3075,D8A0B2E,7530BEA32E0B8A0D, Migration action for legacy cellcore settings. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  145. WNF_CELL_NETWORK_TIME_CAN0,A3BC4875,D8A0B2E,7548BCA32E0B8A0D, NITZ information for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF; WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  146. WNF_CELL_NETWORK_TIME_CAN1,A3BD5075,D8A0B2E,7550BDA32E0B8A0D, NITZ information for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF; WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  147. WNF_CELL_OPERATOR_NAME_CAN0,A3BC3875,D8A0B2E,7538BCA32E0B8A0D, Current serving operator for the first cellular can; name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  148. WNF_CELL_OPERATOR_NAME_CAN1,A3BD4075,D8A0B2E,7540BDA32E0B8A0D, Current serving operator for the second cellular can; name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  149. WNF_CELL_PERSO_STATUS_CAN0,A3BCB875,D8A0B2E,75B8BCA32E0B8A0D, bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  150. WNF_CELL_PERSO_STATUS_CAN1,A3BDE875,D8A0B2E,75E8BDA32E0B8A0D, bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  151. WNF_CELL_PHONE_NUMBER_CAN0,A3BC6875,D8A0B2E,7568BCA32E0B8A0D, Phone number (MSISDN) for the first cellular can; as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  152. WNF_CELL_PHONE_NUMBER_CAN1,A3BD7075,D8A0B2E,7570BDA32E0B8A0D, Phone number (MSISDN) for the second cellular can; as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  153. WNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0,A3BC9875,D8A0B2E,7598BCA32E0B8A0D, This is triggered if cellcore suspects that data activity may have been affected. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  154. WNF_CELL_POWER_STATE_MODEM0,A3BC0875,D8A0B2E,7508BCA32E0B8A0D, Modem power state of the first modem; values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_EVERYONE; ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  155. WNF_CELL_PREFERRED_LANGUAGES_SLOT0,A3BE1075,D8A0B2E,7510BEA32E0B8A0D, Preferred languages in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  156. WNF_CELL_PREFERRED_LANGUAGES_SLOT1,A3BE1875,D8A0B2E,7518BEA32E0B8A0D, Preferred languages in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  157. WNF_CELL_PS_MEDIA_PREFERENCES_CAN0,A3BEA475,D8A0B2E,75A4BEA32E0B8A0D, PS Media preferences for Can 0; a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  158. WNF_CELL_PS_MEDIA_PREFERENCES_CAN1,A3BEAC75,D8A0B2E,75ACBEA32E0B8A0D, PS Media preferences for Can 1; a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  159. WNF_CELL_RADIO_TYPE_MODEM0,A3BD0C75,D8A0B2E,750CBDA32E0B8A0D, Modem radio type of the first modem; values defined by RILRADIOCONFIGURATIONRADIOTYPE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  160. WNF_CELL_REGISTRATION_CHANGED_TRIGGER_MV,A3BE6075,D8A0B2E,7560BEA32E0B8A0D, This is published when cellcore needs MV to kick in. SDDL comes from ID_CAP_EVERYONE; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  161. WNF_CELL_REGISTRATION_PREFERENCES_CAN0,A3BC7C75,D8A0B2E,757CBCA32E0B8A0D, Registration preferences for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  162. WNF_CELL_REGISTRATION_PREFERENCES_CAN1,A3BD8C75,D8A0B2E,758CBDA32E0B8A0D, Registration preferences for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  163. WNF_CELL_REGISTRATION_STATUS_CAN0,A3BC2075,D8A0B2E,7520BCA32E0B8A0D, Current registration status of the first cellular can; bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  164. WNF_CELL_REGISTRATION_STATUS_CAN1,A3BD2075,D8A0B2E,7520BDA32E0B8A0D, Current registration status of the second cellular can; bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  165. WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0,A3BCA875,D8A0B2E,75A8BCA32E0B8A0D, Detailed registration status of the first cellular can; defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CAMERA; ID_CAP_CELL_WNF; ID_CAP_EVERYONE; ID_CAP_ISV_CAMERA; WwanSvc; ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  166. WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1,A3BD9875,D8A0B2E,7598BDA32E0B8A0D, Detailed registration status of the second cellular can; defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CELL_WNF; ID_CAP_EVERYONE; WwanSvc; ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  167. WNF_CELL_SIGNAL_STRENGTH_BARS_CAN0,A3BC1075,D8A0B2E,7510BCA32E0B8A0D, Number of bars (0..5) of signal strength for the first cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  168. WNF_CELL_SIGNAL_STRENGTH_BARS_CAN1,A3BD1075,D8A0B2E,7510BDA32E0B8A0D, Number of bars (0..5) of signal strength for the second cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  169. WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0,A3BE7075,D8A0B2E,7570BEA32E0B8A0D, Signal-strength details for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  170. WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1,A3BE7875,D8A0B2E,7578BEA32E0B8A0D, Signal-strength details for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  171. WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0,A3BCB075,D8A0B2E,75B0BCA32E0B8A0D, bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  172. WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1,A3BDA075,D8A0B2E,75A0BDA32E0B8A0D, bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON; ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  173. WNF_CELL_SYSTEM_CONFIG,A3BCA475,D8A0B2E,75A4BCA32E0B8A0D, Root state describing cellular system configuration (all modems and their cans). SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  174. WNF_CELL_SYSTEM_TYPE_CAN0,A3BC1875,D8A0B2E,7518BCA32E0B8A0D, System type of the first cellular Can; a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  175. WNF_CELL_SYSTEM_TYPE_CAN1,A3BD1875,D8A0B2E,7518BDA32E0B8A0D, System type of the second cellular Can; a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  176. WNF_CELL_UICC_ATR_SLOT0,A3BE3875,D8A0B2E,7538BEA32E0B8A0D, Answer to reset from the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  177. WNF_CELL_UICC_ATR_SLOT1,A3BE4075,D8A0B2E,7540BEA32E0B8A0D, Answer to reset from the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  178. WNF_CELL_UICC_PIN_STATE_SLOT0,A3BEC075,D8A0B2E,75C0BEA32E0B8A0D, Reports detailed states of PIN on slot 0. It is private for Wwansvc access only.
  179. WNF_CELL_UICC_PIN_STATE_SLOT1,A3BEC875,D8A0B2E,75C8BEA32E0B8A0D, Reports detailed states of PIN on slot 1. It is private for Wwansvc access only.
  180. WNF_CELL_UICC_SIMSEC_SLOT0,A3BE4875,D8A0B2E,7548BEA32E0B8A0D, Indication for Phone subsystem to show Sim Security (PIN; Perso) related UI for Slot 0. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  181. WNF_CELL_UICC_SIMSEC_SLOT1,A3BE5075,D8A0B2E,7550BEA32E0B8A0D, Indication for Phone subsystem to show Sim Security (PIN; Perso) related UI for Slot 1. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  182. WNF_CELL_UICC_STATUS_DETAILS_SLOT0,A3BE0075,D8A0B2E,7500BEA32E0B8A0D, Status details of the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  183. WNF_CELL_UICC_STATUS_DETAILS_SLOT1,A3BE0875,D8A0B2E,7508BEA32E0B8A0D, Status details of the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  184. WNF_CELL_UICC_STATUS_SLOT0,A3BC2875,D8A0B2E,7528BCA32E0B8A0D, Status of the UICC in the first slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  185. WNF_CELL_UICC_STATUS_SLOT1,A3BD2875,D8A0B2E,7528BDA32E0B8A0D, Status of the UICC in the second slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  186. WNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0,A3BC8C75,D8A0B2E,758CBCA32E0B8A0D, Power state of the modem as last preferred by the user; values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  187. WNF_CELL_UTK_PROACTIVE_CMD,A3BCF075,D8A0B2E,75F0BCA32E0B8A0D, UICC toolkit proactive command notification for all slots. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  188. WNF_CELL_UTK_SETUP_MENU_SLOT0,A3BCE875,D8A0B2E,75E8BCA32E0B8A0D, UICC toolkit setup menu notification for slot 0. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  189. WNF_CELL_UTK_SETUP_MENU_SLOT1,A3BDD075,D8A0B2E,75D0BDA32E0B8A0D, UICC toolkit setup menu notification for slot 1. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  190. WNF_CELL_VOICEMAIL_NUMBER_CAN0,A3BC7075,D8A0B2E,7570BCA32E0B8A0D, Voicemail number (MBDN) for the first cellular can; as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  191. WNF_CELL_WIFI_CALL_SETTINGS_CAN0,A3BEB075,D8A0B2E,75B0BEA32E0B8A0D, Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml.
  192. WNF_CELL_WIFI_CALL_SETTINGS_CAN1,A3BEB875,D8A0B2E,75B8BEA32E0B8A0D,
  193. WNF_CERT_FLUSH_CACHE_STATE,A3BC1075,15940B2E,7510BCA32E0B9415, This event signals when flush cache was started and completed in each process where enabled.
  194. WNF_CERT_FLUSH_CACHE_TRIGGER,A3BC0875,15940B2E,7508BCA32E0B9415, This event signals flush cache in all processes where flush is enabled.
  195. WNF_CFCL_SC_CONFIGURATIONS_ADDED,A3BC1875,D85082E,7518BCA32E08850D, Triggered each time one or more flight configurations is added.
  196. WNF_CFCL_SC_CONFIGURATIONS_CHANGED,A3BC0875,D85082E,7508BCA32E08850D, Triggered each time one or more flight configurations changes.
  197. WNF_CFCL_SC_CONFIGURATIONS_DELETED,A3BC1075,D85082E,7510BCA32E08850D, Triggered each time one or more flight configurations is deleted.
  198. WNF_CI_SMODE_CHANGE,A3BC0875,41C6072E,7508BCA32E07C641, This event signals that change of S mode has occurred.
  199. WNF_CLIP_CLIPBOARD_HISTORY_ENABLED_CHANGED,A3BC2035,118F022E,3520BCA32E028F11, This notification is triggered when clipboard history enabled/disabled setting value changes.
  200. WNF_CLIP_CONTENT_CHANGED,A3BC0875,118F022E,7508BCA32E028F11, This notification is triggered when contents on the clipboard change.
  201. WNF_CLIP_HISTORY_CHANGED,A3BC1035,118F022E,3510BCA32E028F11, This notification is triggered when contents of the clipboard history change.
  202. WNF_CLIP_ROAMING_CLIPBOARD_ENABLED_CHANGED,A3BC1835,118F022E,3518BCA32E028F11, This notification is triggered when roaming clipboard enabled/disabled setting value changes.
  203. WNF_CNET_CELLULAR_CONNECTIONS_AVAILABLE,A3BC4875,1583002E,7548BCA32E008315, State name for Cellular connections available State. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  204. WNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKED,A3BC3075,1583002E,7530BCA32E008315, the data of this state is 1 when the global data usage state is less than or equal to NOT_TRACKED; otherwise it is 0.
  205. WNF_CNET_DPU_GLOBAL_STATE_OFF_TRACK,A3BC1875,1583002E,7518BCA32E008315, the data of this state is 1 when the global data usage state is less than or equal to OFF_TRACK; otherwise it is 0.
  206. WNF_CNET_DPU_GLOBAL_STATE_ON_TRACK,A3BC2075,1583002E,7520BCA32E008315, the data of this state is 1 when the global data usage state is less than or equal to ON_TRACK; otherwise it is 0.
  207. WNF_CNET_DPU_GLOBAL_STATE_OVER_LIMIT,A3BC1075,1583002E,7510BCA32E008315, the data of this state is 1 when the global data usage state is less than or equal to OVER_LIMIT; otherwise it is 0.
  208. WNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACK,A3BC2875,1583002E,7528BCA32E008315, the data of this state is 1 when the global data usage state is less than or equal to UNDER_TRACK; otherwise it is 0.
  209. WNF_CNET_NON_CELLULAR_CONNECTED,A3BC6875,1583002E,7568BCA32E008315, The state is 1 when a non cellular connection is in connected state; otherwise it is 0. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  210. WNF_CNET_RADIO_ACTIVITY,A3BC7875,1583002E,7578BCA32E008315, The state is 1 when Cellular data is active; otherwise it is 0. SDDL grants read access for everyone; including AppContainers; and write access for System.
  211. WNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTED,A3BC7075,1583002E,7570BCA32E008315, The state is 1 when Radio is active or a non cellular connection is in connected state; otherwise it is 0. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  212. WNF_CNET_WIFI_ACTIVITY,A3BC8075,1583002E,7580BCA32E008315, The state is 1 when WiFi is active; otherwise it is 0. SDDL grants read access for everyone; including AppContainers; and write access for System.
  213. WNF_CONT_RESTORE_FROM_SNAPSHOT_COMPLETE,A3BC0875,1588012E,7508BCA32E018815, Components blocked waiting for restore from snapshot can now continue.
  214. WNF_CSC_SERVICE_START,A3BC0875,41851D2E,7508BCA32E1D8541, CSC Service start trigger.
  215. WNF_CSHL_COMPOSER_CONTEXT_CHANGED,A3BC3835,D8E1D2E,3538BCA32E1D8E0D, Indicates the composer has changed which updates the registry (ComposerManagerBaseKey) indicating which composer can be restored after a crash.
  216. WNF_CSHL_COMPOSER_LAUNCH_READY,A3BC0835,D8E1D2E,3508BCA32E1D8E0D, Core shell has initialized; including all of its services (e.g. TLAVM); and the Product Composer can be launched. If the event has not been fired; then CoreShell is still initializing and the Composer cannot be launched. Payload is a DWORD to inidicate it has been fired.
  217. WNF_CSHL_COMPOSER_TEARDOWN,A3BC3035,D8E1D2E,3530BCA32E1D8E0D, When set to the value 1; it indicates that the current composer has finished unintializing.
  218. WNF_CSHL_PRODUCT_READY,A3BC2835,D8E1D2E,3528BCA32E1D8E0D, Fired every time a Product Composer has finished initializing and indicates that Shell has entered normal operations (i.e. not in restricted mode or running OOBE/PostUpdateUX). If the event has not been fired; then the Product Composer is still initializing. Payload is a DWORD to inidicate it has been fired.
  219. WNF_CSHL_SKIP_OOBE_CXH,A3BC4035,D8E1D2E,3540BCA32E1D8E0D, Fired when a test job wants to skip CXH stage of OOBE.
  220. WNF_CSHL_UI_AUTOMATION,A3BC1035,D8E1D2E,3510BCA32E1D8E0D, On UI Automation.
  221. WNF_CSHL_VIEWHOSTING_READY,A3BC2035,D8E1D2E,3520BCA32E1D8E0D, Fired every time a Composer registers with TLAVM and inidicates that the composer is ready to host applications. If the event has not been fired; then no composer is ready to host applications. Payload is a DWORD to inidicate it has been fired.
  222. WNF_CXH_APP_FINISHED,A3BC1035,418E162E,3510BCA32E168E41, Notification when CloudExperienceHost app is finished. Payload is result plus result string of length 512.
  223. WNF_CXH_BACK,A3BC2035,418E162E,3520BCA32E168E41, Notification when back command is issued.
  224. WNF_CXH_BACK_STATE,A3BC1835,418E162E,3518BCA32E168E41, Notification of web app back button state. Payload is a boolean for on/off.
  225. WNF_CXH_OOBE_APP_READY,A3BC2875,418E162E,7528BCA32E168E41, System-wide signal that the CloudExperienceHost app launched during OOBE is ready with its first webapp visible. Payload is a boolean for true/false.
  226. WNF_CXH_WEBAPP_STATUS,A3BC0835,418E162E,3508BCA32E168E41, Notification of web app status change. Payload is status type plus web app cxid of length 512.
  227. WNF_DBA_DEVICE_ACCESS_CHANGED,A3BC0875,41870C29,7508BCA3290C8741, This event triggers when the user changes device access for an applocation or the user.
  228. WNF_DEP_OOBE_COMPLETE,A3BC0C75,41960B29,750CBCA3290B9641, This event triggers when the system has completed OOBE (Windows Welcome).
  229. WNF_DEP_UNINSTALL_DISABLED,A3BC1475,41960B29,7514BCA3290B9641, This event triggers when the Uninstall of the system has been disabled.
  230. WNF_DEVM_DMWAPPUSHSVC_READY,A3BC1875,C900B29,7518BCA3290B900C, Multivariant is ready to deliver SMS messages to RILAdaptation (or any registered recipient).
  231. WNF_DEVM_MULTIVARIANT_PROVISIONING_SESSIONS,A3BC3075,C900B29,7530BCA3290B900C, Multivariant provisioning session status (per slot). Everyone (WD) can subscribe; but just Local System and Admin can publish (SY; BA).
  232. WNF_DEVM_PROVISIONING_COMPLETE,A3BC0875,C900B29,7508BCA3290B900C, State of boot provisioning tasks. Set to 1 when provisioning is complete. SDDL comes from ID_CAP_PHONEPROVISIONER_EVENTS and PhoneProvisioner in %SDXROOT%\src\devmgmt\dm\packages\provisioning\provisioning.pkg.xml and MvProvisionHost in %SDXROOT%\src\devmgmt\dm\packages\multivariant\multivariant.pkg.xml.
  233. WNF_DICT_CONTENT_ADDED,A3BC0875,15850729,7508BCA329078515, A word was added to the User Dictionary. Datasize is the byte count of MAX_PATH + uint32. SDDL SID's come from capability ID_CAP_INPUT_CORE (both application and service SID's); and DefAppsCapabilitiesGroup.
  234. WNF_DISK_SCRUB_REQUIRED,A3BC0875,A950729,7508BCA32907950A, This event signals when a disk that requires scrubbing is brought online.
  235. WNF_DMF_MIGRATION_COMPLETE,A3BC1075,41800329,7510BCA329038041, Signals that Migration completed. DWORD[2] = {completed flag; status}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml.
  236. WNF_DMF_MIGRATION_PROGRESS,A3BC1875,41800329,7518BCA329038041, Current Migration state. DWORD[4] = {Phase; Total Phases; Step; Total Steps}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml.
  237. WNF_DMF_MIGRATION_STARTED,A3BC0875,41800329,7508BCA329038041, Signals that Migration started. DWORD[1] = {started flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml.
  238. WNF_DMF_UX_COMPLETE,A3BC2075,41800329,7520BCA329038041, Signals when data migration is complete after reboot and update results need to be displayed. DWORD[1] = {completed flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and DuPostUpdateUX in %SDXROOT%\src\devmgmt\du\packages\UX\UX.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml.
  239. WNF_DNS_ALL_SERVER_TIMEOUT,A3BC1075,41950029,7510BCA329009541, When all the DNS Servers Timeout; this event is notified.
  240. WNF_DO_MANAGER_ACTIVE,A3BC0875,41C60129,7508BCA32901C641, This event triggers when the Delivery Optimization service manager is active or idle.
  241. WNF_DO_POLICY_CHANGED,A3BC1075,41C60129,7510BCA32901C641, Delivery Optimization system policy has been updated.
  242. WNF_DSM_DSMAPPINSTALLED,A3BC0C75,418B1D29,750CBCA3291D8B41, Notification for when an app is installed so we can register a device background task if necessary.
  243. WNF_DSM_DSMAPPREMOVED,A3BC1475,418B1D29,7514BCA3291D8B41, Notification for when an app is removed so we can clean up any registered device background tasks if necessary.
  244. WNF_DUSM_IS_CELLULAR_BACKGROUND_RESTRICTED,A3BC1075,C951B29,7510BCA3291B950C, The state is 1 when cellular internet connection is not allowed to any UWP Application running in background; the state is 0 when cellular internet connection is allowed to any applications running in foreground or background.
  245. WNF_DUSM_TASK_TOAST,A3BC0875,C951B29,7508BCA3291B950C, Trigger task scheduler to launch task for toast.
  246. WNF_DWM_COMPOSITIONCAPABILITIES,A3BC2835,418B1929,3528BCA329198B41, Triggered when the dwm composition capabilities changes.
  247. WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE,A3BC3035,418B1929,3530BCA329198B41, Triggered when exclusive mode apps are presenting in the holographic compositor.
  248. WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE_LOW_FRAMERATE,A3BC1035,418B1929,3510BCA329198B41, Triggered when exclusive mode apps are presenting at a low framerate to the holographic compositor.
  249. WNF_DWM_HOLOGRAPHIC_COMPOSITOR_HAS_PROTECTED_CONTENT,A3BC1835,418B1929,3518BCA329198B41, Triggered when the compositor toggles between not having and having (any) protected content.
  250. WNF_DWM_HOLOGRAPHIC_COMPOSITOR_LOW_FRAMERATE,A3BC2035,418B1929,3520BCA329198B41, Triggered when 3D compositor is presenting at a low framerate.
  251. WNF_DWM_RUNNING,A3BC0835,418B1929,3508BCA329198B41, Triggered when the dwm starts/terminates.
  252. WNF_DX_ADAPTER_START,A3BC8075,41C61629,7580BCA32916C641, Triggered by kernel when a GPU is started. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  253. WNF_DX_ADAPTER_STOP,A3BC8875,41C61629,7588BCA32916C641, Triggered by kernel when a GPU is stopped. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  254. WNF_DX_COLOR_OVERRIDE_STATE_CHANGE,A3BC9875,41C61629,7598BCA32916C641, Triggered when any of the color overrides are changed for any display.
  255. WNF_DX_COLOR_PROFILE_CHANGE,A3BC7035,41C61629,3570BCA32916C641, Triggered when the default color profile for any attached display changes. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  256. WNF_DX_DEVICE_REMOVAL,A3BC60B5,41C61629,B560BCA32916C641, Triggered when a device has been removed for any reason; not just adapter removal. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  257. WNF_DX_DISPLAY_COLORIMETRY_DATA_CHANGED,A3BCA075,41C61629,75A0BCA32916C641, Triggered by kernel when colorimetry data is changed for any display. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  258. WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATION,A3BC5835,41C61629,3558BCA32916C641, Triggered by kernel when a change is made to the display configuration.
  259. WNF_DX_GPM_TARGET,A3BC7875,41C61629,7578BCA32916C641, State is used to indicate the process that should be targeted by GPM.
  260. WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATION,A3BC4075,41C61629,7540BCA32916C641, Triggered by hardware content protection tilt detection. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  261. WNF_DX_INTERNAL_PANEL_DIMENSIONS,A3BC4875,41C61629,7548BCA32916C641, Stores information about the physical dimensions (in mm) of the integrated panel if available; and 0's if not.
  262. WNF_DX_MODE_CHANGE_NOTIFICATION,A3BC1035,41C61629,3510BCA32916C641, Triggered by kernel when mode change happens. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  263. WNF_DX_MODERN_OUTPUTDUPLICATION,A3BC5035,41C61629,3550BCA32916C641, Triggered when a lowbox application starts or stops using OutputDuplication.
  264. WNF_DX_MODERN_OUTPUTDUPLICATION_CONTEXTS,A3BC6835,41C61629,3568BCA32916C641, Triggered when a lowbox application starts or stops using OutputDuplication and provides list of active lowbox contexts.
  265. WNF_DX_MONITOR_CHANGE_NOTIFICATION,A3BC2835,41C61629,3528BCA32916C641, Triggered by kernel when monitor change happens. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  266. WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATION,A3BC2035,41C61629,3520BCA32916C641, Triggered by kernel when the state of a network display device is changed.
  267. WNF_DX_OCCLUSION_CHANGE_NOTIFICATION,A3BC1835,41C61629,3518BCA32916C641, Triggered by kernel when any occlusion related OS state change happens.
  268. WNF_DX_SDR_WHITE_LEVEL_CHANGED,A3BC9035,41C61629,3590BCA32916C641, Triggered by kernel when SDR white level value is changed for any display. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  269. WNF_DX_STEREO_CONFIG,A3BC0C75,41C61629,750CBCA32916C641, State stores the current stereo cpl setting. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  270. WNF_DX_VAIL_CHANGE_NOTIFICATION,A3BCA8B5,41C61629,B5A8BCA32916C641, Triggered when Vail states are changed for this remote session on virtual machine.
  271. WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATION,A3BC3875,41C61629,7538BCA32916C641, Triggered by kernel when video memory budget for an application changes. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  272. WNF_DX_VIDMM_TRIM_NOTIFICATION,A3BC30B5,41C61629,B530BCA32916C641, Triggered by kernel when video memory has to be trimmed. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  273. WNF_DXGK_ADAPTER_TDR_NOTIFICATION,A3BC0875,A811629,7508BCA32916810A, Triggered by the kernel when any adapter receives a TDR or PNP event. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  274. WNF_DXGK_PATH_FAILED_OR_INVALIDATED,A3BC1075,A811629,7510BCA32916810A, Triggered by the kernel when an active display path asynchronously transitions to either a failed or invalidated state.
  275. WNF_EAP_APPLICATION_HANDLE,A3BC0875,41960F28,7508BCA3280F9641, State name for holding application window handle of calling UX.
  276. WNF_EDGE_EXTENSION_AVAILABLE,A3BC18F5,4810A28,F518BCA3280A8104, This event is fired on edge open if any extension is installed.
  277. WNF_EDGE_EXTENSION_INSTALLED,A3BC10F5,4810A28,F510BCA3280A8104, This event is fired when an extension is installed. The payload is the extension id.
  278. WNF_EDGE_INPRIVATE_EXTENSION_AVAILABLE,A3BC20F5,4810A28,F520BCA3280A8104, This event is fired on edge open if any extension; supported in InPrivate; is installed.
  279. WNF_EDGE_LAST_NAVIGATED_HOST,A3BC08F5,4810A28,F508BCA3280A8104, This event is fired when a top level frame navigation is complete; the payload contains the host name.
  280. WNF_EDP_AAD_REAUTH_REQUIRED,A3BC3875,41960A28,7538BCA3280A9641, The AAD token used by EDP has expired.
  281. WNF_EDP_APP_UI_ENTERPRISE_CONTEXT_CHANGED,A3BC3035,41960A28,3530BCA3280A9641, Application UI EDP context has been changed for the process.
  282. WNF_EDP_CLIPBOARD_METADATA_CHANGED,A3BC2035,41960A28,3520BCA3280A9641, Either a copy or override operation occurred; leading to clipboard metadata changes. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
  283. WNF_EDP_CREDENTIALS_UPDATING,A3BC7075,41960A28,7570BCA3280A9641, Cred service is updating user credentials.
  284. WNF_EDP_DIALOG_CANCEL,A3BC2835,41960A28,3528BCA3280A9641, An EDP blocking dialog has been canceled programmatically.
  285. WNF_EDP_DPL_KEYS_DROPPING,A3BC5875,41960A28,7558BCA3280A9641, Data Protection under Lock private keys will be dropped from memory shortly.
  286. WNF_EDP_DPL_KEYS_STATE,A3BC1875,41960A28,7518BCA3280A9641, Current state of the Data Protection under Lock private keys.
  287. WNF_EDP_ENTERPRISE_CONTEXTS_UPDATED,A3BC4475,41960A28,7544BCA3280A9641, The EDP enterprise contexts have been updated.
  288. WNF_EDP_IDENTITY_REVOKED,A3BC10F5,41960A28,F510BCA3280A9641, The keys associated with a data protection identity were removed.
  289. WNF_EDP_MISSING_CREDENTIALS,A3BC6075,41960A28,7560BCA3280A9641, EDP cred service cannot access credentials required.
  290. WNF_EDP_PROCESS_TLS_INDEX,A3BC50B5,41960A28,B550BCA3280A9641, EDP thread UI enforcement. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
  291. WNF_EDP_PROCESS_UI_ENFORCEMENT,A3BC4875,41960A28,7548BCA3280A9641, EDP process UI enforcement global state. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
  292. WNF_EDP_PURGE_APP_LEARNING_EVT,A3BC6875,41960A28,7568BCA3280A9641, Purge application learning events cache.
  293. WNF_EDP_TAGGED_APP_LAUNCHED,A3BC0835,41960A28,3508BCA3280A9641, The application was launched in the specified mode under the specified Enterprise context.
  294. WNF_EDU_PRINTER_POLICY_CHANGED,A3BC0875,41930A28,7508BCA3280A9341, This event is triggered when an MDM printer policy is changed.
  295. WNF_EFS_SERVICE_START,A3BC0875,41950828,7508BCA328089541, This event trigger-starts EFS service.
  296. WNF_EFS_SOFTWARE_HIVE_AVAILABLE,A3BC1075,41950828,7510BCA328089541, EFS service needs to check GP at boot; which requires the SOFTWARE hive in HKLM. This signals its availability when EFS worker thread detects it.
  297. WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGED,A3BC7875,13920028,7578BCA328009213, Current changed policy values represented as bits for the AboveLock policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  298. WNF_ENTR_ACCOUNTS_POLICY_VALUE_CHANGED,A3BC3075,13920028,7530BCA328009213, Current changed policy values represented as bits for the Accounts policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  299. WNF_ENTR_ALLOW_WBA_EXECUTION_POLICY_VALUE_CHANGED,A3BD3875,13920028,7538BDA328009213, DisableWBA policy value has changed.
  300. WNF_ENTR_ALLOWALLTRUSTEDAPPS_POLICY_VALUE_CHANGED,A3BCF875,13920028,75F8BCA328009213, ApplicationManagement AllowAllTrustedApps provider policy value has changed.
  301. WNF_ENTR_ALLOWAPPLICATIONS_POLICY_VALUE_CHANGED,A3BC8075,13920028,7580BCA328009213, A Dataprotection AllowApplications provider policy value has changed.
  302. WNF_ENTR_ALLOWCELLULARDATA_POLICY_VALUE_CHANGED,A3BD5075,13920028,7550BDA328009213, The AllowCellularData policy value has changed.
  303. WNF_ENTR_ALLOWCELLULARDATAROAMING_POLICY_VALUE_CHANGED,A3BD4875,13920028,7548BDA328009213, The AllowCellularDataRoaming policy value has changed.
  304. WNF_ENTR_ALLOWDEVELOPERUNLOCK_POLICY_VALUE_CHANGED,A3BD1875,13920028,7518BDA328009213, ApplicationManagement AllowDeveloperUnlock provider policy value has changed.
  305. WNF_ENTR_ALLOWINPUTPANEL_POLICY_VALUE_CHANGED,A3BCA875,13920028,75A8BCA328009213, A TextInput AllowInputPanel provider policy value has changed.
  306. WNF_ENTR_ALLOWMANUALWIFICONFIGURATION_POLICY_VALUE_CHANGED,A3BDB875,13920028,75B8BDA328009213, AllowManualWifiConfiguration policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  307. WNF_ENTR_ALLOWMESSAGE_MMS_POLICY_VALUE_CHANGED,A3BDD875,13920028,75D8BDA328009213, The AllowMessageMMS policy value has changed.
  308. WNF_ENTR_ALLOWMESSAGE_RCS_POLICY_VALUE_CHANGED,A3BDE075,13920028,75E0BDA328009213, The AllowMessageRCS policy value has changed.
  309. WNF_ENTR_ALLOWMESSAGESYNC_POLICY_VALUE_CHANGED,A3BD6875,13920028,7568BDA328009213, The AllowMessageSync policy value has changed.
  310. WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGED,A3BD3075,13920028,7530BDA328009213, Update AllowNonMicrosoftSignedUpdate provider policy value has changed.
  311. WNF_ENTR_ALLOWPROJECTIONFROMPC_POLICY_VALUE_CHANGED,A3BE0075,13920028,7500BEA328009213, AllowProjectionFromPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  312. WNF_ENTR_ALLOWPROJECTIONTOPC_POLICY_VALUE_CHANGED,A3BDD075,13920028,75D0BDA328009213, AllowProjectionToPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  313. WNF_ENTR_ALLOWSET24HOURCLOCK_POLICY_VALUE_CHANGED,A3BDF875,13920028,75F8BDA328009213, The AllowSet24HourClock policy value has changed.
  314. WNF_ENTR_ALLOWSHAREDUSERDATA_POLICY_VALUE_CHANGED,A3BD0075,13920028,7500BDA328009213, ApplicationManagement AllowSharedUserAppData provider policy value has changed.
  315. WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGED,A3BD2075,13920028,7520BDA328009213, Update AllowUpdateService provider policy value has changed.
  316. WNF_ENTR_ALLOWWIFI_POLICY_VALUE_CHANGED,A3BDB075,13920028,75B0BDA328009213, AllowWifi policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  317. WNF_ENTR_ALLOWWIFIDIRECT_POLICY_VALUE_CHANGED,A3BDC875,13920028,75C8BDA328009213, AllowWifiDirect policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  318. WNF_ENTR_APPHVSI_CACHED_POLICY_VALUE_CHANGED,A3BD8475,13920028,7584BDA328009213, AllowAppHVSI cached policy has changed.
  319. WNF_ENTR_APPHVSI_POLICY_VALUE_CHANGED,A3BDF075,13920028,75F0BDA328009213, Any AppHVSI policy value is changed.
  320. WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGED,A3BC5875,13920028,7558BCA328009213, Current changed policy values represented as bits for the ApplicationManagement policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  321. WNF_ENTR_APPPRIVACY_POLICY_VALUE_CHANGED,A3BE1875,13920028,7518BEA328009213, Event fired when app privacy policy values have changed.
  322. WNF_ENTR_BITS_POLICY_VALUE_CHANGED,A3BE6875,13920028,7568BEA328009213, BITS policy area value has changed.
  323. WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGED,A3BCD875,13920028,75D8BCA328009213, Bluetooth policy configuration has changed. SDDL comes from ID_CAP_POLICY_MANAGER in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  324. WNF_ENTR_BROWSER_POLICY_VALUE_CHANGED,A3BC4075,13920028,7540BCA328009213, Current changed policy values represented as bits for the Browser policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  325. WNF_ENTR_CAMERA_POLICY_VALUE_CHANGED,A3BC5075,13920028,7550BCA328009213, Current changed policy values represented as bits for the Camera policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  326. WNF_ENTR_CONNECTIVITY_POLICY_VALUE_CHANGED,A3BC2075,13920028,7520BCA328009213, Current changed policy values represented as bits for the Connectivity policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  327. WNF_ENTR_CONTEXT_STATE_CHANGE,A3BC9875,13920028,7598BCA328009213, An enterprise context has changed it's state.
  328. WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGED,A3BC0875,13920028,7508BCA328009213, Current changed policy values represented as bits for the Device Lock policy area. SDDL comes from NgcctnrSvc in %SDXROOT%\src\baseos\prod\packages\ngc\ngc.pkg.xml and ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml; %sdxroot%\onecoreuap\admin\dm\wap\service\dmwappushservice.wm.xml.
  329. WNF_ENTR_DISABLEADVERTISINGID_POLICY_VALUE_CHANGED,A3BD7075,13920028,7570BDA328009213, Privacy DisableAdvertisingId policy value has changed.
  330. WNF_ENTR_DOMAIN_NAMES_FOR_EMAIL_SYNC_POLICY_VALUE_CHANGED,A3BD4075,13920028,7540BDA328009213, The domains for which email is disabled have changed.
  331. WNF_ENTR_EDPENFORCEMENTLEVEL_CACHED_POLICY_VALUE_CHANGED,A3BD5C75,13920028,755CBDA328009213, EDPEnforcementLevel cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
  332. WNF_ENTR_EDPENFORCEMENTLEVEL_POLICY_VALUE_CHANGED,A3BC8875,13920028,7588BCA328009213, A Dataprotection EDPEnforcementLevel provider policy value has changed.
  333. WNF_ENTR_EDPNETWORKING_POLICY_VALUE_CHANGED,A3BCE075,13920028,75E0BCA328009213, A Dataprotection networking policy value has changed.
  334. WNF_ENTR_EDPSHOWICONS_CACHED_POLICY_VALUE_CHANGED,A3BD9C75,13920028,759CBDA328009213, EdpShowIcons policy value has changed.
  335. WNF_ENTR_EDPSMB_POLICY_VALUE_CHANGED,A3BDE875,13920028,75E8BDA328009213, SMBAutoEncryptedFileExtensions policy value has changed.
  336. WNF_ENTR_EMOJI_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE5075,13920028,7550BEA328009213, A TextInput TouchKeyboardEmojiButtonAvailability policy value has changed.
  337. WNF_ENTR_ENABLETOUCHKEYBOARDAUTOINVOKE_POLICY_VALUE_CHANGED,A3BE2075,13920028,7520BEA328009213, A TextInput EnableTouchKeyboardAutoInvokeInDesktopMode policy value has changed.
  338. WNF_ENTR_EVALUATE_APPHVSI_CONFIGURATION_STATE,A3BD9075,13920028,7590BDA328009213, AppHVSI (Hypervisor-based Virtualized Security Isolation) state has changed.
  339. WNF_ENTR_EVALUATE_EDP_CONFIGURATION_STATE,A3BD7875,13920028,7578BDA328009213, EnterpriseDataProtection (EDP) state has changed.
  340. WNF_ENTR_EXPERIENCE_POLICY_VALUE_CHANGED,A3BC2875,13920028,7528BCA328009213, Current changed policy values represented as bits for the Experience policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  341. WNF_ENTR_EXPLOITGUARD_POLICY_VALUE_CHANGED,A3BE0875,13920028,7508BEA328009213, The ExploitGuard policy values have changed.
  342. WNF_ENTR_FORCEDOCKED_TOUCHKEYBOARD_POLICY_VALUE_CHANGED,A3BE5875,13920028,7558BEA328009213, A TextInput ForceTouchKeyboardDockedState policy value has changed.
  343. WNF_ENTR_FULLLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE2875,13920028,7528BEA328009213, A TextInput TouchKeyboardFullModeAvailability policy value has changed.
  344. WNF_ENTR_HANDWRITING_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE4075,13920028,7540BEA328009213, A TextInput TouchKeyboardHandwritingModeAvailability policy value has changed.
  345. WNF_ENTR_NARROWLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE3875,13920028,7538BEA328009213, A TextInput TouchKeyboardNarrowModeAvailability policy value has changed.
  346. WNF_ENTR_NETWORKISOLATION_POLICY_VALUE_CHANGED,A3BD8875,13920028,7588BDA328009213, A NetworkIsolation area policy value has changed.
  347. WNF_ENTR_PROTECTEDDOMAINNAMES_CACHED_POLICY_VALUE_CHANGED,A3BD6475,13920028,7564BDA328009213, EnterpriseProtectedDomainNames cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
  348. WNF_ENTR_PUSH_NOTIFICATION_RECEIVED,A3BC6875,13920028,7568BCA328009213, An MDM Push notification has been received. SDDL comes from ID_CAP_CSP_DMCLIENT in %SDXROOT%\src\devmgmt\dm\packages\dmapps\dmapps.pkg.xml.
  349. WNF_ENTR_PUSH_RECEIVED,A3BCA075,13920028,75A0BCA328009213, An enterprise WNS based push was received.
  350. WNF_ENTR_REMOVABLEDISK_DENY_WRITE_POLICY_VALUE_CHANGED,A3BE7075,13920028,7570BEA328009213, Removable disk deny write access policy area value has changed.
  351. WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED,A3BC6075,13920028,7560BCA328009213, Current changed security policy RequireDeviceEncryption value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  352. WNF_ENTR_REQUIRE_DPL_POLICY_VALUE_CHANGED,A3BCE875,13920028,75E8BCA328009213, DataProtection Require Protection Under Lock Config policy change.
  353. WNF_ENTR_RESTRICTAPPDATATOSYTEMVOLUME_POLICY_VALUE_CHANGED,A3BD1075,13920028,7510BDA328009213, ApplicationManagement RestrictAppDataToSystemVolume provider policy value has changed.
  354. WNF_ENTR_RESTRICTAPPTOSYTEMVOLUME_POLICY_VALUE_CHANGED,A3BD0875,13920028,7508BDA328009213, ApplicationManagement RestrictAppToSystemVolume provider policy value has changed.
  355. WNF_ENTR_SEARCH_ALLOW_INDEXER,A3BDC075,13920028,75C0BDA328009213, Allow windows indexer.
  356. WNF_ENTR_SEARCH_ALLOW_INDEXING_ENCRYPTED_STORES_OR_ITEMS,A3BCD075,13920028,75D0BCA328009213, Allow indexing of encrypted files.
  357. WNF_ENTR_SEARCH_ALLOW_USING_DIACRITICS,A3BCB075,13920028,75B0BCA328009213, Allow use of diacritics for indexing.
  358. WNF_ENTR_SEARCH_ALWAYS_USE_AUTO_LANG_DETECTION,A3BCB875,13920028,75B8BCA328009213, Always use automatic language detection when indexing content and properties.
  359. WNF_ENTR_SEARCH_DISABLE_REMOVABLE_DRIVE_INDEXING,A3BCC075,13920028,75C0BCA328009213, Do not allow locations on removable drives to be added to libraries.
  360. WNF_ENTR_SEARCH_POLICY_VALUE_CHANGED,A3BC7075,13920028,7570BCA328009213, Current changed policy values represented as bits for the Search policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  361. WNF_ENTR_SEARCH_PREVENT_INDEXING_LOW_DISK_SPACE_MB,A3BCC875,13920028,75C8BCA328009213, Stop indexing in the event of limited hard drive space.
  362. WNF_ENTR_SECURITY_POLICY_VALUE_CHANGED,A3BC3875,13920028,7538BCA328009213, Current changed policy values represented as bits for the Security policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  363. WNF_ENTR_SPLITLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE4875,13920028,7548BEA328009213, A TextInput TouchKeyboardSplitModeAvailability policy value has changed.
  364. WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGED,A3BC1875,13920028,7518BCA328009213, Current changed policy values represented as bits for the System policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xmlSDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  365. WNF_ENTR_TOUCHKEYBOARDDICTATION_POLICY_VALUE_CHANGED,A3BE6075,13920028,7560BEA328009213, A TextInput TouchKeyboardDictationButtonAvailability policy value has changed.
  366. WNF_ENTR_UPDATE_POLICY_VALUE_CHANGED,A3BC4875,13920028,7548BCA328009213, Current changed policy values represented as bits for the Update policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml.
  367. WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGED,A3BD2875,13920028,7528BDA328009213, Update UpdateServiceUrl provider policy value has changed.
  368. WNF_ENTR_WAP_MESSAGE_FOR_DMWAPPUSHSVC_READY,A3BC9075,13920028,7590BCA328009213, A WAP message has been received that dmwappushsvc needs to handle.
  369. WNF_ENTR_WIDELAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED,A3BE3075,13920028,7530BEA328009213, A TextInput TouchKeyboardWideModeAvailability policy value has changed.
  370. WNF_ENTR_WIFI_POLICY_VALUE_CHANGED,A3BC1075,13920028,7510BCA328009213, Current changed policy values represented as bits for the Wifi policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml. S-1-5-80-3935728946-315639613-922904133-3250794525-491832002 - IcsSvc (TetheringService).
  371. WNF_ENTR_WINDOWS_DEFENDER_POLICY_VALUE_CHANGED,A3BCF075,13920028,75F0BCA328009213, Windows Defender policy configuration has changed.
  372. WNF_ENTR_WINDOWSDEFENDERSECURITYCENTER_POLICY_VALUE_CHANGED,A3BE1075,13920028,7510BEA328009213, The WindowsDefenderSecurityCenter policy values have changed.
  373. WNF_EOA_NARRATOR_FOCUS_CHANGE,A3BC08F5,41870128,F508BCA328018741, Narrator has moved its focused region.
  374. WNF_EOA_NARRATOR_RUNNING,A3BC1075,41870128,7510BCA328018741, Represents whether Narrator is currently running. A 32-bit unsigned integer with a zero value meaning Narrator is off.
  375. WNF_EOA_UISETTINGS_CHANGED,A3BC1875,41870128,7518BCA328018741, UISettings have changed. The payload carries an identifier for the particular setting that has changed; such as TextScaleFactor.
  376. WNF_ETW_SUBSYSTEM_INITIALIZED,A3BC0875,41911A28,7508BCA3281A9141, ETW subsystem initialized.
  377. WNF_EXEC_OSTASKCOMPLETION_REVOKED,A3BC0875,2831628,7508BCA328168302, This event signal when a task completion has been revoked due to memory pressure.
  378. WNF_EXEC_THERMAL_LIMITER_CLOSE_APPLICATION_VIEWS,A3BC1875,2831628,7518BCA328168302, This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates all application views should be closed.
  379. WNF_EXEC_THERMAL_LIMITER_DISPLAY_WARNING,A3BC2875,2831628,7528BCA328168302, This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates a warning should be displayed to the user.
  380. WNF_EXEC_THERMAL_LIMITER_STOP_MRC,A3BC3075,2831628,7530BCA328168302, This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates MRC should be stopped.
  381. WNF_EXEC_THERMAL_LIMITER_TERMINATE_BACKGROUND_TASKS,A3BC2075,2831628,7520BCA328168302, This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates background tasks should be terminated.
  382. WNF_FDBK_QUESTION_NOTIFICATION,A3BC0875,A840A2B,7508BCA32B0A840A, This event contains a feedback question for the user. Payload is a JSON string specifying the feedback question.
  383. WNF_FLT_RUNDOWN_WAIT,A3BC0875,4192022B,7508BCA32B029241, Wait for rundown release in Filter Manager may be blocked by a suspended Modern application.
  384. WNF_FLTN_WNF_ARRIVED,A3BC0875,F92022B,7508BCA32B02920F, Triggered every time upon WNS notification or policy change.
  385. WNF_FLYT_IDS_CHANGED,A3BC0875,159F022B,7508BCA32B029F15, Triggered every time there is a change in flight IDs.
  386. WNF_FOD_STATE_CHANGE,A3BC0875,4182012B,7508BCA32B018241, Installation status of Features on demand.
  387. WNF_FSRL_OPLOCK_BREAK,A3BC1075,D941D2B,7510BCA32B1D940D, Oplock break acknowledgement may be blocked by a suspended Modern application.
  388. WNF_FSRL_TIERED_VOLUME_DETECTED,A3BC0875,D941D2B,7508BCA32B1D940D, This event signals when a tiered volume is mounted.
  389. WNF_FVE_BDESVC_TRIGGER_START,A3BC3075,4183182B,7530BCA32B188341, This event trigger-starts BdeSvc service.
  390. WNF_FVE_BITLOCKER_ENCRYPT_ALL_DRIVES,A3BC6875,4183182B,7568BCA32B188341, This event triggers BitLocker task to enable BitLocker on all volumes.
  391. WNF_FVE_DE_MANAGED_VOLUMES_COUNT,A3BC1075,4183182B,7510BCA32B188341, This event triggers when the BitLocker service detects a change in the count of DE-managed volumes; and includes the count of such volumes.
  392. WNF_FVE_DE_SUPPORT,A3BC0875,4183182B,7508BCA32B188341, This event triggers when Device Encryption support status is evaluated; and receives the result of that evaluation.
  393. WNF_FVE_DETASK_SYNC_PROVISIONING_COMPLETE,A3BC7075,4183182B,7570BCA32B188341, State of the synchronous provisioning phase of WCOS DE.
  394. WNF_FVE_DETASK_TRIGGER_START,A3BC6075,4183182B,7560BCA32B188341, This event trigger-starts device encryption task.
  395. WNF_FVE_MDM_POLICY_REFRESH,A3BC4075,4183182B,7540BCA32B188341, This event triggers where RequireDeviceEncryption policy arrives under the BitLocker area.
  396. WNF_FVE_REQUIRE_SDCARD_ENCRYPTION,A3BC4875,4183182B,7548BCA32B188341, This event triggers SD card encrytion policy arrival notification.
  397. WNF_FVE_SDCARD_ENCRYPTION_REQUEST,A3BC5075,4183182B,7550BCA32B188341, This event triggers SecTask to enable/disable SD Card encryption.
  398. WNF_FVE_SDCARD_ENCRYPTION_STATUS,A3BC5875,4183182B,7558BCA32B188341, This event indicates completion of SD Card encryption/decryption request.
  399. WNF_FVE_STATE_CHANGE,A3BC3875,4183182B,7538BCA32B188341, This event triggers on every BitLocker state change.
  400. WNF_FVE_WIM_HASH_DELETION_TRIGGER,A3BC2875,4183182B,7528BCA32B188341, This event triggers WIM hash deletion.
  401. WNF_FVE_WIM_HASH_GENERATION_COMPLETION,A3BC2075,4183182B,7520BCA32B188341, This event signals completion of WIM hash generation.
  402. WNF_FVE_WIM_HASH_GENERATION_TRIGGER,A3BC1875,4183182B,7518BCA32B188341, This event triggers or signals to stop WIM hash generation task.
  403. WNF_GC_INITIAL_PRESENT,A3BC0875,41C60D2A,7508BCA32A0DC641, This event is signalled when the graphics driver presents the initial frame.
  404. WNF_GIP_ADAPTER_CHANGE,A3BC0875,4196072A,7508BCA32A079641, This event is fired for GIP adapter state change; such as connect/disconnect.
  405. WNF_GLOB_USERPROFILE_LANGLIST_CHANGED,A3BC0875,389022A,7508BCA32A028903, This state is notified when the globalization user profile has changed via SetUserProfileLanguagesWP. There is nothing in the payload - call GetUserProfileLanguagesWP to get the updated user profile language list. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  406. WNF_GPOL_SYSTEM_CHANGES,A3BC0875,D891E2A,7508BCA32A1E890D, System policy has been updated.
  407. WNF_GPOL_USER_CHANGES,A3BC10F5,D891E2A,F510BCA32A1E890D, User policy has been updated.
  408. WNF_HAM_SYSTEM_STATE_CHANGED,A3BC0875,418B0F25,7508BCA3250F8B41, Supplies the current state of the system as recorded by the system state tracker.
  409. WNF_HAS_VERIFY_HEALTH_CERT,A3BC0875,41950F25,7508BCA3250F9541, This event signals a request to get (if needed) and verify Health Certificate with HAS.
  410. WNF_HOLO_CAPTURE_STATE,A3BCC035,E8A0125,35C0BCA325018A0E, This event signals whether recording is active. Data contains a bool indicating if recording is active.
  411. WNF_HOLO_DISPLAY_QUALITY_LEVEL,A3BC7835,E8A0125,3578BCA325018A0E, Event raised when the benchmarked quality level changes. Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:DisplayQualityState.
  412. WNF_HOLO_ENVIRONMENT_AUDIO_ASSET,A3BC5075,E8A0125,7550BCA325018A0E, This event contains the file path for the environment app's audio asset; which is used by Triton.
  413. WNF_HOLO_FORCE_ROOM_BOUNDARY,A3BC2835,E8A0125,3528BCA325018A0E, If payload is non-zero; room boundary is forced to be visible.
  414. WNF_HOLO_INPUT_FOCUS_CHANGE,A3BC2075,E8A0125,7520BCA325018A0E, This event signals when input focus changes to a different window. Data is a MPCInputFocusChange struct.
  415. WNF_HOLO_PROJECTION_REQUEST,A3BCB835,E8A0125,35B8BCA325018A0E, This event signals a miracast projection to establish.
  416. WNF_HOLO_REQUEST_HMD_USE_STATE,A3BC9035,E8A0125,3590BCA325018A0E, This event signals the desire to change the HMD use state (the overrideable internal setting; not the physical presence state reported by the HMD). Meant to be used by non-shell inbox applications to trigger the equivalent of the input switch hotkey. Data contains a DWORD equivalent to a bool; true = HmdUseState::InUse; false = HmdUseState::Idle.
  417. WNF_HOLO_REQUEST_HOLOGRAPHIC_ACTIVATION_REALM,A3BC9835,E8A0125,3598BCA325018A0E, This event signals the desire to change the current input foreground to go to the last active 3D window. Meant to be used by non-shell inbox applications to return focus to 3D realm.
  418. WNF_HOLO_RESET_IDLE_TIMER,A3BCA035,E8A0125,35A0BCA325018A0E, This event signals a reset of the holographic idle timer. Writable by DWM and System.
  419. WNF_HOLO_RETAIL_DEMO_TIMER,A3BC7035,E8A0125,3570BCA325018A0E, Event raised when the Windows Mixed Reality retail demo timer state changes. Data contains a DWORD equivalent to MixedRealityPortal::RetailDemoTimerState.
  420. WNF_HOLO_ROOM_BOUNDARY_DATA_CHANGED,A3BC3835,E8A0125,3538BCA325018A0E, This event signals that the persisted room boundary data has changed.
  421. WNF_HOLO_ROOM_BOUNDARY_VISIBILITY,A3BC4035,E8A0125,3540BCA325018A0E, A non-zero payload indicates the room boundary is visible to the user. Writable by DWM and System.
  422. WNF_HOLO_SET_SHELL_SPAWN_POINT,A3BC6835,E8A0125,3568BCA325018A0E, This event signals that the shell spawn point should be moved. Data is a DWORD indicating the id of the point that should be set.
  423. WNF_HOLO_SHARING_SESSION_CONTEXT,A3BCB035,E8A0125,35B0BCA325018A0E, This event signals whether sharing session is active. Data contains a name of the data provider.
  424. WNF_HOLO_SHELL_INPUT_3DSWITCH_DISABLE,A3BC4835,E8A0125,3548BCA325018A0E, This event signals when various input types should be disabled from natively working in the Windows Holographic shell; useful for apps that simulate GGV via mouse and/or gamepad. Data contains a DWORD of bitflags from Windows::Internal::Shell::Holographic::ShellInput3DSwitchDisableFlags.
  425. WNF_HOLO_SHELL_STATE,A3BC1835,E8A0125,3518BCA325018A0E, Event raised when the Holographic Shell running state changes (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState.
  426. WNF_HOLO_SHELL_STATE_INTERACTIVE_USER,A3BCA875,E8A0125,75A8BCA325018A0E, Event raised when the Holographic Shell running state changes on the interactive users session (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState.
  427. WNF_HOLO_STREAMING_STATE,A3BC3035,E8A0125,3530BCA325018A0E, This event signals whether streaming is active. Data contains a bool indicating if streaming is active.
  428. WNF_HOLO_SYSTEM_DISPLAY_CONTEXT_CHANGE,A3BC8875,E8A0125,7588BCA325018A0E, System scoped event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext.
  429. WNF_HOLO_UNINSTALL_COMPLETE,A3BC6075,E8A0125,7560BCA325018A0E, This event signals that uninstall has finished. Data contains a HRESULT representing uninstall success.
  430. WNF_HOLO_UNINSTALL_PREPARE,A3BC5875,E8A0125,7558BCA325018A0E, This event signals that it's time for uninstall preparations; which includes shutting down Oasis apps.
  431. WNF_HOLO_UNINSTALL_PREPARE_COMPLETE,A3BC8075,E8A0125,7580BCA325018A0E, This event signals that a HoloCoordinator completed uninstall preparation.
  432. WNF_HOLO_USER_DISPLAY_CONTEXT,A3BC0835,E8A0125,3508BCA325018A0E, Event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext.
  433. WNF_HOLO_USER_INPUT_CONTEXT,A3BC1035,E8A0125,3510BCA325018A0E, Event raised when the input context changes (ex. from 3D input to 2D Desktop input). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext.
  434. WNF_HVL_CPU_MGMT_PARTITION,A3BC0875,418A1825,7508BCA325188A41, This state signals NTOS has CPU management privileges in the current partition.
  435. WNF_HYPV_HOST_WMI_EVENT_PROVIDER_STATE,A3BC1075,17961725,7510BCA325179617, The state of Hyper-V's host-only WMI event provider.
  436. WNF_HYPV_HOST_WMI_OBJECT_PROVIDER_STATE,A3BC0875,17961725,7508BCA325179617, The state of Hyper-V's host-only WMI object provider.
  437. WNF_IME_AUTOMATIC_PRIVATE_MODE,A3BC1835,41830324,3518BCA324038341, Automatic IME private mode status.
  438. WNF_IME_EXPLICIT_PRIVATE_MODE,A3BC1035,41830324,3510BCA324038341, Explicit IME private mode status. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  439. WNF_IME_INPUT_MODE_LABEL,A3BC0875,41830324,7508BCA324038341, Input Mode Indicator label IME want to show on systray. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  440. WNF_IMS_PUSH_NOTIFICATION_RECEIVED,A3BC0875,41950324,7508BCA324039541, Push Notification Received from Entitlement Server.
  441. WNF_IMSN_GLOBALLIGHTSINVALIDATED,A3BC4835,F950324,3548BCA32403950F, The global/shared lights have changed.
  442. WNF_IMSN_IMMERSIVEMONITORCHANGED,A3BC1835,F950324,3518BCA32403950F, The monitor the immersive environment is running on has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  443. WNF_IMSN_KILL_LOGICAL_FOCUS,A3BC3035,F950324,3530BCA32403950F, User-perceived focus has left an edit box.
  444. WNF_IMSN_LAUNCHERVISIBILITY,A3BC1035,F950324,3510BCA32403950F, The immersive launcher's visibility has changed.
  445. WNF_IMSN_MONITORMODECHANGED,A3BC0835,F950324,3508BCA32403950F, A monitor has changed immersive modes.
  446. WNF_IMSN_PROJECTIONDISPLAYAVAILABLE,A3BC3835,F950324,3538BCA32403950F, Projection display availability has changed.
  447. WNF_IMSN_TRANSPARENCYPOLICY,A3BC4035,F950324,3540BCA32403950F, The user experience transparency policy stores the global system transparency policy as a DWORD which contains 0 for disabled and 1 for enabled.
  448. WNF_IOT_EMBEDDED_MODE_POLICY_VALUE_CHANGED,A3BC0875,41920124,7508BCA324019241, Embedded mode policy value has changed.
  449. WNF_IOT_STARTUP_SETTINGS_CHANGED,A3BC1075,41920124,7510BCA324019241, settings for the foreground app and/or iot startup type background tasks have changed.
  450. WNF_ISM_CURSOR_MANAGER_READY,A3BC1835,418B1D24,3518BCA3241D8B41, Cursor Manager is initialized. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  451. WNF_ISM_GAMECONTROLLER_ZEPHYRUS_FAULT,A3BC2075,418B1D24,7520BCA3241D8B41, This event signals when the Zephyrus controller has encountered a fault that requires a shell notification.
  452. WNF_ISM_INPUT_UPDATE_AFTER_TRACK_INTERVAL,A3BC1035,418B1D24,3510BCA3241D8B41, Fires if there is new input after track interval.
  453. WNF_ISM_LAST_USER_ACTIVITY,A3BC0835,418B1D24,3508BCA3241D8B41, Last recorded user activity.
  454. WNF_IUIS_SCALE_CHANGED,A3BC0835,128F1B24,3508BCA3241B8F12, The immersive UI scale has changed for the current session.
  455. WNF_KSV_CAMERAPRIVACY,A3BC2875,41901D26,7528BCA3261D9041, This is user global camera privacy state indicator when switched via physical button.
  456. WNF_KSV_DEVICESTATE,A3BC1075,41901D26,7510BCA3261D9041, This is the current device state.
  457. WNF_KSV_FSSTREAMACTIVITY,A3BC1875,41901D26,7518BCA3261D9041, This is stream activity indicator.
  458. WNF_KSV_KSSTREAMACTIVITY,A3BC2075,41901D26,7520BCA3261D9041, This is stream activity indicator. !!!!!!!!!!!!!!!!
  459. WNF_KSV_STREAMSTATE,A3BC0875,41901D26,7508BCA3261D9041, This is the current stream state of a camera for a process in a given session.
  460. WNF_LANG_FOD_INSTALLATION_STARTED,A3BC0875,6880F21,7508BCA3210F8806, Installation of language features on demand was started (either through Settings or through installation task).
  461. WNF_LED_SETTINGSCHANGED,A3BC0875,41820B21,7508BCA3210B8241, LedAlert settings has changed.
  462. WNF_LFS_ACTION_DIALOG_AVAILABLE,A3BC4875,41950821,7548BCA321089541, This event notifies when a new action dialog is available.
  463. WNF_LFS_CLIENT_RECALCULATE_PERMISSIONS,A3BC3875,41950821,7538BCA321089541, This state is published whenever the permissions of an active client have changed. Every client on the system receives it; and should run domain-specific logic to see what the impact is (e.g.; reconnect location session when permission re-allowed).
  464. WNF_LFS_GEOFENCETRACKING_STATE,A3BC2075,41950821,7520BCA321089541, This state is used to notify Geofence tracking state for the geofences added by the applications. TRUE if atleast one geofence is actively being tracked and FALSE if there are no geofences being tracked.
  465. WNF_LFS_LOCATION_MDM_AREA_POLICY_CHANGED,A3BC6075,41950821,7560BCA321089541, This event is fired when an MDM Location policy change occurs.
  466. WNF_LFS_LOCATION_MDM_POLICY_ENABLELOCATION_CHANGED,A3BC6875,41950821,7568BCA321089541, This event is fired when an MDM EnableLocation policy change occurs.
  467. WNF_LFS_MASTERSWITCH_STATE,A3BC1875,41950821,7518BCA321089541, This state is used to notify when the phone location master switch status changes with BOOL as payload. TRUE indicating master switch is ON and FALSE indicating master switch is OFF.
  468. WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGED,A3BC4075,41950821,7540BCA321089541, This event notifies when the permission regarding the ability to show the location notification icon has changed. The current state needs to be queried for as it is different for each user.
  469. WNF_LFS_POSITION_AVAILABLE,A3BC3075,41950821,7530BCA321089541, This state is used to notify when a new freely available position can be queried from the location framework.
  470. WNF_LFS_RESERVED_WNF_EVENT_2,A3BC2875,41950821,7528BCA321089541, Do not use this WNF event; it is deprecated. Was WNF_LFS_BACKGROUND_PERMISSIONCHANGE_STATE.
  471. WNF_LFS_RUNNING_STATE,A3BC1075,41950821,7510BCA321089541, This state is used to notify when the location service starts or stops running.
  472. WNF_LFS_SIGNIFICANT_LOCATION_EVENT,A3BC5075,41950821,7550BCA321089541, This event notifies when there's a significant change in the location of the device.
  473. WNF_LFS_STATE,A3BC0875,41950821,7508BCA321089541, This is triggered when an app is making use of the location service. It has two possible data values associated to it: BOOL TRUE: one or more applications are using location. BOOL FALSE: no application is using location.
  474. WNF_LFS_VISITS_SIGNIFICANT_LOCATION_EVENT,A3BC5875,41950821,7558BCA321089541, This event notifies when there's a visit or a significant change in the location of the device.
  475. WNF_LIC_DEVICE_LICENSE_MISSING,A3BC3075,41850721,7530BCA321078541, The required device license was nout found.
  476. WNF_LIC_DEVICE_LICENSE_REMOVED,A3BC2875,41850721,7528BCA321078541, The device license was uninstalled.
  477. WNF_LIC_DEVICE_LICENSE_UPDATED,A3BC2075,41850721,7520BCA321078541, A new device license with a different device ID was installed.
  478. WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCE,A3BC1875,41850721,7518BCA321078541, The hardware ID has changed but is still with in tolerance with the device's hardware ID.
  479. WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCE,A3BC1075,41850721,7510BCA321078541, The device license hardware ID is out of tolerance with the device's hardware ID.
  480. WNF_LIC_INT_DEVICE_LICENSE_EXPIRED,A3BC3875,41850721,7538BCA321078541, The integration device license has expired and can no longer be used to verify or decrypt modern app licenses.
  481. WNF_LIC_LOCAL_MIGRATED_LICENSES_FOUND,A3BC4075,41850721,7540BCA321078541, Found a local migrated license which needs to be refereshed with a store signed license.
  482. WNF_LIC_MANAGE_DEVICE_REGISTRATION_AND_REACTIVATION,A3BC4875,41850721,7548BCA321078541, The MDM Licensing Device Registration Policy has been refreshed.
  483. WNF_LIC_NO_APPLICABLE_LICENSES_FOUND,A3BC0875,41850721,7508BCA321078541, Failed to launch the modern app because no valid licenses and leases were found.
  484. WNF_LM_APP_LICENSE_EVENT,A3BC2875,41C60321,7528BCA32103C641, Multi-purpose event for app license notifications.
  485. WNF_LM_CONTENT_LICENSE_CHANGED,A3BC1075,41C60321,7510BCA32103C641, A content license's state has been modified.
  486. WNF_LM_LICENSE_REFRESHED,A3BC3875,41C60321,7538BCA32103C641, Licenses have been refreshed.
  487. WNF_LM_OFFLINE_PC_CHANGED,A3BC3075,41C60321,7530BCA32103C641, A offline pc state has been changed.
  488. WNF_LM_OPTIONAL_PACKAGE_SUSPEND_REQUIRED,A3BC2075,41C60321,7520BCA32103C641, A running optional package's license is lost.
  489. WNF_LM_PACKAGE_SUSPEND_REQUIRED,A3BC0875,41C60321,7508BCA32103C641, A running package's license is now invalid and the package must be suspended or terminated.
  490. WNF_LM_ROOT_LICENSE_CHANGED,A3BC1875,41C60321,7518BCA32103C641, A root license's state has been modified.
  491. WNF_LOC_DEVICE_BROKER_ACCESS_CHANGED,A3BC0875,41850121,7508BCA321018541, This event triggers when the user changes Geolocation access for an application or the user.
  492. WNF_LOC_RESERVED_WNF_EVENT,A3BC1075,41850121,7510BCA321018541, Do not use this WNF event; it is deprecated. Was WIN32_API_ACCESS_CHANGED.
  493. WNF_LOC_SHOW_SYSTRAY,A3BC1875,41850121,7518BCA321018541, This event triggers when there is an event that accesses location data -- this trigger starts LocationNotifications.exe which is a systray app.
  494. WNF_LOGN_CREDENTIAL_TILE_SELECTION_CHANGED,A3BC3075,F810121,7530BCA32101810F, This event signals when a credential tile has been selected or deselected.
  495. WNF_LOGN_EOA_FLYOUT_POSITION,A3BC0835,F810121,3508BCA32101810F, Indicates where the ease of access flyout should appear in LogonUI and User Oobe; the data type is RECT. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts.
  496. WNF_LOGN_LOCAL_SIGNON,A3BC2875,F810121,7528BCA32101810F, Indicates logon from local console happened; the data type is a GUID which represents the logged-on credential provider CLSID. The sddl string grants subscribe and publish permission to System.
  497. WNF_LOGN_PINPAD_VISIBLE,A3BC2035,F810121,3520BCA32101810F, Indicates that the mobile pinpad is visible.
  498. WNF_LOGN_RETURN_TO_LOCK,A3BC1835,F810121,3518BCA32101810F, Indicates that user intends to interact with the lock screen (e.g. for Projection or Cortana) and LogonUI should return to the lock screen.
  499. WNF_LOGN_SLIDE_TO_SHUTDOWN,A3BC1035,F810121,3510BCA32101810F, Indicates that a shutdown has been triggered via Slide-to-shutdown. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts.
  500. WNF_LOGN_SUPPRESS_FINGERPRINT_WAKE,A3BC3835,F810121,3538BCA32101810F, Indicates that device wake via fingerprint sensor should be disabled. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts; and to App Containers with the userSignInSupport Capability.
  501. WNF_MAPS_MAPLOADER_PACKAGE_CHANGE,A3BC2075,12960F20,7520BCA3200F9612, A map package has been added or removed or repositioned in the list.
  502. WNF_MAPS_MAPLOADER_PROGRESS,A3BC1075,12960F20,7510BCA3200F9612, Current progress of the MapLoader background engine.
  503. WNF_MAPS_MAPLOADER_STATUS_CHANGE,A3BC1875,12960F20,7518BCA3200F9612, The new status of ODML.
  504. WNF_MM_BAD_MEMORY_PENDING_REMOVAL,A3BC0875,41C60320,7508BCA32003C641, This notification is raised when the memory manager is unable to automatically offline a bad memory page.
  505. WNF_MON_THERMAL_CAP_CHANGED,A3BC0875,41880120,7508BCA320018841, Triggered by a monitor device when the thermal limit on brightness is changed. Payload is a MONITOR_THERMAL_BRIGHTNESS_LIMIT_LIST.
  506. WNF_MRT_MERGE_SYSTEM_PRI_FILES,A3BC2075,41921C20,7520BCA3201C9241, This state is notified when system PRI files are merged. Payload has a max length of 128 bytes (64 WCHARs including null terminator) and consists of 'start [starting timestamp]' or 'done [starting timestamp] [ending timestamp]'. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml; plus all rights for all containers.
  507. WNF_MRT_PERSISTENT_QUALIFIER_CHANGED,A3BC1C75,41921C20,751CBCA3201C9241, This state is notified when some persistent qualifier changed its value. Payload is qualifier@package_name with a max length of 512 bytes (256 WCHARs including null terminator). Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml; plus all rights for all containers.
  508. WNF_MRT_QUALIFIER_CONTRAST_CHANGED,A3BC0875,41921C20,7508BCA3201C9241, This state is notified when the constrast qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml.
  509. WNF_MRT_QUALIFIER_THEME_CHANGED,A3BC1075,41921C20,7510BCA3201C9241, This state is notified when the theme qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml.
  510. WNF_MRT_SYSTEM_PRI_MERGE,A3BC2875,41921C20,7528BCA3201C9241, This state is notified when a system PRI file is merged. Payload has a max length of 512 bytes (256 WCHARs including null terminator) and consists of either 'start [path] [starting timestamp]' or '{done;skipped} [path] [starting timestamp] [ending timestamp]'. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml; plus all rights for all containers. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  511. WNF_MSA_ACCOUNTSTATECHANGE,A3BC0835,41871D20,3508BCA3201D8741, Notification for alerting client apps that the connected account ticketing state has changed.
  512. WNF_MSA_TPM_AVAILABLE,A3BC1475,41871D20,7514BCA3201D8741, Notification for alerting client apps that the server has reported TPM claims are available in new tickets. Payload is DWORD (enum TpmKeyStateServer) and permanent since it represents device capability needed across reboot.
  513. WNF_MSA_TPM_SERVER_CLIENT_KEY_STATE_UPDATED,A3BC1875,41871D20,7518BCA3201D8741, Notification for alerting client apps about the current client and server TPM state for logging and retry logic. Payload is a struct of two DWORDs (enum TpmKeyStateServer; enum TpmKeyStateClient).
  514. WNF_MUR_MEDIA_UI_REQUEST_LAN,A3BC1075,41941B20,7510BCA3201B9441, Interface to Media-UI-request-State mapping for LAN (802.3) interfaces.
  515. WNF_MUR_MEDIA_UI_REQUEST_WLAN,A3BC0875,41941B20,7508BCA3201B9441, Interface to Media-UI-request-State mapping for WLAN (802.1x) interfaces.
  516. WNF_NASV_DYNAMIC_LOCK_BLUETOOTH_STATUS,A3BC2075,17950F23,7520BCA3230F9517, NaAuth Extended Dynamic Lock Status for Bluetooth plugin.
  517. WNF_NASV_SERVICE_RUNNING,A3BC1075,17950F23,7510BCA3230F9517, NaAuth Service Running.
  518. WNF_NASV_USER_AUTHENTICATION,A3BC1835,17950F23,3518BCA3230F9517, NaAuth User Authentication Status.
  519. WNF_NASV_USER_PRESENT,A3BC0835,17950F23,3508BCA3230F9517, NaAuth User Presence Status.
  520. WNF_NCB_APP_AVAILABLE,A3BC0875,41840D23,7508BCA3230D8441, NCB indication of CCT or Socket Broker Based App availability.
  521. WNF_NDIS_ADAPTER_ARRIVAL,A3BC0875,128F0A23,7508BCA3230A8F12, NDIS finds a network adapter that needs to be configured by NetSetupSvc.
  522. WNF_NDIS_CORRUPTED_STORE,A3BC1075,128F0A23,7510BCA3230A8F12, NDIS detects corruption in the binding store.
  523. WNF_NFC_SE_CARD_EMULATION_STATE_CHANGED,A3BC0875,41850823,7508BCA323088541, This state is used to notify that the NFC CE policy changed.
  524. WNF_NGC_AIKCERT_TRIGGER,A3BC1075,41850923,7510BCA323098541, This event signals when an caller wants to trigger AikCertEnrollTask.
  525. WNF_NGC_CONTAINER_CREATED_OR_DELETED,A3BC5875,41850923,7558BCA323098541, This event is fired from NGC container service (ngcctnrsvc) when containers are created or deleted.
  526. WNF_NGC_CREDENTIAL_REFRESH_REQUIRED,A3BC3875,41850923,7538BCA323098541, This event is fired when an activity occurs that requires the NGC PIN cred prov to refresh its credential state.
  527. WNF_NGC_CREDENTIAL_RESET_EXPERIENCE_ACTIVE,A3BC5075,41850923,7550BCA323098541, Boolean state representing whether or not the Credential Reset User Experience is active.
  528. WNF_NGC_CRYPTO_MDM_POLICY_CHANGED,A3BC3075,41850923,7530BCA323098541, This event is fired when an MDM cryptographic policy change occurs.
  529. WNF_NGC_GESTURE_AUTHENTICATED,A3BC2875,41850923,7528BCA323098541, This event signals when NGC container service (ngcctnrsvc) authenticates a gesture.
  530. WNF_NGC_LAUNCH_NTH_USER_SCENARIO,A3BC6075,41850923,7560BCA323098541, This event is fired from the NGC PIN cred prov to signal that an Nth user scenario should be launched.
  531. WNF_NGC_LAUNCH_PIN_RESET_SCENARIO,A3BC4875,41850923,7548BCA323098541, This event is fired from the NGC PIN cred prov to signal that the PIN reset scenario should be launched.
  532. WNF_NGC_PIN_RESET_SCENARIO_STATE_CHANGE,A3BC4035,41850923,3540BCA323098541, This event is fired when the state has changed during the PIN reset scenario.
  533. WNF_NGC_PREGEN_DELAY_TRIGGER,A3BC2075,41850923,7520BCA323098541, This event signals when an caller wants to trigger KeyPregenTask with some delay.
  534. WNF_NGC_PREGEN_NGCISOCTNR_TRIGGER,A3BC6875,41850923,7568BCA323098541, This event triggers the NgcIsoCtnr key pre-gen pool to start generating a key.
  535. WNF_NGC_PREGEN_TRIGGER,A3BC0875,41850923,7508BCA323098541, This event signals when an caller wants to trigger KeyPregenTask.
  536. WNF_NGC_PRO_CSP_POLICY_CHANGED,A3BC1875,41850923,7518BCA323098541, This event is fired when a policy change occurs in the NGC Pro CSP.
  537. WNF_NLA_CAPABILITY_CHANGE,A3BC0875,41870223,7508BCA323028741, This event is notified when NCSI detects a capability change.
  538. WNF_NLA_TASK_TRIGGER,A3BC1875,41870223,7518BCA323028741, State name triggering WiFiTask from NlaSvc.
  539. WNF_NLM_INTERNET_PRESENT,A3BC1075,418B0223,7510BCA323028B41, This event is signalled by NLM when the aggregated network conditions indicate that a connection to the internet is present.
  540. WNF_NLM_VPN_RECONNECT_CHANGE,A3BC0875,418B0223,7508BCA323028B41, This event is signalled by rasman about reconnect VPN state change and is used by NLM.
  541. WNF_NLS_ACP_CHANGED,A3BC0875,41950223,7508BCA323029541, This state is notified when the ANSI codepage changes - The data value is a UINT that indicates the new ANSI codepage. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  542. WNF_NLS_GEOID_CHANGED,A3BC3035,41950223,3530BCA323029541, This state is notified when the user Geo ID changes by means of calling SetUserGeoID - The data value is a DWORD that indicates the new GeoID. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  543. WNF_NLS_LANG_UPDATE_LAUNCH,A3BC3875,41950223,7538BCA323029541, Notification indicating lang update launcher needs to be started. SDDL comes from ID_CAP_EVERYONE; ID_CAP_NTSERVICES and ID_CAP_INPUT_LOCALES in %SDXROOT%\src\uxplat\Input\Packages\InputServer\InputServer.pkg.xml.
  544. WNF_NLS_LOCALE_INFO_CHANGED,A3BC2835,41950223,3528BCA323029541, This state is notified when the locale info changes by means of calling SetLocaleInfo - The data value is a DWORD that indicates the LCTYPE that changed. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  545. WNF_NLS_OEMCP_CHANGED,A3BC1075,41950223,7510BCA323029541, This state is notified when the OEM codepage changes - The data value is a UINT that indicates the new OEM codepage. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  546. WNF_NLS_SETTINGS_REPLICATION_COMPLETE,A3BC4875,41950223,7548BCA323029541, Notification indicating NLS/MUI user settings replication has completed. - The data value is an HRESULT. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  547. WNF_NLS_SETTINGS_REPLICATOR_LAUNCH,A3BC4075,41950223,7540BCA323029541, Notification indicating NLS/MUI user settings replicator needs to be started. - The data value is the replication cookie GUID (binary). SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  548. WNF_NLS_USER_DEFAULT_LOCALE_CHANGED,A3BC1835,41950223,3518BCA323029541, This state is notified when the user default locale changes - The data value is an LCID that indicates the new locale. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  549. WNF_NLS_USER_UILANG_CHANGED,A3BC2035,41950223,3520BCA323029541, This state is notified when the user default UI language changes - The data value is a LANGID that indicates the new UI language. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  550. WNF_NPSM_SERVICE_STARTED,A3BC0875,C951E23,7508BCA3231E950C, This notification is to indicate that the NPSM service has started up.
  551. WNF_NSI_SERVICE_STATUS,A3BC0875,418F1D23,7508BCA3231D8F41, NSI service status. The SDDL grants subscribe access to all who have access to NSI RPC interface and subcribe + publish access to NSI service.
  552. WNF_OLIC_OS_EDITION_CHANGE,A3BC5075,28F0222,7550BCA322028F02, OS Edition has changed.
  553. WNF_OLIC_OS_LICENSE_NON_GENUINE,A3BC6875,28F0222,7568BCA322028F02, OS will soon notify user of non-genuine state.
  554. WNF_OLIC_OS_LICENSE_POLICY_CHANGE,A3BC5875,28F0222,7558BCA322028F02, OS Policy has changed.
  555. WNF_OLIC_OS_LICENSE_TERMS_ACCEPTED,A3BC6075,28F0222,7560BCA322028F02, The License Terms can be considered as accepted on this device.
  556. WNF_OOBE_SHL_MAGNIFIER_CONFIRM,A3BC1035,4840122,3510BCA322018404, Notification from OOBE to ISM whether the user confirms to activate the always-on Magnifier in OOBE.
  557. WNF_OOBE_SHL_MAGNIFIER_QUERY,A3BC0835,4840122,3508BCA322018404, Notification from ISM to OOBE to query the user whether to activate the always-on Magnifier in OOBE.
  558. WNF_OOBE_SHL_MONITOR_STATE,A3BC1875,4840122,7518BCA322018404, Notification to User OOBE monitor on where the progress is.
  559. WNF_OOBE_SHL_SPEECH_CONTROLLER,A3BC2035,4840122,3520BCA322018404, Notification of speech controller state change. Payload is state type plus string of length 512.
  560. WNF_OS_IP_OVER_USB_AVAILABLE,A3BC8075,41C61D22,7580BCA3221DC641, IP Over USB Availability. SDDL comes from ID_CAP_EVERYONE and IpOverUsb in %SDXROOT%\src\baseos\prod\packages\MfgIpOverUsb\MfgIpOverUsb.pkg.xml.
  561. WNF_OS_IU_PROGRESS_REPORT,A3BC8875,41C61D22,7588BCA3221DC641, Update progress reporting status. SDDL comes from ID_CAP_BASEOS_UPDATEAPI in %SDXROOT%\src\baseos\prod\packages\imgupd\MainOS\ImgUpd.pkg.xml.
  562. WNF_OSWN_STORAGE_APP_PAIRING_CHANGE,A3BC8075,F911D22,7580BCA3221D910F, This event indicates a change in the app pairing state of an SD card.
  563. WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATE,A3BCB875,F911D22,75B8BCA3221D910F, This event indicates completion of an update of storage usage categories.
  564. WNF_OSWN_STORAGE_FREE_SPACE_CHANGE,A3BC7075,F911D22,7570BCA3221D910F, This event indicates a change in the free space state of storage.
  565. WNF_OSWN_STORAGE_PRESENCE_CHANGE,A3BC6075,F911D22,7560BCA3221D910F, This event indicates a change in the mount state of an SD card.
  566. WNF_OSWN_STORAGE_SHELLHWD_EVENT,A3BCC075,F911D22,75C0BCA3221D910F, This event informs StorSvc that SHSVCS received a device handle event.
  567. WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGE,A3BC7875,F911D22,7578BCA3221D910F, This event indicates a change in the temp file cleanup state of storage.
  568. WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGE,A3BC6875,F911D22,7568BCA3221D910F, This event indicates a change in the volume status of an SD card.
  569. WNF_OSWN_SYSTEM_CLOCK_CHANGED,A3BC5875,F911D22,7558BCA3221D910F, This event informs the system tray that the date-time has changed.
  570. WNF_OVRD_OVERRIDESCALEUPDATED,A3BC0875,5941822,7508BCA322189405, The window's override scale has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  571. WNF_PAY_CANMAKEPAYMENT_BROKER_READY,A3BC0875,419F0F3D,7508BCA33D0F9F41, This state is used to notify that the CanMakePayment background broker is initialized and ready.
  572. WNF_PFG_PEN_FIRST_DRAG,A3BC1075,4181083D,7510BCA33D088141, First Pen Drag Gesture.
  573. WNF_PFG_PEN_FIRST_TAP,A3BC0875,4181083D,7508BCA33D088141, First Pen Tap Gesture.
  574. WNF_PHN_CALL_STATUS,A3BC2875,4188063D,7528BCA33D068841, Bitmask containing the current relevant call states. Any 3rd party app is allowed to listen to this. See PhoneWnf.h for valid values. SID referenced below is that of the Phone service.
  575. WNF_PHN_CALLFORWARDING_STATUS_LINE0,A3BC3075,4188063D,7530BCA33D068841, Bitmask containing the call forwarding state for phone line 0. See PhoneWnf.h for valid values. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml.
  576. WNF_PHNL_LINE1_READY,A3BC4075,D88063D,7540BCA33D06880D, BOOL indicating whether the line is ready. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml.
  577. WNF_PHNP_ANNOTATION_ENDPOINT,A3BC4875,1188063D,7548BCA33D068811, Wide string indicating the call annotation provider's RPC endpoint name. SDDL comes from ID_CAP_CALLMESSAGING_FILTER and PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml.
  578. WNF_PHNP_SERVICE_INITIALIZED,A3BC3875,1188063D,7538BCA33D068811, BOOL indicating whether the Phone service has been initialized. SDDL comes from phoneCall and voipCall; PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml.
  579. WNF_PHNP_SIMSEC_READY,A3BC4075,1188063D,7540BCA33D068811, BOOL indicating whether SimSec is ready to receive requests. SDDL comes from ID_CAP_PHONE_2ND_PARTY; ID_CAP_PHONE_INTERNAL and dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml.
  580. WNF_PNPA_DEVNODES_CHANGED,A3BC0875,96003D,7508BCA33D009600, This corresponds to a DBT_DEVNODES_CHANGED message.
  581. WNF_PNPA_DEVNODES_CHANGED_SESSION,A3BC1035,96003D,3510BCA33D009600,
  582. WNF_PNPA_HARDWAREPROFILES_CHANGED,A3BC2875,96003D,7528BCA33D009600, This corresponds to a hardware profiles changed message.
  583. WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION,A3BC3035,96003D,3530BCA33D009600,
  584. WNF_PNPA_PORTS_CHANGED,A3BC3875,96003D,7538BCA33D009600, This corresponds to a ports changes message.
  585. WNF_PNPA_PORTS_CHANGED_SESSION,A3BC4035,96003D,3540BCA33D009600,
  586. WNF_PNPA_VOLUMES_CHANGED,A3BC1875,96003D,7518BCA33D009600, This corresponds to a drive letter arrival/removal message.
  587. WNF_PNPA_VOLUMES_CHANGED_SESSION,A3BC2035,96003D,3520BCA33D009600,
  588. WNF_PNPB_AWAITING_RESPONSE,A3BC0875,396003D,7508BCA33D009603, This corresponds to kernel PNP waiting synchronously for user-mode clients.
  589. WNF_PNPC_CONTAINER_CONFIG_REQUESTED,A3BC1875,296003D,7518BCA33D009602, A change that requires a device container to be updated has occured.
  590. WNF_PNPC_DEVICE_INSTALL_REQUESTED,A3BC1075,296003D,7510BCA33D009602, Device installation is requested.
  591. WNF_PNPC_REBOOT_REQUIRED,A3BC0875,296003D,7508BCA33D009602, This corresponds to a reboot of the system needs to be performed due to a device installation.
  592. WNF_PO_BACKGROUND_ACTIVITY_POLICY,A3BC9075,41C6013D,7590BCA33D01C641, Sent when the background activity policy changes.
  593. WNF_PO_BASIC_BRIGHTNESS_ENGINE_DISABLED,A3BCD075,41C6013D,75D0BCA33D01C641, One time system-wide transition to switch from the basic brightness engine to the high-precision brightness engine.
  594. WNF_PO_BATTERY_CHARGE_LEVEL,A3BC8075,41C6013D,7580BCA33D01C641, Triggered when battery charge crosses well-known charge level boundaries.
  595. WNF_PO_BATTERY_CHARGE_LIMITING_MODE,A3BD3875,41C6013D,7538BDA33D01C641, Set to TRUE when one of the battery is in charge limiting mode and FALSE when none of the battery is in charge limiting mode.
  596. WNF_PO_BATTERY_DISCHARGING,A3BC9875,41C6013D,7598BCA33D01C641, Triggered when battery is being discharged; irrespective of AC/DC state of the system.
  597. WNF_PO_BRIGHTNESS_ALS_OFFSET,A3BCD875,41C6013D,75D8BCA33D01C641, ALS brightness offset consumed by the basic brightness engine.
  598. WNF_PO_CAD_STICKY_DISABLE_CHARGING,A3BCF075,41C6013D,75F0BCA33D01C641, Set when an you want IOCTL_CAD_DISABLE_CHARGING to behave in a sticky manner.
  599. WNF_PO_CHARGE_ESTIMATE,A3BC6075,41C6013D,7560BCA33D01C641, Estimated time until full charge in seconds.
  600. WNF_PO_COMPOSITE_BATTERY,A3BC1075,41C6013D,7510BCA33D01C641, Sent when the composite battery is updated.
  601. WNF_PO_DISCHARGE_ESTIMATE,A3BC5075,41C6013D,7550BCA33D01C641, Estimated time until full discharge in seconds.
  602. WNF_PO_DISCHARGE_START_FILETIME,A3BC5C75,41C6013D,755CBCA33D01C641, Filetime of last known start of discharge.
  603. WNF_PO_DISPLAY_REQUEST_ACTIVE,A3BC7835,41C6013D,3578BCA33D01C641, Sent to indicate whether a display request is active in the current session.
  604. WNF_PO_DRIPS_DEVICE_CONSTRAINTS_REGISTERED,A3BCC875,41C6013D,75C8BCA33D01C641, Sent once platform idle states and associated device constraints have been registered.
  605. WNF_PO_ENERGY_SAVER_OVERRIDE,A3BC3075,41C6013D,7530BCA33D01C641, Triggered to indicate Energy Saver override settings.
  606. WNF_PO_ENERGY_SAVER_SETTING,A3BC2875,41C6013D,7528BCA33D01C641, Triggered when Energy Saver setting changes.
  607. WNF_PO_ENERGY_SAVER_STATE,A3BC2075,41C6013D,7520BCA33D01C641, Triggered when Energy Saver state changes. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  608. WNF_PO_INPUT_SUPPRESS_NOTIFICATION,A3BD1875,41C6013D,7518BDA33D01C641, Triggered when device is sourced from battery(DC) with lid closed and no external monitor connected.
  609. WNF_PO_INPUT_SUPPRESS_NOTIFICATION_EX,A3BD3075,41C6013D,7530BDA33D01C641, Describes the input suppression state for modern standby system based on power source; lid state; monitor state; external monitor state and system opted-in policy.
  610. WNF_PO_MODERN_STANDBY_EXIT_INITIATED,A3BCB875,41C6013D,75B8BCA33D01C641, Triggered at the start of a transition to exit modern standby.
  611. WNF_PO_OPPORTUNISTIC_CS,A3BD2875,41C6013D,7528BDA33D01C641, Sent to indicate period of opportunistic connectivity in standby.
  612. WNF_PO_OVERLAY_POWER_SCHEME_UPDATE,A3BCE875,41C6013D,75E8BCA33D01C641, Notification for power-setting overlay scheme change.
  613. WNF_PO_POWER_BUTTON_STATE,A3BCF875,41C6013D,75F8BCA33D01C641, Describes the current state of the power button.
  614. WNF_PO_POWER_STATE_CHANGE,A3BC1875,41C6013D,7518BCA33D01C641, Sent after WNF_PO_COMPOSITE_BATTERY when batteries are added or removed and when one or more batteries' AC; charging; or discharging states changes.
  615. WNF_PO_PRESLEEP_NOTIFICATION,A3BD1075,41C6013D,7510BDA33D01C641, Triggered several minutes prior to idling to sleep.
  616. WNF_PO_PREVIOUS_SHUTDOWN_STATE,A3BCB075,41C6013D,75B0BCA33D01C641, Sent on every boot to notify previous shutdown state.
  617. WNF_PO_PRIMARY_DISPLAY_LOGICAL_STATE,A3BCA875,41C6013D,75A8BCA33D01C641, Logical state of the primary display as MONITOR_LOGICAL_DISPLAY_STATE.
  618. WNF_PO_PRIMARY_DISPLAY_VISIBLE_STATE,A3BCA075,41C6013D,75A0BCA33D01C641, Visible state of the primary display as MONITOR_DISPLAY_STATE.
  619. WNF_PO_SCENARIO_CHANGE,A3BC0875,41C6013D,7508BCA33D01C641, Sent when the WDI session corresponding to a power scenario changes.
  620. WNF_PO_SLEEP_STUDY_USER_PRESENCE_CHANGED,A3BC8875,41C6013D,7588BCA33D01C641, Sent when the global user presence changes.
  621. WNF_PO_SW_HW_DRIPS_DIVERGENCE,A3BCC075,41C6013D,75C0BCA33D01C641, Sent when SW DRIPS is more than HW DRIPS by a specific threshold.
  622. WNF_PO_SYSTEM_TIME_CHANGED,A3BD0075,41C6013D,7500BDA33D01C641, Supplies the notification about system time changed. Payload has 2 ULONGLONG for new time and old time.
  623. WNF_PO_THERMAL_HIBERNATE_OCCURRED,A3BC4875,41C6013D,7548BCA33D01C641, Sent when the previous hibernate was due to a thermal trip.
  624. WNF_PO_THERMAL_OVERTHROTTLE,A3BC6875,41C6013D,7568BCA33D01C641, Triggered to indicate excessive thermal throttling.
  625. WNF_PO_THERMAL_SHUTDOWN_OCCURRED,A3BC4075,41C6013D,7540BCA33D01C641, Sent when the previous shutdown was due to a thermal trip.
  626. WNF_PO_THERMAL_STANDBY,A3BC3875,41C6013D,7538BCA33D01C641, Triggered to indicate CR3 condition.
  627. WNF_PO_USER_AWAY_PREDICTION,A3BC7075,41C6013D,7570BCA33D01C641, Sent to indicate whenever user-away prediction is updated.
  628. WNF_PO_VIDEO_INITIALIALIZED,A3BCE075,41C6013D,75E0BCA33D01C641, Set to TRUE when the video system is initialized.
  629. WNF_PO_WAKE_ON_VOICE_STATE,A3BD2075,41C6013D,7520BDA33D01C641, Sent when wake on voice state changes.
  630. WNF_PO_WEAK_CHARGER,A3BD0875,41C6013D,7508BDA33D01C641, Triggered when a weak charger is detected. Note that there may be several minute delay between when charger is plugged in and when the notification is produced.
  631. WNF_PROV_AUTOPILOT_ASYNC_COMPLETE,A3BC2075,17891C3D,7520BCA33D1C8917, Fired when the AutoPilot profile manager completes and is ready to unload.
  632. WNF_PROV_AUTOPILOT_PROFILE_AVAILABLE,A3BC1875,17891C3D,7518BCA33D1C8917, Fired when an AutoPilot profile is available locally and is non-empty. Event contains the HRESULT for the operation.
  633. WNF_PROV_AUTOPILOT_TPM_MSA_TRIGGER,A3BC2875,17891C3D,7528BCA33D1C8917, Fired when the AutoPilot profile manager determines that the MSA client may need to update TPM state.
  634. WNF_PROV_DEVICE_BOOTSTRAP_COMPLETE,A3BC3475,17891C3D,7534BCA33D1C8917, Fired when the Server provisioning in the blocking Device Bootstrap page of commercial OOBE is complete. Data passed in is a DWORD. 0x1; if Bootstrap is complete.
  635. WNF_PROV_TPM_ATTEST_COMPLETE,A3BC1075,17891C3D,7510BCA33D1C8917, Fired when TPM; NGC; and MSA all report ready for new tickets to contain the TPM claim. Event contains the HRESULT for the operation.
  636. WNF_PROV_TURN_COMPLETE,A3BC0875,17891C3D,7508BCA33D1C8917, Fired when a full set of packages are processed.
  637. WNF_PS_WAKE_CHARGE_RESOURCE_POLICY,A3BC0875,41C61D3D,7508BCA33D1DC641, This corresponds to an application that has eclipsed job wake charge resource policy.
  638. WNF_PTI_WNS_RECEIVED,A3BC0875,418F1A3D,7508BCA33D1A8F41, A WNS notification has been received and the Push To Install service should process it.
  639. WNF_RDR_SMB1_NOT_IN_USE_STATE_CHANGE,A3BC0875,41940A3F,7508BCA33F0A9441, This event signals when the client didn't discover SMB1 usage for a specific period.
  640. WNF_RM_GAME_MODE_ACTIVE,A3BC1075,41C6033F,7510BCA33F03C641, Supplies the process ID of the current game mode recipient; or 0 if no recipient is active.
  641. WNF_RM_MEMORY_MONITOR_USAGE_METRICS,A3BC0875,41C6033F,7508BCA33F03C641, Supplies the current RM memory monitor memory usage metrics. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  642. WNF_RM_QUIET_MODE,A3BC1875,41C6033F,7518BCA33F03C641, Supplies the current quiet mode state as recorded by central resource manager.
  643. WNF_RPCF_FWMAN_RUNNING,A3BC0875,7851E3F,7508BCA33F1E8507, This event signals when the RPC firewall manager is initialized.
  644. WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED,A3BC1875,12821A3F,7518BCA33F1A8212, A named pipe service trigger has been added or removed.
  645. WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED,A3BC0875,12821A3F,7508BCA33F1A8212, An RPC service trigger has been added or removed.
  646. WNF_SBS_UPDATE_AVAILABLE,A3BC0875,41950C3E,7508BCA33E0C9541, This event signals that there is an update available to the Secure Boot variables.
  647. WNF_SCM_AUTOSTART_STATE,A3BC0875,418B0D3E,7508BCA33E0D8B41, This event triggers to indicate SCM autostart state.
  648. WNF_SDO_ORIENTATION_CHANGE,A3BC0875,41890A3E,7508BCA33E0A8941, This event triggers when there is a simple device orientation change. It's data value is one of the SimpleDeviceOrientation enum values. Rights: SensorService can publish; Everyone can subscribe.
  649. WNF_SEB_AIRPLANE_MODE_DISABLED_FOR_EMERGENCY_CALL,A3BD7075,41840B3E,7570BDA33E0B8441, Airplane mode disabled for emergency call notification.
  650. WNF_SEB_APP_LAUNCH_PREFETCH,A3BD1075,41840B3E,7510BDA33E0B8441, Indicates app launch pre-fetch phase.
  651. WNF_SEB_APP_RESUME,A3BD2075,41840B3E,7520BDA33E0B8441, Indicates app resume phase.
  652. WNF_SEB_AUDIO_ACTIVITY,A3BDB075,41840B3E,75B0BDA33E0B8441, Audio activity in progress.
  653. WNF_SEB_BACKGROUND_WORK_COST_CHANGE,A3BC8875,41840B3E,7588BCA33E0B8441, Indicate a change in the background work cost.
  654. WNF_SEB_BACKGROUND_WORK_COST_HIGH,A3BC9075,41840B3E,7590BCA33E0B8441, Background work cost is high or not.
  655. WNF_SEB_BATTERY_LEVEL,A3BC5075,41840B3E,7550BCA33E0B8441, System is idle or not.
  656. WNF_SEB_BOOT,A3BC6075,41840B3E,7560BCA33E0B8441, System has booted.
  657. WNF_SEB_CACHED_FILE_UPDATED,A3BCC875,41840B3E,75C8BCA33E0B8441, Cached file has updated.
  658. WNF_SEB_CALL_HISTORY_CHANGED,A3BD6075,41840B3E,7560BDA33E0B8441, Call history change notification.
  659. WNF_SEB_CALL_STATE_CHANGED,A3BD5075,41840B3E,7550BDA33E0B8441, Call state change notification.
  660. WNF_SEB_DEFAULT_SIGN_IN_ACCOUNT_CHANGE,A3BD9875,41840B3E,7598BDA33E0B8441, Default Sign In account has changed.
  661. WNF_SEB_DEPRECATED1,A3BD1875,41840B3E,7518BDA33E0B8441,
  662. WNF_SEB_DEPRECATED2,A3BD2875,41840B3E,7528BDA33E0B8441,
  663. WNF_SEB_DEPRECATED3,A3BD3075,41840B3E,7530BDA33E0B8441,
  664. WNF_SEB_DEPRECATED4,A3BD3875,41840B3E,7538BDA33E0B8441,
  665. WNF_SEB_DEPRECATED5,A3BD4075,41840B3E,7540BDA33E0B8441,
  666. WNF_SEB_DEPRECATED6,A3BD4875,41840B3E,7548BDA33E0B8441,
  667. WNF_SEB_DEPRECATED7,A3BCE075,41840B3E,75E0BCA33E0B8441, Unused notification.
  668. WNF_SEB_DEPRECATED8,A3BCE875,41840B3E,75E8BCA33E0B8441,
  669. WNF_SEB_DEV_MNF_CUSTOM_NOTIFICATION_RECEIVED,A3BCB875,41840B3E,75B8BCA33E0B8441, OEM custom notification received.
  670. WNF_SEB_DOMAIN_JOINED,A3BC5875,41840B3E,7558BCA33E0B8441, System is domain joined or not.
  671. WNF_SEB_FREE_NETWORK_PRESENT,A3BC1075,41840B3E,7510BCA33E0B8441,
  672. WNF_SEB_FULL_SCREEN_HDR_VIDEO_PLAYBACK,A3BDB875,41840B3E,75B8BDA33E0B8441, Fullscreen HDR video playback notification.
  673. WNF_SEB_FULL_SCREEN_VIDEO_PLAYBACK,A3BD0075,41840B3E,7500BDA33E0B8441, Fullscreen video playback notification.
  674. WNF_SEB_GAME_MODE,A3BDD875,41840B3E,75D8BDA33E0B8441, Game mode scenario.
  675. WNF_SEB_GEOLOCATION,A3BCB075,41840B3E,75B0BCA33E0B8441, Geolocation service should be started.
  676. WNF_SEB_INTERNET_PRESENT,A3BC0875,41840B3E,7508BCA33E0B8441, Internet available or not.
  677. WNF_SEB_IP_ADDRESS_AVAILABLE,A3BC8075,41840B3E,7580BCA33E0B8441, IP address is available or not.
  678. WNF_SEB_LINE_CHANGED,A3BD6875,41840B3E,7568BDA33E0B8441, Phone line change notification.
  679. WNF_SEB_LOW_LATENCY_POWER_REQUEST,A3BCF075,41840B3E,75F0BCA33E0B8441, Low-latency power request notification.
  680. WNF_SEB_MBAE_NOTIFICATION_RECEIVED,A3BC2875,41840B3E,7528BCA33E0B8441, Radio Operator Message received.
  681. WNF_SEB_MIXED_REALITY,A3BDD075,41840B3E,75D0BDA33E0B8441, Mixed reality notification.
  682. WNF_SEB_MOB_OPERATOR_CUSTOM_NOTIFICATION_RECEIVED,A3BCC075,41840B3E,75C0BCA33E0B8441, MO custom notification received.
  683. WNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATION,A3BD9075,41840B3E,7590BDA33E0B8441, Device service command has been received.
  684. WNF_SEB_MOBILE_BROADBAND_PCO_VALUE_CHANGE,A3BDC875,41840B3E,75C8BDA33E0B8441, Pco data has been received.
  685. WNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGE,A3BD8875,41840B3E,7588BDA33E0B8441, Pin lock state has changed.
  686. WNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGE,A3BD8075,41840B3E,7580BDA33E0B8441, Radio state has changed.
  687. WNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGE,A3BD7875,41840B3E,7578BDA33E0B8441, Registration state has changed.
  688. WNF_SEB_MONITOR_ON,A3BC7875,41840B3E,7578BCA33E0B8441, Monitor is ON or OFF.
  689. WNF_SEB_NETWORK_CONNECTIVITY_IN_STANDBY,A3BDA075,41840B3E,75A0BDA33E0B8441, Network connectivity in Standby.
  690. WNF_SEB_NETWORK_CONTROL_CHANNEL_TRIGGER_RESET,A3BC3075,41840B3E,7530BCA33E0B8441, Network control channel triggers have been reset.
  691. WNF_SEB_NETWORK_STATE_CHANGES,A3BC2075,41840B3E,7520BCA33E0B8441, Network state has changed.
  692. WNF_SEB_NFC_PERF_BOOST,A3BD0875,41840B3E,7508BDA33E0B8441, Indicates high-performance boost mode for critical NFC background activity.
  693. WNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGE,A3BC4075,41840B3E,7540BCA33E0B8441, Online ID connected state changed. SDDL comes from ID_CAP_EVERYONE in %SDXROOT%\src\baseos\prod\packages\WLId\WLId.pkg.xml.
  694. WNF_SEB_RESILIENCY_NOTIFICATION_PHASE,A3BCF875,41840B3E,75F8BCA33E0B8441, Resiliency phase notification.
  695. WNF_SEB_SMART_CARD_FIELD_INFO_NOTIFICATION,A3BCD075,41840B3E,75D0BCA33E0B8441, Smart card field entry/exit notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml.
  696. WNF_SEB_SMART_CARD_HCE_APPLICATION_ACTIVATION_NOTIFICATION,A3BCD875,41840B3E,75D8BCA33E0B8441, Smart card HCE application activation notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml.
  697. WNF_SEB_SMART_CARD_TRANSACTION_NOTIFICATION,A3BCA075,41840B3E,75A0BCA33E0B8441, Smart card transaction notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml.
  698. WNF_SEB_SMS_RECEIVED,A3BC1875,41840B3E,7518BCA33E0B8441, SMS has been received.
  699. WNF_SEB_SYSTEM_AC,A3BC7075,41840B3E,7570BCA33E0B8441, System is AC or DC.
  700. WNF_SEB_SYSTEM_IDLE,A3BC4875,41840B3E,7548BCA33E0B8441, system is idle or not.
  701. WNF_SEB_SYSTEM_LPE,A3BC9875,41840B3E,7598BCA33E0B8441, System is in Low Power Epoch or not.
  702. WNF_SEB_SYSTEM_MAINTENANCE,A3BCA875,41840B3E,75A8BCA33E0B8441, System is in good state for maintenance.
  703. WNF_SEB_TIME_ZONE_CHANGE,A3BC3875,41840B3E,7538BCA33E0B8441, Time zone change.
  704. WNF_SEB_USER_PRESENCE_CHANGED,A3BDA875,41840B3E,75A8BDA33E0B8441, User presence changed.
  705. WNF_SEB_USER_PRESENT,A3BC6875,41840B3E,7568BCA33E0B8441, System has at least 1 user present.
  706. WNF_SEB_UWP_APP_LAUNCH,A3BDC075,41840B3E,75C0BDA33E0B8441, Indicates UWP app launch phase.
  707. WNF_SEB_VOICEMAIL_CHANGED,A3BD5875,41840B3E,7558BDA33E0B8441, Voicemail change notification.
  708. WNF_SFA_AUTHENTICATION_STAGE_CHANGED,A3BC0875,4187083E,7508BCA33E088741, This event signals when authentication stage change.
  709. WNF_SHEL_ABOVE_LOCK_APP_ACTIVE,A3BD9835,D83063E,3598BDA33E06830D, This event is signalled when there is an app launched (1) or terminated (0) above lock. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed full access; while all other app containers have read access.
  710. WNF_SHEL_ABOVE_LOCK_BIO_ACTIVE,A3BDA835,D83063E,35A8BDA33E06830D, This event is signalled when there is bio feedback active (1) or inactive (0) above lock.
  711. WNF_SHEL_ACTIONCENTER_VIEWSTATE_CHANGED,A3BED035,D83063E,35D0BEA33E06830D, This event signals the current view state of action center.
  712. WNF_SHEL_APPLICATION_SPATIAL_INFO_UPDATE,A3BDD875,D83063E,75D8BDA33E06830D, Event is for the shell to notify when app spatial information has changed. Payload is ApplicationSpatialInformationWnf struct.
  713. WNF_SHEL_APPLICATION_STARTED,A3BE0075,D83063E,7500BEA33E06830D, This event is signals when an application launches. The Payload is the appID.
  714. WNF_SHEL_APPLICATION_STATE_UPDATE,A3BC7075,D83063E,7570BCA33E06830D, Event is for the shell to notify when app layout state is changed. Payload is ShellApplicationStateWnf struct.
  715. WNF_SHEL_APPLICATION_TERMINATED,A3BE0875,D83063E,7508BEA33E06830D, This event is signals when an application is terminated. The Payload is the appID.
  716. WNF_SHEL_APPLIFECYCLE_INSTALL_STATE,A3BEE875,D83063E,75E8BEA33E06830D, This event signals for different app install state from the Store. The Payload is the aumId and app state.
  717. WNF_SHEL_APPRESOLVER_SCAN,A3BC5075,D83063E,7550BCA33E06830D, Event signals a full app resolver scan has been invoked.
  718. WNF_SHEL_ASSISTANT_STATE_CHANGE,A3BF8875,D83063E,7588BFA33E06830D, This wnf indicates that the assistant state has changed; e.g Talking; idle; thinking; notification pending etc.
  719. WNF_SHEL_CACHED_CLOUD_NETWORK_STATE,A3BED875,D83063E,75D8BEA33E06830D, State of the network as reflected by shell32 listeners. Subscribed to; and published from; explorer.exe; a user process.
  720. WNF_SHEL_CALM_DISPLAY_ACTIVE,A3BDB875,D83063E,75B8BDA33E06830D, Set to 0 (inactive) or 1 (active).
  721. WNF_SHEL_CDM_FEATURE_CONFIG_FIRST_USAGE,A3BDF875,D83063E,75F8BDA33E06830D, This event notifies the CDM when a new feature configuration is first used. The SDDL is scoped to AuthenticatedUsers; AppContainers and LPACs (CAPABILITY_SID_LpacAppExperience);MpsSvc.
  722. WNF_SHEL_CDM_FEATURE_USAGE,A3BE9075,D83063E,7590BEA33E06830D, This event notifies the CDM when a feature configuration is used.
  723. WNF_SHEL_CDM_REGISTRATION_COMPLETE,A3BE6835,D83063E,3568BEA33E06830D, This event is scoped to the user session and signaled when the CDM registration is complete.
  724. WNF_SHEL_CLOUD_FILE_INDEXED_CHANGE,A3BEA875,D83063E,75A8BEA33E06830D, Notification is incremented / signaled when a cloudfile state change is detected by the indexer service. Payload is count of changes. User can subscribe; but only service (indexer) can publish.
  725. WNF_SHEL_CLOUD_FILE_PROGRESS_CHANGE,A3BEB075,D83063E,75B0BEA33E06830D, Notification when a sync client or shell session updates in-memory progress within the indexer service. Payload is the tick count when the last change occurred. User can subscribe; but only service (indexer) can publish.
  726. WNF_SHEL_CONTENT_DELIVERY_MANAGER_MONITORING,A3BE70F5,D83063E,F570BEA33E06830D, This event signals that Content Delivery Manager Cache Monitoring is Enabled or not.
  727. WNF_SHEL_CONTENT_DELIVERY_MANAGER_NEEDS_REMEDIATION,A3BE4875,D83063E,7548BEA33E06830D, This event signals that Content Delivery Manager content needs remediation.
  728. WNF_SHEL_CORTANA_APPINDEX_UPDATED,A3BC9875,D83063E,7598BCA33E06830D, Event signals when the apps have been pushed to the indexer has completed.
  729. WNF_SHEL_CORTANA_AUDIO_ACTIVE,A3BDE075,D83063E,75E0BDA33E06830D, Indicates the state of Cortana speech input and output.
  730. WNF_SHEL_CORTANA_BEACON_STATE_CHANGED,A3BF1075,D83063E,7510BFA33E06830D, This wnf is signaled everytime the Action Center/Cortana beacon state changes. Payload is an int mapping to an enum representing the new state.
  731. WNF_SHEL_CORTANA_CAPABILTIES_CHANGED,A3BF7035,D83063E,3570BFA33E06830D, This wnf indicates that a cortana capabilties have changed. The payload will be the changed capabilties. The below sids are the CShell compser; cortana app; and cortana test app sids.
  732. WNF_SHEL_CORTANA_MIC_TRAINING_COMPLETE,A3BE88F5,D83063E,F588BEA33E06830D, This event signals when cortana speech training for 'Respond only to me' is complete.
  733. WNF_SHEL_CORTANA_QUIET_MOMENT_AT_HOME,A3BF0475,D83063E,7504BFA33E06830D, This wnf is signaled when Cortana's QuietMoment @Home inferred that the user has arrived of left home.
  734. WNF_SHEL_CORTANA_SPEECH_CANCELHANDSFREE_REQUESTED,A3BDB035,D83063E,35B0BDA33E06830D, This event can be signalled when a handsfree device needs to request Cortana to cancel speech activity.
  735. WNF_SHEL_CREATIVE_EVENT_BATTERY_SAVER_OVERRIDE_TRIGGERED,A3BF3075,D83063E,7530BFA33E06830D, This event signals a creative event has been triggered that will allow to run during battery saver.
  736. WNF_SHEL_CREATIVE_EVENT_TRIGGERED,A3BCD875,D83063E,75D8BCA33E06830D, This event signals a creative event has been triggered.
  737. WNF_SHEL_DDC_COMMAND_AVAILABLE,A3BD2075,D83063E,7520BDA33E06830D, This event signals when a parsed command is ready for processing.
  738. WNF_SHEL_DDC_CONNECTED_ACCOUNTS_CHANGED,A3BD6075,D83063E,7560BDA33E06830D, This event signals when connected accounts have changed and register device should be called.
  739. WNF_SHEL_DDC_SMS_COMMAND,A3BD3075,D83063E,7530BDA33E06830D, This event signals when a command has been delivered via SMS.
  740. WNF_SHEL_DDC_WNS_COMMAND,A3BD2875,D83063E,7528BDA33E06830D, This event signals when a command has been delivered via WNS.
  741. WNF_SHEL_DESKTOP_APPLICATION_STARTED,A3BE5075,D83063E,7550BEA33E06830D, This event is signals when a desktop application launches. The Payload is the executable name.
  742. WNF_SHEL_DESKTOP_APPLICATION_TERMINATED,A3BE5875,D83063E,7558BEA33E06830D, This event is signals when a desktop application is terminated. The Payload is the executable name.
  743. WNF_SHEL_DEVICE_LOCKED,A3BD3875,D83063E,7538BDA33E06830D, This event signals that the device is locked in the current session.
  744. WNF_SHEL_DEVICE_OPEN,A3BF2875,D83063E,7528BFA33E06830D, This wnf indicates for some types of devices if a lid; cover or enclosure around it is closed (zero value) or open (non-zero value).
  745. WNF_SHEL_DEVICE_UNLOCKED,A3BCC075,D83063E,75C0BCA33E06830D, This event signals that the device is unlocked in the current session.
  746. WNF_SHEL_DICTATION_RUNNING,A3BD1835,D83063E,3518BDA33E06830D, This is the state of dictation. SDDL comes from dwm.exe in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml and WPNarrator in %SDXROOT%\src\media\apps\packages\Apps\WPNarrator.pkg.xml. And Phone DefApps group is required too.
  747. WNF_SHEL_ENTERPRISE_HIDE_PEOPLE_BAR_POLICY_VALUE_CHANGED,A3BE8075,D83063E,7580BEA33E06830D, This event signals when the HidePeopleBar MDM policy has been updated.
  748. WNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGED,A3BC9475,D83063E,7594BCA33E06830D, This even signals when Start layout MDM policy has been applied.
  749. WNF_SHEL_ENTERPRISE_START_PLACES_POLICY_VALUE_CHANGED,A3BEC075,D83063E,75C0BEA33E06830D, This event signals when a Start place MDM policy (AllowPinnedFolder*) has been applied.
  750. WNF_SHEL_FOCUS_CHANGE,A3BC7875,D83063E,7578BCA33E06830D, This event signals when focus changes to a different process; scoped to System; DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
  751. WNF_SHEL_GAMECONTROLLER_FOCUS_INFO,A3BC8875,D83063E,7588BCA33E06830D, This event signals to toggle exclusive gamepad input on and off.
  752. WNF_SHEL_GAMECONTROLLER_LISTENER_INFO,A3BC8075,D83063E,7580BCA33E06830D, This event signals to toggle exclusive gamepad listening on and off; scoped to System; DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
  753. WNF_SHEL_GAMECONTROLLER_NEXUS_INFO,A3BCF075,D83063E,75F0BCA33E06830D, This event signals whenever the nexus button policy changes.
  754. WNF_SHEL_HEALTH_STATE_CHANGED,A3BE4075,D83063E,7540BEA33E06830D, This event signals when the health state of the device changes.
  755. WNF_SHEL_IMMERSIVE_SHELL_RUNNING,A3BC0875,D83063E,7508BCA33E06830D, This event signals when the Immersive Shell is started.
  756. WNF_SHEL_INSTALL_PLACEHOLDER_TILES,A3BDC075,D83063E,75C0BDA33E06830D, This event signals a start layout change to a background task so that assets can be retrieved if necessary. Payload is PlaceholderTileWnf.
  757. WNF_SHEL_JUMPLIST_CHANGED,A3BCE075,D83063E,75E0BCA33E06830D, Event signals that the jumplist for an app has changed. Payload is a struct containing the current sessionId as well as a string representing the aumid of the app whose jumplist was updated.
  758. WNF_SHEL_LATEST_CONNECTED_AUTOPLAY_DEVICE,A3BEF875,D83063E,75F8BEA33E06830D, This wnf is signaled everytime the user connects an autoplay device. The payload is the device id (VID and PID).
  759. WNF_SHEL_LOCK_APP_READY,A3BE3035,D83063E,3530BEA33E06830D, This event signals that the lock screen is ready after a reset was requested.
  760. WNF_SHEL_LOCK_APP_RELOCK,A3BE2835,D83063E,3528BEA33E06830D, This event signals that the lock screen should be reset due to a re-lock request.
  761. WNF_SHEL_LOCK_APP_REQUESTING_UNLOCK,A3BD7835,D83063E,3578BDA33E06830D, This event signals that the Lock application is requesting to unlock so the user can enter credentials.
  762. WNF_SHEL_LOCK_APP_SHOWN,A3BD7035,D83063E,3570BDA33E06830D, This event signals that the Lock application has been presented to the user. It contains an instance cookie as specified from LogonUI.
  763. WNF_SHEL_LOCK_ON_LOGON,A3BF2035,D83063E,3520BFA33E06830D, This wnf is signaled when WinLogon detects an automatic lock on logon sequence to optimize displaying the user lock screen when the shell is ready.
  764. WNF_SHEL_LOCKAPPHOST_ACTIVE,A3BF6835,D83063E,3568BFA33E06830D, Set to 0 or 1 to indicate whether lockapphost is currently active. Anyone (including apps) can read; system has write access (but on multi-session skus authenticated users also have write access). Additionally; processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
  765. WNF_SHEL_LOCKSCREEN_ACTIVE,A3BC5835,D83063E,3558BCA33E06830D, Set to 0 or 1 to indicate whether the lock screen is active. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don't have multiple sessions; otherwise anyone can read and system can write. Additionally; processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
  766. WNF_SHEL_LOCKSCREEN_IMAGE_CHANGED,A3BD5075,D83063E,7550BDA33E06830D, This event signals that lock screen image had changed. It contains the user sid whose image was changed.
  767. WNF_SHEL_LOCKSCREEN_INFO_UPDATED,A3BDE835,D83063E,35E8BDA33E06830D, This event signals that the LockScreen info is updated.
  768. WNF_SHEL_LOCKSTATE,A3BDD075,D83063E,75D0BDA33E06830D, Current lock state of the device. Payload is DEVICE_LOCKSTATE. On multisession SKUs; everyone can read while only SYSTEM can write. On single session SKUs; everyone can read while only DefaultAccount can write. On single session SKUs; also include allow list from the SDDL for DEVICE_LOCK_STATE. Additionally; processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
  769. WNF_SHEL_LOGON_COMPLETE,A3BC1875,D83063E,7518BCA33E06830D, This system-scope event is signaled each time a user's desktop becomes ready. Consider using WNF_SHEL_SESSION_LOGON_COMPLETE for a session-scoped version.
  770. WNF_SHEL_NEXT_NOTIFICATION_SINK_SESSION_ID,A3BF5875,D83063E,7558BFA33E06830D, A system-wide unique rolling id for notification controller sink sessions.
  771. WNF_SHEL_NOTIFICATION_SETTINGS_CHANGED,A3BC3835,D83063E,3538BCA33E06830D, Event signals when toast notification settings have changed.
  772. WNF_SHEL_NOTIFICATIONS,A3BC1035,D83063E,3510BCA33E06830D, Set to 0 or more to indicate whether there are any unseen notifications in the notification center. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml; updated to enable the notification on OneCore.
  773. WNF_SHEL_NOTIFICATIONS_CRITICAL,A3BCA835,D83063E,35A8BCA33E06830D, This event signals that a critical notification such as an incoming call was posted. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml; updated to enable notification on OneCore.
  774. WNF_SHEL_OOBE_ENABLE_PROVISIONING,A3BD6835,D83063E,3568BDA33E06830D, This event signals when OOBE in a Shell should enable its provisioning flow.
  775. WNF_SHEL_OOBE_PROVISIONING_COMPLETE,A3BE9C75,D83063E,759CBEA33E06830D, This event signals when OOBE in a Shell has completed its provisioning flow. It is permanent since provisioning is only supported during first user OOBE.
  776. WNF_SHEL_OOBE_USER_LOGON_COMPLETE,A3BC2475,D83063E,7524BCA33E06830D, This event signals when logon of the first user after OOBE is complete. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed access.
  777. WNF_SHEL_PEOPLE_PANE_VIEW_CHANGED,A3BE2035,D83063E,3520BEA33E06830D, This event is signalled when there is a change to the People Pane Views.
  778. WNF_SHEL_PEOPLE_PINNED_LIST_CHANGED,A3BDC835,D83063E,35C8BDA33E06830D, This event is signalled when there is a change to the Pinned People list.
  779. WNF_SHEL_PLACES_CHANGED,A3BCC875,D83063E,75C8BCA33E06830D, This event signals the changes in places' database (clientgraph).
  780. WNF_SHEL_QUIET_MOMENT_GAME_MODE_CHANGED,A3BF5075,D83063E,7550BFA33E06830D, This event signals when Quiet Hours game mode state changes.
  781. WNF_SHEL_QUIETHOURS_ACTIVE_PROFILE_CHANGED,A3BF1C75,D83063E,751CBFA33E06830D, This wnf is signaled whenever active quiet hours profile/mode changes. The value is the restrictive level of an active profile and the restrictive level is unique per profile.
  782. WNF_SHEL_RADIALCONTROLLER_EXPERIENCE_RESTART,A3BDA035,D83063E,35A0BDA33E06830D, This event is signalled when the RadialController Experience has restarted to allow registered API component to re-establish connection and repopulate state.
  783. WNF_SHEL_REQUEST_CORTANA_SETTINGSCONSTRAINTINDEX_BUILD,A3BD1075,D83063E,7510BDA33E06830D, Event signals when an app requests cortana to build the settings constraint index.
  784. WNF_SHEL_RESTORE_PAYLOAD_COMPLETE,A3BEF075,D83063E,75F0BEA33E06830D, CDS restore payload data is downloaded during OOBE.
  785. WNF_SHEL_SCREEN_COVERED,A3BD5875,D83063E,7558BDA33E06830D, Set to 0 (uncovered or unknown) or 1 (covered).
  786. WNF_SHEL_SESSION_LOGON_COMPLETE,A3BE3835,D83063E,3538BEA33E06830D, This event is scoped to the user session and signaled when the desktop is ready after a logon.
  787. WNF_SHEL_SETTINGS_CHANGED,A3BCF875,D83063E,75F8BCA33E06830D, This event signals when a settings toggle has changed.
  788. WNF_SHEL_SETTINGS_ENVIRONMENT_CHANGED,A3BF4875,D83063E,7548BFA33E06830D, This wnf indicates that a variable in the settings environment has changed. The payload is the current sessionId.
  789. WNF_SHEL_SIGNAL_LOGONUI,A3BE7835,D83063E,3578BEA33E06830D, Used to signal logon controller across the desktop boundary. Only local system or the composer can read and write. Currently payload is present but ignored.
  790. WNF_SHEL_SIGNAL_MANAGER_FEATURE_TRIGGERED,A3BEC875,D83063E,75C8BEA33E06830D, This event is used by the Signal Manager for WIL Feature Usage subscriptions required by registered signal triggers.
  791. WNF_SHEL_SIGNAL_MANAGER_SIGNAL_TRIGGERED,A3BEA075,D83063E,75A0BEA33E06830D, This event signals when the signal manager fires a signal.
  792. WNF_SHEL_SIGNAL_MANAGER_TESTING,A3BEE075,D83063E,75E0BEA33E06830D, This wnf is used for testing purposes.
  793. WNF_SHEL_SOFTLANDING_PUBLISHED,A3BD0835,D83063E,3508BDA33E06830D, This event signals when a new soft landing tip is published.
  794. WNF_SHEL_SOFTLANDING_RULE_TRIGGERED,A3BC4075,D83063E,7540BCA33E06830D, This event signals when a SoftLanding rule is triggered.
  795. WNF_SHEL_SOFTLANDING_RULES_UPDATED,A3BCA075,D83063E,75A0BCA33E06830D, This event signals when SoftLanding rules folder is updated.
  796. WNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTED,A3BC6875,D83063E,7568BCA33E06830D, This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_DOWNLOAD_STARTED event from TDL.
  797. WNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHED,A3BC6075,D83063E,7560BCA33E06830D, This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_INSTALL_FINISHED event from TDL.
  798. WNF_SHEL_START_APPLIFECYCLE_UNINSTALL_FINISHED,A3BCE875,D83063E,75E8BCA33E06830D, This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_UNINSTALL_FINISHED event from TDL.
  799. WNF_SHEL_START_LAYOUT_MIGRATED,A3BEB8F5,D83063E,F5B8BEA33E06830D, This event signals when Start Experience Host completes a layout migration.
  800. WNF_SHEL_START_LAYOUT_READY,A3BC4875,D83063E,7548BCA33E06830D, This event signals when Start Experience Host completes loading the Start menu layout.
  801. WNF_SHEL_START_PROCESS_SUSPENDED_INTERNAL,A3BF3835,D83063E,3538BFA33E06830D, This event allows user-mode services such as Windows Notification Platform to determine when Start is suspended.
  802. WNF_SHEL_START_VISIBILITY_CHANGED,A3BCB035,D83063E,35B0BCA33E06830D, This event signals when Start visibility changes.
  803. WNF_SHEL_SUGGESTED_APP_READY,A3BE60F5,D83063E,F560BEA33E06830D, This event signals that the app launched by sign in suggestions is ready.
  804. WNF_SHEL_SUSPEND_APP_BACKGROUND_ACTIVITY,A3BCD075,D83063E,75D0BCA33E06830D, Event is for the shell to notify when app background activity should be suspended. Payload is DWORD set to 1 or 0.
  805. WNF_SHEL_SYSTEMDIALOG_PUBLISHED,A3BF4035,D83063E,3540BFA33E06830D, This event signals when a new System Dialog toast is published.
  806. WNF_SHEL_TAB_SHELL_INIT_COMPLETE,A3BF6035,D83063E,3560BFA33E06830D, Event signals Tab Shell component initialization is complete; potentially after an explorer crash. Payload is an incrementing DWORD that can be used to poll if the current objects are new.
  807. WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_ACTIVATED,A3BD4075,D83063E,7540BDA33E06830D, This event signals a subscription has been activated.
  808. WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_UPDATED,A3BD4875,D83063E,7548BDA33E06830D, This event signals the content of one or more subscriptions has been updated.
  809. WNF_SHEL_TASKBAR_PINS_UPDATED,A3BF7875,D83063E,7578BFA33E06830D, This event indicates taskbar pins were updated. The SDDL is scoped to AuthenticatedUsers.
  810. WNF_SHEL_TILECHANGE,A3BC3075,D83063E,7530BCA33E06830D, This event is signalled when there is a tile change to a background task.
  811. WNF_SHEL_TILEINSTALL,A3BD8075,D83063E,7580BDA33E06830D, This event is signalled when there is a tile install to a background task.
  812. WNF_SHEL_TILEUNINSTALL,A3BD9075,D83063E,7590BDA33E06830D, This event is signalled when there is a tile uninstall to a background task.
  813. WNF_SHEL_TILEUPDATE,A3BD8875,D83063E,7588BDA33E06830D, This event is signalled when there is a tile update to a background task.
  814. WNF_SHEL_TOAST_PUBLISHED,A3BD0035,D83063E,3500BDA33E06830D, This event signals when a new toast is published.
  815. WNF_SHEL_TOAST_PUBLISHED_SYSTEMSCOPE,A3BF9075,D83063E,7590BFA33E06830D, This event is similar to TOAST_PUBLISHED but at a system rather than session scope.
  816. WNF_SHEL_TRAY_SEARCHBOX_VISIBILITY_CHANGED,A3BCB875,D83063E,75B8BCA33E06830D, Set to 0 or 1 to indicate whether the searchbox is visibile in the tray. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don't have multiple sessions; otherwise anyone can read and only system can write.
  817. WNF_SHEL_USER_IDLE,A3BE1875,D83063E,7518BEA33E06830D, This event signals when the first time a user is idle after logon. The payload is the time the user has been idled for.
  818. WNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSED,A3BC2875,D83063E,7528BCA33E06830D, TDL dispatcher pipe has been closed.
  819. WNF_SHEL_WCOS_SESSION_ID,A3BF8075,D83063E,7580BFA33E06830D, This system-scope event is signaled each time the shell attempts to start a local session on WCOS-based SKUs. It carries the latest session ID. Everyone can read from it. Authenticated users can write to it. Apps in general can read from it. Apps with WINCAP_SHELL_EXPERIENCE_COMPOSER can write to it.
  820. WNF_SHEL_WINDOWSTIP_CONTENT_PUBLISHED,A3BE10F5,D83063E,F510BEA33E06830D, This event is signals when a request is made to show a Windows Tip bubble. The Payload is the content id(String).
  821. WNF_SHR_DHCP_IPv4_FASTIP_ADDRS,A3BC1875,4194063E,7518BCA33E069441, New assigned Fast-IP Address(es).
  822. WNF_SHR_DHCP_IPv4_LEASE_LIST,A3BC1075,4194063E,7510BCA33E069441, ICS DHCP IPv4 lease list changed.
  823. WNF_SHR_SHARING_CHANGED,A3BC0835,4194063E,3508BCA33E069441, System sharing status changed.
  824. WNF_SIO_BIO_ENROLLED,A3BC1075,4189073E,7510BCA33E078941, Used to notify the Delay Lock settings that Biometric enrollment has been modified.
  825. WNF_SIO_PIN_ENROLLED,A3BC0875,4189073E,7508BCA33E078941, Used to notify the PIN list that a PIN has been enrolled and that it should refresh.
  826. WNF_SKYD_FILE_SYNC,A3BC0875,59F053E,7508BCA33E059F05, A file has changed on storage and a request is received to sync.
  827. WNF_SKYD_QUOTA_CHANGE,A3BC1075,59F053E,7510BCA33E059F05, A user's quota has changed.
  828. WNF_SMS_CHECK_ACCESS,A3BC0875,4195033E,7508BCA33E039541, This event triggers when the user revokes SMS access.
  829. WNF_SMSR_NEW_MESSAGE_RECEIVED,A3BC1875,1395033E,7518BCA33E039513, Sms Router received a new incoming SMS message.
  830. WNF_SMSR_READY,A3BC0875,1395033E,7508BCA33E039513, Sms Router Broker is ready.
  831. WNF_SMSR_WWAN_READ_DONE,A3BC1075,1395033E,7510BCA33E039513,
  832. WNF_SMSS_MEMORY_COOLING_COMPATIBLE,A3BC0875,1295033E,7508BCA33E039512, This event triggers when the system has multiple memory channels and memory cooling can be started.
  833. WNF_SPAC_SPACEPORT_PROPERTY_CHANGED,A3BC0875,2871E3E,7508BCA33E1E8702, This notification is issued when a property of an object changes.
  834. WNF_SPAC_SPACEPORT_WORK_REQUESTED,A3BC1075,2871E3E,7510BCA33E1E8702, This notification is issued to request work in user-mode.
  835. WNF_SPCH_ALLOW_REMOTE_SPEECH_SERVICES,A3BC2075,9851E3E,7520BCA33E1E8509, This event is fired when system administrator change GP and MDM policy which governs capability to connect to speech service.
  836. WNF_SPCH_DISABLE_KWS_REQUEST,A3BC1875,9851E3E,7518BCA33E1E8509, Indicates the KWS request from a remote device. Certain peripherals that support in-built KWS may request the system to disable the KWS runnning on Windows. Published by BTAGService.
  837. WNF_SPCH_INPUT_STATE_UPDATE,A3BC0835,9851E3E,3508BCA33E1E8509, Indicates the state of the shared recognizer.
  838. WNF_SPCH_REMOTE_SESSION_REQUEST,A3BC1075,9851E3E,7510BCA33E1E8509, Indicates the data pertaining to a remote request to start/stop a speech recognition session. Published by BTAGService and HidSrv.
  839. WNF_SPI_LOGICALDPIOVERRIDE,A3BC0835,418F1E3E,3508BCA33E1E8F41, Signals a change caused by SystemParametersInfo(SPI_SETLOGICALDPIOVERRIDE). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  840. WNF_SPI_PRIMARY_MONITOR_DPI_CHANGED,A3BC1035,418F1E3E,3510BCA33E1E8F41, This is triggered when the Primary monitor's DPI is different than the session's DPI.
  841. WNF_SRC_SYSTEM_RADIO_CHANGED,A3BC0875,41851C3E,7508BCA33E1C8541, This event signals when system radio is changed.
  842. WNF_SRT_WINRE_CONFIGURATION_CHANGE,A3BC0875,41921C3E,7508BCA33E1C9241, Triggered each time there is a configuration change in WinRE.
  843. WNF_SRUM_SCREENONSTUDY_SESSION,A3BC0875,C931C3E,7508BCA33E1C930C, Sent when a screen on study session starts or ends.
  844. WNF_SRV_SMB1_NOT_IN_USE_STATE_CHANGE,A3BC1075,41901C3E,7510BCA33E1C9041, This event signals when the server didn't discover SMB1 usage for a specific period.
  845. WNF_SRV_SRV2_STATE_CHANGE,A3BC0875,41901C3E,7508BCA33E1C9041, This event signals when the server (SRV2) start/stop.
  846. WNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATED,A3BC0875,13891A3E,7508BCA33E1A8913, This WNF event fires when the OEM; MO; and Device Hardware values change in the registry.
  847. WNF_STOR_CONFIGURATION_MO_TASK_RUNNING,A3BC1075,13891A3E,7510BCA33E1A8913, This WNF event fires when the MO discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
  848. WNF_STOR_CONFIGURATION_OEM_TASK_RUNNING,A3BC1875,13891A3E,7518BCA33E1A8913, This WNF event fires when the OEM discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
  849. WNF_SUPP_ENABLE_ERROR_DETAILS_CACHE,A3BC0875,11961B3E,7508BCA33E1B9611, Enable the Error Details Cache.
  850. WNF_SYNC_REQUEST_PROBE,A3BC0875,288173E,7508BCA33E178802, Sync sets this value to request a wifi probe due to SSL error. SDDL comes from ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml.
  851. WNF_SYS_SHUTDOWN_IN_PROGRESS,A3BC0875,4195173E,7508BCA33E179541, The state is published when the system has begun the shutdown or reboot process.
  852. WNF_TB_SYSTEM_TIME_CHANGED,A3BC0875,41C60C39,7508BCA3390CC641, Time Broker has finished processing a change ot time.
  853. WNF_TEAM_SHELL_HOTKEY_PRESSED,A3BC0875,C870B39,7508BCA3390B870C, Indicates a hotkey was pressed.
  854. WNF_TEL_DAILY_UPLOAD_QUOTA,A3BE1075,418A0B39,7510BEA3390B8A41, This is fired every time an SENSE's daily upload quota crosses into a new tier or is reset. struct { DWORD PercentageFull; }.
  855. WNF_TEL_ONESETTINGS_UPDATED,A3BE1875,418A0B39,7518BEA3390B8A41, This is fired every time a onesettings namespace is updated. {UINT64 SettingsCount; struct {UINT64 NamespaceHash; UINT64 TimeLastChanged;}[16]}.
  856. WNF_TEL_SETTINGS_PUSH_NOTIFICATION_RECEIVED,A3BE2075,418A0B39,7520BEA3390B8A41, This is fired every time a push notification is received from the OneSettings service. UTF8 string.
  857. WNF_TEL_STORAGE_CAPACITY,A3BE0875,418A0B39,7508BEA3390B8A41, This is fired every time an SENSE's storage fullness crosses into a new tier or is reset. struct { DWORD PercentageFull[4]; }.
  858. WNF_TEL_TIMER_RECONFIGURED,A3BE2875,418A0B39,7528BEA3390B8A41, This is fired every time a UTC service timer changes its configuration values so subscribers can call GetTimerConfiguration to check any new values.
  859. WNF_TETH_AUTOSTART_BLUETOOTH,A3BC1075,9920B39,7510BCA3390B9209, State name for starting Tethering service over Bluetooth.
  860. WNF_TETH_TETHERING_STATE,A3BC0875,9920B39,7508BCA3390B9209, State name for the Tethering service notification of all state changes.
  861. WNF_THME_THEME_CHANGED,A3BC0875,48B0639,7508BCA339068B04, Notifies when the theme of the system changes. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  862. WNF_TKBN_AUTOCOMPLETE,A3BC4835,F840539,3548BCA33905840F, The autocomplete window has been updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  863. WNF_TKBN_CANDIDATE_WINDOW_STATE,A3BC7835,F840539,3578BCA33905840F, The candidate window state has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  864. WNF_TKBN_CARET_TRACKING,A3BC4035,F840539,3540BCA33905840F, Caret tracking has updated on the desktop. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  865. WNF_TKBN_COMPOSITION_STATE,A3BC9035,F840539,3590BCA33905840F, The composition state has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  866. WNF_TKBN_DESKTOP_MODE_AUTO_IHM,A3BCB035,F840539,35B0BCA33905840F, The system is in desktop mode but the user prefers tablet-mode IHM behavior. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  867. WNF_TKBN_FOREGROUND_WINDOW,A3BC3835,F840539,3538BCA33905840F,
  868. WNF_TKBN_IMMERSIVE_FOCUS_TRACKING,A3BC1835,F840539,3518BCA33905840F, An immersive application has encountered a focus change. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  869. WNF_TKBN_INPUT_PANE_DISPLAY_POLICY,A3BCA835,F840539,35A8BCA33905840F, The edit control in focus has changed the input pane display policy (manual/automatic). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  870. WNF_TKBN_KEYBOARD_GESTURE,A3BC6835,F840539,3568BCA33905840F, The keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  871. WNF_TKBN_KEYBOARD_LAYOUT_CHANGE,A3BC8035,F840539,3580BCA33905840F, The layout being shown by the touch keyboard has changed.
  872. WNF_TKBN_KEYBOARD_SET_VISIBLE,A3BCB835,F840539,35B8BCA33905840F, The touch keyboard should show or hide. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  873. WNF_TKBN_KEYBOARD_SET_VISIBLE_NOTIFICATION,A3BCC035,F840539,35C0BCA33905840F, Update the show/hide status of touch keyboard that is being tracked in tabtip. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  874. WNF_TKBN_KEYBOARD_VIEW_CHANGE,A3BC5835,F840539,3558BCA33905840F, The view being shown by the touch keyboard has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  875. WNF_TKBN_KEYBOARD_VISIBILITY,A3BC0835,F840539,3508BCA33905840F, The touch keyboard's appearance on the screen has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  876. WNF_TKBN_LANGUAGE,A3BC3035,F840539,3530BCA33905840F, The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  877. WNF_TKBN_MODERN_KEYBOARD_FOCUS_TRACKING,A3BC5035,F840539,3550BCA33905840F, Determines whether focus is in an editable field for the purposes of the modern keyboard. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  878. WNF_TKBN_RESTRICTED_KEYBOARD_GESTURE,A3BC7035,F840539,3570BCA33905840F, The restricted keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact.
  879. WNF_TKBN_RESTRICTED_KEYBOARD_LAYOUT_CHANGE,A3BC8835,F840539,3588BCA33905840F, The layout being shown by the restricted mode touch keyboard has changed.
  880. WNF_TKBN_RESTRICTED_KEYBOARD_VIEW_CHANGE,A3BC6035,F840539,3560BCA33905840F, The view being shown by the restricted mode touch keyboard has changed.
  881. WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITY,A3BC1035,F840539,3510BCA33905840F, The restricted mode touch keyboard's appearance on the screen has changed.
  882. WNF_TKBN_RESTRICTED_TOUCH_EVENT,A3BC2835,F840539,3528BCA33905840F, An application encountered a touch down/up event.
  883. WNF_TKBN_SYSTEM_IMMERSIVE_FOCUS_TRACKING,A3BC9835,F840539,3598BCA33905840F, A System Mode Application(Logon/OOBE) has encountered a focus change.
  884. WNF_TKBN_SYSTEM_TOUCH_EVENT,A3BCA035,F840539,35A0BCA33905840F, A System Mode application(Logon/OOBE) encountered a touch down/up event.
  885. WNF_TKBN_TOUCH_EVENT,A3BC2035,F840539,3520BCA33905840F, An application encountered a touch down/up event. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  886. WNF_TKBR_CHANGE_APP,A3BC1075,13840539,7510BCA339058413, This state name is used to notify apps about state changes in the Token Broker.
  887. WNF_TKBR_CHANGE_APP_INTERNAL,A3BC18F5,13840539,F518BCA339058413,
  888. WNF_TKBR_CHANGE_SYSTEM,A3BC08F5,13840539,F508BCA339058413, This state name is used to notify system components about state changes in the Token Broker.
  889. WNF_TMCN_ISTABLETMODE,A3BC0835,F850339,3508BCA33903850F, The computer has changed density mode. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  890. WNF_TOPE_INP_POINTER_DEVICE_ACTIVITY,A3BC0875,4960139,7508BCA339019604, Touch Event.
  891. WNF_TPM_CLEAR_PENDING,A3BC2075,418B1E39,7520BCA3391E8B41, This event signals a TPM Clear will be attempted.
  892. WNF_TPM_CLEAR_RESULT,A3BC2875,418B1E39,7528BCA3391E8B41, This event signals if ownership was taken during TPM Provisioning and the result of TPM Clear on last reboot.
  893. WNF_TPM_DEVICEID_STATE,A3BC1075,418B1E39,7510BCA3391E8B41, This event signals the state of the TPM-based DeviceID.
  894. WNF_TPM_DISABLE_DEACTIVATE_PENDING,A3BC3075,418B1E39,7530BCA3391E8B41, This event signals a TPM Disable or TPM Deactivate will be attempted.
  895. WNF_TPM_ENABLE_ACTIVATE_COMPLETED,A3BC3875,418B1E39,7538BCA3391E8B41, This event signals after the TPM is Enabled or Activated.
  896. WNF_TPM_MAINTENANCE_TASK_STATUS,A3BC4075,418B1E39,7540BCA3391E8B41, This event signals the TPM maintenance task status.
  897. WNF_TPM_OWNERSHIP_TAKEN,A3BC0875,418B1E39,7508BCA3391E8B41, This event signals when the Win32_TPM provider has completed taking ownership of the TPM.
  898. WNF_TPM_PROVISION_TRIGGER,A3BC1875,418B1E39,7518BCA3391E8B41, This event triggers the TPM provisioning/status check to run.
  899. WNF_TZ_AUTOTIMEUPDATE_STATE_CHANGED,A3BC3075,41C61439,7530BCA33914C641, This state is notified when autotimeupdate state changed. The data value is a DWORD that indicates if autotimeupdate is enabled (1) or disabled (0). SDDL comes from autotimesvc's account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml.
  900. WNF_TZ_LAST_TIME_SYNC_INFO,A3BC2075,41C61439,7520BCA33914C641, This event has information about last time sync. SDDL comes from autotimesvc's account.
  901. WNF_TZ_LEGACY_STORE_CHANGED,A3BC0875,41C61439,7508BCA33914C641, Time Zone Legacy store is updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  902. WNF_TZ_NETWORK_TIME_SYNC_TRIGGER,A3BC2875,41C61439,7528BCA33914C641, This event is used to trigger Network Sync. SDDL comes from autotimesvc's account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml.
  903. WNF_TZ_STORE_CHANGED,A3BC1075,41C61439,7510BCA33914C641, Time Zone store is updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  904. WNF_TZ_TIMEZONE_CHANGED,A3BC1875,41C61439,7518BCA33914C641, This state is notified when the timezone is changed via SetTimeZoneInformationByID - The data value is a UINT that indicates the new TZID. SDDL comes from ID_CAP_BUILTIN_SETTIME; ID_CAP_EVERYONE and tzautoupdate in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml.
  905. WNF_UBPM_CONSOLE_MONITOR,A3BC1075,C960C38,7510BCA3380C960C, The machine console monitor on/off state.
  906. WNF_UBPM_FRMU_ALLOWED,A3BC1875,C960C38,7518BCA3380C960C, The user is present and machine is on batteries and the battery level is above firmware update thershold.
  907. WNF_UBPM_POWER_SOURCE,A3BC0875,C960C38,7508BCA3380C960C, The machine power source state.
  908. WNF_UBPM_PRESHUTDOWN_PHASE,A3BC2075,C960C38,7520BCA3380C960C, The machine entered pre shutdown phase.
  909. WNF_UDA_CONTACT_SORT_CHANGED,A3BC2835,41870A38,3528BCA3380A8741, State name for aggregate sort and display order changes. SDDL comes from ID_CAP_COMMS_APPLICATIONS and ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml.
  910. WNF_UDM_SERVICE_INITIALIZED,A3BC0835,418B0A38,3508BCA3380A8B41, BOOL + UserContextToken indicating whether the UserDataService service has been initialized for the specified user. On OneCore; SDDL gives read access to callers with userDataSystem/userDataSystem capablity group and all access to IU/AU/System. On phone; SDDL comes from ID_CAP_APPOINTMENTS; ID_CAP_COMMS_COMMON; ID_CAP_CONTACTS; ID_CAP_EVERYONE; ID_CAP_PLATFORM_EXTENSIBILITY; UserDataSvc and ID_CAP_SMS in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml.
  911. WNF_UMDF_DRVMGR_STATUS,A3BC1075,7820338,7510BCA338038207, State name indicating the status of the UMDF driver manager.
  912. WNF_UMDF_WUDFSVC_START,A3BC0875,7820338,7508BCA338038207, Trigger the Driver Manager service start.
  913. WNF_UMGR_SESSION_ACTIVE_SHELL_USER_CHANGE,A3BC3035,13810338,3530BCA338038113, Session active shell user changed.
  914. WNF_UMGR_SESSIONUSER_TOKEN_CHANGE,A3BC2875,13810338,7528BCA338038113, Token for the session user changed.
  915. WNF_UMGR_SIHOST_READY,A3BC0835,13810338,3508BCA338038113, Shell Infrastructure host is ready.
  916. WNF_UMGR_SYSTEM_USER_CONTEXT_CHANGED,A3BC2075,13810338,7520BCA338038113, Default system user; as defined by start view; has changed.
  917. WNF_UMGR_USER_LOGIN,A3BC1075,13810338,7510BCA338038113, The user was logged in to the system.
  918. WNF_UMGR_USER_LOGOUT,A3BC1875,13810338,7518BCA338038113, The user was logged out of the system.
  919. WNF_UMGR_USER_TILE_CHANGED,A3BC3875,13810338,7538BCA338038113, The user tile for the specified SID was changed. The payload is the String user sid and the datasize is the byte count of MAX_PATH.
  920. WNF_USB_BILLBOARD_CHANGE,A3BC1075,41841D38,7510BCA3381D8441, This event indicates that the number of Billboard devices in the system has changed.
  921. WNF_USB_CHARGING_STATE,A3BC2075,41841D38,7520BCA3381D8441, This event indicates the USB charging state for this Windows device.
  922. WNF_USB_ERROR_NOTIFICATION,A3BC3075,41841D38,7530BCA3381D8441, This event indicates that a USB error notification needs to be published.
  923. WNF_USB_FUNCTION_CONTROLLER_STATE,A3BC2875,41841D38,7528BCA3381D8441, This event indicates the state of a USB function controller; such as detached; or attached; and successfully enumerated with host PC.
  924. WNF_USB_PEER_DEVICE_STATE,A3BC1875,41841D38,7518BCA3381D8441, This is the state of a peer device.
  925. WNF_USB_POLICY_MANAGER_HUB_COLLECTION_STATE,A3BC3875,41841D38,7538BCA3381D8441, This indicates that the hub collection in USB Policy Manager has changed.
  926. WNF_USB_TYPE_C_PARTNER_STATE,A3BC0875,41841D38,7508BCA3381D8441, This event indicates the state of a USB Type-C connector's partner device.
  927. WNF_USB_XHCI_AUDIO_OFFLOAD_STATE,A3BC4075,41841D38,7540BCA3381D8441, This event indicates the state of a USB XHCI controller's audio offload state.
  928. WNF_USO_ACTIVE_SESSION,A3BC2875,41891D38,7528BCA3381D8941, Signals that the current active session is changed.
  929. WNF_USO_ACTIVEHOURS_STARTED,A3BC7075,41891D38,7570BCA3381D8941, Signals that USO active hours have started.
  930. WNF_USO_DOWNLOAD_STARTED,A3BC4875,41891D38,7548BCA3381D8941, Signals that update download has started on lite servicing stack.
  931. WNF_USO_INSTALL_STARTED,A3BC5075,41891D38,7550BCA3381D8941, Signals that update install has started on lite servicing stack.
  932. WNF_USO_INSTALL_STATE,A3BC5875,41891D38,7558BCA3381D8941, Signals various install states on lite servicing stack.
  933. WNF_USO_REBOOT_BLOCK_REQUESTED,A3BC4075,41891D38,7540BCA3381D8941, Signals that USO should not reboot the system.
  934. WNF_USO_REBOOT_REQUIRED,A3BC2075,41891D38,7520BCA3381D8941, Signals that a reboot is required to complete the update session.
  935. WNF_USO_SERVICE_STOPPING,A3BC6075,41891D38,7560BCA3381D8941, Signals that USO is stopping.
  936. WNF_USO_SETTINGS_REFRESHED,A3BC6875,41891D38,7568BCA3381D8941, Signals that USO settings have been refreshed.
  937. WNF_USO_STATE_ATTENTION_REQUIRED,A3BC1075,41891D38,7510BCA3381D8941, Signals that a state encounter a condition that requires attention.
  938. WNF_USO_STATE_CHANGE,A3BC0875,41891D38,7508BCA3381D8941, Signals that a state transition occurred for an update session.
  939. WNF_USO_UPDATE_PROGRESS,A3BC1875,41891D38,7518BCA3381D8941, Signals the a change in progess of an update session.
  940. WNF_USO_UPDATE_SUCCEEDED,A3BC3075,41891D38,7530BCA3381D8941, Signals that updates have installed successfully on lite servicing stack.
  941. WNF_USO_UPTODATE_STATUS_CHANGED,A3BC3875,41891D38,7538BCA3381D8941, Signals that the machine's up to date status has changed.
  942. WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGERED,A3BC1475,41951A38,7514BCA3381A9541, Triggered when the lock screen is dismissed to kick-off trusted signals.
  943. WNF_UTS_USERS_ENROLLED,A3BC0C75,41951A38,750CBCA3381A9541, Indicates whether there are any enrolled users.
  944. WNF_VAN_VANUI_STATUS,A3BC0875,41880F3B,7508BCA33B0F8841, The VAN UI open close status.
  945. WNF_VPN_CLIENT_CONNECTIVITY_STATUS,A3BC0875,41881E3B,7508BCA33B1E8841, The VPN Client connectivity status. SDDL gives RasMan read/write permissions; rescap:networkingVpnProvider read permissions; and Authenticated User read permissions.
  946. WNF_VTSV_CDS_SYNC,A3BC0875,17951A3B,7508BCA33B1A9517, Notification for syncing CDS WebCredential store.
  947. WNF_WAAS_FEATURE_IMPACT,A3BC1075,12870F3A,7510BCA33A0F8712, WaaS Assessment Impact level for feature update.
  948. WNF_WAAS_QUALITY_IMPACT,A3BC0875,12870F3A,7508BCA33A0F8712, WaaS Assessment Impact level for quality update.
  949. WNF_WBIO_ENROLLMENT_FINISHED,A3BC0875,E8F0C3A,7508BCA33A0C8F0E, This event is fired when an enrollment completes; either successfully; or unsuccessfully.
  950. WNF_WCDS_SYNC_WLAN,A3BC0875,12820D3A,7508BCA33A0D8212, State name for starting the WLAN scheduled task.
  951. WNF_WCM_INTERFACE_CONNECTION_STATE,A3BC2875,418B0D3A,7528BCA33A0D8B41, This event signals when a WCM-managed network interface has changed its connection quality state.
  952. WNF_WCM_INTERFACE_LIST,A3BC0875,418B0D3A,7508BCA33A0D8B41, This event signals when a WCM-managed network interface has been added or removed.
  953. WNF_WCM_MAPPING_POLICY_UPDATED,A3BC1875,418B0D3A,7518BCA33A0D8B41, WNF state for refreshing WCM service mapping policies cache.
  954. WNF_WCM_PROFILE_CONFIG_UPDATED,A3BC2075,418B0D3A,7520BCA33A0D8B41, WNF state for refreshing WCM's selection multiplex table and selectable connection list.
  955. WNF_WCM_SERVICE_STATUS,A3BC1075,418B0D3A,7510BCA33A0D8B41, Connection Manager service restart.
  956. WNF_WDAG_SETTINGS_CHANGED_SYSTEM,A3BC1075,6870A3A,7510BCA33A0A8706, A Settings for WDAG requiring system context has changed.
  957. WNF_WDAG_SETTINGS_CHANGED_USER,A3BC0875,6870A3A,7508BCA33A0A8706, A Settings for WDAG requiring the user context has changed.
  958. WNF_WDSC_ACCOUNT_PROTECTION_REFRESH,A3BC0875,2950A3A,7508BCA33A0A9502, This event triggers a refresh for the account pillar state.
  959. WNF_WEBA_CTAP_DEVICE_CHANGE_NOTIFY,A3BC1075,840B3A,7510BCA33A0B8400, This event signals CTAP device was inserted or tapped.
  960. WNF_WEBA_CTAP_DEVICE_STATE,A3BC0875,840B3A,7508BCA33A0B8400, This event signals CTAP device state changes.
  961. WNF_WER_CRASH_STATE,A3BC1875,41940B3A,7518BCA33A0B9441, Information about applications currently crashing.
  962. WNF_WER_QUEUED_REPORTS,A3BC1075,41940B3A,7510BCA33A0B9441, The number of reports queued to the machine store. CAPABILITY_SID_LpacInstrumentation - S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187.
  963. WNF_WER_SERVICE_START,A3BC0875,41940B3A,7508BCA33A0B9441, The WER service needs to start. CAPABILITY_SID_LpacInstrumentation - S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187.
  964. WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY,A3BC0875,1287083A,7508BCA33A088712, Free network available or not.
  965. WNF_WFDN_MOVEMENT_DETECTED,A3BC1075,F82083A,7510BCA33A08820F, Event indicating that the user may have moved to a different location during the Infracast session. Value is a counter indicating how many times movement has been detected.
  966. WNF_WFDN_STAY_CONNECTED_TRIGGER,A3BC1875,F82083A,7518BCA33A08820F, Event indicating the current state of the infra walk-away listener. 0: Listening; 1: User elected to stay connected; 2: Auto Disconnect was triggered; 3: Session ended without triggering movement detection.
  967. WNF_WFDN_WFD_DISCONNECTION_PROPERTIES,A3BC0875,F82083A,7508BCA33A08820F, Reports properties about a Wi-Fi Display disconnect.
  968. WNF_WFS_FAMILYMEMBERLOGIN,A3BC1875,4195083A,7518BCA33A089541, Family member login event.
  969. WNF_WFS_SETTINGS,A3BC0875,4195083A,7508BCA33A089541, Family Safety settings have changed in the cloud service but have not been downloaded and committed.
  970. WNF_WFS_SETTINGSREFRESH,A3BC2075,4195083A,7520BCA33A089541, Family Safety settings have changed and have downloaded and committed. Clients should refresh Family Safety settings.
  971. WNF_WFS_TIMEREMAININGALERTS,A3BC1075,4195083A,7510BCA33A089541, Family Safety time remaining alerts to warn the user the allocated time is running out. The data is published as json blob with fileds U.SID for User SID as wide character and TR for time remaining in minutes as int value.
  972. WNF_WHTP_WINHTTP_PROXY_AUTHENTICATION_REQUIRED,A3BC1075,1192063A,7510BCA33A069211, A proxy has returned a 407 status code.
  973. WNF_WHTP_WINHTTP_PROXY_DISCOVERED,A3BC0875,1192063A,7508BCA33A069211, A network proxy has been discovered. WinHttpAutoProxySvc can write; NlaSvc can read.
  974. WNF_WIFI_AOAC_STATUS,A3BC4875,880073A,7548BCA33A078008, State name for Wifi power status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  975. WNF_WIFI_AVERAGE_TRANSMIT,A3BC6875,880073A,7568BCA33A078008, Average peak transmitted traffic seen by NCSI.
  976. WNF_WIFI_CONNECTION_SCORE,A3BC5875,880073A,7558BCA33A078008, State name for Wifi connection status and connection score updates.
  977. WNF_WIFI_CONNECTION_STATUS,A3BC0875,880073A,7508BCA33A078008, State name for Wifi radio and connection status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  978. WNF_WIFI_CPL_STATUS,A3BC1075,880073A,7510BCA33A078008, State name for Wifi CPL status flags.
  979. WNF_WIFI_HOTSPOT2_REGISTRATION_STATUS,A3BC9075,880073A,7590BCA33A078008, State name for triggering hotspot2 registration status from online signup server.
  980. WNF_WIFI_HOTSPOT_HOST_READY,A3BC2875,880073A,7528BCA33A078008, State name for Wifi Hotspot Host ready flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  981. WNF_WIFI_L3_AUTH_STATE,A3BC8075,880073A,7580BCA33A078008, State for triggering browser UI when a network is hijacked. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  982. WNF_WIFI_MEDIA_STREAMING_MODE,A3BC7075,880073A,7570BCA33A078008, Last media streaming mode state change.
  983. WNF_WIFI_MOVEMENT_DETECTED,A3BCA075,880073A,75A0BCA33A078008, Event indicating that the user may have moved to a different location based on nearby AP RSSI and other signals. Value is a counter indicating how many times movement has been detected.
  984. WNF_WIFI_PROTECTED_SCENARIO,A3BC9875,880073A,7598BCA33A078008, Signals that the Wi-Fi stack is handling an important scenario which must be protected from disruptive activity such as unexpected scans; or activity on a shared radio.
  985. WNF_WIFI_SERVICE_NOTIFICATIONS,A3BC2075,880073A,7520BCA33A078008, Notifications received from the WiFi Conn Svc. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  986. WNF_WIFI_TASK_TRIGGER,A3BC7875,880073A,7578BCA33A078008, State name triggering WiFiNetworkManager background task. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  987. WNF_WIFI_TILE_UPDATE,A3BC6075,880073A,7560BCA33A078008, State name for Wifi network tiles updated. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml.
  988. WNF_WIFI_WLANSVC_NOTIFICATION,A3BC8875,880073A,7588BCA33A078008, This event sends notifications from wlansvc.
  989. WNF_WIL_BOOT_FEATURE_STORE,A3BC1475,418A073A,7514BCA33A078A41, Event indicating the Boot feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml.
  990. WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_1,A3BC1C75,418A073A,751CBCA33A078A41, Event to indicate the first use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  991. WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_2,A3BC2475,418A073A,7524BCA33A078A41, Event to indicate the first use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  992. WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_3,A3BC2C75,418A073A,752CBCA33A078A41, Event to indicate the first use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  993. WNF_WIL_FEATURE_HEALTH_TRACKING_1,A3BC4C75,418A073A,754CBCA33A078A41, Event to indicate uniquely observed code failures on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  994. WNF_WIL_FEATURE_HEALTH_TRACKING_2,A3BC5475,418A073A,7554BCA33A078A41, Event to indicate uniquely observed code failures on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  995. WNF_WIL_FEATURE_HEALTH_TRACKING_3,A3BC5C75,418A073A,755CBCA33A078A41, Event to indicate uniquely observed code failures on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  996. WNF_WIL_FEATURE_HEALTH_TRACKING_4,A3BC6475,418A073A,7564BCA33A078A41, Event to indicate uniquely observed code failures on this device (4). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  997. WNF_WIL_FEATURE_HEALTH_TRACKING_5,A3BC6C75,418A073A,756CBCA33A078A41, Event to indicate uniquely observed code failures on this device (5). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  998. WNF_WIL_FEATURE_HEALTH_TRACKING_6,A3BC7475,418A073A,7574BCA33A078A41, Event to indicate uniquely observed code failures on this device (6). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  999. WNF_WIL_FEATURE_STORE,A3BC0C75,418A073A,750CBCA33A078A41, Event indicating the Normal feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml.
  1000. WNF_WIL_FEATURE_USAGE_FOR_SRUM,A3BC9835,418A073A,3598BCA33A078A41, Event indicates there is unique and custom usage of a feature. This is for SRUM consumption. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1001. WNF_WIL_FEATURE_USAGE_TRACKING_1,A3BC3475,418A073A,7534BCA33A078A41, Event to indicate unique use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1002. WNF_WIL_FEATURE_USAGE_TRACKING_2,A3BC3C75,418A073A,753CBCA33A078A41, Event to indicate unique use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1003. WNF_WIL_FEATURE_USAGE_TRACKING_3,A3BC4475,418A073A,7544BCA33A078A41, Event to indicate unique use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1004. WNF_WIL_MACHINE_FEATURE_STORE,A3BC7C75,418A073A,757CBCA33A078A41, Event indicates modification of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1005. WNF_WIL_MACHINE_FEATURE_STORE_MODIFIED,A3BC8075,418A073A,7580BCA33A078A41, Event fires once per boot on modification of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1006. WNF_WIL_USER_FEATURE_STORE,A3BC88F5,418A073A,F588BCA33A078A41, Event indicates modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1007. WNF_WIL_USER_FEATURE_STORE_MODIFIED,A3BC90F5,418A073A,F590BCA33A078A41, Event fires once per user session on modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
  1008. WNF_WNS_CONNECTIVITY_STATUS,A3BC0875,4195003A,7508BCA33A009541, The WNS Connection Provider connectivity status.
  1009. WNF_WOF_OVERLAY_CONFIGURATION_CHANGE,A3BC0875,4180013A,7508BCA33A018041, Overlay configuration change.
  1010. WNF_WOSC_FEATURE_CONFIGURATION_CHANGED,A3BC1075,295013A,7510BCA33A019502, Triggered every time there is a change in the OneSettings configuration for Velocity feature configurations.
  1011. WNF_WOSC_ML_MODELS_CHANGED,A3BC0875,295013A,7508BCA33A019502, Triggered every time there is a change in the OneSettings configuration for machine learning model configurations.
  1012. WNF_WPN_PLATFORM_INITIALIZED,A3BC10F5,41881E3A,F510BCA33A1E8841, This WNF state can be used by first party Apps / Services to determine when WPN platform is ready to handle app related requests like posting toast / tile and getting channel uri.
  1013. WNF_WPN_SYSTEM_PLATFORM_READY,A3BC1875,41881E3A,7518BCA33A1E8841, State indicating that system notification platform has been registered and ready to user.
  1014. WNF_WPN_USER_IN_SESSION_PLATFORM_READY,A3BC2035,41881E3A,3520BCA33A1E8841, This WNF state indicates that USER_PLATFORM_READY was fired for a user in the current session. This is intended to provide a workaround for the inability to use RtlSubscribeWnfStateChangeNotification for a user other than the current process token. A process can register for this WNF and then poll the per-user WNF states under impersonation.
  1015. WNF_WPN_USER_PLATFORM_READY,A3BC08F5,41881E3A,F508BCA33A1E8841, This WNF state indicates to users of WPN endpoints (except AppEndpoint) that platform is ready to use. This state can also be used to know if WPN platform restarted.
  1016. WNF_WSC_SECURITY_CENTER_USER_NOTIFICATION,A3BC0875,41851D3A,7508BCA33A1D8541, A notification dialog should be shown to the user.
  1017. WNF_WSQM_IS_OPTED_IN,A3BC0875,C971D3A,7508BCA33A1D970C, Mirrors the state of CEIPEnable and CEIPSampledIn registry settings.
  1018. WNF_WUA_AU_SCAN_COMPLETE,A3BC1075,41871B3A,7510BCA33A1B8741, Triggered each time an AU scan is completed.
  1019. WNF_WUA_CALL_HANG,A3BC1875,41871B3A,7518BCA33A1B8741, State stores information regarding WU call hangs.
  1020. WNF_WUA_NUM_PER_USER_UPDATES,A3BC08F5,41871B3A,F508BCA33A1B8741, State stores the number of per-user updates for the current user.
  1021. WNF_WUA_SERVICE_HANG,A3BC2075,41871B3A,7520BCA33A1B8741, State stores information regarding WU service hangs.
  1022. WNF_WUA_STAGEUPDATE_DETAILS,A3BC2875,41871B3A,7528BCA33A1B8741, Triggered when a StageUpdate call has completed for a phone update installation.
  1023. WNF_WUA_UPDATE_EXPIRING,A3BC3075,41871B3A,7530BCA33A1B8741, Indicates an update will expire on the next WU service scavenge task. The data type is a GUID which represents the update ID.
  1024. WNF_WWAN_CELLULAR_STATE_SNAPSHOT_CHANGE,A3BC1875,F87193A,7518BCA33A19870F, This event is published by WwanSvc to indicate a change in cellular state snapshot.
  1025. WNF_WWAN_EUICC_ARRIVAL,A3BC1075,F87193A,7510BCA33A19870F, This event is published by WwanSvc to indicate the arrival of an eUICC.
  1026. WNF_WWAN_OBJECT_LIST,A3BC0875,F87193A,7508BCA33A19870F, Table of all modems and executors under it.
  1027. WNF_WWAN_TASK_TRIGGER,A3BC2075,F87193A,7520BCA33A19870F, State name triggering WiFiTask from WwanSvc.
  1028. WNF_XBOX_ACCESSIBILITY_EXCLUSIVE_INPUT_MODE_CHANGED,A3BE9075,19890C35,7590BEA3350C8919, The exclusive input modality for an accessibility component changed.
  1029. WNF_XBOX_ACCESSIBILITY_NARRATOR_ENABLED,A3BDF075,19890C35,75F0BDA3350C8919, Indicates whether the Narrator is enabled. Payload is UINt32 with 1 (enabled) or 0 (disabled).
  1030. WNF_XBOX_ACHIEVEMENT_TRACKER_STATE_CHANGED,A3BEA075,19890C35,75A0BEA3350C8919, Notification for when the Achievement Tracker's state should change.
  1031. WNF_XBOX_ACHIEVEMENTS_RAW_NOTIFICATION_RECEIVED,A3BC8075,19890C35,7580BCA3350C8919, A new achievements-related raw notifications was received.
  1032. WNF_XBOX_ACTIVE_BACKGROUNDAUDIO_APPLICATION_CHANGED,A3BE5875,19890C35,7558BEA3350C8919, The application providing audio from the background has changed.
  1033. WNF_XBOX_ADJUST_SNAP_CPU_AFFINITY,A3BE3075,19890C35,7530BEA3350C8919, Adjust an app's CPU affinity if in constrained mode.
  1034. WNF_XBOX_APPLICATION_ACTIVATING,A3BC1875,19890C35,7518BCA3350C8919, An application is activating.
  1035. WNF_XBOX_APPLICATION_COM_RESILIENCY_STATUS_CHANGED,A3BCD875,19890C35,75D8BCA3350C8919, Application's COM resiliency status has changed.
  1036. WNF_XBOX_APPLICATION_COMPONENT_FOCUS,A3BC2075,19890C35,7520BCA3350C8919, The currently focused application component has changed.
  1037. WNF_XBOX_APPLICATION_CONTEXT_CHANGED,A3BC0875,19890C35,7508BCA3350C8919, The application specific context has changed in steady state. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  1038. WNF_XBOX_APPLICATION_CURRENT_USER_CHANGED,A3BE0075,19890C35,7500BEA3350C8919, The current user of the application has changed.
  1039. WNF_XBOX_APPLICATION_ERROR,A3BC6075,19890C35,7560BCA3350C8919, Application error handler.
  1040. WNF_XBOX_APPLICATION_FOCUS_CHANGED,A3BC1075,19890C35,7510BCA3350C8919, The currently focused application has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  1041. WNF_XBOX_APPLICATION_LAYOUT_CHANGED,A3BC9075,19890C35,7590BCA3350C8919, One or more application layouts changed.
  1042. WNF_XBOX_APPLICATION_LICENSE_CHANGED,A3BD0075,19890C35,7500BDA3350C8919, The license used by the application has changed.
  1043. WNF_XBOX_APPLICATION_NO_LONGER_RUNNING,A3BC5075,19890C35,7550BCA3350C8919, An application is no longer running.
  1044. WNF_XBOX_AUTO_SIGNIN_IN_PROGRESS,A3BDE075,19890C35,75E0BDA3350C8919, Indicates whether the shell is in the process of auto-signin. Payload is UINT32 with a 1 or 0.
  1045. WNF_XBOX_AUTOPLAY_CONTENT_DETECTED,A3BC5875,19890C35,7558BCA3350C8919, An optical disc or other media has been detected with content.
  1046. WNF_XBOX_CLOUD_SETTINGS_UPDATED,A3BF2075,19890C35,7520BFA3350C8919, A cloud settings collection was updated.
  1047. WNF_XBOX_CLUB_RAW_NOTIFICATION_RECEIVED,A3BEE875,19890C35,75E8BEA3350C8919, A new club-related raw notifications was received.
  1048. WNF_XBOX_CLUBCHAT_RAW_NOTIFICATION_RECEIVED,A3BEF075,19890C35,75F0BEA3350C8919, A new club chat-related raw notifications was received.
  1049. WNF_XBOX_COMMANDSERVICE_RAW_NOTIFICATION_RECEIVED,A3BF6075,19890C35,7560BFA3350C8919, A new Command Service raw notification was received.
  1050. WNF_XBOX_COPYONLAN_UPLOAD_STATE_CHANGED,A3BF5075,19890C35,7550BFA3350C8919, Copy on LAN upload state has changed.
  1051. WNF_XBOX_CORTANA_SIGNEDIN_USERS_GRAMMAR_UPDATE_NOTIFICATION,A3BE2075,19890C35,7520BEA3350C8919, Notification for when signed in users change results in rebuilding grammars for cortana.
  1052. WNF_XBOX_CORTANA_TV_GRAMMAR_UPDATE_NOTIFICATION,A3BE1875,19890C35,7518BEA3350C8919, Notification for when TV grammars for cortana needs rebuilding.
  1053. WNF_XBOX_CORTANA_USER_CHANGED_UPDATE_NOTIFICATION,A3BE8875,19890C35,7588BEA3350C8919, Notification for when the active user of Cortana changes from signing in/out/switching user.
  1054. WNF_XBOX_CORTANAOVERLAY_VISIBILITY_CHANGED,A3BDC875,19890C35,75C8BDA3350C8919, The visibility of the Cortana Overlay view has changed.
  1055. WNF_XBOX_DASHBOARD_DIRECT_ACTIVATION,A3BF5875,19890C35,7558BFA3350C8919, Event to trigger direct activation of xbox dashboard.
  1056. WNF_XBOX_ERA_FAST_ITERATION_STATUS_CHANGED,A3BF2875,19890C35,7528BFA3350C8919, ERA Fast Iteration Mode has changed.
  1057. WNF_XBOX_ERA_TITLE_LAUNCH_NOTIFICATION,A3BD5875,19890C35,7558BDA3350C8919, ERA launch notification with XBL title info.
  1058. WNF_XBOX_ERA_VM_INSTANCE_CHANGED,A3BE0875,19890C35,7508BEA3350C8919, ERA VM Instance has come up or gone down.
  1059. WNF_XBOX_ERA_VM_IOPRIORITY_CHANGED,A3BE7075,19890C35,7570BEA3350C8919, ERA VM IO priority has been changed.
  1060. WNF_XBOX_ERA_VM_STATUS_CHANGED,A3BC8875,19890C35,7588BCA3350C8919, ERA VM status has changed.
  1061. WNF_XBOX_EXIT_SILENT_BOOT_MODE,A3BCF875,19890C35,75F8BCA3350C8919, The system is exiting silent boot mode.
  1062. WNF_XBOX_EXPANDED_RESOURCES_INACTIVE,A3BF0875,19890C35,7508BFA3350C8919, An expandedResources app has gone inactive.
  1063. WNF_XBOX_EXTENDED_RESOURCE_MODE_CHANGED,A3BDD875,19890C35,75D8BDA3350C8919, Extended resource mode has been toggled.
  1064. WNF_XBOX_GAMER_ACCOUNT_CHANGED,A3BE6875,19890C35,7568BEA3350C8919, The local gamer account has signed in or out. Payload is uint32 representing sessionid.
  1065. WNF_XBOX_GLOBAL_SPEECH_INPUT_NOTIFICATION,A3BDF875,19890C35,75F8BDA3350C8919, A global speech command was recognized that translates to a controller button press.
  1066. WNF_XBOX_GLOBALIZATION_SETTING_CHANGED,A3BC4875,19890C35,7548BCA3350C8919, An application package has been removed.
  1067. WNF_XBOX_GUEST_VM_CRASH_DUMP_NOTIFICATION,A3BF7075,19890C35,7570BFA3350C8919, A new guest VM crash dump file was written.
  1068. WNF_XBOX_GUIDE_DIRECT_ACTIVATION,A3BEA875,19890C35,75A8BEA3350C8919, Event to trigger direct activation of xbox guide when nexus is pressed.
  1069. WNF_XBOX_HOST_STORAGE_CONFIGURATION_CHANGED,A3BCF075,19890C35,75F0BCA3350C8919, A storage device was either plugged or unplugged.
  1070. WNF_XBOX_HOST_XVC_CORRUPTION_DETECTED,A3BF8075,19890C35,7580BFA3350C8919, XVC corruption has been detected.
  1071. WNF_XBOX_IDLE_DIMMER_CHANGED,A3BC4075,19890C35,7540BCA3350C8919, Idle dimmer has changed state.
  1072. WNF_XBOX_KEYBOARD_LOCALE_CHANGED,A3BE6075,19890C35,7560BEA3350C8919, Indicates that the desired keyboard locale has changed.
  1073. WNF_XBOX_KINECT_IS_REQUIRED,A3BE2875,19890C35,7528BEA3350C8919, An application that requires Kinect has connected to the NuiService.
  1074. WNF_XBOX_LIBRARY_RAW_NOTIFICATION_RECEIVED,A3BEB875,19890C35,75B8BEA3350C8919, A new library-related raw notifications was received.
  1075. WNF_XBOX_LIVE_CONNECTIVITY_CHANGED,A3BC7075,19890C35,7570BCA3350C8919, Connectivity to the Xbox LIVE service has changed.
  1076. WNF_XBOX_LIVETV_RAW_NOTIFICATION_RECEIVED,A3BED875,19890C35,75D8BEA3350C8919, A new live tv-related raw notifications was received.
  1077. WNF_XBOX_LIVETV_TUNER_COUNT_CHANGED,A3BD9075,19890C35,7590BDA3350C8919, The number of LiveTV tuners connected to the system has changed.
  1078. WNF_XBOX_MEDIA_IS_PLAYING_CHANGED,A3BF0075,19890C35,7500BFA3350C8919, Notification of whether any media is playing.
  1079. WNF_XBOX_MESSAGING_RAW_NOTIFICATION_RECEIVED,A3BEC075,19890C35,75C0BEA3350C8919, A new messaging-related raw notifications was received.
  1080. WNF_XBOX_MSA_ENVIRONMENT_CONFIGURED,A3BD2075,19890C35,7520BDA3350C8919, The MSA and WNS environments have been configured to match the XBL environment.
  1081. WNF_XBOX_MULTIPLAYER_RAW_NOTIFICATION_RECEIVED,A3BED075,19890C35,75D0BEA3350C8919, A new multiplayer-related raw notifications was received.
  1082. WNF_XBOX_NARRATOR_INPUT_LEARNING_MODE_CHANGED,A3BF3875,19890C35,7538BFA3350C8919, Narrator input learning mode changed.
  1083. WNF_XBOX_NARRATOR_RECT_CHANGED,A3BDA875,19890C35,75A8BDA3350C8919, The rectangle visual of the Narrator has changed.
  1084. WNF_XBOX_NEON_SETTING_CHANGED,A3BF4875,19890C35,7548BFA3350C8919, Immersive background or connected animation setting changed.
  1085. WNF_XBOX_NOTIFICATION_SETTING_CHANGED,A3BF6875,19890C35,7568BFA3350C8919, A notification settings was updated.
  1086. WNF_XBOX_NOTIFICATION_UNREAD_COUNT,A3BDD075,19890C35,75D0BDA3350C8919, Number of unread notifications for the current system user.
  1087. WNF_XBOX_NTM_CONSTRAINED_MODE_CHANGED,A3BF3075,19890C35,7530BFA3350C8919, The Network Transfer Manager's constrained mode changed.
  1088. WNF_XBOX_PACKAGE_INSTALL_STATE_CHANGED,A3BC3875,19890C35,7538BCA3350C8919, A new application package has been added or an existing one has been removed.
  1089. WNF_XBOX_PACKAGE_STREAMING_STATE,A3BD7075,19890C35,7570BDA3350C8919, Current state of the streaming package.
  1090. WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_LAUNCH,A3BC3075,19890C35,7530BCA3350C8919, A package is about to be unmounted from the System OS ready to launch it on the Title OS.
  1091. WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_UNINSTALL,A3BDB075,19890C35,75B0BDA3350C8919, A package is about to be unmounted from the System OS for uninstall.
  1092. WNF_XBOX_PACKAGECACHE_CHANGED,A3BD9875,19890C35,7598BDA3350C8919, A change has been made to the package cache.
  1093. WNF_XBOX_PARENTAL_RESTRICTIONS_CHANGED,A3BF1075,19890C35,7510BFA3350C8919, The maximum age rating currently permissable has changed.
  1094. WNF_XBOX_PARTY_OVERLAY_STATE_CHANGED,A3BF1875,19890C35,7518BFA3350C8919, Notification for when the Party Overlay's state should change.
  1095. WNF_XBOX_PASS3_UPDATE_NOTIFICATION,A3BD1875,19890C35,7518BDA3350C8919, Pass 3 system update has progressed and is sending a notification.
  1096. WNF_XBOX_PEOPLE_RAW_NOTIFICATION_RECEIVED,A3BEC875,19890C35,75C8BEA3350C8919, A new people-related raw notifications was received.
  1097. WNF_XBOX_PROACTIVE_NOTIFICATION_TRIGGERED,A3BE9875,19890C35,7598BEA3350C8919, Proactive notification service is triggered.
  1098. WNF_XBOX_QUERY_UPDATE_NOTIFICATION,A3BD8075,19890C35,7580BDA3350C8919, An update is available for installing content.
  1099. WNF_XBOX_REMOTE_SIGNOUT,A3BDE875,19890C35,75E8BDA3350C8919, A local user has signed out remotely via SPOP.
  1100. WNF_XBOX_REPOSITORY_CHANGED,A3BD8875,19890C35,7588BDA3350C8919, A change has been made to the pre-indexed state repository.
  1101. WNF_XBOX_RESET_IDLE_TIMER,A3BE1075,19890C35,7510BEA3350C8919, Idle monitor timer should be reset due to user activity.
  1102. WNF_XBOX_SAFEAREA_SETTING_CHANGED,A3BE5075,19890C35,7550BEA3350C8919, Indicates whether the safe area setting is enabled. Payload is UINT32 with a 1 or 0.
  1103. WNF_XBOX_SEND_LTV_COMMAND_REQUESTED,A3BDB875,19890C35,75B8BDA3350C8919, A module requested for an ltv command to be issued.
  1104. WNF_XBOX_SETTINGS_RAW_NOTIFICATION_RECEIVED,A3BEF875,19890C35,75F8BEA3350C8919, A new settings-related raw notifications was received.
  1105. WNF_XBOX_SHELL_DATACACHE_ENTITY_CHANGED,A3BDC075,19890C35,75C0BDA3350C8919, An entity has changed in the shell data cache.
  1106. WNF_XBOX_SHELL_INITIALIZED,A3BD0875,19890C35,7508BDA3350C8919, The system shell is initialized and ready.
  1107. WNF_XBOX_SHELL_TOAST_NOTIFICATION,A3BC2875,19890C35,7528BCA3350C8919, A new toast notification has been delivered to the shell.
  1108. WNF_XBOX_SIP_FOCUS_TRANSFER_NOTIFICATION,A3BD3875,19890C35,7538BDA3350C8919, It is possible to transfer focus away from the Software Input Pane.
  1109. WNF_XBOX_SIP_VISIBILITY_CHANGED,A3BD2875,19890C35,7528BDA3350C8919, The visibility of the Software Input Pane has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  1110. WNF_XBOX_SPEECH_INPUT_DEVICE,A3BE7875,19890C35,7578BEA3350C8919, Input device changed for OneCore speech.
  1111. WNF_XBOX_STORAGE_CHANGED,A3BD6875,19890C35,7568BDA3350C8919, A storage device; or its contents; have changed.
  1112. WNF_XBOX_STORAGE_ERROR,A3BC6875,19890C35,7568BCA3350C8919, Handler for achievement cache and game save storage.
  1113. WNF_XBOX_STORAGE_STATUS,A3BD6075,19890C35,7560BDA3350C8919, Status of attached storage devices.
  1114. WNF_XBOX_STREAMING_QUEUE_CHANGED,A3BD7875,19890C35,7578BDA3350C8919, The install streaming queue contents have changed.
  1115. WNF_XBOX_SUSPEND_SKELETAL_TRACKING_INITIALIZATION,A3BF4075,19890C35,7540BFA3350C8919, Initialization of the skeletal tracking pipeline should be suspended / resumed.
  1116. WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGED,A3BCA075,19890C35,75A0BCA3350C8919, System constrained status has changed. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
  1117. WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGED,A3BD3075,19890C35,7530BDA3350C8919, Game streaming state has changed.
  1118. WNF_XBOX_SYSTEM_IDLE_TIMEOUT_CHANGED,A3BC9875,19890C35,7598BCA3350C8919, System Idle Timeout has changed.
  1119. WNF_XBOX_SYSTEM_LOW_POWER_MAINTENANCE_WORK_ALLOWED,A3BD5075,19890C35,7550BDA3350C8919, Maintenance work is allowed in low power mode.
  1120. WNF_XBOX_SYSTEM_TITLE_AUTH_STATUS_CHANGED,A3BC7875,19890C35,7578BCA3350C8919, System Title Authentication status has changed.
  1121. WNF_XBOX_SYSTEM_USER_CONTEXT_CHANGED,A3BCE075,19890C35,75E0BCA3350C8919, Default system user; as defined by start view; has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
  1122. WNF_XBOX_SYSTEMUI_RAW_NOTIFICATION_RECEIVED,A3BEE075,19890C35,75E0BEA3350C8919, A new SystemUI-related raw notifications was received.
  1123. WNF_XBOX_TEST_NETWORK_CONNECTION_COMPLETE,A3BF7875,19890C35,7578BFA3350C8919, User initiated network connection test has completed with no errors.
  1124. WNF_XBOX_TITLE_SPOP_VETO_RECEIVED,A3BEB075,19890C35,75B0BEA3350C8919, A title SPOP veto has been received.
  1125. WNF_XBOX_VIDEOPLAYER_ACTIVEPLAYER,A3BE3875,19890C35,7538BEA3350C8919, The active shared video player host has changed.
  1126. WNF_XBOX_VIDEOPLAYER_PLAYBACKPROGRESS,A3BE4875,19890C35,7548BEA3350C8919, The video player app has changed playback progress.
  1127. WNF_XBOX_VIDEOPLAYER_PLAYERSTATE,A3BE4075,19890C35,7540BEA3350C8919, The video player app has changed internal state.
  1128. WNF_XBOX_WPN_PLATFORM_HOST_INITIALIZED,A3BDA075,19890C35,75A0BDA3350C8919, The WPN platform host is initialized and ready.
  1129. WNF_XBOX_XAM_SMB_SHARES_INIT_ALLOW_SYSTEM_READY,A3BD4075,19890C35,7540BDA3350C8919, SMB shares have been launched.
  1130. WNF_XBOX_XBBLACKBOX_SNAP_NOTIFICATION,A3BD4875,19890C35,7548BDA3350C8919, A snap of XBBlackbox has occurred.
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!