windows deep internals: WNF IDs from perf_nt

ripped wnf names from perf_nt_c.dll

A3BC0875 - 4191012C WNF_AOW_BOOT_PROGRESS
This state is incremented when a discrete part of the AoW boot sequence has completed. Security: WNF_STATE_SUBSCRIBE (1) by everyone (WD) and app containers (S-1-15-2-1); WNF_STATE_SUBSCRIBE | WNF_STATE_PUBLISH (3) by Local System (SY) and the Interactive User account (IU).
A3BC0875 - 41C6072C WNF_AI_USERTILE
AppInstallation state name to receive RAW notifications
A3BC0875 - 41877C2C WNF_A2A_APPURIHANDLER_INSTALLED
An app implementing windows.AppUriHandler contract has been installed
A3BC0875 - 41C60F2C WNF_AA_LOCKDOWN_CHANGED
Mobile lockdown configuration has been changed
A3BC08B5 - 2821B2C WNF_AUDC_CPUSET_ID
This state holds the CPU Set ID for audio threads. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC1075 - 2821B2C WNF_AUDC_PHONECALL_ACTIVE
This state indicates an active phone call, which can be from a cellular call or active Communications category audio streams
A3BC1875 - 2821B2C WNF_AUDC_TUNER_DEVICE_AVAILABILITY
This notification indicates whether or not the tuner endpoint is available.
A3BC2075 - 2821B2C WNF_AUDC_HEALTH_PROBLEM
State for problems detected in the audio core.
A3BC2875 - 2821B2C WNF_AUDC_CPUSET_ID_SYSTEM
This state keeps other system services apprised of the audio-reserved CPU set ID.
A3BC0875 - 4187182C WNF_AVA_SOUNDDETECTOR_PATTERN_MATCH
This notification is used to signal that a match has been detected for Voice Activation
A3BC0875 - 28A182C WNF_AVLC_DRIVER_REQUEST
A driver requst permission for volume limit change.
A3BC1075 - 28A182C WNF_AVLC_VOLUME_WARNING_ACCEPTED
This event propagates the user's choice from the warning dialog.
A3BC1875 - 28A182C WNF_AVLC_SHOW_VOLUMELIMITWARNING
This event informs the system that we need to show reached volume limit warning message
A3BC0875 - A8E0D2C WNF_ACHK_SP_CORRUPTION_DETECTED
Event fired when we scan the System Partition and find corruption.
A3BC0875 - 4196032F WNF_BMP_BG_PLAYSTATE_CHANGED
The background media player's playstate has changed.
A3BC1075 - 4196032F WNF_BMP_BG_PLAYBACK_REVOKED
The following tasks aren't able to play under current policy
A3BC8075 - 41C61D22 WNF_OS_IP_OVER_USB_AVAILABLE
IP Over USB Availability. SDDL comes from ID_CAP_EVERYONE and IpOverUsb in %SDXROOT%\src\baseos\prod\packages\MfgIpOverUsb\MfgIpOverUsb.pkg.xml
A3BC8875 - 41C61D22 WNF_OS_IU_PROGRESS_REPORT
Update progress reporting status. SDDL comes from ID_CAP_BASEOS_UPDATEAPI in %SDXROOT%\src\baseos\prod\packages\imgupd\MainOS\ImgUpd.pkg.xml
A3BC0875 - 4183182B WNF_FVE_DE_SUPPORT
This event triggers when Device Encryption support status is evaluated, and receives the result of that evaluation.
A3BC1075 - 4183182B WNF_FVE_DE_MANAGED_VOLUMES_COUNT
This event triggers when the BitLocker service detects a change in the count of DE-managed volumes, and includes the count of such volumes.
A3BC1875 - 4183182B WNF_FVE_WIM_HASH_GENERATION_TRIGGER
This event triggers or signals to stop WIM hash generation task.
A3BC2075 - 4183182B WNF_FVE_WIM_HASH_GENERATION_COMPLETION
This event signals completion of WIM hash generation.
A3BC2875 - 4183182B WNF_FVE_WIM_HASH_DELETION_TRIGGER
This event triggers WIM hash deletion.
A3BC3075 - 4183182B WNF_FVE_BDESVC_TRIGGER_START
This event trigger-starts BdeSvc service.
A3BC3875 - 4183182B WNF_FVE_STATE_CHANGE
This event triggers on every BitLocker state change.
A3BC4075 - 4183182B WNF_FVE_MDM_POLICY_REFRESH
This event triggers where RequireDeviceEncryption policy arrives under the BitLocker area.
A3BC4875 - 4183182B WNF_FVE_REQUIRE_SDCARD_ENCRYPTION
This event triggers SD card encrytion policy arrival notification.
A3BC5075 - 4183182B WNF_FVE_SDCARD_ENCRYPTION_REQUEST
This event triggers SecTask to enable/disable SD Card encryption.
A3BC5875 - 4183182B WNF_FVE_SDCARD_ENCRYPTION_STATUS
This event indicates completion of SD Card encryption/decryption request.
A3BC0875 - 992022F WNF_BLTH_BLUETOOTH_STATUS
State name for Bluetooth overall status notification. Flags from the BLUETOOTH_GLOBAL_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTConnMgr in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml
A3BC1075 - 992022F WNF_BLTH_BLUETOOTH_AUDIO_GATEWAY_STATUS
State name for Bluetooth Audio Gateway status notification. A 32-bit bitmask of BLUETOOTH_AUDIO_GATEWAY_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTAGService in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml
A3BC1875 - 992022F WNF_BLTH_BLUETOOTH_MAP_STATUS
State name for Bluetooth MAP status notification. A 32-bit bitmask of BLUETOOTH_MAP_STATUS enum are returned.
A3BC2075 - 992022F WNF_BLTH_BLUETOOTH_CONNECTION_STATE_CHANGE
Indicates when a Bluetooth Device gets connected and disconnected
A3BC2875 - 992022F WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_REQUEST
Indicates that a legacy Gatt client request is present. The local radio and remote device BTH_ADDR are returned.
A3BC3075 - 992022F WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_INVALIDATE_TOKEN
Indicates that a legacy Gatt client request was no longer present. The previously granted access token to be revoked is returned.
A3BC0875 - 1589012F WNF_BOOT_DIRTY_SHUTDOWN
The state is published once the previous shutdown was not clean.
A3BC1075 - 1589012F WNF_BOOT_INVALID_TIME_SOURCE
The state is published if system time is initialized with a backup time source.
A3BC1875 - 1589012F WNF_BOOT_MEMORY_PARTITIONS_RESTORE
The state reflects memory partiton restoration state (nothing to restore, restore in progress, restore completed, failure)
A3BC0875 - 418F1C2F WNF_BRI_ACTIVE_WINDOW
Notifies brightness classes of the active window in order to apply their brightness preferences
A3BC0875 - 41C6072F WNF_BI_BROKER_WAKEUP_CHANNEL
Background work execution trigger
A3BC1075 - 41C6072F WNF_BI_USER_LOGON_CHANNEL
BI user logon system state notification channel
A3BC1875 - 41C6072F WNF_BI_USER_LOGOFF_CHANNEL
BI user logoff system state notification channel
A3BC2075 - 41C6072F WNF_BI_SESSION_CONNECT_CHANNEL
BI session connect system state notification channel
A3BC2875 - 41C6072F WNF_BI_SESSION_DISCONNECT_CHANNEL
BI session disconnect system state notification channel
A3BC3075 - 41C6072F WNF_BI_APPLICATION_UNINSTALL_CHANNEL
BI application uninstall system state notification channel
A3BC3875 - 41C6072F WNF_BI_APPLICATION_SERVICING_START_CHANNEL
BI application servicing start system state notification channel
A3BC4075 - 41C6072F WNF_BI_APPLICATION_SERVICING_STOP_CHANNEL
BI application servicing stop system state notification channel
A3BC4875 - 41C6072F WNF_BI_LOCK_SCREEN_UPDATE_CHANNEL
BI lock screen update system state notification channel
A3BC5075 - 41C6072F WNF_BI_EVENT_DELETION
BI event deletion system state notification channel
A3BC5875 - 41C6072F WNF_BI_PSM_TEST_HOOK_CHANNEL
PSM policy test hook
A3BC6075 - 41C6072F WNF_BI_QUIET_MODE_UPDATE_CHANNEL
BI Quiet Mode update system state notification channel
A3BC6835 - 41C6072F WNF_BI_BI_READY
Indicates that BI is ready and also publish channels list for each session
A3BC7075 - 41C6072F WNF_BI_NOTIFY_NEW_SESSION
BI notify new session system state notification channel
A3BC7875 - 41C6072F WNF_BI_QUERY_APP_USAGE
PSM notification to clients for querying application performance usage
A3BC08B5 - D920D2E WNF_CCTL_BUTTON_REQUESTS
A button press has caused a request.
A3BC0875 - 41960A2E WNF_CDP_CDPSVC_READY
Indicates CDP Service is ready
A3BC1075 - 41960A2E WNF_CDP_CDPSVC_STOPPING
Indicates CDP Service is stopping
A3BC1835 - 41960A2E WNF_CDP_CDPUSERSVC_READY
Indicates CDP User Service is ready
A3BC2035 - 41960A2E WNF_CDP_CDPUSERSVC_STOPPING
Indicates CDP User Service is stopping
A3BC2875 - 41960A2E WNF_CDP_CDP_MESSAGES_QUEUED
Indicates CDP service queued the message(s) for designated applications
A3BC3075 - 41960A2E WNF_CDP_CDP_ACTIVITIES_RECIEVED
Indicates CDP service received new activities
A3BC3875 - 41960A2E WNF_CDP_USERAUTH_POLICY_CHANGE
Indicates that the user has changed the CDP policy
A3BC4075 - 41960A2E WNF_CDP_CDP_NOTIFICATION_ACTION_FORWARD_FAILURE
Indicates failure either delivering or invoking a Notification Action on a remote device
A3BC4835 - 41960A2E WNF_CDP_USER_ROME_SETTING_CHANGE
Indicates that the user has changed Rome SDK authorization setting
A3BC5035 - 41960A2E WNF_CDP_USER_NEAR_SHARE_SETTING_CHANGE
Indicates that the user has changed Near Share authorization setting
A3BC0875 - D8A0B2E WNF_CELL_POWER_STATE_MODEM0
Modem power state of the first modem, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC1075 - D8A0B2E WNF_CELL_SIGNAL_STRENGTH_BARS_CAN0
Number of bars (0..5) of signal strength for the first cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC1875 - D8A0B2E WNF_CELL_SYSTEM_TYPE_CAN0
System type of the first cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC2075 - D8A0B2E WNF_CELL_REGISTRATION_STATUS_CAN0
Current registration status of the first cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC2875 - D8A0B2E WNF_CELL_UICC_STATUS_SLOT0
Status of the UICC in the first slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC3075 - D8A0B2E WNF_CELL_AIRPLANEMODE
The current state of airplanemode. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC3875 - D8A0B2E WNF_CELL_OPERATOR_NAME_CAN0
Current serving operator for the first cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC4075 - D8A0B2E WNF_CELL_CDMA_ACTIVATION_CAN0
Activation, PRL, and provisioning state for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC4875 - D8A0B2E WNF_CELL_NETWORK_TIME_CAN0
NITZ information for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC5075 - D8A0B2E WNF_CELL_AVAILABLE_OPERATORS_CAN0
List of available operators for the first cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC5875 - D8A0B2E WNF_CELL_DEVICE_INFO_CAN0
Device info (RIL_GetDeviceInfo) for the first cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC6475 - D8A0B2E WNF_CELL_DATA_ENABLED_BY_USER_MODEM0
Cellular data enabled state as set by user. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC6875 - D8A0B2E WNF_CELL_PHONE_NUMBER_CAN0
Phone number (MSISDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC7075 - D8A0B2E WNF_CELL_VOICEMAIL_NUMBER_CAN0
Voicemail number (MBDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC7C75 - D8A0B2E WNF_CELL_REGISTRATION_PREFERENCES_CAN0
Registration preferences for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC8075 - D8A0B2E WNF_CELL_CAN_STATE_CAN0
Can state (between CellManager and CellUX) for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC8C75 - D8A0B2E WNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0
Power state of the modem as last preferred by the user, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC9075 - D8A0B2E WNF_CELL_AIRPLANEMODE_DETAILS
The current state of airplanemode details. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC9875 - D8A0B2E WNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0
This is triggered if cellcore suspects that data activity may have been affected. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCA475 - D8A0B2E WNF_CELL_SYSTEM_CONFIG
Root state describing cellular system configuration (all modems and their cans). SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCA875 - D8A0B2E WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0
Detailed registration status of the first cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_EVERYONE, ID_CAP_ISV_CAMERA, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCB075 - D8A0B2E WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0
bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCB875 - D8A0B2E WNF_CELL_PERSO_STATUS_CAN0
bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCC075 - D8A0B2E WNF_CELL_HOME_OPERATOR_CAN0
MCC, MNC (or SID, NID) of the 'home' operator. SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_ISV_CAMERA and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCC875 - D8A0B2E WNF_CELL_HOME_PRL_ID_CAN0
PRL ID of 'home' operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCE875 - D8A0B2E WNF_CELL_UTK_SETUP_MENU_SLOT0
UICC toolkit setup menu notification for slot 0. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCF075 - D8A0B2E WNF_CELL_UTK_PROACTIVE_CMD
UICC toolkit proactive command notification for all slots. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BCF875 - D8A0B2E WNF_CELL_CSP_WWAN_PLUS_READYNESS
CM CSPWWAN+ readyness state. SDDL comes from ID_CAP_CMCSPWWAN_PLUS in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BD0075 - D8A0B2E WNF_CELL_CALLFORWARDING_STATUS_CAN0
Call-forwarding status for the first cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD0C75 - D8A0B2E WNF_CELL_RADIO_TYPE_MODEM0
Modem radio type of the first modem, values defined by RILRADIOCONFIGURATIONRADIOTYPE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD1075 - D8A0B2E WNF_CELL_SIGNAL_STRENGTH_BARS_CAN1
Number of bars (0..5) of signal strength for the second cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD1875 - D8A0B2E WNF_CELL_SYSTEM_TYPE_CAN1
System type of the second cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD2075 - D8A0B2E WNF_CELL_REGISTRATION_STATUS_CAN1
Current registration status of the second cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD2875 - D8A0B2E WNF_CELL_UICC_STATUS_SLOT1
Status of the UICC in the second slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD4075 - D8A0B2E WNF_CELL_OPERATOR_NAME_CAN1
Current serving operator for the second cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD4875 - D8A0B2E WNF_CELL_CDMA_ACTIVATION_CAN1
Activation, PRL, and provisioning state for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD5075 - D8A0B2E WNF_CELL_NETWORK_TIME_CAN1
NITZ information for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD5875 - D8A0B2E WNF_CELL_AVAILABLE_OPERATORS_CAN1
List of available operators for the second cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD6075 - D8A0B2E WNF_CELL_DEVICE_INFO_CAN1
Device info (RIL_GetDeviceInfo) for the second cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD7075 - D8A0B2E WNF_CELL_PHONE_NUMBER_CAN1
Phone number (MSISDN) for the second cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD8C75 - D8A0B2E WNF_CELL_REGISTRATION_PREFERENCES_CAN1
Registration preferences for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD9075 - D8A0B2E WNF_CELL_CAN_STATE_CAN1
Can state (between CellManager and CellUX) for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BD9875 - D8A0B2E WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1
Detailed registration status of the second cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CELL_WNF, ID_CAP_EVERYONE, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDA075 - D8A0B2E WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1
bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDA875 - D8A0B2E WNF_CELL_HOME_OPERATOR_CAN1
MCC, MNC (or SID, NID) of the 'home' operator. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDB075 - D8A0B2E WNF_CELL_HOME_PRL_ID_CAN1
PRL ID of 'home' operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDD075 - D8A0B2E WNF_CELL_UTK_SETUP_MENU_SLOT1
UICC toolkit setup menu notification for slot 1. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDE075 - D8A0B2E WNF_CELL_CALLFORWARDING_STATUS_CAN1
Call-forwarding status for the second cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDE875 - D8A0B2E WNF_CELL_PERSO_STATUS_CAN1
bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDF475 - D8A0B2E WNF_CELL_CONFIGURED_LINES_CAN0
Configured lines for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BDFC75 - D8A0B2E WNF_CELL_CONFIGURED_LINES_CAN1
Configured lines for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE0075 - D8A0B2E WNF_CELL_UICC_STATUS_DETAILS_SLOT0
Status details of the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE0875 - D8A0B2E WNF_CELL_UICC_STATUS_DETAILS_SLOT1
Status details of the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE1075 - D8A0B2E WNF_CELL_PREFERRED_LANGUAGES_SLOT0
Preferred languages in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE1875 - D8A0B2E WNF_CELL_PREFERRED_LANGUAGES_SLOT1
Preferred languages in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE2075 - D8A0B2E WNF_CELL_IMSI_CAN0
IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE2875 - D8A0B2E WNF_CELL_IMSI_CAN1
IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE3075 - D8A0B2E WNF_CELL_LEGACY_SETTINGS_MIGRATION
Migration action for legacy cellcore settings. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE3875 - D8A0B2E WNF_CELL_UICC_ATR_SLOT0
Answer to reset from the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE4075 - D8A0B2E WNF_CELL_UICC_ATR_SLOT1
Answer to reset from the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE4875 - D8A0B2E WNF_CELL_UICC_SIMSEC_SLOT0
Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 0. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE5075 - D8A0B2E WNF_CELL_UICC_SIMSEC_SLOT1
Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 1. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE5875 - D8A0B2E WNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0
Indication that all executors have been configured and that there are no outstanding configurations pending in the modem. SDDL comes from WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE6075 - D8A0B2E WNF_CELL_REGISTRATION_CHANGED_TRIGGER_MV
This is published when cellcore needs MV to kick in. SDDL comes from ID_CAP_EVERYONE, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE7075 - D8A0B2E WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0
Signal-strength details for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE7875 - D8A0B2E WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1
Signal-strength details for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE6875 - D8A0B2E WNF_CELL_EMERGENCY_CALLBACK_MODE_STATUS
Indication about the current emergency callback mode. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE8075 - D8A0B2E WNF_CELL_IMS_STATUS_CAN0
Current IMS registration for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE8875 - D8A0B2E WNF_CELL_IMS_STATUS_CAN1
Current IMS registration for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE9075 - D8A0B2E WNF_CELL_IWLAN_AVAILABILITY_CAN0
iWLAN availability for Can 0, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BE9875 - D8A0B2E WNF_CELL_IWLAN_AVAILABILITY_CAN1
iWLAN availability for Can 1, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BEA475 - D8A0B2E WNF_CELL_PS_MEDIA_PREFERENCES_CAN0
PS Media preferences for Can 0, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BEAC75 - D8A0B2E WNF_CELL_PS_MEDIA_PREFERENCES_CAN1
PS Media preferences for Can 1, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BEB075 - D8A0B2E WNF_CELL_WIFI_CALL_SETTINGS_CAN0
Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BEB875 - D8A0B2E WNF_CELL_WIFI_CALL_SETTINGS_CAN1
Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
A3BC0875 - F87193A WNF_WWAN_OBJECT_LIST
Table of all modems and executors under it.
A3BC1075 - F87193A WNF_WWAN_EUICC_ARRIVAL
This event is published by WwanSvc to indicate the arrival of an eUICC.
A3BC1875 - F87193A WNF_WWAN_CELLULAR_STATE_SNAPSHOT_CHANGE
This event is published by WwanSvc to indicate a change in cellular state snapshot.
A3BC2075 - F87193A WNF_WWAN_TASK_TRIGGER
State name triggering WiFiTask from WwanSvc.
A3BC0875 - 1395033E WNF_SMSR_READY
Sms Router Broker is ready.
A3BC1075 - 1395033E WNF_SMSR_WWAN_READ_DONE
Sms Router Broker is ready.
A3BC1875 - 1395033E WNF_SMSR_NEW_MESSAGE_RECEIVED
Sms Router received a new incoming SMS message.
A3BC0875 - 12960F2E WNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGED
Central Access Policies have been updated
A3BC0875 - 118F022E WNF_CLIP_CONTENT_CHANGED
This notification is triggered when contents on the clipboard change
A3BC0875 - D85082E WNF_CFCL_SC_CONFIGURATIONS_CHANGED
Triggered each time one or more flight configurations changes.
A3BC1075 - D85082E WNF_CFCL_SC_CONFIGURATIONS_DELETED
Triggered each time one or more flight configurations is deleted.
A3BC1875 - D85082E WNF_CFCL_SC_CONFIGURATIONS_ADDED
Triggered each time one or more flight configurations is added.
A3BC0835 - D8E1D2E WNF_CSHL_COMPOSER_LAUNCH_READY
Core shell has initialized, including all of its services (e.g. TLAVM), and the Product Composer can be launched. If the event has not been fired, then CoreShell is still initializing and the Composer cannot be launched. Payload is a DWORD to inidicate it has been fired.
A3BC1035 - D8E1D2E WNF_CSHL_UI_AUTOMATION
On UI Automation.
A3BC1835 - D8E1D2E WNF_CSHL_CURSOR_MANAGER_READY
Cursor Manager is initialized.
A3BC2035 - D8E1D2E WNF_CSHL_VIEWHOSTING_READY
Fired every time a Composer registers with TLAVM and inidicates that the composer is ready to host applications. If the event has not been fired, then no composer is ready to host applications. Payload is a DWORD to inidicate it has been fired.
A3BC2835 - D8E1D2E WNF_CSHL_PRODUCT_READY
Fired every time a Product Composer has finished initializing and indicates that Shell has entered normal operations (i.e. not in restricted mode or running OOBE/PostUpdateUX). If the event has not been fired, then the Product Composer is still initializing. Payload is a DWORD to inidicate it has been fired.
A3BC0875 - 41C60129 WNF_DO_MANAGER_ACTIVE
This event triggers when the Delivery Optimization service manager is active or idle
A3BC0875 - 41870C29 WNF_DBA_DEVICE_ACCESS_CHANGED
This event triggers when the user changes device access for an applocation or the user
A3BC0875 - 4187083E WNF_SFA_AUTHENTICATION_STAGE_CHANGED
This event signals when authentication stage change.
A3BC0C75 - 418B1D29 WNF_DSM_DSMAPPINSTALLED
Notification for when an app is installed so we can register a device background task if necessary.
A3BC1475 - 418B1D29 WNF_DSM_DSMAPPREMOVED
Notification for when an app is removed so we can clean up any registered device background tasks if necessary.
A3BC0875 - 41800329 WNF_DMF_MIGRATION_STARTED
Signals that Migration started. DWORD[1] = {started flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml
A3BC1075 - 41800329 WNF_DMF_MIGRATION_COMPLETE
Signals that Migration completed. DWORD[2] = {completed flag, status}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml
A3BC1875 - 41800329 WNF_DMF_MIGRATION_PROGRESS
Current Migration state. DWORD[4] = {Phase, Total Phases, Step, Total Steps}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml
A3BC2075 - 41800329 WNF_DMF_UX_COMPLETE
Signals when data migration is complete after reboot and update results need to be displayed. DWORD[1] = {completed flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and DuPostUpdateUX in %SDXROOT%\src\devmgmt\du\packages\UX\UX.pkg.xml
A3BC0C75 - 41C61629 WNF_DX_STEREO_CONFIG
State stores the current stereo cpl setting. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC1035 - 41C61629 WNF_DX_MODE_CHANGE_NOTIFICATION
Triggered by kernel when mode change happens. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC1835 - 41C61629 WNF_DX_OCCLUSION_CHANGE_NOTIFICATION
Triggered by kernel when any occlusion related OS state change happens.
A3BC2035 - 41C61629 WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATION
Triggered by kernel when the state of a network display device is changed.
A3BC2835 - 41C61629 WNF_DX_MONITOR_CHANGE_NOTIFICATION
Triggered by kernel when monitor change happens. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC30B5 - 41C61629 WNF_DX_VIDMM_TRIM_NOTIFICATION
Triggered by kernel when video memory has to be trimmed. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC3875 - 41C61629 WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATION
Triggered by kernel when video memory budget for an application changes. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC4075 - 41C61629 WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATION
Triggered by hardware content protection tilt detection. CAPABILITY_SID_LpacMedia - S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
A3BC4875 - 41C61629 WNF_DX_INTERNAL_PANEL_DIMENSIONS
Stores information about the physical dimensions (in mm) of the integrated panel if available, and 0's if not.
A3BC5035 - 41C61629 WNF_DX_MODERN_OUTPUTDUPLICATION
Triggered when a lowbox application starts or stops using OutputDuplication.
A3BC5835 - 41C61629 WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATION
Triggered by kernel when a change is made to the display configuration.
A3BC60B5 - 41C61629 WNF_DX_DEVICE_REMOVAL
Triggered when a device has been removed for any reason, not just adapter removal.
A3BC6835 - 41C61629 WNF_DX_MODERN_OUTPUTDUPLICATION_CONTEXTS
Triggered when a lowbox application starts or stops using OutputDuplication and provides list of active lowbox contexts
A3BC7035 - 41C61629 WNF_DX_COLOR_PROFILE_CHANGE
Triggered when the default color profile for any attached display changes.
A3BC0875 - A950729 WNF_DISK_SCRUB_REQUIRED
This event signals when a disk that requires scrubbing is brought online
A3BC0875 - A811629 WNF_DXGK_ADAPTER_TDR_NOTIFICATION
Triggered by the kernel when any adapter receives a TDR or PNP event. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC1075 - 41950029 WNF_DNS_ALL_SERVER_TIMEOUT
When all the DNS Servers Timeout, this event is notified
A3BC0835 - 418B1929 WNF_DWM_RUNNING
Triggered when the dwm starts/terminates
A3BC1035 - 418B1929 WNF_DWM_HOLOGRAPHIC_COMPOSITOR_LOW_FRAMERATE
Triggered when exclusive mode apps are presenting at a low framerate to the holographic composoitor
A3BC0835 - 41960A28 WNF_EDP_TAGGED_APP_LAUNCHED
The application was launched in the specified mode under the specified Enterprise context.
A3BC10F5 - 41960A28 WNF_EDP_IDENTITY_REVOKED
The keys associated with a data protection identity were removed.
A3BC1875 - 41960A28 WNF_EDP_DPL_KEYS_STATE
Current state of the Data Protection under Lock private keys
A3BC2035 - 41960A28 WNF_EDP_CLIPBOARD_METADATA_CHANGED
Either a copy or override operation occurred, leading to clipboard metadata changes. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
A3BC2835 - 41960A28 WNF_EDP_DIALOG_CANCEL
An EDP blocking dialog has been canceled programmatically.
A3BC3035 - 41960A28 WNF_EDP_APP_UI_ENTERPRISE_CONTEXT_CHANGED
Application UI EDP context has been changed for the process.
A3BC3875 - 41960A28 WNF_EDP_AAD_REAUTH_REQUIRED
The AAD token used by EDP has expired.
A3BC4475 - 41960A28 WNF_EDP_ENTERPRISE_CONTEXTS_UPDATED
The EDP enterprise contexts have been updated.
A3BC4875 - 41960A28 WNF_EDP_PROCESS_UI_ENFORCEMENT
EDP process UI enforcement global state
A3BC50B5 - 41960A28 WNF_EDP_PROCESS_TLS_INDEX
EDP thread UI enforcement. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
A3BC5875 - 41960A28 WNF_EDP_DPL_KEYS_DROPPING
Data Protection under Lock private keys will be dropped from memory shortly.
A3BC6075 - 41960A28 WNF_EDP_MISSING_CREDENTIALS
EDP cred service cannot access credentials required
A3BC6875 - 41960A28 WNF_EDP_PURGE_APP_LEARNING_EVT
Purge application learning events cache
A3BC0875 - 41950828 WNF_EFS_SERVICE_START
This event trigger-starts EFS service.
A3BC1075 - 41950828 WNF_EFS_SOFTWARE_HIVE_AVAILABLE
EFS service needs to check GP at boot, which requires the SOFTWARE hive in HKLM. This signals its availability when EFS worker thread detects it.
A3BC0875 - 13920028 WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Device Lock policy area. SDDL comes from NgcctnrSvc in %SDXROOT%\src\baseos\prod\packages\ngc\ngc.pkg.xml and ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml, %sdxroot%\onecoreuap\admin\dm\wap\service\dmwappushservice.wm.xml
A3BC1075 - 13920028 WNF_ENTR_WIFI_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Wifi policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC1875 - 13920028 WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the System policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xmlSDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC2075 - 13920028 WNF_ENTR_CONNECTIVITY_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Connectivity policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC2875 - 13920028 WNF_ENTR_EXPERIENCE_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Experience policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC3075 - 13920028 WNF_ENTR_ACCOUNTS_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Accounts policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC3875 - 13920028 WNF_ENTR_SECURITY_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Security policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC4075 - 13920028 WNF_ENTR_BROWSER_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Browser policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC4875 - 13920028 WNF_ENTR_UPDATE_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Update policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC5075 - 13920028 WNF_ENTR_CAMERA_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Camera policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC5875 - 13920028 WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the ApplicationManagement policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC6075 - 13920028 WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED
Current changed security policy RequireDeviceEncryption value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC6875 - 13920028 WNF_ENTR_PUSH_NOTIFICATION_RECEIVED
An MDM Push notification has been received. SDDL comes from ID_CAP_CSP_DMCLIENT in %SDXROOT%\src\devmgmt\dm\packages\dmapps\dmapps.pkg.xml
A3BC7075 - 13920028 WNF_ENTR_SEARCH_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the Search policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC7875 - 13920028 WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGED
Current changed policy values represented as bits for the AboveLock policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC8075 - 13920028 WNF_ENTR_ALLOWAPPLICATIONS_POLICY_VALUE_CHANGED
A Dataprotection AllowApplications provider policy value has changed.
A3BC8875 - 13920028 WNF_ENTR_EDPENFORCEMENTLEVEL_POLICY_VALUE_CHANGED
A Dataprotection EDPEnforcementLevel provider policy value has changed.
A3BC9075 - 13920028 WNF_ENTR_WAP_MESSAGE_FOR_DMWAPPUSHSVC_READY
A WAP message has been received that dmwappushsvc needs to handle.
A3BC9875 - 13920028 WNF_ENTR_CONTEXT_STATE_CHANGE
An enterprise context has changed it's state
A3BCA075 - 13920028 WNF_ENTR_PUSH_RECEIVED
An enterprise WNS based push was received
A3BCA875 - 13920028 WNF_ENTR_ALLOWINPUTPANEL_POLICY_VALUE_CHANGED
A TextInput AllowInputPanel provider policy value has changed.
A3BCB075 - 13920028 WNF_ENTR_SEARCH_ALLOW_USING_DIACRITICS
Allow use of diacritics for indexing.
A3BCB875 - 13920028 WNF_ENTR_SEARCH_ALWAYS_USE_AUTO_LANG_DETECTION
Always use automatic language detection when indexing content and properties.
A3BCC075 - 13920028 WNF_ENTR_SEARCH_DISABLE_REMOVABLE_DRIVE_INDEXING
Do not allow locations on removable drives to be added to libraries.
A3BCC875 - 13920028 WNF_ENTR_SEARCH_PREVENT_INDEXING_LOW_DISK_SPACE_MB
Stop indexing in the event of limited hard drive space.
A3BCD075 - 13920028 WNF_ENTR_SEARCH_ALLOW_INDEXING_ENCRYPTED_STORES_OR_ITEMS
Allow indexing of encrypted files.
A3BCD875 - 13920028 WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGED
Bluetooth policy configuration has changed. SDDL comes from ID_CAP_POLICY_MANAGER in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BCE075 - 13920028 WNF_ENTR_EDPNETWORKING_POLICY_VALUE_CHANGED
A Dataprotection networking policy value has changed.
A3BCE875 - 13920028 WNF_ENTR_REQUIRE_DPL_POLICY_VALUE_CHANGED
DataProtection Require Protection Under Lock Config policy change.
A3BCF075 - 13920028 WNF_ENTR_WINDOWS_DEFENDER_POLICY_VALUE_CHANGED
Windows Defender policy configuration has changed.
A3BCF875 - 13920028 WNF_ENTR_ALLOWALLTRUSTEDAPPS_POLICY_VALUE_CHANGED
ApplicationManagement AllowAllTrustedApps provider policy value has changed.
A3BD0075 - 13920028 WNF_ENTR_ALLOWSHAREDUSERDATA_POLICY_VALUE_CHANGED
ApplicationManagement AllowSharedUserAppData provider policy value has changed.
A3BD0875 - 13920028 WNF_ENTR_RESTRICTAPPTOSYTEMVOLUME_POLICY_VALUE_CHANGED
ApplicationManagement RestrictAppToSystemVolume provider policy value has changed.
A3BD1075 - 13920028 WNF_ENTR_RESTRICTAPPDATATOSYTEMVOLUME_POLICY_VALUE_CHANGED
ApplicationManagement RestrictAppDataToSystemVolume provider policy value has changed.
A3BD1875 - 13920028 WNF_ENTR_ALLOWDEVELOPERUNLOCK_POLICY_VALUE_CHANGED
ApplicationManagement AllowDeveloperUnlock provider policy value has changed.
A3BD2075 - 13920028 WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGED
Update AllowUpdateService provider policy value has changed.
A3BD2875 - 13920028 WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGED
Update UpdateServiceUrl provider policy value has changed.
A3BD3075 - 13920028 WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGED
Update AllowNonMicrosoftSignedUpdate provider policy value has changed.
A3BD3875 - 13920028 WNF_ENTR_ALLOW_WBA_EXECUTION_POLICY_VALUE_CHANGED
DisableWBA policy value has changed.
A3BD4075 - 13920028 WNF_ENTR_DOMAIN_NAMES_FOR_EMAIL_SYNC_POLICY_VALUE_CHANGED
The domains for which email is disabled have changed.
A3BD4875 - 13920028 WNF_ENTR_ALLOWCELLULARDATAROAMING_POLICY_VALUE_CHANGED
The AllowCellularDataRoaming policy value has changed.
A3BD5075 - 13920028 WNF_ENTR_ALLOWCELLULARDATA_POLICY_VALUE_CHANGED
The AllowCellularData policy value has changed.
A3BD5C75 - 13920028 WNF_ENTR_EDPENFORCEMENTLEVEL_CACHED_POLICY_VALUE_CHANGED
EDPEnforcementLevel cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
A3BD6475 - 13920028 WNF_ENTR_PROTECTEDDOMAINNAMES_CACHED_POLICY_VALUE_CHANGED
EnterpriseProtectedDomainNames cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications - S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
A3BD6875 - 13920028 WNF_ENTR_ALLOWMESSAGESYNC_POLICY_VALUE_CHANGED
The AllowMessageSync policy value has changed.
A3BD7075 - 13920028 WNF_ENTR_DISABLEADVERTISINGID_POLICY_VALUE_CHANGED
Privacy DisableAdvertisingId policy value has changed.
A3BD7875 - 13920028 WNF_ENTR_EVALUATE_EDP_CONFIGURATION_STATE
EnterpriseDataProtection (EDP) state has changed.
A3BD8475 - 13920028 WNF_ENTR_APPHVSI_CACHED_POLICY_VALUE_CHANGED
AllowAppHVSI cached policy has changed.
A3BD8875 - 13920028 WNF_ENTR_NETWORKISOLATION_POLICY_VALUE_CHANGED
A NetworkIsolation area policy value has changed.
A3BD9075 - 13920028 WNF_ENTR_EVALUATE_APPHVSI_CONFIGURATION_STATE
AppHVSI (Hypervisor-based Virtualized Security Isolation) state has changed.
A3BD9C75 - 13920028 WNF_ENTR_EDPSHOWICONS_CACHED_POLICY_VALUE_CHANGED
EdpShowIcons policy value has changed.
A3BDB075 - 13920028 WNF_ENTR_ALLOWWIFI_POLICY_VALUE_CHANGED
AllowWifi policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BDB875 - 13920028 WNF_ENTR_ALLOWMANUALWIFICONFIGURATION_POLICY_VALUE_CHANGED
AllowManualWifiConfiguration policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BDC075 - 13920028 WNF_ENTR_SEARCH_ALLOW_INDEXER
Allow windows indexer.
A3BDC875 - 13920028 WNF_ENTR_ALLOWWIFIDIRECT_POLICY_VALUE_CHANGED
AllowWifiDirect policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BDD075 - 13920028 WNF_ENTR_ALLOWPROJECTIONTOPC_POLICY_VALUE_CHANGED
AllowProjectionToPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BDD875 - 13920028 WNF_ENTR_ALLOWMESSAGE_MMS_POLICY_VALUE_CHANGED
The AllowMessageMMS policy value has changed.
A3BDE075 - 13920028 WNF_ENTR_ALLOWMESSAGE_RCS_POLICY_VALUE_CHANGED
The AllowMessageRCS policy value has changed.
A3BDE875 - 13920028 WNF_ENTR_EDPSMB_POLICY_VALUE_CHANGED
SMBAutoEncryptedFileExtensions policy value has changed.
A3BDF075 - 13920028 WNF_ENTR_APPHVSI_POLICY_VALUE_CHANGED
Any AppHVSI policy value is changed
A3BDF875 - 13920028 WNF_ENTR_ALLOWSET24HOURCLOCK_POLICY_VALUE_CHANGED
The AllowSet24HourClock policy value has changed.
A3BE0075 - 13920028 WNF_ENTR_ALLOWPROJECTIONFROMPC_POLICY_VALUE_CHANGED
AllowProjectionFromPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
A3BC0875 - 41911A28 WNF_ETW_SUBSYSTEM_INITIALIZED
ETW subsystem initialized
A3BC0875 - 2831628 WNF_EXEC_OSTASKCOMPLETION_REVOKED
This event signal when a task completion has been revoked due to memory pressure
A3BC1875 - 2831628 WNF_EXEC_THERMAL_LIMITER_CLOSE_APPLICATION_VIEWS
This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates all application views should be closed
A3BC2075 - 2831628 WNF_EXEC_THERMAL_LIMITER_TERMINATE_BACKGROUND_TASKS
This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates background tasks should be terminated
A3BC2875 - 2831628 WNF_EXEC_THERMAL_LIMITER_DISPLAY_WARNING
This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates a warning should be displayed to the user
A3BC3075 - 2831628 WNF_EXEC_THERMAL_LIMITER_STOP_MRC
This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates MRC should be stopped
A3BC0875 - 4195083A WNF_WFS_SETTINGS
Family Safety settings have changed
A3BC1075 - 4195083A WNF_WFS_TIMEREMAININGALERTS
Family Safety time remaining alerts to warn the user the allocated time is running out. The data is published as json blob with fileds U.SID for User SID as wide character and TR for time remaining in minutes as int value
A3BC1875 - 4195083A WNF_WFS_FAMILYMEMBERLOGIN
Family member login event
A3BC0875 - A840A2B WNF_FDBK_QUESTION_NOTIFICATION
This event contains a feedback question for the user. Payload is a JSON string specifying the feedback question.
A3BC0875 - 1287083A WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY
Free network available or not
A3BC0875 - 159F022B WNF_FLYT_IDS_CHANGED
Triggered every time there is a change in flight IDs
A3BC0875 - 4192022B WNF_FLT_RUNDOWN_WAIT
Wait for rundown release in Filter Manager may be blocked by a suspended Modern application
A3BC0875 - 4182012B WNF_FOD_STATE_CHANGE
Installation status of Features on demand
A3BC0875 - D941D2B WNF_FSRL_TIERED_VOLUME_DETECTED
This event signals when a tiered volume is mounted
A3BC1075 - D941D2B WNF_FSRL_OPLOCK_BREAK
Oplock break acknowledgement may be blocked by a suspended Modern application
A3BC0875 - 41850121 WNF_LOC_DEVICE_BROKER_ACCESS_CHANGED
This event triggers when the user changes Geolocation access for an application or the user.
A3BC1075 - 41850121 WNF_LOC_RESERVED_WNF_EVENT
Do not use this WNF event, it is deprecated. Was WIN32_API_ACCESS_CHANGED.
A3BC1875 - 41850121 WNF_LOC_SHOW_SYSTRAY
This event triggers when there is an event that accesses location data -- this trigger starts LocationNotifications.exe which is a systray app.
A3BC0875 - 41950821 WNF_LFS_STATE
This is triggered when an app is making use of the location service. It has two possible data values associated to it: BOOL TRUE: one or more applications are using location. BOOL FALSE: no application is using location.
A3BC1075 - 41950821 WNF_LFS_RUNNING_STATE
This state is used to notify when the location service starts or stops running
A3BC1875 - 41950821 WNF_LFS_MASTERSWITCH_STATE
This state is used to notify when the phone location master switch status changes with BOOL as payload. TRUE indicating master switch is ON and FALSE indicating master switch is OFF
A3BC2075 - 41950821 WNF_LFS_GEOFENCETRACKING_STATE
This state is used to notify Geofence tracking state for the geofences added by the applications. TRUE if atleast one geofence is actively being tracked and FALSE if there are no geofences being tracked.
A3BC2875 - 41950821 WNF_LFS_RESERVED_WNF_EVENT_2
Do not use this WNF event, it is deprecated. Was WNF_LFS_BACKGROUND_PERMISSIONCHANGE_STATE
A3BC3075 - 41950821 WNF_LFS_POSITION_AVAILABLE
This state is used to notify when a new freely available position can be queried from the location framework.
A3BC3875 - 41950821 WNF_LFS_CLIENT_RECALCULATE_PERMISSIONS
This state is published whenever the permissions of an active client have changed. Every client on the system receives it, and should run domain-specific logic to see what the impact is (e.g., reconnect location session when permission re-allowed).
A3BC4075 - 41950821 WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGED
This event notifies when the permission regarding the ability to show the location notification icon has changed. The current state needs to be queried for as it is different for each user.
A3BC4875 - 41950821 WNF_LFS_ACTION_DIALOG_AVAILABLE
This event notifies when a new action dialog is available
A3BC5075 - 41950821 WNF_LFS_SIGNIFICANT_LOCATION_EVENT
This event notifies when there's a significant change in the location of the device.
A3BC5875 - 41950821 WNF_LFS_VISITS_SIGNIFICANT_LOCATION_EVENT
This event notifies when there's a visit or a significant change in the location of the device.
A3BC6075 - 41950821 WNF_LFS_LOCATION_MDM_AREA_POLICY_CHANGED
This event is fired when an MDM Location policy change occurs.
A3BC6875 - 41950821 WNF_LFS_LOCATION_MDM_POLICY_ENABLELOCATION_CHANGED
This event is fired when an MDM EnableLocation policy change occurs.
A3BC0875 - 41950223 WNF_NLS_ACP_CHANGED
This state is notified when the ANSI codepage changes - The data value is a UINT that indicates the new ANSI codepage. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC1075 - 41950223 WNF_NLS_OEMCP_CHANGED
This state is notified when the OEM codepage changes - The data value is a UINT that indicates the new OEM codepage. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC1835 - 41950223 WNF_NLS_USER_DEFAULT_LOCALE_CHANGED
This state is notified when the user default locale changes - The data value is an LCID that indicates the new locale. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC2035 - 41950223 WNF_NLS_USER_UILANG_CHANGED
This state is notified when the user default UI language changes - The data value is a LANGID that indicates the new UI language. SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC2835 - 41950223 WNF_NLS_LOCALE_INFO_CHANGED
This state is notified when the locale info changes by means of calling SetLocaleInfo - The data value is a DWORD that indicates the LCTYPE that changed. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC3035 - 41950223 WNF_NLS_GEOID_CHANGED
This state is notified when the user Geo ID changes by means of calling SetUserGeoID - The data value is a DWORD that indicates the new GeoID. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC3875 - 41950223 WNF_NLS_LANG_UPDATE_LAUNCH
Notification indicating lang update launcher needs to be started. SDDL comes from ID_CAP_EVERYONE, ID_CAP_NTSERVICES and ID_CAP_INPUT_LOCALES in %SDXROOT%\src\uxplat\Input\Packages\InputServer\InputServer.pkg.xml
A3BC4075 - 41950223 WNF_NLS_SETTINGS_REPLICATOR_LAUNCH
Notification indicating NLS/MUI user settings replicator needs to be started. - The data value is the replication cookie GUID (binary). SDDL comes from ID_CAP_EVERYONE and ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC4875 - 41950223 WNF_NLS_SETTINGS_REPLICATION_COMPLETE
Notification indicating NLS/MUI user settings replication has completed. - The data value is an HRESULT. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC0875 - 389022A WNF_GLOB_USERPROFILE_LANGLIST_CHANGED
This state is notified when the globalization user profile has changed via SetUserProfileLanguagesWP. There is nothing in the payload - call GetUserProfileLanguagesWP to get the updated user profile language list. SDDL comes from ID_CAP_GLOBALIZATION_SETTINGS in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC0875 - D891E2A WNF_GPOL_SYSTEM_CHANGES
System policy has been updated
A3BC10F5 - D891E2A WNF_GPOL_USER_CHANGES
User policy has been updated
A3BC0875 - 41950F25 WNF_HAS_VERIFY_HEALTH_CERT
This event signals a request to get (if needed) and verify Health Certificate with HAS
A3BC0835 - E8A0125 WNF_HOLO_USER_DISPLAY_CONTEXT
Event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext
A3BC1035 - E8A0125 WNF_HOLO_USER_INPUT_CONTEXT
Event raised when the input context changes (ex. from 3D input to 2D Desktop input). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext
A3BC1835 - E8A0125 WNF_HOLO_SHELL_STATE
Event raised when the Holographic Shell running state changes (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState
A3BC2035 - E8A0125 WNF_HOLO_INPUT_FOCUS_CHANGE
This event signals when input focus changes to a different window. Data is a MPCInputFocusChange struct.
A3BC2835 - E8A0125 WNF_HOLO_FORCE_ROOM_BOUNDARY
If payload is non-zero, room boundary is forced to be visible.
A3BC3035 - E8A0125 WNF_HOLO_STREAMING_STATE
This event signals whether streaming is active. Data contains a bool indicating if streaming is active.
A3BC3835 - E8A0125 WNF_HOLO_ROOM_BOUNDARY_DATA_CHANGED
This event signals that the persisted room boundary data has changed.
A3BC4035 - E8A0125 WNF_HOLO_ROOM_BOUNDARY_VISIBILITY
A non-zero payload indicates the room boundary is visible to the user. Writable by DWM and System.
A3BC4835 - E8A0125 WNF_HOLO_SHELL_INPUT_3DSWITCH_DISABLE
This event signals when various input types should be disabled from natively working in the Windows Holographic shell, useful for apps that simulate GGV via mouse and/or gamepad. Data contains a DWORD of bitflags from Windows::Internal::Shell::Holographic::ShellInput3DSwitchDisableFlags.
A3BC0875 - 418A1825 WNF_HVL_CPU_MGMT_PARTITION
This state signals NTOS has CPU management privileges in the current partition.
A3BC0875 - 17961725 WNF_HYPV_HOST_WMI_OBJECT_PROVIDER_STATE
The state of Hyper-V's host-only WMI object provider.
A3BC1075 - 17961725 WNF_HYPV_HOST_WMI_EVENT_PROVIDER_STATE
The state of Hyper-V's host-only WMI event provider.
A3BC0835 - F950324 WNF_IMSN_MONITORMODECHANGED
A monitor has changed immersive modes
A3BC1035 - F950324 WNF_IMSN_LAUNCHERVISIBILITY
The immersive launcher's visibility has changed
A3BC1835 - F950324 WNF_IMSN_IMMERSIVEMONITORCHANGED
The monitor the immersive environment is running on has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC3035 - F950324 WNF_IMSN_KILL_LOGICAL_FOCUS
User-perceived focus has left an edit box.
A3BC3835 - F950324 WNF_IMSN_PROJECTIONDISPLAYAVAILABLE
Projection display availability has changed
A3BC0835 - 128F1B24 WNF_IUIS_SCALE_CHANGED
The immersive UI scale has changed for the current session.
A3BC0835 - 418B1D24 WNF_ISM_LAST_USER_ACTIVITY
Last recorded user activity
A3BC0875 - 41920124 WNF_IOT_EMBEDDED_MODE_POLICY_VALUE_CHANGED
Embedded mode policy value has changed.
A3BC1075 - 41920124 WNF_IOT_STARTUP_SETTINGS_CHANGED
settings for the foreground app and/or iot startup type background tasks have changed
A3BC0875 - 6880F21 WNF_LANG_FOD_INSTALLATION_STARTED
Installation of language features on demand was started (either through Settings or through installation task).
A3BC0875 - 41C60321 WNF_LM_PACKAGE_SUSPEND_REQUIRED
A running package's license is now invalid and the package must be suspended or terminated.
A3BC1075 - 41C60321 WNF_LM_CONTENT_LICENSE_CHANGED
A content license's state has been modified.
A3BC1875 - 41C60321 WNF_LM_ROOT_LICENSE_CHANGED
A root license's state has been modified.
A3BC2075 - 41C60321 WNF_LM_OPTIONAL_PACKAGE_SUSPEND_REQUIRED
A running optional package's license is lost.
A3BC2875 - 41C60321 WNF_LM_APP_LICENSE_EVENT
Multi-purpose event for app license notifications.
A3BC3075 - 41C60321 WNF_LM_OFFLINE_PC_CHANGED
A offline pc state has been changed.
A3BC3875 - 41C60321 WNF_LM_LICENSE_REFRESHED
Licenses have been refreshed.
A3BC0875 - 41850721 WNF_LIC_NO_APPLICABLE_LICENSES_FOUND
Failed to launch the modern app because no valid licenses and leases were found
A3BC1075 - 41850721 WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCE
The device license hardware ID is out of tolerance with the device's hardware ID
A3BC1875 - 41850721 WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCE
The hardware ID has changed but is still with in tolerance with the device's hardware ID
A3BC2075 - 41850721 WNF_LIC_DEVICE_LICENSE_UPDATED
A new device license with a different device ID was installed
A3BC2875 - 41850721 WNF_LIC_DEVICE_LICENSE_REMOVED
The device license was uninstalled
A3BC3075 - 41850721 WNF_LIC_DEVICE_LICENSE_MISSING
The required device license was nout found
A3BC3875 - 41850721 WNF_LIC_INT_DEVICE_LICENSE_EXPIRED
The integration device license has expired and can no longer be used to verify or decrypt modern app licenses.
A3BC4075 - 41850721 WNF_LIC_LOCAL_MIGRATED_LICENSES_FOUND
Found a local migrated license which needs to be refereshed with a store signed license.
A3BC4875 - 41850721 WNF_LIC_MANAGE_DEVICE_REGISTRATION_AND_REACTIVATION
The MDM Licensing Device Registration Policy has been refreshed.
A3BC5075 - 28F0222 WNF_OLIC_OS_EDITION_CHANGE
OS Edition has changed.
A3BC5875 - 28F0222 WNF_OLIC_OS_LICENSE_POLICY_CHANGE
OS Policy has changed.
A3BC6075 - 28F0222 WNF_OLIC_OS_LICENSE_TERMS_ACCEPTED
The License Terms can be considered as accepted on this device.
A3BC0835 - F810121 WNF_LOGN_EOA_FLYOUT_POSITION
Indicates where the ease of access flyout should appear in LogonUI and User Oobe, the data type is RECT. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts
A3BC1035 - F810121 WNF_LOGN_SLIDE_TO_SHUTDOWN
Indicates that a shutdown has been triggered via Slide-to-shutdown. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts
A3BC1835 - F810121 WNF_LOGN_RETURN_TO_LOCK
Indicates that user intends to interact with the lock screen (e.g. for Projection or Cortana) and LogonUI should return to the lock screen.
A3BC2035 - F810121 WNF_LOGN_PINPAD_VISIBLE
Indicates that the mobile pinpad is visible.
A3BC1075 - 12960F20 WNF_MAPS_MAPLOADER_PROGRESS
Current progress of the MapLoader background engine.
A3BC1875 - 12960F20 WNF_MAPS_MAPLOADER_STATUS_CHANGE
The new status of ODML.
A3BC2075 - 12960F20 WNF_MAPS_MAPLOADER_PACKAGE_CHANGE
A map package has been added or removed or repositioned in the list.
A3BC0875 - 288173E WNF_SYNC_REQUEST_PROBE
Sync sets this value to request a wifi probe due to SSL error. SDDL comes from ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC0875 - 41941B20 WNF_MUR_MEDIA_UI_REQUEST_WLAN
Interface to Media-UI-request-State mapping for WLAN (802.1x) interfaces
A3BC1075 - 41941B20 WNF_MUR_MEDIA_UI_REQUEST_LAN
Interface to Media-UI-request-State mapping for LAN (802.3) interfaces
A3BC0835 - 41871D20 WNF_MSA_ACCOUNTSTATECHANGE
Notification for alerting client apps that the connected account ticketing state has changed
A3BC0875 - 41C60320 WNF_MM_BAD_MEMORY_PENDING_REMOVAL
This notification is raised when the memory manager is unable to automatically offline a bad memory page
A3BC0875 - 41921C20 WNF_MRT_QUALIFIER_CONTRAST_CHANGED
This state is notified when the constrast qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml
A3BC1075 - 41921C20 WNF_MRT_QUALIFIER_THEME_CHANGED
This state is notified when the theme qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml
A3BC1C75 - 41921C20 WNF_MRT_PERSISTENT_QUALIFIER_CHANGED
This state is notified when some persistent qualifier changed its value. Payload is qualifier@package_name with a max length of 512 bytes (256 WCHARs including null terminator). Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers
A3BC2075 - 41921C20 WNF_MRT_MERGE_SYSTEM_PRI_FILES
This state is notified when system PRI files are merged. Payload has a max length of 128 bytes (64 WCHARs including null terminator) and consists of 'start [starting timestamp]' or 'done [starting timestamp] [ending timestamp]'. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers
A3BC2875 - 41921C20 WNF_MRT_SYSTEM_PRI_MERGE
This state is notified when a system PRI file is merged. Payload has a max length of 512 bytes (256 WCHARs including null terminator) and consists of either 'start [path] [starting timestamp]' or '{done,skipped} [path] [starting timestamp] [ending timestamp]'. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC0835 - 17950F23 WNF_NASV_USER_PRESENT
NaAuth User Presence Status
A3BC1075 - 17950F23 WNF_NASV_SERVICE_RUNNING
NaAuth Service Running
A3BC0875 - 41840D23 WNF_NCB_APP_AVAILABLE
NCB indication of CCT or Socket Broker Based App availability.
A3BC0875 - 128F0A23 WNF_NDIS_ADAPTER_ARRIVAL
NDIS finds a network adapter that needs to be configured by NetSetupSvc.
A3BC1075 - 128F0A23 WNF_NDIS_CORRUPTED_STORE
NDIS detects corruption in the binding store.
A3BC0875 - 418B0223 WNF_NLM_VPN_RECONNECT_CHANGE
This event is signalled by rasman about reconnect VPN state change and is used by NLM
A3BC1075 - 418B0223 WNF_NLM_INTERNET_PRESENT
This event is signalled by NLM when the aggregated network conditions indicate that a connection to the internet is present
A3BC0875 - 41850923 WNF_NGC_PREGEN_TRIGGER
This event signals when an caller wants to trigger KeyPregenTask.
A3BC1075 - 41850923 WNF_NGC_AIKCERT_TRIGGER
This event signals when an caller wants to trigger AikCertEnrollTask.
A3BC1875 - 41850923 WNF_NGC_PRO_CSP_POLICY_CHANGED
This event is fired when a policy change occurs in the NGC Pro CSP.
A3BC2075 - 41850923 WNF_NGC_PREGEN_DELAY_TRIGGER
This event signals when an caller wants to trigger KeyPregenTask with some delay.
A3BC2875 - 41850923 WNF_NGC_GESTURE_AUTHENTICATED
This event signals when NGC container service (ngcctnrsvc) authenticates a gesture.
A3BC3075 - 41850923 WNF_NGC_CRYPTO_MDM_POLICY_CHANGED
This event is fired when an MDM cryptographic policy change occurs.
A3BC3875 - 41850923 WNF_NGC_CREDENTIAL_REFRESH_REQUIRED
This event is fired when an activity occurs that requires the NGC PIN cred prov to refresh its credential state.
A3BC0875 - 41870223 WNF_NLA_CAPABILITY_CHANGE
This event is notified when NCSI detects a capability change
A3BC1075 - 41870223 WNF_NLA_ENTER_SUSPECT_STATE
This event notifies NCSI that it should enter the suspect state
A3BC1875 - 41870223 WNF_NLA_TASK_TRIGGER
State name triggering WiFiTask from NlaSvc
A3BC08F5 - 41881E3A WNF_WPN_USER_PLATFORM_READY
This WNF state indicates to users of WPN endpoints (except AppEndpoint) that platform is ready to use. This state can also be used to know if WPN platform restarted.
A3BC10F5 - 41881E3A WNF_WPN_PLATFORM_INITIALIZED
This WNF state can be used by first party Apps / Services to determine when WPN platform is ready to handle app related requests like posting toast / tile and getting channel uri.
A3BC1875 - 41881E3A WNF_WPN_SYSTEM_PLATFORM_READY
State indicating that system notification platform has been registered and ready to user.
A3BC0875 - C951E23 WNF_NPSM_SERVICE_STARTED
This notification is to indicate that the NPSM service has started up.
A3BC0875 - 41851D2E WNF_CSC_SERVICE_START
CSC Service start trigger
A3BC0835 - 4840122 WNF_OOBE_SHL_MAGNIFIER_QUERY
Notification from ISM to OOBE to query the user whether to activate the always-on Magnifier in OOBE
A3BC1035 - 4840122 WNF_OOBE_SHL_MAGNIFIER_CONFIRM
Notification from OOBE to ISM whether the user confirms to activate the always-on Magnifier in OOBE
A3BC1875 - 4840122 WNF_OOBE_SHL_MONITOR_STATE
Notification to User OOBE monitor on where the progress is
A3BC2035 - 4840122 WNF_OOBE_SHL_SPEECH_CONTROLLER
Notification of speech controller state change. Payload is state type plus string of length 512
A3BC0875 - 5941822 WNF_OVRD_OVERRIDESCALEUPDATED
The window's override scale has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC0875 - 41C6013D WNF_PO_SCENARIO_CHANGE
Sent when the WDI session corresponding to a power scenario changes
A3BC1075 - 41C6013D WNF_PO_COMPOSITE_BATTERY
Sent when the composite battery is updated
A3BC1875 - 41C6013D WNF_PO_POWER_STATE_CHANGE
Sent after WNF_PO_COMPOSITE_BATTERY when batteries are added or removed and when one or more batteries' AC, charging, or discharging states changes
A3BC2075 - 41C6013D WNF_PO_ENERGY_SAVER_STATE
Triggered when Energy Saver state changes. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
A3BC2875 - 41C6013D WNF_PO_ENERGY_SAVER_SETTING
Triggered when Energy Saver setting changes
A3BC3075 - 41C6013D WNF_PO_ENERGY_SAVER_OVERRIDE
Triggered to indicate Energy Saver override settings
A3BC3875 - 41C6013D WNF_PO_THERMAL_STANDBY
Triggered to indicate CR3 condition
A3BC4075 - 41C6013D WNF_PO_THERMAL_SHUTDOWN_OCCURRED
Sent when the previous shutdown was due to a thermal trip
A3BC4875 - 41C6013D WNF_PO_THERMAL_HIBERNATE_OCCURRED
Sent when the previous hibernate was due to a thermal trip
A3BC5075 - 41C6013D WNF_PO_DISCHARGE_ESTIMATE
Estimated time until full discharge in seconds
A3BC5C75 - 41C6013D WNF_PO_DISCHARGE_START_FILETIME
Filetime of last known start of discharge
A3BC6075 - 41C6013D WNF_PO_CHARGE_ESTIMATE
Estimated time until full charge in seconds
A3BC6875 - 41C6013D WNF_PO_THERMAL_OVERTHROTTLE
Triggered to indicate excessive thermal throttling
A3BC7075 - 41C6013D WNF_PO_USER_AWAY_PREDICTION
Sent to indicate whenever user-away prediction is updated.
A3BC7835 - 41C6013D WNF_PO_DISPLAY_REQUEST_ACTIVE
Sent to indicate whether a display request is active in the current session.
A3BC8075 - 41C6013D WNF_PO_BATTERY_CHARGE_LEVEL
Triggered when battery charge crosses well-known charge level boundaries.
A3BC8875 - 41C6013D WNF_PO_SLEEP_STUDY_USER_PRESENCE_CHANGED
Sent when the global user presence changes.
A3BC9075 - 41C6013D WNF_PO_BACKGROUND_ACTIVITY_POLICY
Sent when the background activity policy changes.
A3BC9875 - 41C6013D WNF_PO_BATTERY_DISCHARGING
Triggered when battery is being discharged, irrespective of AC/DC state of the system.
A3BCA075 - 41C6013D WNF_PO_PRIMARY_DISPLAY_VISIBLE_STATE
Visible state of the primary display as MONITOR_DISPLAY_STATE
A3BCA875 - 41C6013D WNF_PO_PRIMARY_DISPLAY_LOGICAL_STATE
Logical state of the primary display as MONITOR_LOGICAL_DISPLAY_STATE
A3BCB075 - 41C6013D WNF_PO_PREVIOUS_SHUTDOWN_STATE
Sent on every boot to notify previous shutdown state
A3BCB875 - 41C6013D WNF_PO_MODERN_STANDBY_EXIT_INITIATED
Triggered at the start of a transition to exit modern standby
A3BCC075 - 41C6013D WNF_PO_SW_HW_DRIPS_DIVERGENCE
Sent when SW DRIPS is more than HW DRIPS by a specific threshold
A3BCC875 - 41C6013D WNF_PO_DRIPS_DEVICE_CONSTRAINTS_REGISTERED
Sent once platform idle states and associated device constraints have been registered
A3BCD075 - 41C6013D WNF_PO_BASIC_BRIGHTNESS_ENGINE_DISABLED
One time system-wide transition to switch from the basic brightness engine to the high-precision brightness engine.
A3BCD875 - 41C6013D WNF_PO_BRIGHTNESS_ALS_OFFSET
ALS brightness offset consumed by the basic brightness engine.
A3BCE075 - 41C6013D WNF_PO_VIDEO_INITIALIALIZED
Set to TRUE when the video system is initialized.
A3BCE875 - 41C6013D WNF_PO_OVERLAY_POWER_SCHEME_UPDATE
Notification for power-setting overlay scheme change.
A3BCF075 - 41C6013D WNF_PO_CAD_STICKY_DISABLE_CHARGING
Set when an you want IOCTL_CAD_DISABLE_CHARGING to behave in a sticky manner
A3BCF875 - 41C6013D WNF_PO_POWER_BUTTON_STATE
Describes the current state of the power button.
A3BC0875 - 96003D WNF_PNPA_DEVNODES_CHANGED
This corresponds to a DBT_DEVNODES_CHANGED message
A3BC1035 - 96003D WNF_PNPA_DEVNODES_CHANGED_SESSION
This corresponds to a DBT_DEVNODES_CHANGED message
A3BC1875 - 96003D WNF_PNPA_VOLUMES_CHANGED
This corresponds to a drive letter arrival/removal message
A3BC2035 - 96003D WNF_PNPA_VOLUMES_CHANGED_SESSION
This corresponds to a drive letter arrival/removal message
A3BC2875 - 96003D WNF_PNPA_HARDWAREPROFILES_CHANGED
This corresponds to a hardware profiles changed message
A3BC3035 - 96003D WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION
This corresponds to a hardware profiles changed message
A3BC3875 - 96003D WNF_PNPA_PORTS_CHANGED
This corresponds to a ports changes message
A3BC4035 - 96003D WNF_PNPA_PORTS_CHANGED_SESSION
This corresponds to a ports changes message
A3BC0875 - 396003D WNF_PNPB_AWAITING_RESPONSE
This corresponds to kernel PNP waiting synchronously for user-mode clients
A3BC0875 - 296003D WNF_PNPC_REBOOT_REQUIRED
This corresponds to a reboot of the system needs to be performed due to a device installation
A3BC1075 - 296003D WNF_PNPC_DEVICE_INSTALL_REQUESTED
Device installation is requested.
A3BC1875 - 296003D WNF_PNPC_CONTAINER_CONFIG_REQUESTED
A change that requires a device container to be updated has occured.
A3BC0875 - 17891C3D WNF_PROV_TURN_COMPLETE
Fired when a full set of packages are processed.
A3BC0875 - 41C61D3D WNF_PS_WAKE_CHARGE_RESOURCE_POLICY
This corresponds to an application that has eclipsed job wake charge resource policy
A3BC0875 - 41851C3E WNF_SRC_SYSTEM_RADIO_CHANGED
This event signals when system radio is changed
A3BC0875 - 41C6033F WNF_RM_MEMORY_MONITOR_USAGE_LEVEL
Supplies the current RM memory monitor memory usage level. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC1075 - 41C6033F WNF_RM_GAME_MODE_ACTIVE
Supplies the process ID of the current game mode recipient, or 0 if no recipient is active
A3BC0875 - 1294023A WNF_WLRS_SETTINGS
Windows or application settings have changed in Live Storage
A3BC1075 - 1294023A WNF_WLRS_USERTILE
Usertile has changed in Live Storage
A3BC1875 - 1294023A WNF_WLRS_COLLECTIONINTEREST
Collection interest has changed in Live Storage
A3BC0875 - 7851E3F WNF_RPCF_FWMAN_RUNNING
This event signals when the RPC firewall manager is initialized
A3BC0875 - 12821A3F WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED
An RPC service trigger has been added or removed
A3BC1875 - 12821A3F WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED
A named pipe service trigger has been added or removed
A3BC0875 - 418B0D3E WNF_SCM_AUTOSTART_STATE
This event triggers to indicate SCM autostart state
A3BC0875 - 41950C3E WNF_SBS_UPDATE_AVAILABLE
This event signals that there is an update available to the Secure Boot variables.
A3BC0875 - 41851D3A WNF_WSC_SECURITY_CENTER_USER_NOTIFICATION
A notification dialog should be shown to the user.
A3BC0875 - 41890A3E WNF_SDO_ORIENTATION_CHANGE
This event triggers when there is a simple device orientation change. It's data value is one of the SimpleDeviceOrientation enum values. Rights: SensorService can publish, Everyone can subscribe.
A3BC0C75 - 41960B29 WNF_DEP_OOBE_COMPLETE
This event triggers when the system has completed OOBE (Windows Welcome)
A3BC1475 - 41960B29 WNF_DEP_UNINSTALL_DISABLED
This event triggers when the Uninstall of the system has been disabled
A3BC0875 - D83063E WNF_SHEL_IMMERSIVE_SHELL_RUNNING
This event signals when the Immersive Shell is started
A3BC1035 - D83063E WNF_SHEL_NOTIFICATIONS
Set to 0 or more to indicate whether there are any unseen notifications in the notification center. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable the notification on OneCore
A3BC1875 - D83063E WNF_SHEL_LOGON_COMPLETE
This system-scope event is signaled each time a user's desktop becomes ready. Consider using WNF_SHEL_SESSION_LOGON_COMPLETE for a session-scoped version.
A3BC2475 - D83063E WNF_SHEL_OOBE_USER_LOGON_COMPLETE
This event signals when logon of the first user after OOBE is complete
A3BC2875 - D83063E WNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSED
TDL dispatcher pipe has been closed
A3BC3075 - D83063E WNF_SHEL_TILECHANGE
This event is signalled when there is a tile change to a background task
A3BC3835 - D83063E WNF_SHEL_NOTIFICATION_SETTINGS_CHANGED
Event signals when toast notification settings have changed.
A3BC4075 - D83063E WNF_SHEL_SOFTLANDING_RULE_TRIGGERED
This event signals when a SoftLanding rule is triggered
A3BC4875 - D83063E WNF_SHEL_START_LAYOUT_READY
This event signals when Start Experience Host completes loading the Start menu layout
A3BC5075 - D83063E WNF_SHEL_APPRESOLVER_SCAN
Event signals a full app resolver scan has been invoked.
A3BC5835 - D83063E WNF_SHEL_LOCKSCREEN_ACTIVE
Set to 0 or 1 to indicate whether the lock screen is active. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don't have multiple sessions, otherwise anyone can read and only system can write.
A3BC6075 - D83063E WNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHED
This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_INSTALL_FINISHED event from TDL
A3BC6875 - D83063E WNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTED
This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_DOWNLOAD_STARTED event from TDL
A3BC7075 - D83063E WNF_SHEL_APPLICATION_STATE_UPDATE
Event is for the shell to notify when app layout state is changed. Payload is ShellApplicationStateWnf struct.
A3BC7875 - D83063E WNF_SHEL_FOCUS_CHANGE
This event signals when focus changes to a different process, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
A3BC8075 - D83063E WNF_SHEL_GAMECONTROLLER_LISTENER_INFO
This event signals to toggle exclusive gamepad listening on and off, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
A3BC8875 - D83063E WNF_SHEL_GAMECONTROLLER_FOCUS_INFO
This event signals to toggle exclusive gamepad input on and off
A3BC9475 - D83063E WNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGED
This even signals when Start layout MDM policy has been applied
A3BC9875 - D83063E WNF_SHEL_CORTANA_APPINDEX_UPDATED
Event signals when the apps have been pushed to the indexer has completed
A3BCA075 - D83063E WNF_SHEL_SOFTLANDING_RULES_UPDATED
This event signals when SoftLanding rules folder is updated
A3BCA835 - D83063E WNF_SHEL_NOTIFICATIONS_CRITICAL
This event signals that a critical notification such as an incoming call was posted. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable notification on OneCore
A3BCB035 - D83063E WNF_SHEL_START_VISIBILITY_CHANGED
This event signals when Start visibility changes
A3BCB875 - D83063E WNF_SHEL_TRAY_SEARCHBOX_VISIBILITY_CHANGED
Set to 0 or 1 to indicate whether the searchbox is visibile in the tray. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don't have multiple sessions, otherwise anyone can read and only system can write.
A3BCC075 - D83063E WNF_SHEL_DEVICE_UNLOCKED
This event signals that the device is unlocked in the current session
A3BCC875 - D83063E WNF_SHEL_PLACES_CHANGED
This event signals the changes in places' database (clientgraph)
A3BCD075 - D83063E WNF_SHEL_SUSPEND_APP_BACKGROUND_ACTIVITY
Event is for the shell to notify when app background activity should be suspended. Payload is DWORD set to 1 or 0.
A3BCD875 - D83063E WNF_SHEL_CREATIVE_EVENT_TRIGGERED
This event signals a creative event has been triggered
A3BCE075 - D83063E WNF_SHEL_JUMPLIST_CHANGED
Event signals that the jumplist for an app has changed. Payload is a struct containing the current sessionId as well as a string representing the aumid of the app whose jumplist was updated.
A3BCE875 - D83063E WNF_SHEL_START_APPLIFECYCLE_UNINSTALL_FINISHED
This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_UNINSTALL_FINISHED event from TDL
A3BCF075 - D83063E WNF_SHEL_GAMECONTROLLER_NEXUS_INFO
This event signals whenever the nexus button policy changes.
A3BCF875 - D83063E WNF_SHEL_SETTINGS_CHANGED
This event signals when a settings toggle has changed
A3BD0035 - D83063E WNF_SHEL_TOAST_PUBLISHED
This event signals when a new toast is published
A3BD0835 - D83063E WNF_SHEL_SOFTLANDING_PUBLISHED
This event signals when a new soft landing tip is published
A3BD1075 - D83063E WNF_SHEL_REQUEST_CORTANA_SETTINGSCONSTRAINTINDEX_BUILD
Event signals when an app requests cortana to build the settings constraint index
A3BD1835 - D83063E WNF_SHEL_DICTATION_RUNNING
This is the state of dictation. SDDL comes from dwm.exe in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml and WPNarrator in %SDXROOT%\src\media\apps\packages\Apps\WPNarrator.pkg.xml. And Phone DefApps group is required too.
A3BD2075 - D83063E WNF_SHEL_DDC_COMMAND_AVAILABLE
This event signals when a parsed command is ready for processing
A3BD2875 - D83063E WNF_SHEL_DDC_WNS_COMMAND
This event signals when a command has been delivered via WNS
A3BD3075 - D83063E WNF_SHEL_DDC_SMS_COMMAND
This event signals when a command has been delivered via SMS
A3BD3875 - D83063E WNF_SHEL_DEVICE_LOCKED
This event signals that the device is locked in the current session
A3BD4075 - D83063E WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_ACTIVATED
This event signals a subscription has been activated.
A3BD4875 - D83063E WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_UPDATED
This event signals the content of one or more subscriptions has been updated.
A3BD5075 - D83063E WNF_SHEL_LOCKSCREEN_IMAGE_CHANGED
This event signals that lock screen image had changed. It contains the user sid whose image was changed
A3BD5875 - D83063E WNF_SHEL_SCREEN_COVERED
Set to 0 (uncovered or unknown) or 1 (covered).
A3BD6075 - D83063E WNF_SHEL_DDC_CONNECTED_ACCOUNTS_CHANGED
This event signals when connected accounts have changed and register device should be called
A3BD6835 - D83063E WNF_SHEL_OOBE_ENABLE_PROVISIONING
This event signals when OOBE in a Shell should enable its provisioning flow
A3BD7035 - D83063E WNF_SHEL_LOCK_APP_SHOWN
This event signals that the Lock application has been presented to the user. It contains an instance cookie as specified from LogonUI.
A3BD7835 - D83063E WNF_SHEL_LOCK_APP_REQUESTING_UNLOCK
This event signals that the Lock application is requesting to unlock so the user can enter credentials.
A3BD8075 - D83063E WNF_SHEL_TILEINSTALL
This event is signalled when there is a tile install to a background task
A3BD8875 - D83063E WNF_SHEL_TILEUPDATE
This event is signalled when there is a tile update to a background task
A3BD9075 - D83063E WNF_SHEL_TILEUNINSTALL
This event is signalled when there is a tile uninstall to a background task
A3BD9835 - D83063E WNF_SHEL_ABOVE_LOCK_APP_ACTIVE
This event is signalled when there is an app launched (1) or terminated (0) above lock. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed access.
A3BDA035 - D83063E WNF_SHEL_RADIALCONTROLLER_EXPERIENCE_RESTART
This event is signalled when the RadialController Experience has restarted to allow registered API component to re-establish connection and repopulate state
A3BDA835 - D83063E WNF_SHEL_ABOVE_LOCK_BIO_ACTIVE
This event is signalled when there is bio feedback active (1) or inactive (0) above lock
A3BDB035 - D83063E WNF_SHEL_CORTANA_SPEECH_CANCELHANDSFREE_REQUESTED
This event can be signalled when a handsfree device needs to request Cortana to cancel speech activity.
A3BDB875 - D83063E WNF_SHEL_CALM_DISPLAY_ACTIVE
Set to 0 (inactive) or 1 (active).
A3BDC035 - D83063E WNF_SHEL_START_LAYOUT_UPDATED
This event signals a start layout change to a background task
A3BDC835 - D83063E WNF_SHEL_PEOPLE_PINNED_LIST_CHANGED
This event is signalled when there is a change to the Pinned People list
A3BDD075 - D83063E WNF_SHEL_LOCKSTATE
Current lock state of the device. Payload is DEVICE_LOCKSTATE. On multisession SKUs, everyone can read while only SYSTEM can write. On single session SKUs, everyone can read while only DefaultAccount can write. On single session SKUs, also include allow list from the SDDL for DEVICE_LOCK_STATE. Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
A3BDD875 - D83063E WNF_SHEL_APPLICATION_SPATIAL_INFO_UPDATE
Event is for the shell to notify when app spatial information has changed. Payload is ApplicationSpatialInformationWnf struct.
A3BDE075 - D83063E WNF_SHEL_CORTANA_AUDIO_ACTIVE
Indicates the state of Cortana speech input and output.
A3BDE835 - D83063E WNF_SHEL_LOCKSCREEN_INFO_UPDATED
This event signals that the LockScreen info is updated.
A3BDF875 - D83063E WNF_SHEL_CDM_FEATURE_CONFIG_FIRST_USAGE
This event notifies the CDM when a new feature configuration is first used
A3BE00F5 - D83063E WNF_SHEL_APPLICATION_STARTED
This event is signals when an application launches. The Payload is the appID.
A3BE08F5 - D83063E WNF_SHEL_APPLICATION_TERMINATED
This event is signals when an application is terminated. The Payload is the appID.
A3BE10F5 - D83063E WNF_SHEL_WINDOWSTIP_CONTENT_PUBLISHED
This event is signals when a request is made to show a Windows Tip bubble. The Payload is the content id(String).
A3BE18F5 - D83063E WNF_SHEL_USER_IDLE
This event signals when the first time a user is idle after logon
A3BE2035 - D83063E WNF_SHEL_PEOPLE_PANE_VIEW_CHANGED
This event is signalled when there is a change to the People Pane Views
A3BE2835 - D83063E WNF_SHEL_LOCK_APP_RELOCK
This event signals that the lock screen should be reset due to a re-lock request.
A3BE3035 - D83063E WNF_SHEL_LOCK_APP_READY
This event signals that the lock screen is ready after a reset was requested.
A3BE3835 - D83063E WNF_SHEL_SESSION_LOGON_COMPLETE
This event is scoped to the user session and signaled when the desktop is ready after a logon
A3BE4075 - D83063E WNF_SHEL_HEALTH_STATE_CHANGED
This event signals when the health state of the device changes
A3BE4875 - D83063E WNF_SHEL_CONTENT_DELIVERY_MANAGER_NEEDS_REMEDIATION
This event signals that Content Delivery Manager content needs remediation
A3BE50F5 - D83063E WNF_SHEL_DESKTOP_APPLICATION_STARTED
This event is signals when a desktop application launches. The Payload is the executable name.
A3BE58F5 - D83063E WNF_SHEL_DESKTOP_APPLICATION_TERMINATED
This event is signals when a desktop application is terminated. The Payload is the executable name.
A3BE60F5 - D83063E WNF_SHEL_SUGGESTED_APP_READY
This event signals that the app launched by sign in suggestions is ready.
A3BE6835 - D83063E WNF_SHEL_CDM_REGISTRATION_COMPLETE
This event is scoped to the user session and signaled when the CDM registration is complete
A3BE70F5 - D83063E WNF_SHEL_CONTENT_DELIVERY_MANAGER_MONITORING
This event signals that Content Delivery Manager Cache Monitoring is Enabled or not.
A3BC0875 - 4189073E WNF_SIO_PIN_ENROLLED
Used to notify the PIN list that a PIN has been enrolled and that it should refresh.
A3BC1075 - 4189073E WNF_SIO_BIO_ENROLLED
Used to notify the Delay Lock settings that Biometric enrollment has been modified.
A3BC0875 - 59F053E WNF_SKYD_FILE_SYNC
A file has changed on storage and a request is received to sync.
A3BC1075 - 59F053E WNF_SKYD_QUOTA_CHANGE
A user's quota has changed.
A3BC0875 - 4195033E WNF_SMS_CHECK_ACCESS
This event triggers when the user revokes SMS access.
A3BC0875 - 1295033E WNF_SMSS_MEMORY_COOLING_COMPATIBLE
This event triggers when the system has multiple memory channels and memory cooling can be started
A3BC0875 - 2871E3E WNF_SPAC_SPACEPORT_PROPERTY_CHANGED
This notification is issued when a property of an object changes
A3BC1075 - 2871E3E WNF_SPAC_SPACEPORT_WORK_REQUESTED
This notification is issued to request work in user-mode
A3BC0835 - 9851E3E WNF_SPCH_INPUT_STATE_UPDATE
Indicates the state of the shared recognizer.
A3BC0875 - C931C3E WNF_SRUM_SCREENONSTUDY_SESSION_START
Sent when a screen on study session starts
A3BC1075 - C931C3E WNF_SRUM_SCREENONSTUDY_SESSION_END
Sent when a screen on study session ends
A3BC0875 - 41901C3E WNF_SRV_SRV2_STATE_CHANGE
This event signals when the server (SRV2) start/stop
A3BC6075 - F911D22 WNF_OSWN_STORAGE_PRESENCE_CHANGE
This event indicates a change in the mount state of an SD card.
A3BC6875 - F911D22 WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGE
This event indicates a change in the volume status of an SD card.
A3BC7075 - F911D22 WNF_OSWN_STORAGE_FREE_SPACE_CHANGE
This event indicates a change in the free space state of storage.
A3BC7875 - F911D22 WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGE
This event indicates a change in the temp file cleanup state of storage.
A3BCB875 - F911D22 WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATE
This event indicates completion of an update of storage usage categories.
A3BC5875 - F911D22 WNF_OSWN_SYSTEM_CLOCK_CHANGED
This event informs the system tray that the date-time has changed
A3BCC075 - F911D22 WNF_OSWN_STORAGE_SHELLHWD_EVENT
This event informs StorSvc that SHSVCS received a device handle event.
A3BC8075 - F911D22 WNF_OSWN_STORAGE_APP_PAIRING_CHANGE
This event indicates a change in the app pairing state of an SD card.
A3BC0875 - 11961B3E WNF_SUPP_ENABLE_ERROR_DETAILS_CACHE
Enable the Error Details Cache
A3BC0875 - 41840B3E WNF_SEB_INTERNET_PRESENT
Internet available or not
A3BC1075 - 41840B3E WNF_SEB_FREE_NETWORK_PRESENT
Free network available or not
A3BC1875 - 41840B3E WNF_SEB_SMS_RECEIVED
SMS has been received
A3BC2075 - 41840B3E WNF_SEB_NETWORK_STATE_CHANGES
Network state has changed
A3BC2875 - 41840B3E WNF_SEB_MBAE_NOTIFICATION_RECEIVED
Radio Operator Message received
A3BC3075 - 41840B3E WNF_SEB_NETWORK_CONTROL_CHANNEL_TRIGGER_RESET
Network control channel triggers have been reset
A3BC3875 - 41840B3E WNF_SEB_TIME_ZONE_CHANGE
Time zone change
A3BC4075 - 41840B3E WNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGE
Online ID connected state changed. SDDL comes from ID_CAP_EVERYONE in %SDXROOT%\src\baseos\prod\packages\WLId\WLId.pkg.xml
A3BC4875 - 41840B3E WNF_SEB_SYSTEM_IDLE
system is idle or not
A3BC5075 - 41840B3E WNF_SEB_BATTERY_LEVEL
System is idle or not
A3BC5875 - 41840B3E WNF_SEB_DOMAIN_JOINED
System is domain joined or not
A3BC6075 - 41840B3E WNF_SEB_BOOT
System has booted
A3BC6875 - 41840B3E WNF_SEB_USER_PRESENT
System has at least 1 user present
A3BC7075 - 41840B3E WNF_SEB_SYSTEM_AC
System is AC or DC
A3BC7875 - 41840B3E WNF_SEB_MONITOR_ON
Monitor is ON or OFF
A3BC8075 - 41840B3E WNF_SEB_IP_ADDRESS_AVAILABLE
IP address is available or not
A3BC8875 - 41840B3E WNF_SEB_BACKGROUND_WORK_COST_CHANGE
Indicate a change in the background work cost
A3BC9075 - 41840B3E WNF_SEB_BACKGROUND_WORK_COST_HIGH
Background work cost is high or not
A3BC9875 - 41840B3E WNF_SEB_SYSTEM_LPE
System is in Low Power Epoch or not
A3BCA075 - 41840B3E WNF_SEB_SMART_CARD_TRANSACTION_NOTIFICATION
Smart card transaction notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
A3BCA875 - 41840B3E WNF_SEB_SYSTEM_MAINTENANCE
System is in good state for maintenance
A3BCB075 - 41840B3E WNF_SEB_GEOLOCATION
Geolocation service should be started
A3BCB875 - 41840B3E WNF_SEB_DEV_MNF_CUSTOM_NOTIFICATION_RECEIVED
OEM custom notification received
A3BCC075 - 41840B3E WNF_SEB_MOB_OPERATOR_CUSTOM_NOTIFICATION_RECEIVED
MO custom notification received
A3BCC875 - 41840B3E WNF_SEB_CACHED_FILE_UPDATED
Cached file has updated
A3BCD075 - 41840B3E WNF_SEB_SMART_CARD_FIELD_INFO_NOTIFICATION
Smart card field entry/exit notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
A3BCD875 - 41840B3E WNF_SEB_SMART_CARD_HCE_APPLICATION_ACTIVATION_NOTIFICATION
Smart card HCE application activation notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
A3BCE075 - 41840B3E WNF_SEB_DEPRECATED7
Unused notification
A3BCE875 - 41840B3E WNF_SEB_DEPRECATED8
Unused notification
A3BCF075 - 41840B3E WNF_SEB_LOW_LATENCY_POWER_REQUEST
Low-latency power request notification
A3BCF875 - 41840B3E WNF_SEB_RESILIENCY_NOTIFICATION_PHASE
Resiliency phase notification
A3BD0075 - 41840B3E WNF_SEB_FULL_SCREEN_VIDEO_PLAYBACK
Fullscreen video playback notification
A3BD0875 - 41840B3E WNF_SEB_NFC_PERF_BOOST
Indicates high-performance boost mode for critical NFC background activity
A3BD1075 - 41840B3E WNF_SEB_APP_LAUNCH_PREFETCH
Indicates app launch pre-fetch phase
A3BD1875 - 41840B3E WNF_SEB_DEPRECATED1
Unused notification
A3BD2075 - 41840B3E WNF_SEB_APP_RESUME
Indicates app resume phase
A3BD2875 - 41840B3E WNF_SEB_DEPRECATED2
Unused notification
A3BD3075 - 41840B3E WNF_SEB_DEPRECATED3
Unused notification
A3BD3875 - 41840B3E WNF_SEB_DEPRECATED4
Unused notification
A3BD4075 - 41840B3E WNF_SEB_DEPRECATED5
Unused notification
A3BD4875 - 41840B3E WNF_SEB_DEPRECATED6
Unused notification
A3BD5075 - 41840B3E WNF_SEB_CALL_STATE_CHANGED
Call state change notification
A3BD5875 - 41840B3E WNF_SEB_VOICEMAIL_CHANGED
Voicemail change notification
A3BD6075 - 41840B3E WNF_SEB_CALL_HISTORY_CHANGED
Call history change notification
A3BD6875 - 41840B3E WNF_SEB_LINE_CHANGED
Phone line change notification
A3BD7075 - 41840B3E WNF_SEB_AIRPLANE_MODE_DISABLED_FOR_EMERGENCY_CALL
Airplane mode disabled for emergency call notification
A3BD7875 - 41840B3E WNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGE
Registration state has changed
A3BD8075 - 41840B3E WNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGE
Radio state has changed
A3BD8875 - 41840B3E WNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGE
Pin lock state has changed
A3BD9075 - 41840B3E WNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATION
Device service command has been received
A3BD9875 - 41840B3E WNF_SEB_DEFAULT_SIGN_IN_ACCOUNT_CHANGE
Default Sign In account has changed
A3BDA075 - 41840B3E WNF_SEB_NETWORK_CONNECTIVITY_IN_STANDBY
Network connectivity in Standby
A3BDA875 - 41840B3E WNF_SEB_USER_PRESENCE_CHANGED
User presence changed
A3BDB075 - 41840B3E WNF_SEB_AUDIO_ACTIVITY
Audio activity in progress
A3BDB875 - 41840B3E WNF_SEB_FULL_SCREEN_HDR_VIDEO_PLAYBACK
Fullscreen HDR video playback notification
A3BDC075 - 41840B3E WNF_SEB_UWP_APP_LAUNCH
Indicates UWP app launch phase
A3BC0835 - 418F1E3E WNF_SPI_LOGICALDPIOVERRIDE
Signals a change caused by SystemParametersInfo(SPI_SETLOGICALDPIOVERRIDE). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC0835 - F850339 WNF_TMCN_ISTABLETMODE
The computer has changed density mode. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC0875 - C870B39 WNF_TEAM_SHELL_HOTKEY_PRESSED
Indicates a hotkey was pressed
A3BE0875 - 418A0B39 WNF_TEL_STORAGE_CAPACITY
This is fired every time an SENSE's storage fullness crosses into a new tier or is reset. struct { DWORD PercentageFull[4]; }
A3BE1075 - 418A0B39 WNF_TEL_DAILY_UPLOAD_QUOTA
This is fired every time an SENSE's daily upload quota crosses into a new tier or is reset. struct { DWORD PercentageFull; }
A3BE1875 - 418A0B39 WNF_TEL_ONESETTINGS_UPDATED
This is fired every time a onesettings namespace is updated. {UINT64 SettingsCount; struct {UINT64 NamespaceHash; UINT64 TimeLastChanged;}[16]}
A3BE2075 - 418A0B39 WNF_TEL_SETTINGS_PUSH_NOTIFICATION_RECEIVED
This is fired every time a push notification is received from the OneSettings service. UTF8 string.
A3BE2875 - 418A0B39 WNF_TEL_TIMER_RECONFIGURED
This is fired every time a UTC service timer changes its configuration values so subscribers can call GetTimerConfiguration to check any new values.
A3BC2875 - 4188063D WNF_PHN_CALL_STATUS
Bitmask containing the current relevant call states. Any 3rd party app is allowed to listen to this. See PhoneWnf.h for valid values. SID referenced below is that of the Phone service.
A3BC3075 - 4188063D WNF_PHN_CALLFORWARDING_STATUS_LINE0
Bitmask containing the call forwarding state for phone line 0. See PhoneWnf.h for valid values. SDDL comes from ID_CAP_PHONE_2ND_PARTY, ID_CAP_PHONE_INTERNAL and PhoneSvc in %SDXROOT%\src\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC3875 - 1188063D WNF_PHNP_SERVICE_INITIALIZED
BOOL indicating whether the Phone service has been initialized. SDDL comes from phoneCall and ID_CAP_PHONE_2ND_PARTY, ID_CAP_PHONE_INTERNAL and PhoneSvc in %SDXROOT%%\src\src\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC4075 - 1188063D WNF_PHNP_SIMSEC_READY
BOOL indicating whether SimSec is ready to receive requests. SDDL comes from ID_CAP_PHONE_2ND_PARTY, ID_CAP_PHONE_INTERNAL and dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml
A3BC4875 - 1188063D WNF_PHNP_ANNOTATION_ENDPOINT
Wide string indicating the call annotation provider's RPC endpoint name. SDDL comes from ID_CAP_CALLMESSAGING_FILTER and PhoneSvc in %SDXROOT%\src\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC4075 - D88063D WNF_PHNL_LINE1_READY
BOOL indicating whether the line is ready. SDDL comes from PhoneSvc in %SDXROOT%\src\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC0875 - 9920B39 WNF_TETH_TETHERING_STATE
State name for the Tethering service notification of all state changes
A3BC1075 - 9920B39 WNF_TETH_AUTOSTART_BLUETOOTH
State name for starting Tethering service over Bluetooth
A3BC0875 - 41830324 WNF_IME_INPUT_MODE_LABEL
Input Mode Indicator label IME want to show on systray. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
A3BC1035 - 41830324 WNF_IME_EXPLICIT_PRIVATE_MODE
Explicit IME private mode status. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
A3BC0875 - 48B0639 WNF_THME_THEME_CHANGED
Notifies when the theme of the system changes
A3BC0875 - 41C61439 WNF_TZ_LEGACY_STORE_CHANGED
Time Zone Legacy store is updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC1075 - 41C61439 WNF_TZ_STORE_CHANGED
Time Zone store is updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC1875 - 41C61439 WNF_TZ_TIMEZONE_CHANGED
This state is notified when the timezone is changed via SetTimeZoneInformationByID - The data value is a UINT that indicates the new TZID. SDDL comes from ID_CAP_BUILTIN_SETTIME, ID_CAP_EVERYONE and tzautoupdate in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
A3BC0875 - 4960139 WNF_TOPE_INP_POINTER_DEVICE_ACTIVITY
Touch Event
A3BC0835 - F840539 WNF_TKBN_KEYBOARD_VISIBILITY
The touch keyboard's appearance on the screen has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC1035 - F840539 WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITY
The restricted mode touch keyboard's appearance on the screen has changed.
A3BC1835 - F840539 WNF_TKBN_IMMERSIVE_FOCUS_TRACKING
An immersive application has encountered a focus change. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC2035 - F840539 WNF_TKBN_TOUCH_EVENT
An application encountered a touch down/up event. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC2835 - F840539 WNF_TKBN_RESTRICTED_TOUCH_EVENT
An application encountered a touch down/up event
A3BC3035 - F840539 WNF_TKBN_LANGUAGE
The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC3835 - F840539 WNF_TKBN_FOREGROUND_WINDOW
The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC4035 - F840539 WNF_TKBN_CARET_TRACKING
Caret tracking has updated on the desktop. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC4835 - F840539 WNF_TKBN_AUTOCOMPLETE
The autocomplete window has been updated. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC5035 - F840539 WNF_TKBN_MODERN_KEYBOARD_FOCUS_TRACKING
Determines whether focus is in an editable field for the purposes of the modern keyboard. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC5835 - F840539 WNF_TKBN_KEYBOARD_VIEW_CHANGE
The view being shown by the touch keyboard has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC6035 - F840539 WNF_TKBN_RESTRICTED_KEYBOARD_VIEW_CHANGE
The view being shown by the restricted mode touch keyboard has changed.
A3BC6835 - F840539 WNF_TKBN_KEYBOARD_GESTURE
The keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC7035 - F840539 WNF_TKBN_RESTRICTED_KEYBOARD_GESTURE
The restricted keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact.
A3BC7835 - F840539 WNF_TKBN_CANDIDATE_WINDOW_STATE
The candidate window state has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC8035 - F840539 WNF_TKBN_KEYBOARD_LAYOUT_CHANGE
The layout being shown by the touch keyboard has changed.
A3BC8835 - F840539 WNF_TKBN_RESTRICTED_KEYBOARD_LAYOUT_CHANGE
The layout being shown by the restricted mode touch keyboard has changed.
A3BC9035 - F840539 WNF_TKBN_COMPOSITION_STATE
The composition state has changed. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC9835 - F840539 WNF_TKBN_SYSTEM_IMMERSIVE_FOCUS_TRACKING
A System Mode Application(Logon/OOBE) has encountered a focus change
A3BCA035 - F840539 WNF_TKBN_SYSTEM_TOUCH_EVENT
A System Mode application(Logon/OOBE) encountered a touch down/up event
A3BCA835 - F840539 WNF_TKBN_INPUT_PANE_DISPLAY_POLICY
The edit control in focus has changed the input pane display policy (manual/automatic). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BCB035 - F840539 WNF_TKBN_DESKTOP_MODE_AUTO_IHM
The system is in desktop mode but the user prefers tablet-mode IHM behavior. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BCB835 - F840539 WNF_TKBN_KEYBOARD_SET_VISIBLE
The touch keyboard should show or hide. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BCC035 - F840539 WNF_TKBN_KEYBOARD_SET_VISIBLE_NOTIFICATION
Update the show/hide status of touch keyboard that is being tracked in tabtip. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC08F5 - 13840539 WNF_TKBR_CHANGE_SYSTEM
This state name is used to notify system components about state changes in the Token Broker
A3BC1075 - 13840539 WNF_TKBR_CHANGE_APP
This state name is used to notify apps about state changes in the Token Broker
A3BC18F5 - 13840539 WNF_TKBR_CHANGE_APP_INTERNAL
This state name is used to notify apps about state changes in the Token Broker
A3BC0875 - 418B1E39 WNF_TPM_OWNERSHIP_TAKEN
This event signals when the Win32_TPM provider has completed taking ownership of the TPM.
A3BC1075 - 418B1E39 WNF_TPM_DEVICEID_STATE
This event signals the state of the TPM-based DeviceID.
A3BC1875 - 418B1E39 WNF_TPM_PROVISION_TRIGGER
This event triggers the TPM provisioning/status check to run.
A3BC2075 - 418B1E39 WNF_TPM_CLEAR_PENDING
This event signals a TPM Clear will be attempted.
A3BC2875 - 418B1E39 WNF_TPM_CLEAR_RESULT
This event signals if ownership was taken during TPM Provisioning and the result of TPM Clear on last reboot.
A3BC3075 - 418B1E39 WNF_TPM_DISABLE_DEACTIVATE_PENDING
This event signals a TPM Disable or TPM Deactivate will be attempted.
A3BC3875 - 418B1E39 WNF_TPM_ENABLE_ACTIVATE_COMPLETED
This event signals after the TPM is Enabled or Activated.
A3BC0875 - C960C38 WNF_UBPM_POWER_SOURCE
The machine power source state
A3BC1075 - C960C38 WNF_UBPM_CONSOLE_MONITOR
The machine console monitor on/off state
A3BC1875 - C960C38 WNF_UBPM_FRMU_ALLOWED
The user is present and machine is on batteries and the battery level is above firmware update thershold
A3BC2075 - C960C38 WNF_UBPM_PRESHUTDOWN_PHASE
The machine entered pre shutdown phase
A3BC0875 - 7820338 WNF_UMDF_WUDFSVC_START
Trigger the Driver Manager service start
A3BC0875 - 41891D38 WNF_USO_STATE_CHANGE
Signals that a state transition occurred for an update session.
A3BC1075 - 41891D38 WNF_USO_STATE_ATTENTION_REQUIRED
Signals that a state encounter a condition that requires attention.
A3BC1875 - 41891D38 WNF_USO_UPDATE_PROGRESS
Signals the a change in progess of an update session.
A3BC2075 - 41891D38 WNF_USO_REBOOT_REQUIRED
Signals that a reboot is required to complete the update session.
A3BC2875 - 41891D38 WNF_USO_ACTIVE_SESSION
Signals that the current active session is changed.
A3BC3075 - 41891D38 WNF_USO_UPDATE_SUCCEEDED
Signals that updates have installed successfully on lite servicing stack.
A3BC3875 - 41891D38 WNF_USO_UPTODATE_STATUS_CHANGED
Signals that the machine's up to date status has changed.
A3BC4075 - 41891D38 WNF_USO_REBOOT_BLOCK_REQUESTED
Signals that USO should not reboot the system.
A3BC4875 - 41891D38 WNF_USO_DOWNLOAD_STARTED
Signals that update download has started on lite servicing stack.
A3BC5075 - 41891D38 WNF_USO_INSTALL_STARTED
Signals that update install has started on lite servicing stack.
A3BC0875 - 15850729 WNF_DICT_CONTENT_CHANGED
The content of a user dictionary has changed (word either added or removed). SDDL SID's come from capability ID_CAP_INPUT_CORE (both application and service SID's), and DefAppsCapabilitiesGroup
A3BC0835 - 13810338 WNF_UMGR_SIHOST_READY
Shell Infrastructure host is ready.
A3BC1075 - 13810338 WNF_UMGR_USER_LOGIN
The user was logged in to the system.
A3BC1875 - 13810338 WNF_UMGR_USER_LOGOUT
The user was logged out of the system.
A3BC2075 - 13810338 WNF_UMGR_SYSTEM_USER_CONTEXT_CHANGED
Default system user, as defined by start view, has changed.
A3BC2875 - 13810338 WNF_UMGR_SESSIONUSER_TOKEN_CHANGE
Token for the session user changed.
A3BC3035 - 13810338 WNF_UMGR_SESSION_ACTIVE_SHELL_USER_CHANGE
Session active shell user changed.
A3BC3875 - 13810338 WNF_UMGR_USER_TILE_CHANGED
The user tile for the specified SID was changed. The payload is the String user sid and the datasize is the byte count of MAX_PATH.
A3BC0875 - 41880F3B WNF_VAN_VANUI_STATUS
The VAN UI open close status
A3BC0875 - 41881E3B WNF_VPN_CLIENT_CONNECTIVITY_STATUS
The VPN Client connectivity status
A3BC0875 - 418B0D3A WNF_WCM_INTERFACE_LIST
This event signals when a WCM-managed network interface has been added or removed. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC1075 - 418B0D3A WNF_WCM_SERVICE_STATUS
Connection Manager service restart. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC1875 - 418B0D3A WNF_WCM_MAPPING_POLICY_UPDATED
WNF state for refreshing WCM service mapping policies cache
A3BC2075 - 418B0D3A WNF_WCM_PROFILE_CONFIG_UPDATED
WNF state for refreshing WCM's selection multiplex table and selectable connection list
A3BC1075 - 1583002E WNF_CNET_DPU_GLOBAL_STATE_OVER_LIMIT
the data of this state is 1 when the global data usage state is less than or equal to OVER_LIMIT, otherwise it is 0
A3BC1875 - 1583002E WNF_CNET_DPU_GLOBAL_STATE_OFF_TRACK
the data of this state is 1 when the global data usage state is less than or equal to OFF_TRACK, otherwise it is 0
A3BC2075 - 1583002E WNF_CNET_DPU_GLOBAL_STATE_ON_TRACK
the data of this state is 1 when the global data usage state is less than or equal to ON_TRACK, otherwise it is 0
A3BC2875 - 1583002E WNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACK
the data of this state is 1 when the global data usage state is less than or equal to UNDER_TRACK, otherwise it is 0
A3BC3075 - 1583002E WNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKED
the data of this state is 1 when the global data usage state is less than or equal to NOT_TRACKED, otherwise it is 0
A3BC4875 - 1583002E WNF_CNET_CELLULAR_CONNECTIONS_AVAILABLE
State name for Cellular connections available State. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC5075 - 1583002E WNF_CNET_NON_CELLULAR_CONNECTIONS_AVAILABLE
State name for Non-cellular connections available State. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC6875 - 1583002E WNF_CNET_NON_CELLULAR_CONNECTED
The state is 1 when a non cellular connection is in connected state, otherwise it is 0. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC7075 - 1583002E WNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTED
The state is 1 when Radio is active or a non cellular connection is in connected state, otherwise it is 0. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC0875 - C951B29 WNF_DUSM_TASK_TOAST
Trigger task scheduler to launch task for toast
A3BC0875 - 41940B3A WNF_WER_SERVICE_START
The WER service needs to start. CAPABILITY_SID_LpacInstrumentation - S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187
A3BC1075 - 41940B3A WNF_WER_QUEUED_REPORTS
The number of reports queued to the machine store. CAPABILITY_SID_LpacInstrumentation - S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187
A3BC1875 - 41940B3A WNF_WER_CRASH_STATE
Information about applications currently crashing.
A3BC0875 - 880073A WNF_WIFI_CONNECTION_STATUS
State name for Wifi radio and connection status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC1075 - 880073A WNF_WIFI_CPL_STATUS
State name for Wifi CPL status flags
A3BC2075 - 880073A WNF_WIFI_SERVICE_NOTIFICATIONS
Notifications received from the WiFi Conn Svc. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC2875 - 880073A WNF_WIFI_HOTSPOT_HOST_READY
State name for Wifi Hotspot Host ready flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC4875 - 880073A WNF_WIFI_AOAC_STATUS
State name for Wifi power status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC5875 - 880073A WNF_WIFI_CONNECTION_SCORE
State name for Wifi connection status and connection score updates
A3BC6075 - 880073A WNF_WIFI_TILE_UPDATE
State name for Wifi network tiles updated. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC6875 - 880073A WNF_WIFI_AVERAGE_TRANSMIT
Average peak transmitted traffic seen by NCSI
A3BC7075 - 880073A WNF_WIFI_MEDIA_STREAMING_MODE
Last media streaming mode state change
A3BC7875 - 880073A WNF_WIFI_TASK_TRIGGER
State name triggering WiFiNetworkManager background task. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC8075 - 880073A WNF_WIFI_L3_AUTH_STATE
State for triggering browser UI when a network is hijacked. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
A3BC8875 - 880073A WNF_WIFI_WLANSVC_NOTIFICATION
This event sends notifications from wlansvc
A3BC9075 - 880073A WNF_WIFI_HOTSPOT2_REGISTRATION_STATUS
State name for triggering hotspot2 registration status from online signup server
A3BC0C75 - 418A073A WNF_WIL_FEATURE_STORE
Event indicating the Normal feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml
A3BC1475 - 418A073A WNF_WIL_BOOT_FEATURE_STORE
Event indicating the Boot feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml
A3BC1C75 - 418A073A WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_1
Event to indicate the first use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC2475 - 418A073A WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_2
Event to indicate the first use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC2C75 - 418A073A WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_3
Event to indicate the first use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC3475 - 418A073A WNF_WIL_FEATURE_USAGE_TRACKING_1
Event to indicate unique use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC3C75 - 418A073A WNF_WIL_FEATURE_USAGE_TRACKING_2
Event to indicate unique use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC4475 - 418A073A WNF_WIL_FEATURE_USAGE_TRACKING_3
Event to indicate unique use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC4C75 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_1
Event to indicate uniquely observed code failures on this device (1). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC5475 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_2
Event to indicate uniquely observed code failures on this device (2). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC5C75 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_3
Event to indicate uniquely observed code failures on this device (3). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC6475 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_4
Event to indicate uniquely observed code failures on this device (4). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC6C75 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_5
Event to indicate uniquely observed code failures on this device (5). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC7475 - 418A073A WNF_WIL_FEATURE_HEALTH_TRACKING_6
Event to indicate uniquely observed code failures on this device (6). CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC7C75 - 418A073A WNF_WIL_MACHINE_FEATURE_STORE
Event indicates modification of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC8075 - 418A073A WNF_WIL_MACHINE_FEATURE_STORE_MODIFIED
Event fires once per boot on modification of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC88F5 - 418A073A WNF_WIL_USER_FEATURE_STORE
Event indicates modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC90F5 - 418A073A WNF_WIL_USER_FEATURE_STORE_MODIFIED
Event fires once per user session on modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience - S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
A3BC0875 - 41921C3E WNF_SRT_WINRE_CONFIGURATION_CHANGE
Triggered each time there is a configuration change in WinRE
A3BC0875 - 13891A3E WNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATED
This WNF event fires when the OEM, MO, and Device Hardware values change in the registry.
A3BC1075 - 13891A3E WNF_STOR_CONFIGURATION_MO_TASK_RUNNING
This WNF event fires when the MO discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
A3BC1875 - 13891A3E WNF_STOR_CONFIGURATION_OEM_TASK_RUNNING
This WNF event fires when the OEM discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
A3BC08F5 - 41871B3A WNF_WUA_NUM_PER_USER_UPDATES
State stores the number of per-user updates for the current user
A3BC1075 - 41871B3A WNF_WUA_AU_SCAN_COMPLETE
Triggered each time an AU scan is completed
A3BC1875 - 41871B3A WNF_WUA_CALL_HANG
State stores information regarding WU call hangs
A3BC2075 - 41871B3A WNF_WUA_SERVICE_HANG
State stores information regarding WU service hangs
A3BC2875 - 41871B3A WNF_WUA_STAGEUPDATE_DETAILS
Triggered when a StageUpdate call has completed for a phone update installation.
A3BC0875 - 1192063A WNF_WHTP_WINHTTP_PROXY_DISCOVERED
A network proxy has been discovered. WinHttpAutoProxySvc can write, NlaSvc can read.
A3BC1075 - 1192063A WNF_WHTP_WINHTTP_PROXY_AUTHENTICATION_REQUIRED
A proxy has returned a 407 status code.
A3BC0875 - C971D3A WNF_WSQM_IS_OPTED_IN
Mirrors the state of CEIPEnable and CEIPSampledIn registry settings.
A3BC0875 - 4195003A WNF_WNS_CONNECTIVITY_STATUS
The WNS Connection Provider connectivity status
A3BC0875 - 4180013A WNF_WOF_OVERLAY_CONFIGURATION_CHANGE
Overlay configuration change
A3BC0835 - 4194063E WNF_SHR_SHARING_CHANGED
System sharing status changed
A3BC1075 - 4194063E WNF_SHR_DHCP_IPv4_LEASE_LIST
ICS DHCP IPv4 lease list changed
A3BC1875 - 4194063E WNF_SHR_DHCP_IPv4_FASTIP_ADDRS
New assigned Fast-IP Address(es)
A3BC0875 - 41901D26 WNF_KSV_STREAMSTATE
This is the current stream state of a camera for a process in a given session
A3BC1075 - 41901D26 WNF_KSV_DEVICESTATE
This is the current device state
A3BC0875 - 41C60C39 WNF_TB_SYSTEM_TIME_CHANGED
Time Broker has finished processing a change ot time
A3BC0835 - 418B0A38 WNF_UDM_SERVICE_INITIALIZED
BOOL + UserContextToken indicating whether the UserDataService service has been initialized for the specified user. On OneCore, SDDL gives read access to callers with userDataSystem and all access to IU/AU/System. On phone, SDDL comes from ID_CAP_APPOINTMENTS, ID_CAP_COMMS_COMMON, ID_CAP_CONTACTS, ID_CAP_EVERYONE, ID_CAP_PLATFORM_EXTENSIBILITY, UserDataSvc and ID_CAP_SMS in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC2835 - 41870A38 WNF_UDA_CONTACT_SORT_CHANGED
State name for aggregate sort and display order changes. SDDL comes from ID_CAP_COMMS_APPLICATIONS and ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
A3BC0875 - 19890C35 WNF_XBOX_APPLICATION_CONTEXT_CHANGED
The application specific context has changed in steady state.
A3BC1075 - 19890C35 WNF_XBOX_APPLICATION_FOCUS_CHANGED
The currently focused application has changed.
A3BC1875 - 19890C35 WNF_XBOX_APPLICATION_ACTIVATING
An application is activating.
A3BC2875 - 19890C35 WNF_XBOX_SHELL_TOAST_NOTIFICATION
A new toast notification has been delivered to the shell.
A3BC3075 - 19890C35 WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_LAUNCH
A package is about to be unmounted from the System OS ready to launch it on the Title OS.
A3BC3875 - 19890C35 WNF_XBOX_PACKAGE_INSTALL_STATE_CHANGED
A new application package has been added or an existing one has been removed.
A3BC4875 - 19890C35 WNF_XBOX_GLOBALIZATION_SETTING_CHANGED
An application package has been removed.
A3BC5075 - 19890C35 WNF_XBOX_APPLICATION_NO_LONGER_RUNNING
An application is no longer running.
A3BC5875 - 19890C35 WNF_XBOX_AUTOPLAY_CONTENT_DETECTED
An optical disc or other media has been detected with content.
A3BC6075 - 19890C35 WNF_XBOX_APPLICATION_ERROR
Application error handler
A3BC6875 - 19890C35 WNF_XBOX_STORAGE_ERROR
Handler for achievement cache and game save storage
A3BC7075 - 19890C35 WNF_XBOX_LIVE_CONNECTIVITY_CHANGED
Connectivity to the Xbox LIVE service has changed.
A3BC7875 - 19890C35 WNF_XBOX_SYSTEM_TITLE_AUTH_STATUS_CHANGED
System Title Authentication status has changed.
A3BC8075 - 19890C35 WNF_XBOX_ACHIEVEMENTS_RAW_NOTIFICATION_RECEIVED
A new achievements-related raw notifications was received.
A3BC8875 - 19890C35 WNF_XBOX_ERA_VM_STATUS_CHANGED
ERA VM status has changed.
A3BC9075 - 19890C35 WNF_XBOX_APPLICATION_LAYOUT_CHANGED
One or more application layouts changed.
A3BC9875 - 19890C35 WNF_XBOX_SYSTEM_IDLE_TIMEOUT_CHANGED
System Idle Timeout has changed.
A3BCA075 - 19890C35 WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGED
System constrained status has changed.
A3BCD875 - 19890C35 WNF_XBOX_APPLICATION_COM_RESILIENCY_STATUS_CHANGED
Application's COM resiliency status has changed.
A3BCE075 - 19890C35 WNF_XBOX_SYSTEM_USER_CONTEXT_CHANGED
Default system user, as defined by start view, has changed.
A3BCF075 - 19890C35 WNF_XBOX_HOST_STORAGE_CONFIGURATION_CHANGED
A storage device was either plugged or unplugged.
A3BCF875 - 19890C35 WNF_XBOX_EXIT_SILENT_BOOT_MODE
The system is exiting silent boot mode.
A3BD0075 - 19890C35 WNF_XBOX_APPLICATION_LICENSE_CHANGED
The license used by the application has changed.
A3BD0875 - 19890C35 WNF_XBOX_SHELL_INITIALIZED
The system shell is initialized and ready.
A3BD1875 - 19890C35 WNF_XBOX_PASS3_UPDATE_NOTIFICATION
Pass 3 system update has progressed and is sending a notification.
A3BD2075 - 19890C35 WNF_XBOX_MSA_ENVIRONMENT_CONFIGURED
The MSA and WNS environments have been configured to match the XBL environment.
A3BD2875 - 19890C35 WNF_XBOX_SIP_VISIBILITY_CHANGED
The visibility of the Software Input Pane has changed.
A3BD3075 - 19890C35 WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGED
Game streaming state has changed.
A3BD3875 - 19890C35 WNF_XBOX_SIP_FOCUS_TRANSFER_NOTIFICATION
It is possible to transfer focus away from the Software Input Pane.
A3BD4075 - 19890C35 WNF_XBOX_XAM_SMB_SHARES_INIT_ALLOW_SYSTEM_READY
SMB shares have been launched.
A3BD4875 - 19890C35 WNF_XBOX_XBBLACKBOX_SNAP_NOTIFICATION
A snap of XBBlackbox has occurred
A3BD5075 - 19890C35 WNF_XBOX_SYSTEM_LOW_POWER_MAINTENANCE_WORK_ALLOWED
Maintenance work is allowed in low power mode
A3BD5875 - 19890C35 WNF_XBOX_ERA_TITLE_LAUNCH_NOTIFICATION
ERA launch notification with XBL title info
A3BD6075 - 19890C35 WNF_XBOX_STORAGE_STATUS
Status of attached storage devices
A3BD6875 - 19890C35 WNF_XBOX_STORAGE_CHANGED
A storage device, or its contents, have changed
A3BD7075 - 19890C35 WNF_XBOX_PACKAGE_STREAMING_STATE
Current state of the streaming package
A3BD7875 - 19890C35 WNF_XBOX_STREAMING_QUEUE_CHANGED
The install streaming queue contents have changed
A3BD8075 - 19890C35 WNF_XBOX_QUERY_UPDATE_NOTIFICATION
An update is available for installing content.
A3BD8875 - 19890C35 WNF_XBOX_REPOSITORY_CHANGED
A change has been made to the pre-indexed state repository.
A3BD9075 - 19890C35 WNF_XBOX_LIVETV_TUNER_COUNT_CHANGED
The number of LiveTV tuners connected to the system has changed
A3BD9875 - 19890C35 WNF_XBOX_PACKAGECACHE_CHANGED
A change has been made to the package cache.
A3BDA075 - 19890C35 WNF_XBOX_WPN_PLATFORM_HOST_INITIALIZED
The WPN platform host is initialized and ready.
A3BDA875 - 19890C35 WNF_XBOX_NARRATOR_RECT_CHANGED
The rectangle visual of the Narrator has changed.
A3BDB075 - 19890C35 WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_UNINSTALL
A package is about to be unmounted from the System OS for uninstall.
A3BDB875 - 19890C35 WNF_XBOX_SEND_LTV_COMMAND_REQUESTED
A module requested for an ltv command to be issued.
A3BDC075 - 19890C35 WNF_XBOX_SHELL_DATACACHE_ENTITY_CHANGED
An entity has changed in the shell data cache.
A3BDC875 - 19890C35 WNF_XBOX_CORTANAOVERLAY_VISIBILITY_CHANGED
The visibility of the Cortana Overlay view has changed.
A3BDD075 - 19890C35 WNF_XBOX_NOTIFICATION_UNREAD_COUNT
Number of unread notifications for the current system user.
A3BDD875 - 19890C35 WNF_XBOX_EXTENDED_RESOURCE_MODE_CHANGED
Extended resource mode has been toggled
A3BDE075 - 19890C35 WNF_XBOX_AUTO_SIGNIN_IN_PROGRESS
Indicates whether the shell is in the process of auto-signin. Payload is UINT32 with a 1 or 0.
A3BDE875 - 19890C35 WNF_XBOX_REMOTE_SIGNOUT
A local user has signed out remotely via SPOP.
A3BDF075 - 19890C35 WNF_XBOX_ACCESSIBILITY_NARRATOR_ENABLED
Indicates whether the Narrator is enabled. Payload is UINt32 with 1 (enabled) or 0 (disabled).
A3BDF875 - 19890C35 WNF_XBOX_GLOBAL_SPEECH_INPUT_NOTIFICATION
A global speech command was recognized that translates to a controller button press.
A3BE0075 - 19890C35 WNF_XBOX_APPLICATION_CURRENT_USER_CHANGED
The current user of the application has changed.
A3BE0875 - 19890C35 WNF_XBOX_ERA_VM_INSTANCE_CHANGED
ERA VM Instance has come up or gone down
A3BE1075 - 19890C35 WNF_XBOX_RESET_IDLE_TIMER
Idle monitor timer should be reset due to user activity.
A3BE1875 - 19890C35 WNF_XBOX_CORTANA_TV_GRAMMAR_UPDATE_NOTIFICATION
Notification for when TV grammars for cortana needs rebuilding
A3BE2075 - 19890C35 WNF_XBOX_CORTANA_SIGNEDIN_USERS_GRAMMAR_UPDATE_NOTIFICATION
Notification for when signed in users change results in rebuilding grammars for cortana
A3BE2875 - 19890C35 WNF_XBOX_KINECT_IS_REQUIRED
An application that requires Kinect has connected to the NuiService.
A3BE3075 - 19890C35 WNF_XBOX_ADJUST_SNAP_CPU_AFFINITY
Adjust an app's CPU affinity if in constrained mode
A3BE3875 - 19890C35 WNF_XBOX_VIDEOPLAYER_ACTIVEPLAYER
The active shared video player host has changed.
A3BE4075 - 19890C35 WNF_XBOX_VIDEOPLAYER_PLAYERSTATE
The video player app has changed internal state.
A3BE4875 - 19890C35 WNF_XBOX_VIDEOPLAYER_PLAYBACKPROGRESS
The video player app has changed playback progress.
A3BE5075 - 19890C35 WNF_XBOX_SAFEAREA_SETTING_CHANGED
Indicates whether the safe area setting is enabled. Payload is UINT32 with a 1 or 0.
A3BE5875 - 19890C35 WNF_XBOX_ACTIVE_BACKGROUNDAUDIO_APPLICATION_CHANGED
The application providing audio from the background has changed.
A3BE6075 - 19890C35 WNF_XBOX_KEYBOARD_LOCALE_CHANGED
Indicates that the desired keyboard locale has changed.
A3BE6875 - 19890C35 WNF_XBOX_GAMER_ACCOUNT_CHANGED
The local gamer account has signed in or out. Payload is uint32 representing sessionid
A3BE7075 - 19890C35 WNF_XBOX_ERA_VM_IOPRIORITY_CHANGED
ERA VM IO priority has been changed
A3BE7875 - 19890C35 WNF_XBOX_SPEECH_INPUT_DEVICE
Input device changed for OneCore speech
A3BE8875 - 19890C35 WNF_XBOX_CORTANA_USER_CHANGED_UPDATE_NOTIFICATION
Notification for when the active user of Cortana changes from signing in/out/switching user
A3BE9075 - 19890C35 WNF_XBOX_ACCESSIBILITY_EXCLUSIVE_INPUT_MODE_CHANGED
The exclusive input modality for an accessibility component changed
A3BE9875 - 19890C35 WNF_XBOX_PROACTIVE_NOTIFICATION_TRIGGERED
Proactive notification service is triggered
A3BEA075 - 19890C35 WNF_XBOX_ACHIEVEMENT_TRACKER_STATE_CHANGED
Notification for when the Achievement Tracker's state should change
A3BEA875 - 19890C35 WNF_XBOX_GUIDE_DIRECT_ACTIVATION
Event to trigger direct activation of xbox guide when nexus is pressed
A3BEB075 - 19890C35 WNF_XBOX_TITLE_SPOP_VETO_RECEIVED
A title SPOP veto has been received.
A3BEB875 - 19890C35 WNF_XBOX_LIBRARY_RAW_NOTIFICATION_RECEIVED
A new library-related raw notifications was received.
A3BEC075 - 19890C35 WNF_XBOX_MESSAGING_RAW_NOTIFICATION_RECEIVED
A new messaging-related raw notifications was received.
A3BEC875 - 19890C35 WNF_XBOX_PEOPLE_RAW_NOTIFICATION_RECEIVED
A new people-related raw notifications was received.
A3BED075 - 19890C35 WNF_XBOX_MULTIPLAYER_RAW_NOTIFICATION_RECEIVED
A new multiplayer-related raw notifications was received.
A3BED875 - 19890C35 WNF_XBOX_LIVETV_RAW_NOTIFICATION_RECEIVED
A new live tv-related raw notifications was received.
A3BEE075 - 19890C35 WNF_XBOX_SYSTEMUI_RAW_NOTIFICATION_RECEIVED
A new SystemUI-related raw notifications was received.
A3BEE875 - 19890C35 WNF_XBOX_CLUB_RAW_NOTIFICATION_RECEIVED
A new club-related raw notifications was received.
A3BEF075 - 19890C35 WNF_XBOX_CLUBCHAT_RAW_NOTIFICATION_RECEIVED
A new club chat-related raw notifications was received.
A3BEF875 - 19890C35 WNF_XBOX_SETTINGS_RAW_NOTIFICATION_RECEIVED
A new settings-related raw notifications was received.
A3BF0075 - 19890C35 WNF_XBOX_MEDIA_IS_PLAYING_CHANGED
Notification of whether any media is playing.
A3BF0875 - 19890C35 WNF_XBOX_EXPANDED_RESOURCES_INACTIVE
An expandedResources app has gone inactive.
A3BF1075 - 19890C35 WNF_XBOX_PARENTAL_RESTRICTIONS_CHANGED
The maximum age rating currently permissable has changed.
A3BC0C75 - 41951A38 WNF_UTS_USERS_ENROLLED
Indicates whether there are any enrolled users.
A3BC1475 - 41951A38 WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGERED
Triggered when the lock screen is dismissed to kick-off trusted signals.
A3BC0875 - 41841D38 WNF_USB_TYPE_C_PARTNER_STATE
This event indicates the state of a USB Type-C connector's partner device.
A3BC1075 - 41841D38 WNF_USB_BILLBOARD_CHANGE
This event indicates that the number of Billboard devices in the system has changed.
A3BC1875 - 41841D38 WNF_USB_PEER_DEVICE_STATE
This is the state of a peer device.
A3BC2075 - 41841D38 WNF_USB_CHARGING_STATE
This event indicates the USB charging state for this Windows device.
A3BC2875 - 41841D38 WNF_USB_FUNCTION_CONTROLLER_STATE
This event indicates the state of a USB function controller, such as detached, or attached, and successfully enumerated with host PC.

windows deep internals

пятница, 18 августа 2017 г.

WNF IDs from perf_nt_c.dll

Комментариев нет:

Отправить комментарий

пятница, 18 августа 2017 г.

WNF IDs from perf_nt_c.dll

Комментариев нет:

Отправить комментарий

пятница, 18 августа 2017 г.