日志名称: Microsoft-Windows-AppModel-Runtime/Admin
来源: Microsoft-Windows-AppModel-Runtime
日期: 2019/9/24 20:27:00
事件 ID: 69
任务类别: 无
级别: 错误
关键字: Process
用户: SYSTEM
计算机: DESKTOP-HLE5B38
描述:
修改用户 DESKTOP-HLE5B38\19895 的程序包 Microsoft.MicrosoftStickyNotes_3.7.60.0_x64__8wekyb3d8bbwe 的 AppModel 运行时状态时失败,错误代码为 0x490 (当前状态 = 0x0,所需状态 = 0x20)。
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{f1ef270a-0d32-4352-ba52-dbab41e1d859}" />
<EventID>69</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000001</Keywords>
<TimeCreated SystemTime="2019-09-24T12:27:00.258523200Z" />
<EventRecordID>1756</EventRecordID>
<Correlation ActivityID="{4bc57973-6a2a-0003-b3db-c74b2a6ad501}" />
<Execution ProcessID="7312" ThreadID="6976" />
<Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
<Computer>DESKTOP-HLE5B38</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">1168</Data>
<Data Name="PackageFullName">Microsoft.MicrosoftStickyNotes_3.7.60.0_x64__8wekyb3d8bbwe</Data>
<Data Name="User">S-1-5-21-3267416220-2553771882-3693881456-1001</Data>
<Data Name="DesiredStatus">32</Data>
<Data Name="CurrentStatus">0</Data>
</EventData>
</Event>
日志名称: System
来源: Microsoft-Windows-WindowsUpdateClient
日期: 2019/9/24 20:25:48
事件 ID: 20
任务类别: Windows 更新代理
级别: 错误
关键字: 故障,安装
用户: SYSTEM
计算机: DESKTOP-HLE5B38
描述:
安装失败: Windows 安装下列更新失败,错误为 0x80070057: 9NCGJX5QLP9M-AppUp.IntelMediaSDKDFP。
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945a8954-c147-4acd-923f-40c45405a658}" />
<EventID>20</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>13</Opcode>
<Keywords>0x8000000000000028</Keywords>
<TimeCreated SystemTime="2019-09-24T12:25:48.407800500Z" />
<EventRecordID>4513</EventRecordID>
<Correlation />
<Execution ProcessID="4224" ThreadID="8344" />
<Channel>System</Channel>
<Computer>DESKTOP-HLE5B38</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="errorCode">0x80070057</Data>
<Data Name="updateTitle">9NCGJX5QLP9M-AppUp.IntelMediaSDKDFP</Data>
<Data Name="updateGuid">{08ff9a94-431d-484f-857f-e9f5326f5f44}</Data>
<Data Name="updateRevisionNumber">1</Data>
<Data Name="serviceGuid">{855e8a7c-ecb4-4ca3-b045-1dfa50104289}</Data>
</EventData>
</Event>
日志名称: Microsoft-Windows-Kernel-EventTracing/Admin
来源: Microsoft-Windows-Kernel-EventTracing
日期: 2019/9/24 20:24:54
事件 ID: 2
任务类别: Session
级别: 错误
关键字: Session
用户: DESKTOP-HLE5B38\19895
计算机: DESKTOP-HLE5B38
描述:
会话“Cloud Files Diagnostic Event Listener”未能启动,存在以下错误: 0xC0000022
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2019-09-24T12:24:54.934262000Z" />
<EventRecordID>163</EventRecordID>
<Correlation />
<Execution ProcessID="4528" ThreadID="784" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>DESKTOP-HLE5B38</Computer>
<Security UserID="S-1-5-21-3267416220-2553771882-3693881456-1001" />
</System>
<EventData>
<Data Name="SessionName">Cloud Files Diagnostic Event Listener</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225506</Data>
<Data Name="LoggingMode">4194560</Data>
</EventData>
</Event>
日志名称: Microsoft-Windows-User Device Registration/Admin
来源: Microsoft-Windows-User Device Registration
日期: 2019/9/24 20:23:20
事件 ID: 360
任务类别: 无
级别: 警告
关键字:
用户: DESKTOP-HLE5B38\19895
计算机: DESKTOP-HLE5B38
描述:
Windows Hello for Business provisioning will not be launched.
Device is AAD joined ( AADJ or DJ++ ): Not Tested
User has logged on with AAD credentials: No
Windows Hello for Business policy is enabled: Not Tested
Windows Hello for Business post-logon provisioning is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy.
See https://go.microsoft.com/fwlink/?linkid=832647 for more details.
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Device Registration" Guid="{23b8d46b-67dd-40a3-b636-d43e50552c6d}" />
<EventID>360</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-09-24T12:23:20.800751900Z" />
<EventRecordID>98</EventRecordID>
<Correlation />
<Execution ProcessID="3544" ThreadID="8956" />
<Channel>Microsoft-Windows-User Device Registration/Admin</Channel>
<Computer>DESKTOP-HLE5B38</Computer>
<Security UserID="S-1-5-21-3267416220-2553771882-3693881456-1001" />
</System>
<EventData>
<Data Name="Message">Windows Hello for Business provisioning will not be launched.</Data>
<Data Name="DeviceIsJoined">Not Tested</Data>
<Data Name="AADPrt">No</Data>
<Data Name="NgcPolicyEnabled">Not Tested</Data>
<Data Name="NgcPostLogonProvisioningEnabled">Not Tested</Data>
<Data Name="NgcHardwarePolicyMet">Not Tested</Data>
<Data Name="UserIsRemote">Yes</Data>
<Data Name="LogonCertRequired">Not Tested</Data>
<Data Name="MachinePolicySource">none</Data>
</EventData>
</Event>
这些是重复出现的~