Koko Software
Oprogramowanie dla prawdziwych profesjonalistów.
RSS
  • Główna
  • O mnie

Adipex without prescription

Windows Notification Facility (WNF) IDs from Windows 10.0.19041.1503

Reverse engineering Brak komentarzy »

Identifiers extracted from ContentDeliveryManager.Utilities.dll

WNF_9P_UNKNOWN_DISTRO_NAME0x41C61E54A3BC0875The Plan 9 Redirector got a request for an unknown WSL distribution and there is no user callback registered to query it.
WNF_9P_REDIRECTOR_STARTED0x41C61E54A3BC1075The Plan 9 Redirector was started and is ready to accept requests.
WNF_AAD_DEVICE_REGISTRATION_STATUS_CHANGE0x41820F2CA3BC0875This event is signalled when device changes status of registration in Azure Active Directory.
WNF_AAD_DEVICE_ATTRIBUTES_UPDATE0x41820F2CA3BC1075This event is signalled when device attribute value changes are detected.
WNF_ACC_EC_ENABLED0x41850D2CA3BC0835This event is bool signaled to indicate the EC accessibility feature enabled state
WNF_ACT_DATA_UPDATED0x41920D2CA3BC0835Indicates Activity Data has been updated
WNF_AFD_IGNORE_ORDERLY_RELEASE_CHANGE0x4182082CA3BC0875A system entity has requested a change in AFD’s orderly release behavior.
WNF_AOW_BOOT_PROGRESS0x4191012CA3BC0875This state is incremented when a discrete part of the AoW boot sequence has completed. Security: WNF_STATE_SUBSCRIBE (1) by everyone (WD) and app containers (S-1-15-2-1); WNF_STATE_SUBSCRIBE | WNF_STATE_PUBLISH (3) by Local System (SY) and the Interactive User account (IU).
WNF_BCST_APP_BROADCAST_STREAM_STATE0x15950D2FA3BC0875Contains the current stream state information for the app broadcast service.
WNF_AI_USERTILE0x41C6072CA3BC0875AppInstallation state name to receive RAW notifications
WNF_AI_PACKAGEINSTALL0x41C6072CA3BC1075This event is signalled when a package install operation completes
WNF_AI_PACKAGEUPDATE0x41C6072CA3BC1875This event is signalled when a package update operation completes
WNF_AI_PACKAGEUNINSTALL0x41C6072CA3BC2075This event is signalled when a package uninstall operation completes
WNF_AI_USER_PACKAGEINSTALL0x41C6072CA3BC28F5This event is signalled when a package install operation completes
WNF_AI_USER_PACKAGEUPDATE0x41C6072CA3BC30F5This event is signalled when a package update operation completes
WNF_AI_USER_PACKAGEUNINSTALL0x41C6072CA3BC38F5This event is signalled when a package uninstall operation completes
WNF_A2A_APPURIHANDLER_INSTALLED0x41877C2CA3BC0875An app implementing windows.AppUriHandler contract has been installed
WNF_AA_LOCKDOWN_CHANGED0x41C60F2CA3BC0875Mobile lockdown configuration has been changed
WNF_AA_CURATED_TILE_COLLECTION_STATUS0x41C60F2CA3BC1075Curate tile collection for all allowed apps for current AssignedAccess account has been created
WNF_AA_MDM_STATUS_EVENT_LOGGED0x41C60F2CA3BC1875Events are logged to the assigned access status trace logging.
WNF_AUDC_CPUSET_ID0x2821B2CA3BC08B5This state holds the CPU Set ID for audio threads. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_AUDC_PHONECALL_ACTIVE0x2821B2CA3BC1075This state indicates an active phone call, which can be from a cellular call or active Communications category audio streams
WNF_AUDC_TUNER_DEVICE_AVAILABILITY0x2821B2CA3BC1875This notification indicates whether or not the tuner endpoint is available.
WNF_AUDC_HEALTH_PROBLEM0x2821B2CA3BC2075State for problems detected in the audio core.
WNF_AUDC_CPUSET_ID_SYSTEM0x2821B2CA3BC2875This state keeps other system services apprised of the audio-reserved CPU set ID.
WNF_AUDC_RENDER0x2821B2CA3BC3075Reports the number of, and all endpoints currently rendering audio. Returns a WNF_STREAM_EVENT_HEADER data structure
WNF_AUDC_VOLUME_CONTEXT0x2821B2CA3BC3875This notification is raised when contextual volume for endpoints have changed.
WNF_AUDC_CAPTURE0x2821B2CA3BC4075Reports the number of, and process ids of all applications currently capturing audio. Returns a WNF_CAPTURE_STREAM_EVENT_HEADER data structure
WNF_AUDC_RINGERVIBRATE_STATE_CHANGED0x2821B2CA3BC4875Reports the changes to the Ringervibrate state of the device
WNF_AUDC_SPATIAL_STATUS0x2821B2CA3BC5075Reports for each spatial audio endpoint if spatial audio is currently being rendered. Returns a WNF_SPATIAL_STATUS_HEADER data structure
WNF_AUDC_DEFAULT_RENDER_ENDPOINT_PROPERTIES0x2821B2CA3BC5875Reports certain properties of the default render multimedia endpoint whenever the default endpoint changes or a property of interest changes on the default render endpoint
WNF_AUDC_CHAT_APP_CONTEXT0x2821B2CA3BC6075Publishes a list of the current chat applications on the device
WNF_AUDC_VAM_ACTIVE0x2821B2CA3BC6875Reports whether or not the voice activation manager has an active hardware keyword spotter.
WNF_AUDC_POSTURE0x2821B2CA3BC7075Reports the current posture of the device.
WNF_AUDC_ORIENTATION0x2821B2CA3BC7875Reports the current orientation of the device.
WNF_AVA_SOUNDDETECTOR_PATTERN_MATCH0x4187182CA3BC0875This notification is used to signal that a match has been detected for Voice Activation
WNF_AVLC_DRIVER_REQUEST0x28A182CA3BC0875A driver requst permission for volume limit change.
WNF_AVLC_VOLUME_WARNING_ACCEPTED0x28A182CA3BC1075This event propagates the user’s choice from the warning dialog.
WNF_AVLC_SHOW_VOLUMELIMITWARNING0x28A182CA3BC1875This event informs the system that we need to show reached volume limit warning message
WNF_ACHK_SP_CORRUPTION_DETECTED0xA8E0D2CA3BC0875Event fired when we scan the System Partition and find corruption.
WNF_BMP_BG_PLAYSTATE_CHANGED0x4196032FA3BC0875The background media player’s playstate has changed.
WNF_BMP_BG_PLAYBACK_REVOKED0x4196032FA3BC1075The following tasks aren’t able to play under current policy
WNF_OS_IP_OVER_USB_AVAILABLE0x41C61D22A3BC8075IP Over USB Availability. SDDL comes from ID_CAP_EVERYONE and IpOverUsb in %SDXROOT%\src\baseos\prod\packages\MfgIpOverUsb\MfgIpOverUsb.pkg.xml
WNF_OS_IU_PROGRESS_REPORT0x41C61D22A3BC8875Update progress reporting status. SDDL comes from ID_CAP_BASEOS_UPDATEAPI in %SDXROOT%\src\baseos\prod\packages\imgupd\MainOS\ImgUpd.pkg.xml
WNF_FVE_DE_SUPPORT0x4183182BA3BC0875This event triggers when Device Encryption support status is evaluated, and receives the result of that evaluation.
WNF_FVE_DE_MANAGED_VOLUMES_COUNT0x4183182BA3BC1075This event triggers when the BitLocker service detects a change in the count of DE-managed volumes, and includes the count of such volumes.
WNF_FVE_WIM_HASH_GENERATION_TRIGGER0x4183182BA3BC1875This event triggers or signals to stop WIM hash generation task.
WNF_FVE_WIM_HASH_GENERATION_COMPLETION0x4183182BA3BC2075This event signals completion of WIM hash generation.
WNF_FVE_WIM_HASH_DELETION_TRIGGER0x4183182BA3BC2875This event triggers WIM hash deletion.
WNF_FVE_BDESVC_TRIGGER_START0x4183182BA3BC3075This event trigger-starts BdeSvc service.
WNF_FVE_STATE_CHANGE0x4183182BA3BC3875This event triggers on every BitLocker state change.
WNF_FVE_MDM_POLICY_REFRESH0x4183182BA3BC4075This event triggers where RequireDeviceEncryption policy arrives under the BitLocker area.
WNF_FVE_REQUIRE_SDCARD_ENCRYPTION0x4183182BA3BC4875This event triggers SD card encrytion policy arrival notification.
WNF_FVE_SDCARD_ENCRYPTION_REQUEST0x4183182BA3BC5075This event triggers SecTask to enable/disable SD Card encryption.
WNF_FVE_SDCARD_ENCRYPTION_STATUS0x4183182BA3BC5875This event indicates completion of SD Card encryption/decryption request.
WNF_FVE_DETASK_TRIGGER_START0x4183182BA3BC6075This event trigger-starts device encryption task.
WNF_FVE_BITLOCKER_ENCRYPT_ALL_DRIVES0x4183182BA3BC6875This event triggers BitLocker task to enable BitLocker on all volumes.
WNF_FVE_DETASK_SYNC_PROVISIONING_COMPLETE0x4183182BA3BC7075State of the synchronous provisioning phase of WCOS DE.
WNF_FVE_PROCESS_PERSISTENT_REQUEST0x4183182BA3BC7875This event indicates requests such as keyroll or AAD Keydelete are created in system volume information and need to be processed.
WNF_BLTH_BLUETOOTH_STATUS0x992022FA3BC0875State name for Bluetooth overall status notification. Flags from the BLUETOOTH_GLOBAL_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTConnMgr in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml
WNF_BLTH_BLUETOOTH_AUDIO_GATEWAY_STATUS0x992022FA3BC1075State name for Bluetooth Audio Gateway status notification. A 32-bit bitmask of BLUETOOTH_AUDIO_GATEWAY_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTAGService in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml
WNF_BLTH_BLUETOOTH_MAP_STATUS0x992022FA3BC1875State name for Bluetooth MAP status notification. A 32-bit bitmask of BLUETOOTH_MAP_STATUS enum are returned.
WNF_BLTH_BLUETOOTH_CONNECTION_STATE_CHANGE0x992022FA3BC2075Indicates when a Bluetooth Device gets connected and disconnected
WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_REQUEST0x992022FA3BC2875Indicates that a legacy Gatt client request is present. The local radio and remote device BTH_ADDR are returned.
WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_INVALIDATE_TOKEN0x992022FA3BC3075Indicates that a legacy Gatt client request was no longer present. The previously granted access token to be revoked is returned.
WNF_BLTH_BLUETOOTH_QUICKPAIR_STATUS_CHANGED0x992022FA3BC3875Notification that the user requested a change to the status of the QuickPair engine.
WNF_BLTH_BLUETOOTH_AVRCP_VOLUME_CHANGED0x992022FA3BC4075Notification that the user has changed the volume level using AVRCP on a Bluetooth peripheral.
WNF_BLTH_BLUETOOTH_DEVICE_BATTERY_IS_LOW0x992022FA3BC4875Notification that a Bluetooth device’s battery is low.
WNF_BLTH_BLUETOOTH_LE_ADV_SCANNING_STATUS0x992022FA3BC5075Exposes the status of Bluetooth LE Advertisement scanning.
WNF_BLTH_BLUETOOTH_SHOW_PBAP_CONSENT0x992022FA3BC5875Signals for the PBAP Consent UI to be shown
WNF_BLTH_BLUETOOTH_DEVICE_DOCK_STATUS0x992022FA3BC6075Aggregated status for one or more Bluetooth peripheral charging docks located on the system.
WNF_BLTH_BLUETOOTH_HFP_HF_LINE_AVAILABLE0x992022FA3BC6875Notification that a HFP Hands-Free line is available. BTAGService can publish. Authenticated users and PhoneSvc can subscribe.
WNF_BLTH_BLUETOOTH_HFP_AG_DIAL0x992022FA3BC7075Notification that a dial command has been recieved from the remote hands-free device. Payload contains the phonenumber to dial. BTAGService can publish when testhooks enabled.
WNF_BOOT_DIRTY_SHUTDOWN0x1589012FA3BC0875The state is published once the previous shutdown was not clean.
WNF_BOOT_INVALID_TIME_SOURCE0x1589012FA3BC1075The state is published if system time is initialized with a backup time source.
WNF_BOOT_MEMORY_PARTITIONS_RESTORE0x1589012FA3BC1875The state reflects memory partiton restoration state (nothing to restore, restore in progress, restore completed, failure)
WNF_BRI_ACTIVE_WINDOW0x418F1C2FA3BC0875Notifies brightness classes of the active window in order to apply their brightness preferences
WNF_BI_BROKER_WAKEUP_CHANNEL0x41C6072FA3BC0875Background work execution trigger
WNF_BI_USER_LOGON_CHANNEL0x41C6072FA3BC1075BI user logon system state notification channel
WNF_BI_USER_LOGOFF_CHANNEL0x41C6072FA3BC1875BI user logoff system state notification channel
WNF_BI_SESSION_CONNECT_CHANNEL0x41C6072FA3BC2075BI session connect system state notification channel
WNF_BI_SESSION_DISCONNECT_CHANNEL0x41C6072FA3BC2875BI session disconnect system state notification channel
WNF_BI_APPLICATION_UNINSTALL_CHANNEL0x41C6072FA3BC3075BI application uninstall system state notification channel
WNF_BI_APPLICATION_SERVICING_START_CHANNEL0x41C6072FA3BC3875BI application servicing start system state notification channel
WNF_BI_APPLICATION_SERVICING_STOP_CHANNEL0x41C6072FA3BC4075BI application servicing stop system state notification channel
WNF_BI_LOCK_SCREEN_UPDATE_CHANNEL0x41C6072FA3BC4875BI lock screen update system state notification channel
WNF_BI_EVENT_DELETION0x41C6072FA3BC5075BI event deletion system state notification channel
WNF_BI_PSM_TEST_HOOK_CHANNEL0x41C6072FA3BC5875PSM policy test hook
WNF_BI_QUIET_MODE_UPDATE_CHANNEL0x41C6072FA3BC6075BI Quiet Mode update system state notification channel
WNF_BI_BI_READY0x41C6072FA3BC6835Indicates that BI is ready and also publish channels list for each session
WNF_BI_NOTIFY_NEW_SESSION0x41C6072FA3BC7075BI notify new session system state notification channel
WNF_BI_QUERY_APP_USAGE0x41C6072FA3BC7875PSM notification to clients for querying application performance usage
WNF_BI_NETWORK_LIMITED_CHANNEL0x41C6072FA3BC8075Notification that the system is entering or exiting a network limited standby
WNF_BSC_SETTING_CHANGED0x41851D2FA3BC0875IE setting changed
WNF_CCTL_BUTTON_REQUESTS0xD920D2EA3BC08B5A button press has caused a request.
WNF_CAM_APPDIAGNOSTICS_ACCESS_CHANGED0x418B0F2EA3BC0935Event fired when access to the corresponding named app capability changes
WNF_CAM_APPOINTMENTS_ACCESS_CHANGED0x418B0F2EA3BC1135Event fired when access to the corresponding named app capability changes
WNF_CAM_BLUETOOTH_ACCESS_CHANGED0x418B0F2EA3BC1935Event fired when access to the corresponding named app capability changes
WNF_CAM_CAMERA_ACCESS_CHANGED0x418B0F2EA3BC2135Event fired when access to the corresponding named app capability changes
WNF_CAM_CELLULARDATA_ACCESS_CHANGED0x418B0F2EA3BC2935Event fired when access to the corresponding named app capability changes
WNF_CAM_CHAT_ACCESS_CHANGED0x418B0F2EA3BC3135Event fired when access to the corresponding named app capability changes
WNF_CAM_CONTACTS_ACCESS_CHANGED0x418B0F2EA3BC3935Event fired when access to the corresponding named app capability changes
WNF_CAM_EMAIL_ACCESS_CHANGED0x418B0F2EA3BC4135Event fired when access to the corresponding named app capability changes
WNF_CAM_HID_ACCESS_CHANGED0x418B0F2EA3BC4935Event fired when access to the corresponding named app capability changes
WNF_CAM_LOCATION_ACCESS_CHANGED0x418B0F2EA3BC5135Event fired when access to the corresponding named app capability changes
WNF_CAM_MICROPHONE_ACCESS_CHANGED0x418B0F2EA3BC5935Event fired when access to the corresponding named app capability changes
WNF_CAM_PHONECALL_ACCESS_CHANGED0x418B0F2EA3BC6135Event fired when access to the corresponding named app capability changes
WNF_CAM_PHONECALLHISTORY_ACCESS_CHANGED0x418B0F2EA3BC6935Event fired when access to the corresponding named app capability changes
WNF_CAM_POS_ACCESS_CHANGED0x418B0F2EA3BC7135Event fired when access to the corresponding named app capability changes
WNF_CAM_RADIOS_ACCESS_CHANGED0x418B0F2EA3BC7935Event fired when access to the corresponding named app capability changes
WNF_CAM_SENSORSCUSTOM_ACCESS_CHANGED0x418B0F2EA3BC8135Event fired when access to the corresponding named app capability changes
WNF_CAM_SERIAL_ACCESS_CHANGED0x418B0F2EA3BC8935Event fired when access to the corresponding named app capability changes
WNF_CAM_USB_ACCESS_CHANGED0x418B0F2EA3BC9135Event fired when access to the corresponding named app capability changes
WNF_CAM_USERACCOUNTINFO_ACCESS_CHANGED0x418B0F2EA3BC9935Event fired when access to the corresponding named app capability changes
WNF_CAM_USERDATATASKS_ACCESS_CHANGED0x418B0F2EA3BCA135Event fired when access to the corresponding named app capability changes
WNF_CAM_USERNOTIFICATIONLISTENER_ACCESS_CHANGED0x418B0F2EA3BCA935Event fired when access to the corresponding named app capability changes
WNF_CAM_DOCUMENTSLIBRARY_ACCESS_CHANGED0x418B0F2EA3BCB135Event fired when access to the corresponding named app capability changes
WNF_CAM_PICTURESLIBRARY_ACCESS_CHANGED0x418B0F2EA3BCB935Event fired when access to the corresponding named app capability changes
WNF_CAM_VIDEOSLIBRARY_ACCESS_CHANGED0x418B0F2EA3BCC135Event fired when access to the corresponding named app capability changes
WNF_CAM_GAZEINPUT_ACCESS_CHANGED0x418B0F2EA3BCC935Event fired when access to the corresponding named app capability changes
WNF_CAM_BROADFILESYSTEMACCESS_ACCESS_CHANGED0x418B0F2EA3BCD135Event fired when access to the corresponding named app capability changes
WNF_CAM_ACTIVITY_ACCESS_CHANGED0x418B0F2EA3BCD935Event fired when access to the corresponding named app capability changes
WNF_CAM_BLUETOOTHSYNC_ACCESS_CHANGED0x418B0F2EA3BCE135Event fired when access to the corresponding named app capability changes
WNF_CAM_WIFIDIRECT_ACCESS_CHANGED0x418B0F2EA3BCE935Event fired when access to the corresponding named app capability changes
WNF_CAM_APPACTIVATION_WITHVOICE_CHANGED0x418B0F2EA3BCF135Event fired when access to the corresponding named app capability changes
WNF_CAM_APPACTIVATION_WITHVOICEABOVELOCK_CHANGED0x418B0F2EA3BCF935Event fired when access to the corresponding named app capability changes
WNF_CAM_APPDIAGNOSTICS_USAGE_CHANGED0x418B0F2EA3BD0135Event fired when usage of the corresponding named app capability changes
WNF_CAM_APPOINTMENTS_USAGE_CHANGED0x418B0F2EA3BD0935Event fired when usage of the corresponding named app capability changes
WNF_CAM_CAMERA_USAGE_CHANGED0x418B0F2EA3BD1135Event fired when usage of the corresponding named app capability changes
WNF_CAM_CELLULARDATA_USAGE_CHANGED0x418B0F2EA3BD1935Event fired when usage of the corresponding named app capability changes
WNF_CAM_CHAT_USAGE_CHANGED0x418B0F2EA3BD2135Event fired when usage of the corresponding named app capability changes
WNF_CAM_CONTACTS_USAGE_CHANGED0x418B0F2EA3BD2935Event fired when usage of the corresponding named app capability changes
WNF_CAM_EMAIL_USAGE_CHANGED0x418B0F2EA3BD3135Event fired when usage of the corresponding named app capability changes
WNF_CAM_LOCATION_USAGE_CHANGED0x418B0F2EA3BD3935Event fired when usage of the corresponding named app capability changes
WNF_CAM_MICROPHONE_USAGE_CHANGED0x418B0F2EA3BD4135Event fired when usage of the corresponding named app capability changes
WNF_CAM_PHONECALL_USAGE_CHANGED0x418B0F2EA3BD4935Event fired when usage of the corresponding named app capability changes
WNF_CAM_PHONECALLHISTORY_USAGE_CHANGED0x418B0F2EA3BD5135Event fired when usage of the corresponding named app capability changes
WNF_CAM_RADIOS_USAGE_CHANGED0x418B0F2EA3BD5935Event fired when usage of the corresponding named app capability changes
WNF_CAM_USERACCOUNTINFO_USAGE_CHANGED0x418B0F2EA3BD6135Event fired when usage of the corresponding named app capability changes
WNF_CAM_USERDATATASKS_USAGE_CHANGED0x418B0F2EA3BD6935Event fired when usage of the corresponding named app capability changes
WNF_CAM_USERNOTIFICATIONLISTENER_USAGE_CHANGED0x418B0F2EA3BD7135Event fired when usage of the corresponding named app capability changes
WNF_CAM_DOCUMENTSLIBRARY_USAGE_CHANGED0x418B0F2EA3BD7935Event fired when usage of the corresponding named app capability changes
WNF_CAM_PICTURESLIBRARY_USAGE_CHANGED0x418B0F2EA3BD8135Event fired when usage of the corresponding named app capability changes
WNF_CAM_VIDEOSLIBRARY_USAGE_CHANGED0x418B0F2EA3BD8935Event fired when usage of the corresponding named app capability changes
WNF_CAM_GAZEINPUT_USAGE_CHANGED0x418B0F2EA3BD9135Event fired when usage of the corresponding named app capability changes
WNF_CAM_BROADFILESYSTEMACCESS_USAGE_CHANGED0x418B0F2EA3BD9935Event fired when usage of the corresponding named app capability changes
WNF_CAM_ACTIVITY_USAGE_CHANGED0x418B0F2EA3BDA135Event fired when usage of the corresponding named app capability changes
WNF_CAM_DOWNLOADSFOLDER_ACCESS_CHANGED0x418B0F2EA3BDA935Event fired when usage of the corresponding named app capability changes
WNF_CAM_DOWNLOADSFOLDER_USAGE_CHANGED0x418B0F2EA3BDB135Event fired when usage of the corresponding named app capability changes
WNF_CAM_WIFIDATA_ACCESS_CHANGED0x418B0F2EA3BDB935Event fired when access to the corresponding named app capability changes
WNF_CAM_WIFIDATA_USAGE_CHANGED0x418B0F2EA3BDC135Event fired when usage of the corresponding named app capability changes
WNF_CAM_BACKGROUNDSPATIALPERCEPTION_ACCESS_CHANGED0x418B0F2EA3BDC935Event fired when access to the corresponding named app capability changes
WNF_CDP_CDPSVC_READY0x41960A2EA3BC0875Indicates CDP Service is ready
WNF_CDP_CDPSVC_STOPPING0x41960A2EA3BC1075Indicates CDP Service is stopping
WNF_CDP_CDPUSERSVC_READY0x41960A2EA3BC1835Indicates CDP User Service is ready
WNF_CDP_CDPUSERSVC_STOPPING0x41960A2EA3BC2035Indicates CDP User Service is stopping
WNF_CDP_CDP_MESSAGES_QUEUED0x41960A2EA3BC2875Indicates CDP service queued the message(s) for designated applications
WNF_CDP_CDP_ACTIVITIES_RECIEVED0x41960A2EA3BC3075Indicates CDP service received new activities
WNF_CDP_USERAUTH_POLICY_CHANGE0x41960A2EA3BC3875Indicates that the user has changed the CDP policy
WNF_CDP_CDP_NOTIFICATION_ACTION_FORWARD_FAILURE0x41960A2EA3BC4075Indicates failure either delivering or invoking a Notification Action on a remote device
WNF_CDP_USER_ROME_SETTING_CHANGE0x41960A2EA3BC4835Indicates that the user has changed Rome SDK authorization setting
WNF_CDP_USER_NEAR_SHARE_SETTING_CHANGE0x41960A2EA3BC5035Indicates that the user has changed Near Share authorization setting
WNF_CDP_ENABLE_ACTIVITYFEED_POLICY_CHANGE0x41960A2EA3BC5875Indicates whether ActivityFeed is enabled. It is responsible for mirroring different activity types (as applicable) across device graph of the user.
WNF_CDP_PUBLISH_USER_ACTIVITIES_POLICY_CHANGE0x41960A2EA3BC6075Indicates the settings policy (enabled/disabled) for ‘User Activity’ publishing has changed.
WNF_CDP_CDP_LOCAL_ACTIVITIES_RECIEVED0x41960A2EA3BC6875Indicates CDP service received local activities
WNF_CDP_USER_RESOURCE_INFO_CHANGED0x41960A2EA3BC7075Indicates the persisted values associated with a resource has changed.
WNF_CDP_UPLOAD_USER_ACTIVITIES_POLICY_CHANGE0x41960A2EA3BC7875Indicates the settings policy (enabled/disabled) for ‘User Activity’ upload has changed.
WNF_CDP_ALLOW_CLIPBOARDHISTORY_POLICY_CHANGE0x41960A2EA3BC8075Indicates clipboard history policy has changed.
WNF_CDP_ALLOW_CROSSDEVICECLIPBOARD_POLICY_CHANGE0x41960A2EA3BC8875Indicates cross device clipboard policy has changed.
WNF_CELL_POWER_STATE_MODEM00xD8A0B2EA3BC0875Modem power state of the first modem, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_EVERYONE, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SIGNAL_STRENGTH_BARS_CAN00xD8A0B2EA3BC1075Number of bars (0..5) of signal strength for the first cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SYSTEM_TYPE_CAN00xD8A0B2EA3BC1875System type of the first cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_STATUS_CAN00xD8A0B2EA3BC2075Current registration status of the first cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_STATUS_SLOT00xD8A0B2EA3BC2875Status of the UICC in the first slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_AIRPLANEMODE0xD8A0B2EA3BC3075The current state of airplanemode. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_OPERATOR_NAME_CAN00xD8A0B2EA3BC3875Current serving operator for the first cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CDMA_ACTIVATION_CAN00xD8A0B2EA3BC4075Activation, PRL, and provisioning state for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_NETWORK_TIME_CAN00xD8A0B2EA3BC4875NITZ information for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_AVAILABLE_OPERATORS_CAN00xD8A0B2EA3BC5075List of available operators for the first cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_DEVICE_INFO_CAN00xD8A0B2EA3BC5875Device info (RIL_GetDeviceInfo) for the first cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_DATA_ENABLED_BY_USER_MODEM00xD8A0B2EA3BC6475Cellular data enabled state as set by user. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PHONE_NUMBER_CAN00xD8A0B2EA3BC6875Phone number (MSISDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_VOICEMAIL_NUMBER_CAN00xD8A0B2EA3BC7075Voicemail number (MBDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_PREFERENCES_CAN00xD8A0B2EA3BC7C75Registration preferences for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CAN_STATE_CAN00xD8A0B2EA3BC8075Can state (between CellManager and CellUX) for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_USER_PREFERRED_POWER_STATE_MODEM00xD8A0B2EA3BC8C75Power state of the modem as last preferred by the user, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_AIRPLANEMODE_DETAILS0xD8A0B2EA3BC9075The current state of airplanemode details. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM00xD8A0B2EA3BC9875This is triggered if cellcore suspects that data activity may have been affected. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SYSTEM_CONFIG0xD8A0B2EA3BCA475Root state describing cellular system configuration (all modems and their cans). SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN00xD8A0B2EA3BCA875Detailed registration status of the first cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_EVERYONE, ID_CAP_ISV_CAMERA, WwanSvc, ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN00xD8A0B2EA3BCB075bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PERSO_STATUS_CAN00xD8A0B2EA3BCB875bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_HOME_OPERATOR_CAN00xD8A0B2EA3BCC075MCC, MNC (or SID, NID) of the ‘home’ operator. SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_ISV_CAMERA and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_HOME_PRL_ID_CAN00xD8A0B2EA3BCC875PRL ID of ‘home’ operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UTK_SETUP_MENU_SLOT00xD8A0B2EA3BCE875UICC toolkit setup menu notification for slot 0. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UTK_PROACTIVE_CMD0xD8A0B2EA3BCF075UICC toolkit proactive command notification for all slots. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CSP_WWAN_PLUS_READYNESS0xD8A0B2EA3BCF875CM CSPWWAN+ readyness state. SDDL comes from ID_CAP_CMCSPWWAN_PLUS in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_CELL_CALLFORWARDING_STATUS_CAN00xD8A0B2EA3BD0075Call-forwarding status for the first cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_RADIO_TYPE_MODEM00xD8A0B2EA3BD0C75Modem radio type of the first modem, values defined by RILRADIOCONFIGURATIONRADIOTYPE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SIGNAL_STRENGTH_BARS_CAN10xD8A0B2EA3BD1075Number of bars (0..5) of signal strength for the second cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SYSTEM_TYPE_CAN10xD8A0B2EA3BD1875System type of the second cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_STATUS_CAN10xD8A0B2EA3BD2075Current registration status of the second cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_STATUS_SLOT10xD8A0B2EA3BD2875Status of the UICC in the second slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_OPERATOR_NAME_CAN10xD8A0B2EA3BD4075Current serving operator for the second cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CDMA_ACTIVATION_CAN10xD8A0B2EA3BD4875Activation, PRL, and provisioning state for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_NETWORK_TIME_CAN10xD8A0B2EA3BD5075NITZ information for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_AVAILABLE_OPERATORS_CAN10xD8A0B2EA3BD5875List of available operators for the second cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_DEVICE_INFO_CAN10xD8A0B2EA3BD6075Device info (RIL_GetDeviceInfo) for the second cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PHONE_NUMBER_CAN10xD8A0B2EA3BD7075Phone number (MSISDN) for the second cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_PREFERENCES_CAN10xD8A0B2EA3BD8C75Registration preferences for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CAN_STATE_CAN10xD8A0B2EA3BD9075Can state (between CellManager and CellUX) for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN10xD8A0B2EA3BD9875Detailed registration status of the second cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CELL_WNF, ID_CAP_EVERYONE, WwanSvc, ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN10xD8A0B2EA3BDA075bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_HOME_OPERATOR_CAN10xD8A0B2EA3BDA875MCC, MNC (or SID, NID) of the ‘home’ operator. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_HOME_PRL_ID_CAN10xD8A0B2EA3BDB075PRL ID of ‘home’ operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UTK_SETUP_MENU_SLOT10xD8A0B2EA3BDD075UICC toolkit setup menu notification for slot 1. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CALLFORWARDING_STATUS_CAN10xD8A0B2EA3BDE075Call-forwarding status for the second cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PERSO_STATUS_CAN10xD8A0B2EA3BDE875bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CONFIGURED_LINES_CAN00xD8A0B2EA3BDF475Configured lines for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CONFIGURED_LINES_CAN10xD8A0B2EA3BDFC75Configured lines for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_STATUS_DETAILS_SLOT00xD8A0B2EA3BE0075Status details of the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_STATUS_DETAILS_SLOT10xD8A0B2EA3BE0875Status details of the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PREFERRED_LANGUAGES_SLOT00xD8A0B2EA3BE1075Preferred languages in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PREFERRED_LANGUAGES_SLOT10xD8A0B2EA3BE1875Preferred languages in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IMSI_CAN00xD8A0B2EA3BE2075IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IMSI_CAN10xD8A0B2EA3BE2875IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_LEGACY_SETTINGS_MIGRATION0xD8A0B2EA3BE3075Migration action for legacy cellcore settings. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_ATR_SLOT00xD8A0B2EA3BE3875Answer to reset from the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_ATR_SLOT10xD8A0B2EA3BE4075Answer to reset from the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_SIMSEC_SLOT00xD8A0B2EA3BE4875Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 0. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_SIMSEC_SLOT10xD8A0B2EA3BE5075Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 1. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM00xD8A0B2EA3BE5875Indication that all executors have been configured and that there are no outstanding configurations pending in the modem. SDDL comes from WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_REGISTRATION_CHANGED_TRIGGER_MV0xD8A0B2EA3BE6075This is published when cellcore needs MV to kick in. SDDL comes from ID_CAP_EVERYONE, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN00xD8A0B2EA3BE7075Signal-strength details for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN10xD8A0B2EA3BE7875Signal-strength details for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_EMERGENCY_CALLBACK_MODE_STATUS0xD8A0B2EA3BE6875Indication about the current emergency callback mode. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IMS_STATUS_CAN00xD8A0B2EA3BE8075Current IMS registration for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IMS_STATUS_CAN10xD8A0B2EA3BE8875Current IMS registration for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IWLAN_AVAILABILITY_CAN00xD8A0B2EA3BE9075iWLAN availability for Can 0, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_IWLAN_AVAILABILITY_CAN10xD8A0B2EA3BE9875iWLAN availability for Can 1, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PS_MEDIA_PREFERENCES_CAN00xD8A0B2EA3BEA475PS Media preferences for Can 0, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_PS_MEDIA_PREFERENCES_CAN10xD8A0B2EA3BEAC75PS Media preferences for Can 1, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_WIFI_CALL_SETTINGS_CAN00xD8A0B2EA3BEB075Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_WIFI_CALL_SETTINGS_CAN10xD8A0B2EA3BEB875Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml
WNF_CELL_UICC_PIN_STATE_SLOT00xD8A0B2EA3BEC075Reports detailed states of PIN on slot 0. It is private for Wwansvc access only
WNF_CELL_UICC_PIN_STATE_SLOT10xD8A0B2EA3BEC875Reports detailed states of PIN on slot 1. It is private for Wwansvc access only
WNF_CELL_NITZ_INFO0xD8A0B2EA3BED075NITZ information received from the modem. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and tzautoupdate
WNF_WWAN_OBJECT_LIST0xF87193AA3BC0875Table of all modems and executors under it.
WNF_WWAN_EUICC_ARRIVAL0xF87193AA3BC1075This event is published by WwanSvc to indicate the arrival of an eUICC.
WNF_WWAN_CELLULAR_STATE_SNAPSHOT_CHANGE0xF87193AA3BC1875This event is published by WwanSvc to indicate a change in cellular state snapshot.
WNF_WWAN_TASK_TRIGGER0xF87193AA3BC2075State name triggering WiFiTask from WwanSvc.
WNF_WWAN_OOBE_DISCOVERY_TASK_TRIGGER0xF87193AA3BC2875Event to trigger Oobe Discovery Task.
WNF_SMSR_READY0x1395033EA3BC0875Sms Router Broker is ready.
WNF_SMSR_WWAN_READ_DONE0x1395033EA3BC1075Sms Router Broker is ready.
WNF_SMSR_NEW_MESSAGE_RECEIVED0x1395033EA3BC1875Sms Router received a new incoming SMS message.
WNF_IMS_PUSH_NOTIFICATION_RECEIVED0x41950324A3BC0875Push Notification Received from Entitlement Server
WNF_MBAE_ACCOUNT_PARSED0x4870C20A3BC0875MBAE Parser Task has successfully parsed the Account from Device Metadata
WNF_CERT_FLUSH_CACHE_TRIGGER0x15940B2EA3BC0875This event signals flush cache in all processes where flush is enabled.
WNF_CERT_FLUSH_CACHE_STATE0x15940B2EA3BC1075This event signals when flush cache was started and completed in each process where enabled.
WNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGED0x12960F2EA3BC0875Central Access Policies have been updated
WNF_CLIP_CONTENT_CHANGED0x118F022EA3BC0875This notification is triggered when contents on the clipboard change
WNF_CLIP_HISTORY_CHANGED0x118F022EA3BC1035This notification is triggered when contents of the clipboard history change
WNF_CLIP_ROAMING_CLIPBOARD_ENABLED_CHANGED0x118F022EA3BC1835This notification is triggered when roaming clipboard enabled/disabled setting value changes
WNF_CLIP_CLIPBOARD_HISTORY_ENABLED_CHANGED0x118F022EA3BC2035This notification is triggered when clipboard history enabled/disabled setting value changes
WNF_CLIP_CLIPBOARD_USERSVC_READY0x118F022EA3BC2835Indicates Clipboard User Service is ready
WNF_CLIP_CLIPBOARD_USERSVC_STOPPED0x118F022EA3BC3035Indicates Clipboard User Service has stopped
WNF_CXH_WEBAPP_STATUS0x418E162EA3BC0835Notification of web app status change. Payload is status type plus web app cxid of length 512
WNF_CXH_APP_FINISHED0x418E162EA3BC1035Notification when CloudExperienceHost app is finished. Payload is result plus result string of length 512
WNF_CXH_BACK_STATE0x418E162EA3BC1835Notification of web app back button state. Payload is a boolean for on/off
WNF_CXH_BACK0x418E162EA3BC2035Notification when back command is issued
WNF_CXH_OOBE_APP_READY0x418E162EA3BC2875System-wide signal that the CloudExperienceHost app launched during OOBE is ready with its first webapp visible. Payload is a boolean for true/false
WNF_CMFC_FEATURE_CONFIGURATION_CHANGED0x280032EA3BC0875This notification is raised when a change to the system’s feature configuration is made. The payload contains the current feature configuration change stamp.
WNF_CI_SMODE_CHANGE0x41C6072EA3BC0875This event signals that change of S mode has occurred.
WNF_CI_HVCI_IMAGE_INCOMPATIBLE0x41C6072EA3BC1075This event signals that an image has been blocked from loading as it is incompatible with HVCI.
WNF_CI_BLOCKED_DRIVER0x41C6072EA3BC1875This event signals that an image has been blocked from loading by PNP
WNF_CSHL_COMPOSER_LAUNCH_READY0xD8E1D2EA3BC0835Core shell has initialized, including all of its services (e.g. TLAVM), and the Product Composer can be launched. If the event has not been fired, then CoreShell is still initializing and the Composer cannot be launched. Payload is a DWORD to inidicate it has been fired.
WNF_CSHL_UI_AUTOMATION0xD8E1D2EA3BC1035On UI Automation.
WNF_CSHL_VIEWHOSTING_READY0xD8E1D2EA3BC2035Fired every time a Composer registers with TLAVM and inidicates that the composer is ready to host applications. If the event has not been fired, then no composer is ready to host applications. Payload is a DWORD to inidicate it has been fired.
WNF_CSHL_PRODUCT_READY0xD8E1D2EA3BC2835Fired every time a Product Composer has finished initializing and indicates that Shell has entered normal operations (i.e. not in restricted mode or running OOBE/PostUpdateUX). If the event has not been fired, then the Product Composer is still initializing. Payload is a DWORD to inidicate it has been fired.
WNF_CSHL_COMPOSER_TEARDOWN0xD8E1D2EA3BC3035When set to the value 1, it indicates that the current composer has finished unintializing.
WNF_CSHL_COMPOSER_CONTEXT_CHANGED0xD8E1D2EA3BC3835Indicates the composer has changed which updates the registry (ComposerManagerBaseKey) indicating which composer can be restored after a crash
WNF_CSHL_SKIP_OOBE_CXH0xD8E1D2EA3BC4035Fired when a test job wants to skip CXH stage of OOBE
WNF_CFCL_SC_CONFIGURATIONS_CHANGED0xD85082EA3BC0875Triggered each time one or more flight configurations changes.
WNF_CFCL_SC_CONFIGURATIONS_DELETED0xD85082EA3BC1075Triggered each time one or more flight configurations is deleted.
WNF_CFCL_SC_CONFIGURATIONS_ADDED0xD85082EA3BC1875Triggered each time one or more flight configurations is added.
WNF_CONT_RESTORE_FROM_SNAPSHOT_COMPLETE0x1588012EA3BC0875Components blocked waiting for restore from snapshot can now continue
WNF_CSH_LAUNCH_EXPLORER_REQUESTED0x418E1D2EA3BC08F5A request has been raised for CustomShellHost to launch Explorer.exe as shell
WNF_DO_MANAGER_ACTIVE0x41C60129A3BC0875This event triggers when the Delivery Optimization service manager is active or idle
WNF_DO_POLICY_CHANGED0x41C60129A3BC1075Delivery Optimization system policy has been updated
WNF_DBA_DEVICE_ACCESS_CHANGED0x41870C29A3BC0875This event triggers when the user changes device access for an applocation or the user
WNF_SFA_AUTHENTICATION_STAGE_CHANGED0x4187083EA3BC0875This event signals when authentication stage change.
WNF_DSM_DSMAPPINSTALLED0x418B1D29A3BC0C75Notification for when an app is installed so we can register a device background task if necessary.
WNF_DSM_DSMAPPREMOVED0x418B1D29A3BC1475Notification for when an app is removed so we can clean up any registered device background tasks if necessary.
WNF_DMF_MIGRATION_STARTED0x41800329A3BC0875Signals that Migration started. DWORD[1] = {started flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml
WNF_DMF_MIGRATION_COMPLETE0x41800329A3BC1075Signals that Migration completed. DWORD[2] = {completed flag, status}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml
WNF_DMF_MIGRATION_PROGRESS0x41800329A3BC1875Current Migration state. DWORD[4] = {Phase, Total Phases, Step, Total Steps}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml
WNF_DMF_UX_COMPLETE0x41800329A3BC2075Signals when data migration is complete after reboot and update results need to be displayed. DWORD[1] = {completed flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and DuPostUpdateUX in %SDXROOT%\src\devmgmt\du\packages\UX\UX.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml
WNF_DCSP_POLICIES_UPDATED0x11950D29A3BC0875Some value under Policies registry key has been updated
WNF_DX_STEREO_CONFIG0x41C61629A3BC0C75State stores the current stereo cpl setting. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_MODE_CHANGE_NOTIFICATION0x41C61629A3BC1035Triggered by kernel when mode change happens. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_OCCLUSION_CHANGE_NOTIFICATION0x41C61629A3BC1835Triggered by kernel when any occlusion related OS state change happens.
WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATION0x41C61629A3BC2035Triggered by kernel when the state of a network display device is changed.
WNF_DX_MONITOR_CHANGE_NOTIFICATION0x41C61629A3BC2835Triggered by kernel when monitor change happens. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_VIDMM_TRIM_NOTIFICATION0x41C61629A3BC30B5Triggered by kernel when video memory has to be trimmed. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATION0x41C61629A3BC3875Triggered by kernel when video memory budget for an application changes. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATION0x41C61629A3BC4075Triggered by hardware content protection tilt detection. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_INTERNAL_PANEL_DIMENSIONS0x41C61629A3BC4875Stores information about the physical dimensions (in mm) of the integrated panel if available, and 0’s if not.
WNF_DX_MODERN_OUTPUTDUPLICATION0x41C61629A3BC5035Triggered when a lowbox application starts or stops using OutputDuplication.
WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATION0x41C61629A3BC5835Triggered by kernel when a change is made to the display configuration.
WNF_DX_DEVICE_REMOVAL0x41C61629A3BC60B5Triggered when a device has been removed for any reason, not just adapter removal. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_DX_MODERN_OUTPUTDUPLICATION_CONTEXTS0x41C61629A3BC6835Triggered when a lowbox application starts or stops using OutputDuplication and provides list of active lowbox contexts
WNF_DX_COLOR_PROFILE_CHANGE0x41C61629A3BC7075Triggered when the default color profile for any attached display changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_DX_GPM_TARGET0x41C61629A3BC7875State is used to indicate the process that should be targeted by GPM.
WNF_DX_CONSOLE_ADAPTER_START0x41C61629A3BC8075Triggered by kernel when a GPU is started. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_CONSOLE_ADAPTER_STOP0x41C61629A3BC8875Triggered by kernel when a GPU is stopped. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_SDR_WHITE_LEVEL_CHANGED0x41C61629A3BC9035Triggered by kernel when SDR white level value is changed for any display. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_DX_COLOR_OVERRIDE_STATE_CHANGE0x41C61629A3BC9875Triggered when any of the color overrides are changed for any display.
WNF_DX_DISPLAY_COLORIMETRY_DATA_CHANGED0x41C61629A3BCA075Triggered by kernel when colorimetry data is changed for any display. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_DX_VAIL_CHANGE_NOTIFICATION0x41C61629A3BCA8B5Triggered when Vail states are changed for this remote session on virtual machine.
WNF_DX_ADAPTIVE_COLOR_FORCED_STATE_CHANGE0x41C61629A3BCB075Triggered when the default color profile changes, as this may force on/off adaptive color.
WNF_DX_REMOTE_ADAPTER_START0x41C61629A3BCB835Triggered by kernel when a sessionized graphics adapter is started. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DX_REMOTE_ADAPTER_STOP0x41C61629A3BCC035Triggered by kernel when a sessionized graphics adapter is stopped. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_DISK_SCRUB_REQUIRED0xA950729A3BC0875This event signals when a disk that requires scrubbing is brought online
WNF_DISP_DISPLAY_CHANGE0x11950729A3BC0875Triggered when HMONITOR configuration changes.
WNF_DISP_WORKAREA_CHANGE0x11950729A3BC1075Triggered when the work area of at least one HMONITOR changes.
WNF_DXGK_ADAPTER_TDR_NOTIFICATION0xA811629A3BC0875Triggered by the kernel when any adapter receives a TDR or PNP event. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_DXGK_PATH_FAILED_OR_INVALIDATED0xA811629A3BC1075Triggered by the kernel when an active display path asynchronously transitions to either a failed or invalidated state
WNF_DNS_ALL_SERVER_TIMEOUT0x41950029A3BC1075When all the DNS Servers Timeout, this event is notified
WNF_DWM_RUNNING0x418B1929A3BC0835Triggered when the dwm starts/terminates
WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE_LOW_FRAMERATE0x418B1929A3BC1035Triggered when exclusive mode apps are presenting at a low framerate to the holographic compositor
WNF_DWM_HOLOGRAPHIC_COMPOSITOR_HAS_PROTECTED_CONTENT0x418B1929A3BC1835Triggered when the compositor toggles between not having and having (any) protected content
WNF_DWM_HOLOGRAPHIC_COMPOSITOR_LOW_FRAMERATE0x418B1929A3BC2035Triggered when 3D compositor is presenting at a low framerate
WNF_DWM_COMPOSITIONCAPABILITIES0x418B1929A3BC2835Triggered when the dwm composition capabilities changes
WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE0x418B1929A3BC3035Triggered when exclusive mode apps are presenting in the holographic compositor
WNF_DWM_DUMP_REQUEST0x418B1929A3BC3835Triggered when DWM requests dumps from other processes or the kernel for a given reason.
WNF_DWM_DISPLAY_RESET_REQUEST0x418B1929A3BC4035Triggered when DWM requests that a Display Stack reset is performed.
WNF_EAP_APPLICATION_HANDLE0x41960F28A3BC0875State name for holding application window handle of calling UX
WNF_EOA_NARRATOR_FOCUS_CHANGE0x41870128A3BC08F5Narrator has moved its focused region
WNF_EOA_NARRATOR_RUNNING0x41870128A3BC1075Represents whether Narrator is currently running. A 32-bit unsigned integer with a zero value meaning Narrator is off.
WNF_EOA_UISETTINGS_CHANGED0x41870128A3BC1875UISettings have changed.
WNF_EOA_ATMANAGER_ATS_STARTED0x41870128A3BC2035Indicates whether ATManager has already attempted to start user configured ATs for the current session.
WNF_EOA_NARRATOR_KEYBOARD_REMAP0x41870128A3BC2875Narrator keyboard remap state. 0 is the default value, 1 means keyboard remap page need to be opened.
WNF_EOA_MAGNIFIER_RENDERING_INPUT0x41870128A3BC3035Indicates if inbox Magnifier is rendering for the current input. 1 means Magnifier is rendering the input.
WNF_EDGE_LAST_NAVIGATED_HOST0x4810A28A3BC08F5This event is fired when a top level frame navigation is complete, the payload contains the host name
WNF_EDGE_EXTENSION_INSTALLED0x4810A28A3BC10F5This event is fired when an extension is installed. The payload is the extension id
WNF_EDGE_EXTENSION_AVAILABLE0x4810A28A3BC18F5This event is fired on edge open if any extension is installed
WNF_EDGE_INPRIVATE_EXTENSION_AVAILABLE0x4810A28A3BC20F5This event is fired on edge open if any extension, supported in InPrivate, is installed
WNF_EDP_TAGGED_APP_LAUNCHED0x41960A28A3BC0835The application was launched in the specified mode under the specified Enterprise context.
WNF_EDP_IDENTITY_REVOKED0x41960A28A3BC10F5The keys associated with a data protection identity were removed.
WNF_EDP_DPL_KEYS_STATE0x41960A28A3BC1875Current state of the Data Protection under Lock private keys
WNF_EDP_CLIPBOARD_METADATA_CHANGED0x41960A28A3BC2035Either a copy or override operation occurred, leading to clipboard metadata changes. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
WNF_EDP_DIALOG_CANCEL0x41960A28A3BC2835An EDP blocking dialog has been canceled programmatically.
WNF_EDP_APP_UI_ENTERPRISE_CONTEXT_CHANGED0x41960A28A3BC3035Application UI EDP context has been changed for the process.
WNF_EDP_AAD_REAUTH_REQUIRED0x41960A28A3BC3875The AAD token used by EDP has expired.
WNF_EDP_ENTERPRISE_CONTEXTS_UPDATED0x41960A28A3BC4475The EDP enterprise contexts have been updated.
WNF_EDP_PROCESS_UI_ENFORCEMENT0x41960A28A3BC4875EDP process UI enforcement global state. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
WNF_EDP_PROCESS_TLS_INDEX0x41960A28A3BC50B5EDP thread UI enforcement. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
WNF_EDP_DPL_KEYS_DROPPING0x41960A28A3BC5875Data Protection under Lock private keys will be dropped from memory shortly.
WNF_EDP_MISSING_CREDENTIALS0x41960A28A3BC6075EDP cred service cannot access credentials required
WNF_EDP_PURGE_APP_LEARNING_EVT0x41960A28A3BC6875Purge application learning events cache
WNF_EDP_CREDENTIALS_UPDATING0x41960A28A3BC7075Cred service is updating user credentials.
WNF_EDU_PRINTER_POLICY_CHANGED0x41930A28A3BC0875This event is triggered when an MDM printer policy is changed.
WNF_EFS_SERVICE_START0x41950828A3BC0875This event trigger-starts EFS service.
WNF_EFS_SOFTWARE_HIVE_AVAILABLE0x41950828A3BC1075EFS service needs to check GP at boot, which requires the SOFTWARE hive in HKLM. This signals its availability when EFS worker thread detects it.
WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGED0x13920028A3BC0875Current changed policy values represented as bits for the Device Lock policy area. SDDL comes from NgcctnrSvc in %SDXROOT%\src\baseos\prod\packages\ngc\ngc.pkg.xml and ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml, %sdxroot%\onecoreuap\admin\dm\wap\service\dmwappushservice.wm.xml
WNF_ENTR_WIFI_POLICY_VALUE_CHANGED0x13920028A3BC1075Current changed policy values represented as bits for the Wifi policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml. S-1-5-80-3935728946-315639613-922904133-3250794525-491832002 – IcsSvc (TetheringService)
WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGED0x13920028A3BC1875Current changed policy values represented as bits for the System policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xmlSDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_CONNECTIVITY_POLICY_VALUE_CHANGED0x13920028A3BC2075Current changed policy values represented as bits for the Connectivity policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_EXPERIENCE_POLICY_VALUE_CHANGED0x13920028A3BC2875Current changed policy values represented as bits for the Experience policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ACCOUNTS_POLICY_VALUE_CHANGED0x13920028A3BC3075Current changed policy values represented as bits for the Accounts policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_SECURITY_POLICY_VALUE_CHANGED0x13920028A3BC3875Current changed policy values represented as bits for the Security policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_BROWSER_POLICY_VALUE_CHANGED0x13920028A3BC4075Current changed policy values represented as bits for the Browser policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_UPDATE_POLICY_VALUE_CHANGED0x13920028A3BC4875Current changed policy values represented as bits for the Update policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_CAMERA_POLICY_VALUE_CHANGED0x13920028A3BC5075Current changed policy values represented as bits for the Camera policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGED0x13920028A3BC5875Current changed policy values represented as bits for the ApplicationManagement policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED0x13920028A3BC6075Current changed security policy RequireDeviceEncryption value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_PUSH_NOTIFICATION_RECEIVED0x13920028A3BC6875An MDM Push notification has been received. SDDL comes from ID_CAP_CSP_DMCLIENT in %SDXROOT%\src\devmgmt\dm\packages\dmapps\dmapps.pkg.xml
WNF_ENTR_SEARCH_POLICY_VALUE_CHANGED0x13920028A3BC7075Current changed policy values represented as bits for the Search policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGED0x13920028A3BC7875Current changed policy values represented as bits for the AboveLock policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ALLOWAPPLICATIONS_POLICY_VALUE_CHANGED0x13920028A3BC8075A Dataprotection AllowApplications provider policy value has changed.
WNF_ENTR_EDPENFORCEMENTLEVEL_POLICY_VALUE_CHANGED0x13920028A3BC8875A Dataprotection EDPEnforcementLevel provider policy value has changed.
WNF_ENTR_WAP_MESSAGE_FOR_DMWAPPUSHSVC_READY0x13920028A3BC9075A WAP message has been received that dmwappushsvc needs to handle.
WNF_ENTR_CONTEXT_STATE_CHANGE0x13920028A3BC9875An enterprise context has changed it’s state
WNF_ENTR_PUSH_RECEIVED0x13920028A3BCA075An enterprise WNS based push was received
WNF_ENTR_ALLOWINPUTPANEL_POLICY_VALUE_CHANGED0x13920028A3BCA875A TextInput AllowInputPanel provider policy value has changed.
WNF_ENTR_SEARCH_ALLOW_USING_DIACRITICS0x13920028A3BCB075Allow use of diacritics for indexing.
WNF_ENTR_SEARCH_ALWAYS_USE_AUTO_LANG_DETECTION0x13920028A3BCB875Always use automatic language detection when indexing content and properties.
WNF_ENTR_SEARCH_DISABLE_REMOVABLE_DRIVE_INDEXING0x13920028A3BCC075Do not allow locations on removable drives to be added to libraries.
WNF_ENTR_SEARCH_PREVENT_INDEXING_LOW_DISK_SPACE_MB0x13920028A3BCC875Stop indexing in the event of limited hard drive space.
WNF_ENTR_SEARCH_ALLOW_INDEXING_ENCRYPTED_STORES_OR_ITEMS0x13920028A3BCD075Allow indexing of encrypted files.
WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGED0x13920028A3BCD875Bluetooth policy configuration has changed. SDDL comes from ID_CAP_POLICY_MANAGER in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_EDPNETWORKING_POLICY_VALUE_CHANGED0x13920028A3BCE075A Dataprotection networking policy value has changed.
WNF_ENTR_REQUIRE_DPL_POLICY_VALUE_CHANGED0x13920028A3BCE875DataProtection Require Protection Under Lock Config policy change.
WNF_ENTR_WINDOWS_DEFENDER_POLICY_VALUE_CHANGED0x13920028A3BCF075Windows Defender policy configuration has changed.
WNF_ENTR_ALLOWALLTRUSTEDAPPS_POLICY_VALUE_CHANGED0x13920028A3BCF875ApplicationManagement AllowAllTrustedApps provider policy value has changed.
WNF_ENTR_ALLOWSHAREDUSERDATA_POLICY_VALUE_CHANGED0x13920028A3BD0075ApplicationManagement AllowSharedUserAppData provider policy value has changed.
WNF_ENTR_RESTRICTAPPTOSYTEMVOLUME_POLICY_VALUE_CHANGED0x13920028A3BD0875ApplicationManagement RestrictAppToSystemVolume provider policy value has changed.
WNF_ENTR_RESTRICTAPPDATATOSYTEMVOLUME_POLICY_VALUE_CHANGED0x13920028A3BD1075ApplicationManagement RestrictAppDataToSystemVolume provider policy value has changed.
WNF_ENTR_ALLOWDEVELOPERUNLOCK_POLICY_VALUE_CHANGED0x13920028A3BD1875ApplicationManagement AllowDeveloperUnlock provider policy value has changed.
WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGED0x13920028A3BD2075Update AllowUpdateService provider policy value has changed.
WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGED0x13920028A3BD2875Update UpdateServiceUrl provider policy value has changed.
WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGED0x13920028A3BD3075Update AllowNonMicrosoftSignedUpdate provider policy value has changed.
WNF_ENTR_ALLOW_WBA_EXECUTION_POLICY_VALUE_CHANGED0x13920028A3BD3875DisableWBA policy value has changed.
WNF_ENTR_DOMAIN_NAMES_FOR_EMAIL_SYNC_POLICY_VALUE_CHANGED0x13920028A3BD4075The domains for which email is disabled have changed.
WNF_ENTR_ALLOWCELLULARDATAROAMING_POLICY_VALUE_CHANGED0x13920028A3BD4875The AllowCellularDataRoaming policy value has changed.
WNF_ENTR_ALLOWCELLULARDATA_POLICY_VALUE_CHANGED0x13920028A3BD5075The AllowCellularData policy value has changed.
WNF_ENTR_EDPENFORCEMENTLEVEL_CACHED_POLICY_VALUE_CHANGED0x13920028A3BD5C75EDPEnforcementLevel cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
WNF_ENTR_PROTECTEDDOMAINNAMES_CACHED_POLICY_VALUE_CHANGED0x13920028A3BD6475EnterpriseProtectedDomainNames cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201.
WNF_ENTR_ALLOWMESSAGESYNC_POLICY_VALUE_CHANGED0x13920028A3BD6875The AllowMessageSync policy value has changed.
WNF_ENTR_DISABLEADVERTISINGID_POLICY_VALUE_CHANGED0x13920028A3BD7075Privacy DisableAdvertisingId policy value has changed.
WNF_ENTR_EVALUATE_EDP_CONFIGURATION_STATE0x13920028A3BD7875EnterpriseDataProtection (EDP) state has changed.
WNF_ENTR_APPHVSI_CACHED_POLICY_VALUE_CHANGED0x13920028A3BD8475AllowAppHVSI cached policy has changed.
WNF_ENTR_NETWORKISOLATION_POLICY_VALUE_CHANGED0x13920028A3BD8875A NetworkIsolation area policy value has changed.
WNF_ENTR_EVALUATE_APPHVSI_CONFIGURATION_STATE0x13920028A3BD9075AppHVSI (Hypervisor-based Virtualized Security Isolation) state has changed.
WNF_ENTR_EDPSHOWICONS_CACHED_POLICY_VALUE_CHANGED0x13920028A3BD9C75EdpShowIcons policy value has changed.
WNF_ENTR_ALLOWDEVICEHEALTHMONITORING_POLICY_VALUE_CHANGED0x13920028A3BDA075The AllowDeviceHealthMonitoring policy value has changed.
WNF_ENTR_ALLOWWIFI_POLICY_VALUE_CHANGED0x13920028A3BDB075AllowWifi policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ALLOWMANUALWIFICONFIGURATION_POLICY_VALUE_CHANGED0x13920028A3BDB875AllowManualWifiConfiguration policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_SEARCH_ALLOW_INDEXER0x13920028A3BDC075Allow windows indexer.
WNF_ENTR_ALLOWWIFIDIRECT_POLICY_VALUE_CHANGED0x13920028A3BDC875AllowWifiDirect policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ALLOWPROJECTIONTOPC_POLICY_VALUE_CHANGED0x13920028A3BDD075AllowProjectionToPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_ALLOWMESSAGE_MMS_POLICY_VALUE_CHANGED0x13920028A3BDD875The AllowMessageMMS policy value has changed.
WNF_ENTR_ALLOWMESSAGE_RCS_POLICY_VALUE_CHANGED0x13920028A3BDE075The AllowMessageRCS policy value has changed.
WNF_ENTR_EDPSMB_POLICY_VALUE_CHANGED0x13920028A3BDE875SMBAutoEncryptedFileExtensions policy value has changed.
WNF_ENTR_APPHVSI_POLICY_VALUE_CHANGED0x13920028A3BDF075Any AppHVSI policy value is changed
WNF_ENTR_ALLOWSET24HOURCLOCK_POLICY_VALUE_CHANGED0x13920028A3BDF875The AllowSet24HourClock policy value has changed.
WNF_ENTR_ALLOWPROJECTIONFROMPC_POLICY_VALUE_CHANGED0x13920028A3BE0075AllowProjectionFromPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml
WNF_ENTR_EXPLOITGUARD_POLICY_VALUE_CHANGED0x13920028A3BE0875The ExploitGuard policy values have changed.
WNF_ENTR_WINDOWSDEFENDERSECURITYCENTER_POLICY_VALUE_CHANGED0x13920028A3BE1075The WindowsDefenderSecurityCenter policy values have changed.
WNF_ENTR_APPPRIVACY_POLICY_VALUE_CHANGED0x13920028A3BE1875Event fired when app privacy policy values have changed
WNF_ENTR_ENABLETOUCHKEYBOARDAUTOINVOKE_POLICY_VALUE_CHANGED0x13920028A3BE2075A TextInput EnableTouchKeyboardAutoInvokeInDesktopMode policy value has changed.
WNF_ENTR_FULLLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE2875A TextInput TouchKeyboardFullModeAvailability policy value has changed.
WNF_ENTR_WIDELAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE3075A TextInput TouchKeyboardWideModeAvailability policy value has changed.
WNF_ENTR_NARROWLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE3875A TextInput TouchKeyboardNarrowModeAvailability policy value has changed.
WNF_ENTR_HANDWRITING_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE4075A TextInput TouchKeyboardHandwritingModeAvailability policy value has changed.
WNF_ENTR_SPLITLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE4875A TextInput TouchKeyboardSplitModeAvailability policy value has changed.
WNF_ENTR_EMOJI_AVAILABILITY_POLICY_VALUE_CHANGED0x13920028A3BE5075A TextInput TouchKeyboardEmojiButtonAvailability policy value has changed.
WNF_ENTR_FORCEDOCKED_TOUCHKEYBOARD_POLICY_VALUE_CHANGED0x13920028A3BE5875A TextInput ForceTouchKeyboardDockedState policy value has changed.
WNF_ENTR_TOUCHKEYBOARDDICTATION_POLICY_VALUE_CHANGED0x13920028A3BE6075A TextInput TouchKeyboardDictationButtonAvailability policy value has changed.
WNF_ENTR_BITS_POLICY_VALUE_CHANGED0x13920028A3BE6875BITS policy area value has changed.
WNF_ENTR_REMOVABLEDISK_DENY_WRITE_POLICY_VALUE_CHANGED0x13920028A3BE7075Removable disk deny write access policy area value has changed.
WNF_ENTR_WIN32APPLICATION_POLICY_METADATA_VALUE_CHANGED0x13920028A3BE7875Win32 Application policy metadata value has changed.
WNF_ENTR_WIN32APPLICATION_POLICY_PROVIDERDATA_VALUE_CHANGED0x13920028A3BE8075Win32 Application policy provider data value has changed.
WNF_ENTR_ALLOWLINGUISTICDATACOLLECTION_POLICY_VALUE_CHANGED0x13920028A3BE8875A TextInput AllowLinguisticDataCollection policy value has changed.
WNF_ENTR_WPDDEVICES_DENY_WRITE_USER_POLICY_VALUE_CHANGED0x13920028A3BE9075Wpd devices deny write access per user policy area value has changed.
WNF_ENTR_WPDDEVICES_DENY_READ_USER_POLICY_VALUE_CHANGED0x13920028A3BE9875Wpd devices deny read access per user policy area value has changed.
WNF_ENTR_WPDDEVICES_DENY_WRITE_DEVICE_POLICY_VALUE_CHANGED0x13920028A3BEA075Wpd devices deny write access per device policy area value has changed.
WNF_ENTR_WPDDEVICES_DENY_READ_DEVICE_POLICY_VALUE_CHANGED0x13920028A3BEA875Wpd devices deny read access per device policy area value has changed.
WNF_ETW_SUBSYSTEM_INITIALIZED0x41911A28A3BC0875ETW subsystem initialized
WNF_EXEC_OSTASKCOMPLETION_REVOKED0x2831628A3BC0875This event signal when a task completion has been revoked due to memory pressure
WNF_EXEC_THERMAL_LIMITER_CLOSE_APPLICATION_VIEWS0x2831628A3BC1875This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates all application views should be closed
WNF_EXEC_THERMAL_LIMITER_TERMINATE_BACKGROUND_TASKS0x2831628A3BC2075This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates background tasks should be terminated
WNF_EXEC_THERMAL_LIMITER_DISPLAY_WARNING0x2831628A3BC2875This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates a warning should be displayed to the user
WNF_EXEC_THERMAL_LIMITER_STOP_MRC0x2831628A3BC3075This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates MRC should be stopped
WNF_EXEC_THERMAL_LIMITER_MITIGATION_STATUS0x2831628A3BC3875This event is signaled by the thermal limiter when a power or thermal trip point has been reached, which is causing the system to take action to reduce power consumption. The WNF data indicates the number of areas on the device which are being mitigated.
WNF_WFS_SETTINGS0x4195083AA3BC0875Family Safety settings have changed in the cloud service but have not been downloaded and committed
WNF_WFS_TIMEREMAININGALERTS0x4195083AA3BC1075Family Safety time remaining alerts to warn the user the allocated time is running out. The data is published as json blob with fileds U.SID for User SID as wide character and TR for time remaining in minutes as int value
WNF_WFS_FAMILYMEMBERLOGIN0x4195083AA3BC1875Family member login event
WNF_WFS_SETTINGSREFRESH0x4195083AA3BC2075Family Safety settings have changed and have downloaded and committed. Clients should refresh Family Safety settings.
WNF_FCON_PROCESS_LKG0xF890D2BA3BC0875This state is to trigger ReconcoleFeatures scheduled task to process LKG configurations
WNF_FDBK_QUESTION_NOTIFICATION0xA840A2BA3BC0875This event contains a feedback question for the user. Payload is a JSON string specifying the feedback question.
WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY0x1287083AA3BC0875Free network available or not
WNF_FLYT_IDS_CHANGED0x159F022BA3BC0875Triggered every time there is a change in flight IDs
WNF_FLTN_WNF_ARRIVED0xF92022BA3BC0875Triggered every time upon WNS notification or policy change
WNF_FLT_RUNDOWN_WAIT0x4192022BA3BC0875Wait for rundown release in Filter Manager may be blocked by a suspended Modern application
WNF_FOD_STATE_CHANGE0x4182012BA3BC0875Installation status of Features on demand
WNF_FSRL_TIERED_VOLUME_DETECTED0xD941D2BA3BC0875This event signals when a tiered volume is mounted
WNF_FSRL_OPLOCK_BREAK0xD941D2BA3BC1075Oplock break acknowledgement may be blocked by a suspended Modern application
WNF_GC_INITIAL_PRESENT0x41C60D2AA3BC0875This event is signalled when the graphics driver presents the initial frame.
WNF_GC_RESTORED0x41C60D2AA3BC1075This event is signalled after a restore occurs
WNF_GC_SUSPEND0x41C60D2AA3BC1875This event is signalled during a suspend
WNF_GC_RESUME0x41C60D2AA3BC2075This event is signalled during a resume
WNF_GC_CONSTRAIN0x41C60D2AA3BC2875This event is signalled during a constrain
WNF_GC_UNCONSTRAIN0x41C60D2AA3BC3075This event is signalled during an unconstrain
WNF_GC_SUSPEND_COMPLETE0x41C60D2AA3BC3875This event is signalled after a suspend completes
WNF_GC_RESUME_PENDING0x41C60D2AA3BC4075This event is signalled before a resume
WNF_GC_CRASHDUMP_EVENT0x41C60D2AA3BC4875This event is signalled during a crashdump start or complete
WNF_GIP_ADAPTER_CHANGE0x4196072AA3BC0875This event is fired for GIP adapter state change, such as connect/disconnect
WNF_LOC_DEVICE_BROKER_ACCESS_CHANGED0x41850121A3BC0875This event triggers when the user changes Geolocation access for an application or the user.
WNF_LOC_RESERVED_WNF_EVENT0x41850121A3BC1075Do not use this WNF event, it is deprecated. Was WIN32_API_ACCESS_CHANGED.
WNF_LOC_SHOW_SYSTRAY0x41850121A3BC1875This event triggers when there is an event that accesses location data — this trigger starts LocationNotifications.exe which is a systray app.
WNF_LFS_STATE0x41950821A3BC0875This is triggered when an app is making use of the location service. It has two possible data values associated to it: BOOL TRUE: one or more applications are using location. BOOL FALSE: no application is using location.
WNF_LFS_RUNNING_STATE0x41950821A3BC1075This state is used to notify when the location service starts or stops running
WNF_LFS_MASTERSWITCH_STATE0x41950821A3BC1875This state is used to notify when the phone location master switch status changes with BOOL as payload. TRUE indicating master switch is ON and FALSE indicating master switch is OFF
WNF_LFS_GEOFENCETRACKING_STATE0x41950821A3BC2075This state is used to notify Geofence tracking state for the geofences added by the applications. TRUE if atleast one geofence is actively being tracked and FALSE if there are no geofences being tracked.
WNF_LFS_RESERVED_WNF_EVENT_20x41950821A3BC2875Do not use this WNF event, it is deprecated. Was WNF_LFS_BACKGROUND_PERMISSIONCHANGE_STATE
WNF_LFS_POSITION_AVAILABLE0x41950821A3BC3075This state is used to notify when a new freely available position can be queried from the location framework.
WNF_LFS_CLIENT_RECALCULATE_PERMISSIONS0x41950821A3BC3875This state is published whenever the permissions of an active client have changed. Every client on the system receives it, and should run domain-specific logic to see what the impact is (e.g., reconnect location session when permission re-allowed).
WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGED0x41950821A3BC4075This event notifies when the permission regarding the ability to show the location notification icon has changed. The current state needs to be queried for as it is different for each user.
WNF_LFS_ACTION_DIALOG_AVAILABLE0x41950821A3BC4875This event notifies when a new action dialog is available
WNF_LFS_SIGNIFICANT_LOCATION_EVENT0x41950821A3BC5075This event notifies when there’s a significant change in the location of the device.
WNF_LFS_VISITS_SIGNIFICANT_LOCATION_EVENT0x41950821A3BC5875This event notifies when there’s a visit or a significant change in the location of the device.
WNF_LFS_LOCATION_MDM_AREA_POLICY_CHANGED0x41950821A3BC6075This event is fired when an MDM Location policy change occurs.
WNF_LFS_LOCATION_MDM_POLICY_ENABLELOCATION_CHANGED0x41950821A3BC6875This event is fired when an MDM EnableLocation policy change occurs.
WNF_NLS_USER_DEFAULT_LOCALE_CHANGED0x41950223A3BC0835The user default locale has changed. Subscribers should query for the new value and invalidate any cached date/time or locale sensitive strings.
WNF_NLS_USER_UILANG_CHANGED0x41950223A3BC1035This state is notified when the User Default UI language (MUI) changes. Subscribers should query Subscribers should query for the new value and invalidate any cached localized resources, strings, other UI related data.
WNF_NLS_LOCALE_INFO_CHANGED0x41950223A3BC1835This state is notified when the locale info changes by means of calling SetLocaleInfo. The data value is a DWORD that indicates the LCTYPE that changed.
WNF_NLS_GEOID_CHANGED0x41950223A3BC2035This state is notified when the user Geo ID (or Geo Name) changes by means of calling SetUserGeoID (or SetUserGeoName). The data value is a DWORD that indicates the new GeoID. (Note: Geo Names should be preferred and used instead of GeoIDs.)
WNF_GLOB_USERPROFILE_LANGLIST_CHANGED0x389022AA3BC0875This state is notified when the User Preferred Language List has changed. Subscribers should query GetUserLanguages to get the updated language list.
WNF_GLOB_GLOBALIZATION_PREFERENCES_CHANGED0x389022AA3BC1035The user globalization preferences have changed. Subscribers should query for new globalization values and invalidate any cached data.
WNF_GLOB_GLOBALIZATION_CLOUD_DATA_AVAILABLE0x389022AA3BC1875Updated user globalization preferences are available from the cloud data store. NLS needs to update the cached data.
WNF_GPOL_SYSTEM_CHANGES0xD891E2AA3BC0875System policy has been updated
WNF_GPOL_USER_CHANGES0xD891E2AA3BC10F5User policy has been updated
WNF_HAS_VERIFY_HEALTH_CERT0x41950F25A3BC0875This event signals a request to get (if needed) and verify Health Certificate with HAS
WNF_HOLO_USER_DISPLAY_CONTEXT0xE8A0125A3BC0835Event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext
WNF_HOLO_USER_INPUT_CONTEXT0xE8A0125A3BC1035Event raised when the input context changes (ex. from 3D input to 2D Desktop input). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext
WNF_HOLO_SHELL_STATE0xE8A0125A3BC1835Event raised when the Holographic Shell running state changes (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState
WNF_HOLO_INPUT_FOCUS_CHANGE0xE8A0125A3BC2075This event signals when input focus changes to a different window. Data is a MPCInputFocusChange struct.
WNF_HOLO_FORCE_ROOM_BOUNDARY0xE8A0125A3BC2835If payload is non-zero, room boundary is forced to be visible.
WNF_HOLO_STREAMING_STATE0xE8A0125A3BC3035This event signals whether streaming is active. Data contains a bool indicating if streaming is active.
WNF_HOLO_ROOM_BOUNDARY_DATA_CHANGED0xE8A0125A3BC3835This event signals that the persisted room boundary data has changed.
WNF_HOLO_ROOM_BOUNDARY_VISIBILITY0xE8A0125A3BC4035A non-zero payload indicates the room boundary is visible to the user. Writable by DWM and System.
WNF_HOLO_SHELL_INPUT_3DSWITCH_DISABLE0xE8A0125A3BC4835This event signals when various input types should be disabled from natively working in the Windows Holographic shell, useful for apps that simulate GGV via mouse and/or gamepad. Data contains a DWORD of bitflags from Windows::Internal::Shell::Holographic::ShellInput3DSwitchDisableFlags.
WNF_HOLO_ENVIRONMENT_AUDIO_ASSET0xE8A0125A3BC5075This event contains the file path for the environment app’s audio asset, which is used by Triton
WNF_HOLO_UNINSTALL_PREPARE0xE8A0125A3BC5875This event signals that it’s time for uninstall preparations, which includes shutting down Oasis apps.
WNF_HOLO_UNINSTALL_COMPLETE0xE8A0125A3BC6075This event signals that uninstall has finished. Data contains a HRESULT representing uninstall success.
WNF_HOLO_SET_SHELL_SPAWN_POINT0xE8A0125A3BC6835This event signals that the shell spawn point should be moved. Data is a DWORD indicating the id of the point that should be set.
WNF_HOLO_RETAIL_DEMO_TIMER0xE8A0125A3BC7035Event raised when the Windows Mixed Reality retail demo timer state changes. Data contains a DWORD equivalent to MixedRealityPortal::RetailDemoTimerState.
WNF_HOLO_DISPLAY_QUALITY_LEVEL0xE8A0125A3BC7835Event raised when the benchmarked quality level changes. Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:DisplayQualityState
WNF_HOLO_SYSTEM_DISPLAY_CONTEXT_CHANGE0xE8A0125A3BC8875System scoped event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext
WNF_HOLO_REQUEST_HMD_USE_STATE0xE8A0125A3BC9035This event signals the desire to change the HMD use state (the overrideable internal setting, not the physical presence state reported by the HMD). Meant to be used by non-shell inbox applications to trigger the equivalent of the input switch hotkey. Data contains a DWORD equivalent to a bool; true = HmdUseState::InUse, false = HmdUseState::Idle.
WNF_HOLO_REQUEST_HOLOGRAPHIC_ACTIVATION_REALM0xE8A0125A3BC9835This event signals the desire to change the current input foreground to go to the last active 3D window. Meant to be used by non-shell inbox applications to return focus to 3D realm.
WNF_HOLO_RESET_IDLE_TIMER0xE8A0125A3BCA035This event signals a reset of the holographic idle timer. Writable by DWM and System.
WNF_HOLO_SHELL_STATE_INTERACTIVE_USER0xE8A0125A3BCA875Event raised when the Holographic Shell running state changes on the interactive users session (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState
WNF_HOLO_SHARING_SESSION_CONTEXT0xE8A0125A3BCB035This event signals whether sharing session is active. Data contains a name of the data provider.
WNF_HOLO_PROJECTION_REQUEST0xE8A0125A3BCB835This event signals a miracast projection to establish.
WNF_HOLO_CAPTURE_STATE0xE8A0125A3BCC035This event signals whether recording is active. Data contains a bool indicating if recording is active.
WNF_HOLO_SHELL_USER_PRESENCE_STATE0xE8A0125A3BCC875Signals an app to transition between passive/active state. Data contains a bool indicating if user presence is Active (value false) or Passive (value true). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_HOLO_BACKGROUND_POSE_ACCESS_LIST0xE8A0125A3BCD075This event signals changes to the list of applications granted background pose access. The data is 32 DWORDs; the first is the current number of process ids that follow, up to 31. It can read by Systen and Authenticated Users. It can only be written by Spectrum
WNF_HOLO_FANCY_CORE_STATE0xE8A0125A3BCD875Triggered when state changes occur in FancyCore
WNF_HOLO_DISPLAY_SAVE_UIF_DISPLAY_DIAGNOSTIC_DATA_JSON0xE8A0125A3BCE075This event is published by Feedback Hub Brokered API to signal HoloSI to save DisplayDiagnosticData.json to a predetermined location.
WNF_HOLO_DISPLAY_SAVE_FALLBACK_DISPLAY_DIAGNOSTIC_DATA_JSON0xE8A0125A3BCE875This event is published by Fallback Diagnostics to signal HoloSI to save DisplayDiagnosticData.json to a predetermined location.
WNF_HOLO_DISPLAY_DELETE_DISPLAY_DIAGNOSTIC_DATA_JSON0xE8A0125A3BCF075This event is published by Feedback Hub Brokered API or Fallback Diagnostics to signal HoloSI to delete DisplayDiagnosticData.json located at the predetermined location.
WNF_HVL_CPU_MGMT_PARTITION0x418A1825A3BC0875This state signals NTOS has CPU management privileges in the current partition.
WNF_HYPV_HOST_WMI_OBJECT_PROVIDER_STATE0x17961725A3BC0875The state of Hyper-V’s host-only WMI object provider.
WNF_HYPV_HOST_WMI_EVENT_PROVIDER_STATE0x17961725A3BC1075The state of Hyper-V’s host-only WMI event provider.
WNF_IMSN_MONITORMODECHANGED0xF950324A3BC0835A monitor has changed immersive modes
WNF_IMSN_LAUNCHERVISIBILITY0xF950324A3BC1035The immersive launcher’s visibility has changed
WNF_IMSN_IMMERSIVEMONITORCHANGED0xF950324A3BC1835The monitor the immersive environment is running on has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_IMSN_KILL_LOGICAL_FOCUS0xF950324A3BC3035User-perceived focus has left an edit box.
WNF_IMSN_PROJECTIONDISPLAYAVAILABLE0xF950324A3BC3835Projection display availability has changed
WNF_IMSN_TRANSPARENCYPOLICY0xF950324A3BC4035The user experience transparency policy stores the global system transparency policy as a DWORD which contains 0 for disabled and 1 for enabled.
WNF_IMSN_GLOBALLIGHTSINVALIDATED0xF950324A3BC4835The global/shared lights have changed.
WNF_IUIS_SCALE_CHANGED0x128F1B24A3BC0835The immersive UI scale has changed for the current session.
WNF_ISM_LAST_USER_ACTIVITY0x418B1D24A3BC0835Last recorded user activity
WNF_ISM_INPUT_UPDATE_AFTER_TRACK_INTERVAL0x418B1D24A3BC1035Fires if there is new input after track interval.
WNF_ISM_CURSOR_MANAGER_READY0x418B1D24A3BC1835Cursor Manager is initialized. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_ISM_GAMECONTROLLER_ZEPHYRUS_FAULT0x418B1D24A3BC2075This event signals when the Zephyrus controller has encountered a fault that requires a shell notification.
WNF_INPT_SETTINGS_CHANGE0x15960024A3BC0875Fires when settings change.
WNF_INPT_MOUSE_SYNC_DATA_AVAILABLE0x15960024A3BC1075Fires when input cloud data has changed.
WNF_INPT_PEN_SYNC_DATA_AVAILABLE0x15960024A3BC1875Fires when input cloud data has changed.
WNF_INPT_TOUCHPAD_SYNC_DATA_AVAILABLE0x15960024A3BC2075Fires when input cloud data has changed.
WNF_IOT_EMBEDDED_MODE_POLICY_VALUE_CHANGED0x41920124A3BC0875Embedded mode policy value has changed.
WNF_IOT_STARTUP_SETTINGS_CHANGED0x41920124A3BC1075settings for the foreground app and/or iot startup type background tasks have changed
WNF_LANG_FOD_INSTALLATION_STARTED0x6880F21A3BC0875Installation of language features on demand was started (either through Settings or through installation task).
WNF_LED_SETTINGSCHANGED0x41820B21A3BC0875LedAlert settings has changed
WNF_LM_PACKAGE_SUSPEND_REQUIRED0x41C60321A3BC0875A running package’s license is now invalid and the package must be suspended or terminated.
WNF_LM_CONTENT_LICENSE_CHANGED0x41C60321A3BC1075A content license’s state has been modified.
WNF_LM_ROOT_LICENSE_CHANGED0x41C60321A3BC1875A root license’s state has been modified.
WNF_LM_OPTIONAL_PACKAGE_SUSPEND_REQUIRED0x41C60321A3BC2075A running optional package’s license is lost.
WNF_LM_APP_LICENSE_EVENT0x41C60321A3BC2875Multi-purpose event for app license notifications.
WNF_LM_OFFLINE_PC_CHANGED0x41C60321A3BC3075A offline pc state has been changed.
WNF_LM_LICENSE_REFRESHED0x41C60321A3BC3875Licenses have been refreshed.
WNF_LIC_NO_APPLICABLE_LICENSES_FOUND0x41850721A3BC0875Failed to launch the modern app because no valid licenses and leases were found
WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCE0x41850721A3BC1075The device license hardware ID is out of tolerance with the device’s hardware ID
WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCE0x41850721A3BC1875The hardware ID has changed but is still with in tolerance with the device’s hardware ID
WNF_LIC_DEVICE_LICENSE_UPDATED0x41850721A3BC2075A new device license with a different device ID was installed
WNF_LIC_DEVICE_LICENSE_REMOVED0x41850721A3BC2875The device license was uninstalled
WNF_LIC_DEVICE_LICENSE_MISSING0x41850721A3BC3075The required device license was nout found
WNF_LIC_INT_DEVICE_LICENSE_EXPIRED0x41850721A3BC3875The integration device license has expired and can no longer be used to verify or decrypt modern app licenses.
WNF_LIC_LOCAL_MIGRATED_LICENSES_FOUND0x41850721A3BC4075Found a local migrated license which needs to be refereshed with a store signed license.
WNF_LIC_MANAGE_DEVICE_REGISTRATION_AND_REACTIVATION0x41850721A3BC4875The MDM Licensing Device Registration Policy has been refreshed.
WNF_OLIC_OS_EDITION_CHANGE0x28F0222A3BC5075OS Edition has changed.
WNF_OLIC_OS_LICENSE_POLICY_CHANGE0x28F0222A3BC5875OS Policy has changed.
WNF_OLIC_OS_LICENSE_TERMS_ACCEPTED0x28F0222A3BC6075The License Terms can be considered as accepted on this device.
WNF_OLIC_OS_LICENSE_NON_GENUINE0x28F0222A3BC6875OS will soon notify user of non-genuine state.
WNF_LOGN_EOA_FLYOUT_POSITION0xF810121A3BC0835Indicates where the ease of access flyout should appear in LogonUI and User Oobe, the data type is RECT. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts
WNF_LOGN_SLIDE_TO_SHUTDOWN0xF810121A3BC1035Indicates that a shutdown has been triggered via Slide-to-shutdown. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts
WNF_LOGN_RETURN_TO_LOCK0xF810121A3BC1835Indicates that user intends to interact with the lock screen (e.g. for Projection or Cortana) and LogonUI should return to the lock screen.
WNF_LOGN_PINPAD_VISIBLE0xF810121A3BC2035Indicates that the mobile pinpad is visible.
WNF_LOGN_LOCAL_SIGNON0xF810121A3BC2875Indicates logon from local console happened, the data type is a GUID which represents the logged-on credential provider CLSID. The sddl string grants subscribe and publish permission to System
WNF_LOGN_CREDENTIAL_TILE_SELECTION_CHANGED0xF810121A3BC3075This event signals when a credential tile has been selected or deselected.
WNF_LOGN_SUPPRESS_FINGERPRINT_WAKE0xF810121A3BC3835Indicates that device wake via fingerprint sensor should be disabled. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts, and to App Containers with the userSignInSupport Capability
WNF_LOGN_BIO_ENROLLMENT_APP_INSTANCE_CHANGED0xF810121A3BC4075This event fires when number of bio enrollment app instance changes. The sddl string grants subscribe and publish permission (3) to Authenticated user accounts (AU), Local System (SY), and App containers with the userSignInSupport Capability
WNF_MAPS_MAPLOADER_PROGRESS0x12960F20A3BC1075Current progress of the MapLoader background engine.
WNF_MAPS_MAPLOADER_STATUS_CHANGE0x12960F20A3BC1875The new status of ODML.
WNF_MAPS_MAPLOADER_PACKAGE_CHANGE0x12960F20A3BC2075A map package has been added or removed or repositioned in the list.
WNF_SYNC_REQUEST_PROBE0x288173EA3BC0875Sync sets this value to request a wifi probe due to SSL error. SDDL comes from ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
WNF_MUR_MEDIA_UI_REQUEST_WLAN0x41941B20A3BC0875Interface to Media-UI-request-State mapping for WLAN (802.1x) interfaces
WNF_MUR_MEDIA_UI_REQUEST_LAN0x41941B20A3BC1075Interface to Media-UI-request-State mapping for LAN (802.3) interfaces
WNF_MSA_ACCOUNTSTATECHANGE0x41871D20A3BC0835Notification for alerting client apps that the connected account ticketing state has changed
WNF_MSA_TPM_AVAILABLE0x41871D20A3BC1475Notification for alerting client apps that the server has reported TPM claims are available in new tickets. Payload is DWORD (enum TpmKeyStateServer) and permanent since it represents device capability needed across reboot.
WNF_MSA_TPM_SERVER_CLIENT_KEY_STATE_UPDATED0x41871D20A3BC1875Notification for alerting client apps about the current client and server TPM state for logging and retry logic. Payload is a struct of two DWORDs (enum TpmKeyStateServer, enum TpmKeyStateClient).
WNF_MSA_TPM_ATTESTATION_ATTEMPT_READY0x41871D20A3BC2075This event signals WLIDSVC to start TPM identity attestation. Payload is DWORD and mimics WNF_TPM_MAINTENANCE_TASK_STATUS for compatibility (status == 2 for ready).
WNF_MSA_GLOBAL_DEVICE_IDENTITY_PROVISIONED0x41871D20A3BC2C75Notification for alerting client apps about provisioning of new globabl device identity.
WNF_MSA_HARDWARE_DEVICE_IDENTITY_UPDATED0x41871D20A3BC3475Notification for alerting client apps about updates to hardware device identity.
WNF_MU_REPAINT_HWNDS0x41C61B20A3BC0875This is triggered when we want to repaint all of the windows in Win32App in WCOS.
WNF_MM_BAD_MEMORY_PENDING_REMOVAL0x41C60320A3BC0875This notification is raised when the memory manager is unable to automatically offline a bad memory page
WNF_MM_PHYSICAL_MEMORY_CHANGE0x41C60320A3BC1075This notification is raised when the memory manager adds or removes physical memory
WNF_MON_THERMAL_CAP_CHANGED0x41880120A3BC0875Triggered by a monitor device when the thermal limit on brightness is changed. Payload is a MONITOR_THERMAL_BRIGHTNESS_LIMIT_LIST.
WNF_MRT_QUALIFIER_CONTRAST_CHANGED0x41921C20A3BC0875This state is notified when the constrast qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml
WNF_MRT_QUALIFIER_THEME_CHANGED0x41921C20A3BC1075This state is notified when the theme qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml
WNF_MRT_PERSISTENT_QUALIFIER_CHANGED0x41921C20A3BC1C75This state is notified when some persistent qualifier changed its value. Payload is qualifier@package_name with a max length of 512 bytes (256 WCHARs including null terminator). Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers
WNF_MRT_MERGE_SYSTEM_PRI_FILES0x41921C20A3BC2075This state is notified when system PRI files are merged. Payload has a max length of 128 bytes (64 WCHARs including null terminator) and consists of ‘start [starting timestamp]’ or ‘done [starting timestamp] [ending timestamp]’. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers
WNF_MRT_SYSTEM_PRI_MERGE0x41921C20A3BC2875This state is notified when a system PRI file is merged. Payload has a max length of 512 bytes (256 WCHARs including null terminator) and consists of either ‘start [path] [starting timestamp]’ or ‘{done,skipped} [path] [starting timestamp] [ending timestamp]’. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_NASV_USER_PRESENT0x17950F23A3BC0835NaAuth User Presence Status
WNF_NASV_SERVICE_RUNNING0x17950F23A3BC1075NaAuth Service Running
WNF_NASV_USER_AUTHENTICATION0x17950F23A3BC1835NaAuth User Authentication Status
WNF_NASV_DYNAMIC_LOCK_BLUETOOTH_STATUS0x17950F23A3BC2075NaAuth Extended Dynamic Lock Status for Bluetooth plugin
WNF_NASV_DYNAMIC_LOCK_RECALIBRATE0x17950F23A3BC2875NaAuth Extended Dynamic Lock Status for Bluetooth plugin recalibration
WNF_NCB_APP_AVAILABLE0x41840D23A3BC0875NCB indication of CCT or Socket Broker Based App availability.
WNF_NDIS_ADAPTER_ARRIVAL0x128F0A23A3BC0875NDIS finds a network adapter that needs to be configured by NetSetupSvc.
WNF_NDIS_CORRUPTED_STORE0x128F0A23A3BC1075NDIS detects corruption in the binding store.
WNF_NLM_VPN_RECONNECT_CHANGE0x418B0223A3BC0875This event is signalled by rasman about reconnect VPN state change and is used by NLM
WNF_NLM_INTERNET_PRESENT0x418B0223A3BC1075This event is signalled by NLM when the aggregated network conditions indicate that a connection to the internet is present
WNF_NLM_HNS_HIDDEN_INTERFACE0x418B0223A3BC1875This event is signalled by HNS when it establishes a vNIC which it needs NLM to hide
WNF_NLM_GLOBAL_CONNECTIVITY_STATE0x418B0223A3BC2075This event is signalled by NLM when aggregated network conditions (cost, connectivity level and flags) change
WNF_NFC_SE_CARD_EMULATION_STATE_CHANGED0x41850823A3BC0875This state is used to notify that the NFC CE policy changed.
WNF_PAY_CANMAKEPAYMENT_BROKER_READY0x419F0F3DA3BC0875This state is used to notify that the CanMakePayment background broker is initialized and ready.
WNF_NGC_PREGEN_TRIGGER0x41850923A3BC0875This event signals when an caller wants to trigger KeyPregenTask.
WNF_NGC_AIKCERT_TRIGGER0x41850923A3BC1075This event signals when an caller wants to trigger AikCertEnrollTask.
WNF_NGC_PRO_CSP_POLICY_CHANGED0x41850923A3BC1875This event is fired when a policy change occurs in the NGC Pro CSP.
WNF_NGC_PREGEN_DELAY_TRIGGER0x41850923A3BC2075This event signals when an caller wants to trigger KeyPregenTask with some delay.
WNF_NGC_GESTURE_AUTHENTICATED0x41850923A3BC2875This event signals when NGC container service (ngcctnrsvc) authenticates a gesture.
WNF_NGC_CRYPTO_MDM_POLICY_CHANGED0x41850923A3BC3075This event is fired when an MDM cryptographic policy change occurs.
WNF_NGC_CREDENTIAL_REFRESH_REQUIRED0x41850923A3BC3875This event is fired when an activity occurs that requires the NGC PIN cred prov to refresh its credential state.
WNF_NGC_PIN_RESET_SCENARIO_STATE_CHANGE0x41850923A3BC4035This event is fired when the state has changed during the PIN reset scenario.
WNF_NGC_LAUNCH_PIN_RESET_SCENARIO0x41850923A3BC4875This event is fired from the NGC PIN cred prov to signal that the PIN reset scenario should be launched.
WNF_NGC_CREDENTIAL_RESET_EXPERIENCE_ACTIVE0x41850923A3BC5075Boolean state representing whether or not the Credential Reset User Experience is active.
WNF_NGC_LAUNCH_NTH_USER_SCENARIO0x41850923A3BC6075This event is fired from the NGC PIN cred prov to signal that an Nth user scenario should be launched.
WNF_NGC_PREGEN_NGCISOCTNR_TRIGGER0x41850923A3BC6875This event triggers the NgcIsoCtnr key pre-gen pool to start generating a key.
WNF_NLA_CAPABILITY_CHANGE0x41870223A3BC0875This event is notified when NCSI detects a capability change
WNF_NLA_TASK_TRIGGER0x41870223A3BC1875State name triggering WiFiTask from NlaSvc
WNF_WPN_USER_PLATFORM_READY0x41881E3AA3BC08F5This WNF state indicates to users of WPN endpoints (except AppEndpoint) that platform is ready to use. This state can also be used to know if WPN platform restarted.
WNF_WPN_PLATFORM_INITIALIZED0x41881E3AA3BC10F5This WNF state can be used by first party Apps / Services to determine when WPN platform is ready to handle app related requests like posting toast / tile and getting channel uri.
WNF_WPN_SYSTEM_PLATFORM_READY0x41881E3AA3BC1875State indicating that system notification platform has been registered and ready to user.
WNF_WPN_USER_IN_SESSION_PLATFORM_READY0x41881E3AA3BC2035This WNF state indicates that USER_PLATFORM_READY was fired for a user in the current session. This is intended to provide a workaround for the inability to use RtlSubscribeWnfStateChangeNotification for a user other than the current process token. A process can register for this WNF and then poll the per-user WNF states under impersonation.
WNF_WPN_CHANNELS_REVOKED0x41881E3AA3BC2875Notifies listeners that the wns channels have become obsolete.
WNF_NPSM_SERVICE_STARTED0xC951E23A3BC0875This notification is to indicate that the NPSM service has started up.
WNF_NSI_SERVICE_STATUS0x418F1D23A3BC0875NSI service status. The SDDL grants subscribe access to all who have access to NSI RPC interface and subcribe + publish access to NSI service.
WNF_CSC_SERVICE_START0x41851D2EA3BC0875CSC Service start trigger
WNF_WOSC_ML_MODELS_CHANGED0x295013AA3BC0875Triggered every time there is a change in the OneSettings configuration for machine learning model configurations
WNF_WOSC_FEATURE_CONFIGURATION_CHANGED0x295013AA3BC1075Triggered every time there is a change in the OneSettings configuration for Velocity feature configurations
WNF_WOSC_MITIGATION_CONFIGURATION_CHANGED0x295013AA3BC1875Triggered every time there is a change in the OneSettings configuration for Mitigation App configurations
WNF_WOSC_DIRECTX_DATABASE_CHANGED0x295013AA3BC2075Triggered every time there is a change in the OneSettings configuration for DirectX Database configurations
WNF_WOSC_MUSE_CONFIGURATION_CHANGED0x295013AA3BC2875Triggered every time there is a change in the OneSettings configuration for Muse UX and USO configurations
WNF_WOSC_FEATURE_CONFIGURATION_COMPLETED0x295013AA3BC3075Triggered every time a feature configuration was completed (as a response to FEATURE_CONFIGURATION_CHANGED)
WNF_WOSC_REFRESH_ALL_REQUESTED0x295013AA3BC3875Triggers WOSC to refresh all configurations
WNF_OOBE_SHL_MAGNIFIER_QUERY0x4840122A3BC0835Notification from ISM to OOBE to query the user whether to activate the always-on Magnifier in OOBE
WNF_OOBE_SHL_MAGNIFIER_CONFIRM0x4840122A3BC1035Notification from OOBE to ISM whether the user confirms to activate the always-on Magnifier in OOBE
WNF_OOBE_SHL_MONITOR_STATE0x4840122A3BC1875Notification to User OOBE monitor on where the progress is
WNF_OOBE_SHL_SPEECH_CONTROLLER0x4840122A3BC2035Notification of speech controller state change. Payload is state type plus string of length 512
WNF_OVRD_OVERRIDESCALEUPDATED0x5941822A3BC0875The window’s override scale has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_PFG_PEN_FIRST_TAP0x4181083DA3BC0875First Pen Tap Gesture
WNF_PFG_PEN_FIRST_DRAG0x4181083DA3BC1075First Pen Drag Gesture
WNF_PMEM_MEMORY_ERROR0xC83033DA3BC0875There is a new persistent memory error.
WNF_PO_SCENARIO_CHANGE0x41C6013DA3BC0875Sent when the WDI session corresponding to a power scenario changes
WNF_PO_COMPOSITE_BATTERY0x41C6013DA3BC1075Sent when the composite battery is updated. CAPABILITY_SID_VmCapability – S-1-15-3-1024-2268835264-3721307629-241982045-173645152-1490879176-104643441-2915960892-1612460704 (for Hyper-V support)
WNF_PO_POWER_STATE_CHANGE0x41C6013DA3BC1875Sent after WNF_PO_COMPOSITE_BATTERY when batteries are added or removed and when one or more batteries’ AC, charging, or discharging states changes
WNF_PO_ENERGY_SAVER_STATE0x41C6013DA3BC2075Triggered when Energy Saver state changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_PO_ENERGY_SAVER_SETTING0x41C6013DA3BC2875Triggered when Energy Saver setting changes
WNF_PO_ENERGY_SAVER_OVERRIDE0x41C6013DA3BC3075Triggered to indicate Energy Saver override settings
WNF_PO_THERMAL_STANDBY0x41C6013DA3BC3875Triggered to indicate CR3 condition
WNF_PO_THERMAL_SHUTDOWN_OCCURRED0x41C6013DA3BC4075Sent when the previous shutdown was due to a thermal trip
WNF_PO_THERMAL_HIBERNATE_OCCURRED0x41C6013DA3BC4875Sent when the previous hibernate was due to a thermal trip
WNF_PO_DISCHARGE_ESTIMATE0x41C6013DA3BC5075Estimated time until full discharge in seconds
WNF_PO_DISCHARGE_START_FILETIME0x41C6013DA3BC5C75Filetime of last known start of discharge
WNF_PO_CHARGE_ESTIMATE0x41C6013DA3BC6075Estimated time until full charge in seconds
WNF_PO_THERMAL_OVERTHROTTLE0x41C6013DA3BC6875Triggered to indicate excessive thermal throttling
WNF_PO_USER_AWAY_PREDICTION0x41C6013DA3BC7075Sent to indicate whenever user-away prediction is updated.
WNF_PO_DISPLAY_REQUEST_ACTIVE0x41C6013DA3BC7835Sent to indicate whether a display request is active in the current session.
WNF_PO_BATTERY_CHARGE_LEVEL0x41C6013DA3BC8075Triggered when battery charge crosses well-known charge level boundaries.
WNF_PO_SLEEP_STUDY_USER_PRESENCE_CHANGED0x41C6013DA3BC8875Sent when the global user presence changes.
WNF_PO_DEPRECATED10x41C6013DA3BC9075Unused notification
WNF_PO_BATTERY_DISCHARGING0x41C6013DA3BC9875Triggered when battery is being discharged, irrespective of AC/DC state of the system.
WNF_PO_PRIMARY_DISPLAY_VISIBLE_STATE0x41C6013DA3BCA075Visible state of the primary display as MONITOR_DISPLAY_STATE
WNF_PO_PRIMARY_DISPLAY_LOGICAL_STATE0x41C6013DA3BCA875Logical state of the primary display as MONITOR_LOGICAL_DISPLAY_STATE
WNF_PO_PREVIOUS_SHUTDOWN_STATE0x41C6013DA3BCB075Sent on every boot to notify previous shutdown state
WNF_PO_MODERN_STANDBY_EXIT_INITIATED0x41C6013DA3BCB875Triggered at the start of a transition to exit modern standby
WNF_PO_SW_HW_DRIPS_DIVERGENCE0x41C6013DA3BCC075Sent when SW DRIPS is more than HW DRIPS by a specific threshold
WNF_PO_DRIPS_DEVICE_CONSTRAINTS_REGISTERED0x41C6013DA3BCC875Sent once platform idle states and associated device constraints have been registered
WNF_PO_BASIC_BRIGHTNESS_ENGINE_DISABLED0x41C6013DA3BCD075One time system-wide transition to switch from the basic brightness engine to the high-precision brightness engine.
WNF_PO_BRIGHTNESS_ALS_OFFSET0x41C6013DA3BCD875ALS brightness offset consumed by the basic brightness engine.
WNF_PO_VIDEO_INITIALIALIZED0x41C6013DA3BCE075Set to TRUE when the video system is initialized.
WNF_PO_OVERLAY_POWER_SCHEME_UPDATE0x41C6013DA3BCE875Notification for power-setting overlay scheme change.
WNF_PO_CAD_STICKY_DISABLE_CHARGING0x41C6013DA3BCF075Set when an you want IOCTL_CAD_DISABLE_CHARGING to behave in a sticky manner
WNF_PO_POWER_BUTTON_STATE0x41C6013DA3BCF875Describes the current state of the power button.
WNF_PO_SYSTEM_TIME_CHANGED0x41C6013DA3BD0075Supplies the notification about system time changed. Payload has 2 ULONGLONG for new time and old time.
WNF_PO_WEAK_CHARGER0x41C6013DA3BD0875Triggered when a weak charger is detected. Note that there may be several minute delay between when charger is plugged in and when the notification is produced.
WNF_PO_PRESLEEP_NOTIFICATION0x41C6013DA3BD1075Triggered several minutes prior to idling to sleep.
WNF_PO_INPUT_SUPPRESS_NOTIFICATION0x41C6013DA3BD1875Triggered when device is sourced from battery(DC) with lid closed and no external monitor connected.
WNF_PO_WAKE_ON_VOICE_STATE0x41C6013DA3BD2075Sent when wake on voice state changes.
WNF_PO_OPPORTUNISTIC_CS0x41C6013DA3BD2875Sent to indicate period of opportunistic connectivity in standby.
WNF_PO_INPUT_SUPPRESS_NOTIFICATION_EX0x41C6013DA3BD3075Describes the input suppression state for modern standby system based on power source, lid state, monitor state, external monitor state and system opted-in policy.
WNF_PO_BATTERY_CHARGE_LIMITING_MODE0x41C6013DA3BD3875Set to TRUE when one of the battery is in charge limiting mode and FALSE when none of the battery is in charge limiting mode.
WNF_PO_DYNAMIC_BRIGHTNESS_SLIDER0x41C6013DA3BD4075Set to TRUE on systems that have a brightness slider that continuously auto-adjusts to the actual brightness of the screen.
WNF_PO_PDC_SHELL_PHASE_NOTIFICATION0x41C6013DA3BD4875Triggered whenever PDC enters or exits Shell phase.
WNF_PO_BRIGHTNESS_HOTKEY_NOTIFICATION0x41C6013DA3BD5075Triggered whenever a brightness hotkey is pressed. 1 means up was pressed and 0 means down was pressed. This will be only used by DES
WNF_PO_DRIPS_DEVICE_CONSTRAINTS_UPDATED0x41C6013DA3BD5875Sent when device constraints for drips state have been dynamically updated
WNF_PO_UMPO_SCENARIO_CHANGE0x41C6013DA3BD6075Triggered whenever the power session changes for UMPO to snap the current session
WNF_PO_RECONCILED_WEAK_CHARGER0x41C6013DA3BD6875Triggered whenever the battery miniclass driver or USB stack reports a weak charger
WNF_PNPA_DEVNODES_CHANGED0x96003DA3BC0875This corresponds to a DBT_DEVNODES_CHANGED message
WNF_PNPA_DEVNODES_CHANGED_SESSION0x96003DA3BC1035This corresponds to a DBT_DEVNODES_CHANGED message
WNF_PNPA_VOLUMES_CHANGED0x96003DA3BC1875This corresponds to a drive letter arrival/removal message
WNF_PNPA_VOLUMES_CHANGED_SESSION0x96003DA3BC2035This corresponds to a drive letter arrival/removal message
WNF_PNPA_HARDWAREPROFILES_CHANGED0x96003DA3BC2875This corresponds to a hardware profiles changed message
WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION0x96003DA3BC3035This corresponds to a hardware profiles changed message
WNF_PNPA_PORTS_CHANGED0x96003DA3BC3875This corresponds to a ports changes message
WNF_PNPA_PORTS_CHANGED_SESSION0x96003DA3BC4035This corresponds to a ports changes message
WNF_PNPB_AWAITING_RESPONSE0x396003DA3BC0875This corresponds to kernel PNP waiting synchronously for user-mode clients
WNF_PNPC_REBOOT_REQUIRED0x296003DA3BC0875This corresponds to a reboot of the system needs to be performed due to a device installation
WNF_PNPC_DEVICE_INSTALL_REQUESTED0x296003DA3BC1075Device installation is requested.
WNF_PNPC_CONTAINER_CONFIG_REQUESTED0x296003DA3BC1875A change that requires a device container to be updated has occured.
WNF_PROV_TURN_COMPLETE0x17891C3DA3BC0875Fired when a full set of packages are processed.
WNF_PROV_TPM_ATTEST_COMPLETE0x17891C3DA3BC1075Fired when TPM, NGC, and MSA all report ready for new tickets to contain the TPM claim. Event contains the HRESULT for the operation.
WNF_PROV_AUTOPILOT_PROFILE_AVAILABLE0x17891C3DA3BC1875Fired when an AutoPilot profile is available locally and is non-empty. Event contains the HRESULT for the operation.
WNF_PROV_AUTOPILOT_ASYNC_COMPLETE0x17891C3DA3BC2075Fired when the AutoPilot profile manager completes and is ready to unload.
WNF_PROV_DEVICE_BOOTSTRAP_COMPLETE0x17891C3DA3BC3475Fired when the Server provisioning in the blocking Device Bootstrap page of commercial OOBE is complete. Data passed in is a DWORD. 0x1, if Bootstrap is complete.
WNF_PROV_AUTOPILOT_DEVICE_NOT_MANAGED0x17891C3DA3BC3875Fired when the client OOBE is confident that the device will not be AutoPilot managed. Event contains the HRESULT for the operation.
WNF_DEVM_PROVISIONING_COMPLETE0xC900B29A3BC0875State of boot provisioning tasks. Set to 1 when provisioning is complete. SDDL comes from ID_CAP_PHONEPROVISIONER_EVENTS and PhoneProvisioner in %SDXROOT%\src\devmgmt\dm\packages\provisioning\provisioning.pkg.xml and MvProvisionHost in %SDXROOT%\src\devmgmt\dm\packages\multivariant\multivariant.pkg.xml
WNF_DEVM_DMWAPPUSHSVC_READY0xC900B29A3BC1875Multivariant is ready to deliver SMS messages to RILAdaptation (or any registered recipient)
WNF_DEVM_MULTIVARIANT_PROVISIONING_SESSIONS0xC900B29A3BC3075Multivariant provisioning session status (per slot). Everyone (WD) can subscribe, but just Local System and Admin can publish (SY, BA).
WNF_PS_WAKE_CHARGE_RESOURCE_POLICY0x41C61D3DA3BC0875This corresponds to an application that has eclipsed job wake charge resource policy
WNF_PTI_WNS_RECEIVED0x418F1A3DA3BC0875A WNS notification has been received and the Push To Install service should process it.
WNF_SRC_SYSTEM_RADIO_CHANGED0x41851C3EA3BC0875This event signals when system radio is changed
WNF_RDR_SMB1_NOT_IN_USE_STATE_CHANGE0x41940A3FA3BC0875This event signals when the client didn’t discover SMB1 usage for a specific period
WNF_RTSC_PRIVACY_SETTINGS_CHANGED0x2951A3FA3BC0875Triggered every time there is a change in Group Policy/ MDM Settings related to Recommended Troubleshooting Privacy Settings
WNF_RTSC_INVOKE_TROUBLESHOOTER0x2951A3FA3BC1075Triggered when a Windows system component needs to invoke a troubleshooter using the RTSC
WNF_RM_MEMORY_MONITOR_USAGE_METRICS0x41C6033FA3BC0875Supplies the current RM memory monitor memory usage metrics. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_RM_GAME_MODE_ACTIVE0x41C6033FA3BC1075Supplies the process ID of the current game mode recipient, or 0 if no recipient is active
WNF_RM_QUIET_MODE0x41C6033FA3BC1875Supplies the current quiet mode state as recorded by central resource manager
WNF_HAM_SYSTEM_STATE_CHANGED0x418B0F25A3BC0875Supplies the current state of the system as recorded by the system state tracker
WNF_RPCF_FWMAN_RUNNING0x7851E3FA3BC0875This event signals when the RPC firewall manager is initialized
WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED0x12821A3FA3BC0875An RPC service trigger has been added or removed
WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED0x12821A3FA3BC1875A named pipe service trigger has been added or removed
WNF_SCH_BCRYPT_RELOAD0x418E0D3EA3BC0875This event indicates that Schannel has refreshed the Signature or CipherSuite list.
WNF_SCH_REGISTRY_RELOAD0x418E0D3EA3BC1075This event indicates that schannel has retrieved the latest registry settings.
WNF_SCH_ECC_RELOAD0x418E0D3EA3BC1875This event indicates that Schannel has refreshed the Curve list.
WNF_SCM_AUTOSTART_STATE0x418B0D3EA3BC0875This event triggers to indicate SCM autostart state
WNF_SBS_UPDATE_AVAILABLE0x41950C3EA3BC0875This event signals that there is an update available to the Secure Boot variables.
WNF_WSC_SECURITY_CENTER_USER_NOTIFICATION0x41851D3AA3BC0875A notification dialog should be shown to the user.
WNF_WSC_SECURITY_CENTER_STARTUP_NOTIFICATION0x41851D3AA3BC1075A notification to inform subscribers that WSCVC is RUNNING and ready to receive provider health queries.
WNF_SDO_ORIENTATION_CHANGE0x41890A3EA3BC0875This event triggers when there is a simple device orientation change. It’s data value is one of the SimpleDeviceOrientation enum values. Rights: SensorService can publish, Everyone can subscribe.
WNF_DEP_OOBE_COMPLETE0x41960B29A3BC0C75This event triggers when the system has completed OOBE (Windows Welcome)
WNF_DEP_UNINSTALL_DISABLED0x41960B29A3BC1475This event triggers when the Uninstall of the system has been disabled
WNF_SHEL_IMMERSIVE_SHELL_RUNNING0xD83063EA3BC0875This event signals when the Immersive Shell is started
WNF_SHEL_NOTIFICATIONS0xD83063EA3BC1035Set to 0 or more to indicate whether there are any unseen notifications in the notification center. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable the notification on OneCore
WNF_SHEL_LOGON_COMPLETE0xD83063EA3BC1875This system-scope event is signaled each time a user’s desktop becomes ready. Consider using WNF_SHEL_SESSION_LOGON_COMPLETE for a session-scoped version.
WNF_SHEL_OOBE_USER_LOGON_COMPLETE0xD83063EA3BC2475This event signals when logon of the first user after OOBE is complete. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed access.
WNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSED0xD83063EA3BC2875TDL dispatcher pipe has been closed
WNF_SHEL_TILECHANGE0xD83063EA3BC3075This event is signalled when there is a tile change to a background task
WNF_SHEL_NOTIFICATION_SETTINGS_CHANGED0xD83063EA3BC3835Event signals when toast notification settings have changed.
WNF_SHEL_SOFTLANDING_RULE_TRIGGERED0xD83063EA3BC4075This event signals when a SoftLanding rule is triggered
WNF_SHEL_START_LAYOUT_READY0xD83063EA3BC4875This event signals when Start Experience Host completes loading the Start menu layout
WNF_SHEL_APPRESOLVER_SCAN0xD83063EA3BC5075Event signals a full app resolver scan has been invoked.
WNF_SHEL_LOCKSCREEN_ACTIVE0xD83063EA3BC5835Set to 0 or 1 to indicate whether the lock screen is active. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don’t have multiple sessions, otherwise anyone can read and system can write. Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
WNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHED0xD83063EA3BC6075This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_INSTALL_FINISHED event from TDL
WNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTED0xD83063EA3BC6875This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_DOWNLOAD_STARTED event from TDL
WNF_SHEL_APPLICATION_STATE_UPDATE0xD83063EA3BC7075Event is for the shell to notify when app layout state is changed. Payload is ShellApplicationStateWnf struct.
WNF_SHEL_FOCUS_CHANGE0xD83063EA3BC7875This event signals when focus changes to a different process, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
WNF_SHEL_GAMECONTROLLER_LISTENER_INFO0xD83063EA3BC8075This event signals to toggle exclusive gamepad listening on and off, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile.
WNF_SHEL_GAMECONTROLLER_FOCUS_INFO0xD83063EA3BC8875This event signals to toggle exclusive gamepad input on and off
WNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGED0xD83063EA3BC9475This even signals when Start layout MDM policy has been applied
WNF_SHEL_CORTANA_APPINDEX_UPDATED0xD83063EA3BC9875Event signals when the apps have been pushed to the indexer has completed
WNF_SHEL_SOFTLANDING_RULES_UPDATED0xD83063EA3BCA075This event signals when SoftLanding rules folder is updated
WNF_SHEL_NOTIFICATIONS_CRITICAL0xD83063EA3BCA835This event signals that a critical notification such as an incoming call was posted. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable notification on OneCore
WNF_SHEL_START_VISIBILITY_CHANGED0xD83063EA3BCB035This event signals when Start visibility changes
WNF_SHEL_TRAY_SEARCHBOX_VISIBILITY_CHANGED0xD83063EA3BCB875Set to 0 or 1 to indicate whether the searchbox is visibile in the tray. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don’t have multiple sessions, otherwise anyone can read and only system can write.
WNF_SHEL_DEVICE_UNLOCKED0xD83063EA3BCC075This event signals that the device is unlocked in the current session
WNF_SHEL_PLACES_CHANGED0xD83063EA3BCC875This event signals the changes in places’ database (clientgraph)
WNF_SHEL_SUSPEND_APP_BACKGROUND_ACTIVITY0xD83063EA3BCD075Event is for the shell to notify when app background activity should be suspended. Payload is DWORD set to 1 or 0.
WNF_SHEL_CREATIVE_EVENT_TRIGGERED0xD83063EA3BCD875This event signals a creative event has been triggered
WNF_SHEL_JUMPLIST_CHANGED0xD83063EA3BCE075Event signals that the jumplist for an app has changed. Payload is a struct containing the current sessionId as well as a string representing the aumid of the app whose jumplist was updated.
WNF_SHEL_START_APPLIFECYCLE_UNINSTALL_FINISHED0xD83063EA3BCE875This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_UNINSTALL_FINISHED event from TDL
WNF_SHEL_GAMECONTROLLER_NEXUS_INFO0xD83063EA3BCF075This event signals whenever the nexus button policy changes.
WNF_SHEL_SETTINGS_CHANGED0xD83063EA3BCF875This event signals when a settings toggle has changed
WNF_SHEL_TOAST_PUBLISHED0xD83063EA3BD0035This event signals when a new toast is published
WNF_SHEL_SOFTLANDING_PUBLISHED0xD83063EA3BD0835This event signals when a new soft landing tip is published
WNF_SHEL_REQUEST_CORTANA_SETTINGSCONSTRAINTINDEX_BUILD0xD83063EA3BD1075Event signals when an app requests cortana to build the settings constraint index
WNF_SHEL_DICTATION_RUNNING0xD83063EA3BD1835This is the state of dictation. SDDL comes from dwm.exe in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml and WPNarrator in %SDXROOT%\src\media\apps\packages\Apps\WPNarrator.pkg.xml. And Phone DefApps group is required too.
WNF_SHEL_DDC_COMMAND_AVAILABLE0xD83063EA3BD2075This event signals when a parsed command is ready for processing
WNF_SHEL_DDC_WNS_COMMAND0xD83063EA3BD2875This event signals when a command has been delivered via WNS
WNF_SHEL_DDC_SMS_COMMAND0xD83063EA3BD3075This event signals when a command has been delivered via SMS
WNF_SHEL_DEVICE_LOCKED0xD83063EA3BD3875This event signals that the device is locked in the current session
WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_ACTIVATED0xD83063EA3BD4075This event signals a subscription has been activated.
WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_UPDATED0xD83063EA3BD4875This event signals the content of one or more subscriptions has been updated.
WNF_SHEL_LOCKSCREEN_IMAGE_CHANGED0xD83063EA3BD5075This event signals that lock screen image had changed. It contains the user sid whose image was changed
WNF_SHEL_SCREEN_COVERED0xD83063EA3BD5875Set to 0 (uncovered or unknown) or 1 (covered).
WNF_SHEL_DDC_CONNECTED_ACCOUNTS_CHANGED0xD83063EA3BD6075This event signals when connected accounts have changed and register device should be called
WNF_SHEL_OOBE_ENABLE_PROVISIONING0xD83063EA3BD6835This event signals when OOBE in a Shell should enable its provisioning flow
WNF_SHEL_LOCK_APP_SHOWN0xD83063EA3BD7035This event signals that the Lock application has been presented to the user. It contains an instance cookie as specified from LogonUI.
WNF_SHEL_LOCK_APP_REQUESTING_UNLOCK0xD83063EA3BD7835This event signals that the Lock application is requesting to unlock so the user can enter credentials.
WNF_SHEL_TILEINSTALL0xD83063EA3BD8075This event is signalled when there is a tile install to a background task
WNF_SHEL_TILEUPDATE0xD83063EA3BD8875This event is signalled when there is a tile update to a background task
WNF_SHEL_TILEUNINSTALL0xD83063EA3BD9075This event is signalled when there is a tile uninstall to a background task
WNF_SHEL_ABOVE_LOCK_APP_ACTIVE0xD83063EA3BD9835This event is signalled when there is an app launched (1) or terminated (0) above lock. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed full access, while all other app containers have read access.
WNF_SHEL_RADIALCONTROLLER_EXPERIENCE_RESTART0xD83063EA3BDA035This event is signalled when the RadialController Experience has restarted to allow registered API component to re-establish connection and repopulate state
WNF_SHEL_ABOVE_LOCK_BIO_ACTIVE0xD83063EA3BDA835This event is signalled when there is bio feedback active (1) or inactive (0) above lock
WNF_SHEL_CORTANA_SPEECH_CANCELHANDSFREE_REQUESTED0xD83063EA3BDB035This event can be signalled when a handsfree device needs to request Cortana to cancel speech activity.
WNF_SHEL_CALM_DISPLAY_ACTIVE0xD83063EA3BDB875Set to 0 (inactive) or 1 (active).
WNF_SHEL_INSTALL_PLACEHOLDER_TILES0xD83063EA3BDC075This event signals a start layout change to a background task so that assets can be retrieved if necessary. Payload is PlaceholderTileWnf.
WNF_SHEL_PEOPLE_PINNED_LIST_CHANGED0xD83063EA3BDC835This event is signalled when there is a change to the Pinned People list
WNF_SHEL_LOCKSTATE0xD83063EA3BDD075Current lock state of the device. Payload is DEVICE_LOCKSTATE. On multisession SKUs, everyone can read while only SYSTEM can write. On single session SKUs, everyone can read while only DefaultAccount can write. On single session SKUs, also include allow list from the SDDL for DEVICE_LOCK_STATE. Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
WNF_SHEL_APPLICATION_SPATIAL_INFO_UPDATE0xD83063EA3BDD875Event is for the shell to notify when app spatial information has changed. Payload is ApplicationSpatialInformationWnf struct.
WNF_SHEL_CORTANA_AUDIO_ACTIVE0xD83063EA3BDE075Indicates the state of Cortana speech input and output.
WNF_SHEL_LOCKSCREEN_INFO_UPDATED0xD83063EA3BDE835This event signals that the LockScreen info is updated.
WNF_SHEL_CDM_FEATURE_CONFIG_FIRST_USAGE0xD83063EA3BDF875This event notifies the CDM when a new feature configuration is first used. The SDDL is scoped to AuthenticatedUsers, AppContainers and LPACs (CAPABILITY_SID_LpacAppExperience),MpsSvc
WNF_SHEL_APPLICATION_STARTED0xD83063EA3BE0075This event is signals when an application launches. The Payload is the appID.
WNF_SHEL_APPLICATION_TERMINATED0xD83063EA3BE0875This event is signals when an application is terminated. The Payload is the appID.
WNF_SHEL_WINDOWSTIP_CONTENT_PUBLISHED0xD83063EA3BE10F5This event is signals when a request is made to show a Windows Tip bubble. The Payload is the content id(String).
WNF_SHEL_USER_IDLE0xD83063EA3BE1875This event signals when the first time a user is idle after logon. The payload is the time the user has been idled for
WNF_SHEL_PEOPLE_PANE_VIEW_CHANGED0xD83063EA3BE2035This event is signalled when there is a change to the People Pane Views
WNF_SHEL_LOCK_APP_RELOCK0xD83063EA3BE2835This event signals that the lock screen should be reset due to a re-lock request.
WNF_SHEL_LOCK_APP_READY0xD83063EA3BE3035This event signals that the lock screen is ready after a reset was requested.
WNF_SHEL_SESSION_LOGON_COMPLETE0xD83063EA3BE3835This event is scoped to the user session and signaled when the desktop is ready after a logon
WNF_SHEL_HEALTH_STATE_CHANGED0xD83063EA3BE4075This event signals when the health state of the device changes
WNF_SHEL_CONTENT_DELIVERY_MANAGER_NEEDS_REMEDIATION0xD83063EA3BE4875This event signals that Content Delivery Manager content needs remediation
WNF_SHEL_DESKTOP_APPLICATION_STARTED0xD83063EA3BE5075This event is signals when a desktop application launches. The Payload is the executable name.
WNF_SHEL_DESKTOP_APPLICATION_TERMINATED0xD83063EA3BE5875This event is signals when a desktop application is terminated. The Payload is the executable name.
WNF_SHEL_SUGGESTED_APP_READY0xD83063EA3BE60F5This event signals that the app launched by sign in suggestions is ready.
WNF_SHEL_CDM_REGISTRATION_COMPLETE0xD83063EA3BE6835This event is scoped to the user session and signaled when the CDM registration is complete
WNF_SHEL_CONTENT_DELIVERY_MANAGER_MONITORING0xD83063EA3BE70F5This event signals that Content Delivery Manager Cache Monitoring is Enabled or not.
WNF_SHEL_SIGNAL_LOGONUI0xD83063EA3BE7835Used to signal logon controller across the desktop boundary. Only local system or the composer can read and write. Currently payload is present but ignored.
WNF_SHEL_ENTERPRISE_HIDE_PEOPLE_BAR_POLICY_VALUE_CHANGED0xD83063EA3BE8075This event signals when the HidePeopleBar MDM policy has been updated
WNF_SHEL_CDM_FEATURE_USAGE0xD83063EA3BE9075This event notifies the CDM when a feature configuration is used
WNF_SHEL_OOBE_PROVISIONING_COMPLETE0xD83063EA3BE9C75This event signals when OOBE in a Shell has completed its provisioning flow. It is permanent since provisioning is only supported during first user OOBE.
WNF_SHEL_SIGNAL_MANAGER_SIGNAL_TRIGGERED0xD83063EA3BEA075This event signals when the signal manager fires a signal
WNF_SHEL_CLOUD_FILE_INDEXED_CHANGE0xD83063EA3BEA875Notification is incremented / signaled when a cloudfile state change is detected by the indexer service. Payload is count of changes. User can subscribe, but only service (indexer) can publish
WNF_SHEL_CLOUD_FILE_PROGRESS_CHANGE0xD83063EA3BEB075Notification when a sync client or shell session updates in-memory progress within the indexer service. Payload is the tick count when the last change occurred. User can subscribe, but only service (indexer) can publish
WNF_SHEL_START_LAYOUT_MIGRATED0xD83063EA3BEB8F5This event signals when Start Experience Host completes a layout migration
WNF_SHEL_ENTERPRISE_START_PLACES_POLICY_VALUE_CHANGED0xD83063EA3BEC075This event signals when a Start place MDM policy (AllowPinnedFolder*) has been applied
WNF_SHEL_SIGNAL_MANAGER_FEATURE_TRIGGERED0xD83063EA3BEC875This event is used by the Signal Manager for WIL Feature Usage subscriptions required by registered signal triggers.
WNF_SHEL_ACTIONCENTER_VIEWSTATE_CHANGED0xD83063EA3BED035This event signals the current view state of action center.
WNF_SHEL_CACHED_CLOUD_NETWORK_STATE0xD83063EA3BED875State of the network as reflected by shell32 listeners. Subscribed to, and published from, explorer.exe, a user process.
WNF_SHEL_SIGNAL_MANAGER_TESTING0xD83063EA3BEE075This wnf is used for testing purposes.
WNF_SHEL_APPLIFECYCLE_INSTALL_STATE0xD83063EA3BEE875This event signals for different app install state from the Store. The Payload is the aumId and app state.
WNF_SHEL_RESTORE_PAYLOAD_COMPLETE0xD83063EA3BEF075CDS restore payload data is downloaded during OOBE
WNF_SHEL_LATEST_CONNECTED_AUTOPLAY_DEVICE0xD83063EA3BEF875This wnf is signaled everytime the user connects an autoplay device. The payload is the device id (VID and PID).
WNF_SHEL_CORTANA_QUIET_MOMENT_AT_HOME0xD83063EA3BF0475This wnf is signaled when Cortana’s QuietMoment @Home inferred that the user has arrived of left home .
WNF_SHEL_CORTANA_BEACON_STATE_CHANGED0xD83063EA3BF1075This wnf is signaled everytime the Action Center/Cortana beacon state changes. Payload is an int mapping to an enum representing the new state.
WNF_SHEL_QUIETHOURS_ACTIVE_PROFILE_CHANGED0xD83063EA3BF1C75This wnf is signaled whenever active quiet hours profile/mode changes. The value is the restrictive level of an active profile and the restrictive level is unique per profile
WNF_SHEL_LOCK_ON_LOGON0xD83063EA3BF2035This wnf is signaled when WinLogon detects an automatic lock on logon sequence to optimize displaying the user lock screen when the shell is ready.
WNF_SHEL_DEVICE_OPEN0xD83063EA3BF2875This wnf indicates for some types of devices if a lid, cover or enclosure around it is closed (zero value) or open (non-zero value).
WNF_SHEL_CREATIVE_EVENT_BATTERY_SAVER_OVERRIDE_TRIGGERED0xD83063EA3BF3075This event signals a creative event has been triggered that will allow to run during battery saver
WNF_SHEL_START_PROCESS_SUSPENDED_INTERNAL0xD83063EA3BF3835This event allows user-mode services such as Windows Notification Platform to determine when Start is suspended
WNF_SHEL_SYSTEMDIALOG_PUBLISHED0xD83063EA3BF4035This event signals when a new System Dialog toast is published
WNF_SHEL_SETTINGS_ENVIRONMENT_CHANGED0xD83063EA3BF4875This wnf indicates that a variable in the settings environment has changed. The payload is the current sessionId.
WNF_SHEL_QUIET_MOMENT_SHELL_MODE_CHANGED0xD83063EA3BF5075This event signals when Quiet Hours mode has changed state in shell
WNF_SHEL_NEXT_NOTIFICATION_SINK_SESSION_ID0xD83063EA3BF5875A system-wide unique rolling id for notification controller sink sessions
WNF_SHEL_TAB_SHELL_INIT_COMPLETE0xD83063EA3BF6035Event signals Tab Shell component initialization is complete, potentially after an explorer crash. Payload is an incrementing DWORD that can be used to poll if the current objects are new.
WNF_SHEL_LOCKAPPHOST_ACTIVE0xD83063EA3BF6835Set to 0 or 1 to indicate whether lockapphost is currently active. Anyone (including apps) can read, system has write access (but on multi-session skus authenticated users also have write access). Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write.
WNF_SHEL_CORTANA_CAPABILTIES_CHANGED0xD83063EA3BF7035This wnf indicates that a cortana capabilties have changed. The payload will be the changed capabilties. The below sids are the CShell compser, cortana app, and cortana test app sids
WNF_SHEL_TASKBAR_PINS_UPDATED0xD83063EA3BF7875This event indicates taskbar pins were updated. The SDDL is scoped to AuthenticatedUsers.
WNF_SHEL_WCOS_SESSION_ID0xD83063EA3BF8075This system-scope event is signaled each time the shell attempts to start a local session on WCOS-based SKUs. It carries the latest session ID. Everyone can read from it. Authenticated users can write to it. Apps in general can read from it. Apps with WINCAP_SHELL_EXPERIENCE_COMPOSER can write to it.
WNF_SHEL_ASSISTANT_STATE_CHANGE0xD83063EA3BF8875This wnf indicates that the assistant state has changed, e.g Talking, idle, thinking, notification pending etc
WNF_SHEL_TOAST_PUBLISHED_SYSTEMSCOPE0xD83063EA3BF9075This event is similar to TOAST_PUBLISHED but at a system rather than session scope
WNF_SHEL_ACTIONCENTER_READY0xD83063EA3BF9835This event signals that a process hosting Action Center has started, such as Shell Experience Host.
WNF_SHEL_SIGNALMANAGER_SIGNAL_REGISTRATION_UPDATED0xD83063EA3BFA075This event is fired each time that a signal is registered or unregistered through the SignalRegistration runtime class.
WNF_SHEL_PASTE_SUGGESTION_MESSAGE0xD83063EA3BFA835This event signals the suggested content to paste. More details are at https://garagehackbox.azurewebsites.net/hackathons/1235/projects/76296 site.
WNF_SHEL_WINDOW_ACTIVATED0xD83063EA3BFB035This event signals that a foreground app changed.
WNF_SHEL_BACKGROUND_IMAGE_CHANGED0xD83063EA3BFB875This event signals that a background image has changed. It contains the user sid whose image was changed.
WNF_SHEL_SHOW_SCOOBE_TOAST0xD83063EA3BFC0F5This event is used to signal an appropriate time to show a SCOOBE toast for a specific scenario.
WNF_SHEL_BACKGROUND_SLIDESHOW_CHANGED0xD83063EA3BFC875This event signals that a background slideshow folder has changed. It contains the user sid whose slideshow was changed.
WNF_SHEL_ACCESSIBILITY_EVENT0xD83063EA3BFD075When received shell must show confirmation dialog in a way similar to desktop when accessibility feature hot key was detected (like press Shift 5 times). This dialog must ask whether a user wants to enable this accessibility feature, yes or no. Provided argument rcan be one of the following values: ACCESS_FILTERKEYS, ACCESS_STICKYKEYS, ACCESS_MOUSEKEYS, ACCESS_HIGHCONTRAST, ACCESS_TOGGLEKEYS
WNF_SHEL_PLAY_RIT_SOUND0xD83063EA3BFD875When this event is received shell must play a specific sound. This event provides sound id and a number of times the sound must be played. These two pieces of information are encoded in a single byte. Sound id stored in low 4 bits and the number of times the sound should be played stored in high 4 bits. Look at comments left for WNF_ACCESSIBILITY_NOTIFICATION structure. Sound id can be one of the following values: RITSOUND_UPSIREN, RITSOUND_DOWNSIREN, RITSOUND_LOWBEEP, RITSOUND_HIGHBEEP, RITSOUND_KEYCLICK, RITSOUND_DOBEEP. The max number of times the sound should be played is 5.
WNF_SHEL_VAIL_RDP_LOGIN_COMPLETE0xD83063EA3BFE075Indicates RDP login for VAIL container is complete.. The data type is a GUID which represents the container ID. This is meant to be used for single container environment only, since container ID can be overwritten in multi-container environment.
WNF_SHEL_LOCK_SCREEN_TRACE_COLLECTION0xD83063EA3BFE835This event signals that the trace collection is triggered above lock screen
WNF_SHEL_UPDATE_PACKAGE_TELEMETRY0xD83063EA3BFF075This event signals that a new package has been registered and the telemetry data should be updated to reflect the new package version.
WNF_SHEL_LAUNCH_SYSTEM_DESKTOP_BACKGROUND_ADJUSTMENT0xD83063EA3BFF875This event signals the composer to launch the background adjustment mode.
WNF_SHEL_PACKAGE_SERVICING_STATUS0xD83063EA3B800F5This event comes in pairs and signals the start and end of Shell package updating, which is done behind lock screen or at logon time. The parameter is a boolean indicating Shell package updating is started (true) or finished (false). Because package registration is per user, this notification is per user scope.
WNF_SHEL_NEW_BROWSER_UNINSTALLED0xD83063EA3B808F5Signals that the new system browser was uninstalled and data (start tiles, etc.) should be repaired and point to the old one
WNF_SHEL_SYSTEM_USES_LIGHT_MODE_CHANGED0xD83063EA3B81075This event signals when the system light mode value is changed.
WNF_SHEL_GAMECONTROLLER_SHARE_INFO0xD83063EA3B81875This event signals whenever the share button policy changes.
WNF_SHEL_PPI_WIN32VTCAPP_PROCESS_STARTED0xD83063EA3B82035This event signals the Win32 Vtc app has started, sending the process ID for lifetime handling purposes. (Surface Hub Only)
WNF_SIO_PIN_ENROLLED0x4189073EA3BC0875Used to notify the PIN list that a PIN has been enrolled and that it should refresh.
WNF_SIO_BIO_ENROLLED0x4189073EA3BC1075Used to notify the Delay Lock settings that Biometric enrollment has been modified.
WNF_SKYD_FILE_SYNC0x59F053EA3BC0875A file has changed on storage and a request is received to sync.
WNF_SKYD_QUOTA_CHANGE0x59F053EA3BC1075A user’s quota has changed.
WNF_SMS_CHECK_ACCESS0x4195033EA3BC0875This event triggers when the user revokes SMS access.
WNF_SMSS_MEMORY_COOLING_COMPATIBLE0x1295033EA3BC0875This event triggers when the system has multiple memory channels and memory cooling can be started
WNF_SPAC_SPACEPORT_PROPERTY_CHANGED0x2871E3EA3BC0875This notification is issued when a property of an object changes
WNF_SPAC_SPACEPORT_WORK_REQUESTED0x2871E3EA3BC1075This notification is issued to request work in user-mode
WNF_SPCH_INPUT_STATE_UPDATE0x9851E3EA3BC0835Indicates the state of the shared recognizer.
WNF_SPCH_REMOTE_SESSION_REQUEST0x9851E3EA3BC1075Indicates the data pertaining to a remote request to start/stop a speech recognition session. Published by BTAGService and HidSrv. Publish/subscribe granted to btagservice and aarsvc services.
WNF_SPCH_DISABLE_KWS_REQUEST0x9851E3EA3BC1875Indicates the KWS request from a remote device. Certain peripherals that support in-built KWS may request the system to disable the KWS runnning on Windows. Published by BTAGService. Publish/subscribe granted to btagservice and aarsvc services.
WNF_SPCH_ALLOW_REMOTE_SPEECH_SERVICES0x9851E3EA3BC2075This event is fired when system administrator change GP and MDM policy which governs capability to connect to speech service.
WNF_SRUM_SCREENONSTUDY_SESSION0xC931C3EA3BC0875Sent when a screen on study session starts or ends
WNF_SRV_SRV2_STATE_CHANGE0x41901C3EA3BC0875This event signals when the server (SRV2) start/stop
WNF_SRV_SMB1_NOT_IN_USE_STATE_CHANGE0x41901C3EA3BC1075This event signals when the server didn’t discover SMB1 usage for a specific period
WNF_OSWN_STORAGE_PRESENCE_CHANGE0xF911D22A3BC6075This event indicates a change in the mount state of an SD card.
WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGE0xF911D22A3BC6875This event indicates a change in the volume status of an SD card.
WNF_OSWN_STORAGE_FREE_SPACE_CHANGE0xF911D22A3BC7075This event indicates a change in the free space state of storage.
WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGE0xF911D22A3BC7875This event indicates a change in the temp file cleanup state of storage.
WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATE0xF911D22A3BCB875This event indicates completion of an update of storage usage categories.
WNF_OSWN_SYSTEM_CLOCK_CHANGED0xF911D22A3BC5875This event informs the system tray that the date-time has changed
WNF_OSWN_STORAGE_SHELLHWD_EVENT0xF911D22A3BCC075This event informs StorSvc that SHSVCS received a device handle event.
WNF_OSWN_STORAGE_APP_PAIRING_CHANGE0xF911D22A3BC8075This event indicates a change in the app pairing state of an SD card.
WNF_SUPP_ENABLE_ERROR_DETAILS_CACHE0x11961B3EA3BC0875Enable the Error Details Cache
WNF_SYS_SHUTDOWN_IN_PROGRESS0x4195173EA3BC0875The state is published when the system has begun the shutdown or reboot process.
WNF_SEB_INTERNET_PRESENT0x41840B3EA3BC0875Internet available or not
WNF_SEB_FREE_NETWORK_PRESENT0x41840B3EA3BC1075Free network available or not
WNF_SEB_SMS_RECEIVED0x41840B3EA3BC1875SMS has been received
WNF_SEB_NETWORK_STATE_CHANGES0x41840B3EA3BC2075Network state has changed
WNF_SEB_MBAE_NOTIFICATION_RECEIVED0x41840B3EA3BC2875Radio Operator Message received
WNF_SEB_NETWORK_CONTROL_CHANNEL_TRIGGER_RESET0x41840B3EA3BC3075Network control channel triggers have been reset
WNF_SEB_TIME_ZONE_CHANGE0x41840B3EA3BC3875Time zone change
WNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGE0x41840B3EA3BC4075Online ID connected state changed. SDDL comes from ID_CAP_EVERYONE in %SDXROOT%\src\baseos\prod\packages\WLId\WLId.pkg.xml
WNF_SEB_SYSTEM_IDLE0x41840B3EA3BC4875system is idle or not
WNF_SEB_BATTERY_LEVEL0x41840B3EA3BC5075System is idle or not
WNF_SEB_DOMAIN_JOINED0x41840B3EA3BC5875System is domain joined or not
WNF_SEB_BOOT0x41840B3EA3BC6075System has booted
WNF_SEB_USER_PRESENT0x41840B3EA3BC6875System has at least 1 user present
WNF_SEB_SYSTEM_AC0x41840B3EA3BC7075System is AC or DC
WNF_SEB_MONITOR_ON0x41840B3EA3BC7875Monitor is ON or OFF
WNF_SEB_IP_ADDRESS_AVAILABLE0x41840B3EA3BC8075IP address is available or not
WNF_SEB_BACKGROUND_WORK_COST_CHANGE0x41840B3EA3BC8875Indicate a change in the background work cost
WNF_SEB_BACKGROUND_WORK_COST_HIGH0x41840B3EA3BC9075Background work cost is high or not
WNF_SEB_SYSTEM_LPE0x41840B3EA3BC9875System is in Low Power Epoch or not
WNF_SEB_SMART_CARD_TRANSACTION_NOTIFICATION0x41840B3EA3BCA075Smart card transaction notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
WNF_SEB_SYSTEM_MAINTENANCE0x41840B3EA3BCA875System is in good state for maintenance
WNF_SEB_GEOLOCATION0x41840B3EA3BCB075Geolocation service should be started
WNF_SEB_DEV_MNF_CUSTOM_NOTIFICATION_RECEIVED0x41840B3EA3BCB875OEM custom notification received
WNF_SEB_MOB_OPERATOR_CUSTOM_NOTIFICATION_RECEIVED0x41840B3EA3BCC075MO custom notification received
WNF_SEB_CACHED_FILE_UPDATED0x41840B3EA3BCC875Cached file has updated
WNF_SEB_SMART_CARD_FIELD_INFO_NOTIFICATION0x41840B3EA3BCD075Smart card field entry/exit notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
WNF_SEB_SMART_CARD_HCE_APPLICATION_ACTIVATION_NOTIFICATION0x41840B3EA3BCD875Smart card HCE application activation notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml
WNF_SEB_DEPRECATED70x41840B3EA3BCE075Unused notification
WNF_SEB_DEPRECATED80x41840B3EA3BCE875Unused notification
WNF_SEB_LOW_LATENCY_POWER_REQUEST0x41840B3EA3BCF075Low-latency power request notification
WNF_SEB_RESILIENCY_NOTIFICATION_PHASE0x41840B3EA3BCF875Resiliency phase notification
WNF_SEB_FULL_SCREEN_VIDEO_PLAYBACK0x41840B3EA3BD0075Fullscreen video playback notification
WNF_SEB_NFC_PERF_BOOST0x41840B3EA3BD0875Indicates high-performance boost mode for critical NFC background activity
WNF_SEB_APP_LAUNCH_PREFETCH0x41840B3EA3BD1075Indicates app launch pre-fetch phase
WNF_SEB_DEPRECATED10x41840B3EA3BD1875Unused notification
WNF_SEB_APP_RESUME0x41840B3EA3BD2075Indicates app resume phase
WNF_SEB_DEPRECATED20x41840B3EA3BD2875Unused notification
WNF_SEB_DEPRECATED30x41840B3EA3BD3075Unused notification
WNF_SEB_DEPRECATED40x41840B3EA3BD3875Unused notification
WNF_SEB_DEPRECATED50x41840B3EA3BD4075Unused notification
WNF_SEB_DEPRECATED60x41840B3EA3BD4875Unused notification
WNF_SEB_CALL_STATE_CHANGED0x41840B3EA3BD5075Call state change notification
WNF_SEB_VOICEMAIL_CHANGED0x41840B3EA3BD5875Voicemail change notification
WNF_SEB_CALL_HISTORY_CHANGED0x41840B3EA3BD6075Call history change notification
WNF_SEB_LINE_CHANGED0x41840B3EA3BD6875Phone line change notification
WNF_SEB_AIRPLANE_MODE_DISABLED_FOR_EMERGENCY_CALL0x41840B3EA3BD7075Airplane mode disabled for emergency call notification
WNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGE0x41840B3EA3BD7875Registration state has changed
WNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGE0x41840B3EA3BD8075Radio state has changed
WNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGE0x41840B3EA3BD8875Pin lock state has changed
WNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATION0x41840B3EA3BD9075Device service command has been received
WNF_SEB_DEFAULT_SIGN_IN_ACCOUNT_CHANGE0x41840B3EA3BD9875Default Sign In account has changed
WNF_SEB_NETWORK_CONNECTIVITY_IN_STANDBY0x41840B3EA3BDA075Network connectivity in Standby
WNF_SEB_USER_PRESENCE_CHANGED0x41840B3EA3BDA875User presence changed
WNF_SEB_AUDIO_ACTIVITY0x41840B3EA3BDB075Audio activity in progress
WNF_SEB_FULL_SCREEN_HDR_VIDEO_PLAYBACK0x41840B3EA3BDB875Fullscreen HDR video playback notification
WNF_SEB_UWP_APP_LAUNCH0x41840B3EA3BDC075Indicates UWP app launch phase
WNF_SEB_MOBILE_BROADBAND_PCO_VALUE_CHANGE0x41840B3EA3BDC875Pco data has been received
WNF_SEB_MIXED_REALITY0x41840B3EA3BDD075Mixed reality notification
WNF_SEB_GAME_MODE0x41840B3EA3BDD875Game mode scenario
WNF_SEB_MOBILE_HOTSPOT0x41840B3EA3BDE075System WiFi/Bluetooth hotspot state
WNF_SPI_LOGICALDPIOVERRIDE0x418F1E3EA3BC0835Signals a change caused by SystemParametersInfo(SPI_SETLOGICALDPIOVERRIDE). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_SPI_PRIMARY_MONITOR_DPI_CHANGED0x418F1E3EA3BC1035This is triggered when the Primary monitor’s DPI is different than the session’s DPI.
WNF_TMCN_ISTABLETMODE0xF850339A3BC0835The computer has changed density mode. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TEAM_SHELL_HOTKEY_PRESSED0xC870B39A3BC0875Indicates a hotkey was pressed
WNF_TEAM_DEVICE_ACCOUNT_FLOW_COMPLETED0xC870B39A3BC1075Indicates that device account setup has completed
WNF_TEAM_DEVICE_ACCOUNT_CREATED0xC870B39A3BC1875Indicates that device account has been created
WNF_TEAM_OOBE_HEALTH_CHANNEL_A0xC870B39A3BC2075Data for OOBE health metrics
WNF_TEL_STORAGE_CAPACITY0x418A0B39A3BE0875This is fired every time an SENSE’s storage fullness crosses into a new tier or is reset. struct { DWORD PercentageFull[4]; }
WNF_TEL_DAILY_UPLOAD_QUOTA0x418A0B39A3BE1075This is fired every time an SENSE’s daily upload quota crosses into a new tier or is reset. struct { DWORD PercentageFull; }
WNF_TEL_ONESETTINGS_UPDATED0x418A0B39A3BE1875This is fired every time a onesettings namespace is updated. {UINT64 SettingsCount; struct {UINT64 NamespaceHash; UINT64 TimeLastChanged;}[16]}
WNF_TEL_SETTINGS_PUSH_NOTIFICATION_RECEIVED0x418A0B39A3BE2075This is fired every time a push notification is received from the OneSettings service. UTF8 string.
WNF_TEL_TIMER_RECONFIGURED0x418A0B39A3BE2875This is fired every time a UTC service timer changes its configuration values so subscribers can call GetTimerConfiguration to check any new values.
WNF_PHN_CALL_STATUS0x4188063DA3BC2875Bitmask containing the current relevant call states. Any 3rd party app is allowed to listen to this. See PhoneWnf.h for valid values. SID referenced below is that of the Phone service.
WNF_PHN_CALLFORWARDING_STATUS_LINE00x4188063DA3BC3075Bitmask containing the call forwarding state for phone line 0. See PhoneWnf.h for valid values. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml
WNF_PHNP_SERVICE_INITIALIZED0x1188063DA3BC3875BOOL indicating whether the Phone service has been initialized. SDDL comes from phoneCall and voipCall, PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml
WNF_PHNP_SIMSEC_READY0x1188063DA3BC4075BOOL indicating whether SimSec is ready to receive requests. SDDL comes from ID_CAP_PHONE_2ND_PARTY, ID_CAP_PHONE_INTERNAL and dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml
WNF_PHNP_ANNOTATION_ENDPOINT0x1188063DA3BC4875Wide string indicating the call annotation provider’s RPC endpoint name. SDDL comes from ID_CAP_CALLMESSAGING_FILTER and PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml
WNF_PHNL_LINE1_READY0xD88063DA3BC4075BOOL indicating whether the line is ready. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml
WNF_TR_UPDATED_ENDPOINTS0x41C61C39A3BC0875Alert consumers that there are new Tenant Restriction endpoints
WNF_TETH_TETHERING_STATE0x9920B39A3BC0875State name for the Tethering service notification of all state changes
WNF_TETH_AUTOSTART_BLUETOOTH0x9920B39A3BC1075State name for starting Tethering service over Bluetooth
WNF_IME_INPUT_MODE_LABEL0x41830324A3BC0875Input Mode Indicator label IME want to show on systray. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_IME_EXPLICIT_PRIVATE_MODE0x41830324A3BC1035Explicit IME private mode status. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622
WNF_IME_AUTOMATIC_PRIVATE_MODE0x41830324A3BC1835Automatic IME private mode status.
WNF_IME_INPUT_SWITCH_NOTIFY0x41830324A3BC2035short cut(ctrl + shift or alt + shift) pressed.
WNF_THME_THEME_CHANGED0x48B0639A3BC0875Notifies when the theme of the system changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TZ_LEGACY_STORE_CHANGED0x41C61439A3BC0875Time Zone Legacy store is updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TZ_STORE_CHANGED0x41C61439A3BC1075Time Zone store is updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TZ_TIMEZONE_CHANGED0x41C61439A3BC1875This state is notified when the timezone is changed via SetTimeZoneInformationByID – The data value is a UINT that indicates the new TZID. SDDL comes from ID_CAP_BUILTIN_SETTIME, ID_CAP_EVERYONE and tzautoupdate in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml
WNF_TZ_LAST_TIME_SYNC_INFO0x41C61439A3BC2075This event has information about last time sync. SDDL comes from autotimesvc’s account.
WNF_TZ_NETWORK_TIME_SYNC_TRIGGER0x41C61439A3BC2875This event is used to trigger Network Sync. SDDL comes from autotimesvc’s account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml
WNF_TZ_AUTOTIMEUPDATE_STATE_CHANGED0x41C61439A3BC3075This state is notified when autotimeupdate state changed. The data value is a DWORD that indicates if autotimeupdate is enabled (1) or disabled (0). SDDL comes from autotimesvc’s account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml
WNF_TOPE_INP_POINTER_DEVICE_ACTIVITY0x4960139A3BC0875Touch Event
WNF_TKBN_KEYBOARD_VISIBILITY0xF840539A3BC0835The touch keyboard’s appearance on the screen has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITY0xF840539A3BC1035The restricted mode touch keyboard’s appearance on the screen has changed.
WNF_TKBN_IMMERSIVE_FOCUS_TRACKING0xF840539A3BC1835An immersive application has encountered a focus change. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_TOUCH_EVENT0xF840539A3BC2035An application encountered a touch down/up event. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_RESTRICTED_TOUCH_EVENT0xF840539A3BC2835An application encountered a touch down/up event
WNF_TKBN_LANGUAGE0xF840539A3BC3035The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_FOREGROUND_WINDOW0xF840539A3BC3835The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_CARET_TRACKING0xF840539A3BC4035Caret tracking has updated on the desktop. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_AUTOCOMPLETE0xF840539A3BC4835The autocomplete window has been updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_MODERN_KEYBOARD_FOCUS_TRACKING0xF840539A3BC5035Determines whether focus is in an editable field for the purposes of the modern keyboard. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_KEYBOARD_VIEW_CHANGE0xF840539A3BC5835The view being shown by the touch keyboard has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_RESTRICTED_KEYBOARD_VIEW_CHANGE0xF840539A3BC6035The view being shown by the restricted mode touch keyboard has changed.
WNF_TKBN_KEYBOARD_GESTURE0xF840539A3BC6835The keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_RESTRICTED_KEYBOARD_GESTURE0xF840539A3BC7035The restricted keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact.
WNF_TKBN_CANDIDATE_WINDOW_STATE0xF840539A3BC7835The candidate window state has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_KEYBOARD_LAYOUT_CHANGE0xF840539A3BC8035The layout being shown by the touch keyboard has changed.
WNF_TKBN_RESTRICTED_KEYBOARD_LAYOUT_CHANGE0xF840539A3BC8835The layout being shown by the restricted mode touch keyboard has changed.
WNF_TKBN_COMPOSITION_STATE0xF840539A3BC9035The composition state has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_SYSTEM_IMMERSIVE_FOCUS_TRACKING0xF840539A3BC9835A System Mode Application(Logon/OOBE) has encountered a focus change
WNF_TKBN_SYSTEM_TOUCH_EVENT0xF840539A3BCA035A System Mode application(Logon/OOBE) encountered a touch down/up event
WNF_TKBN_INPUT_PANE_DISPLAY_POLICY0xF840539A3BCA835The edit control in focus has changed the input pane display policy (manual/automatic). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_DESKTOP_MODE_AUTO_IHM0xF840539A3BCB035The system is in desktop mode but the user prefers tablet-mode IHM behavior. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_KEYBOARD_SET_VISIBLE0xF840539A3BCB835The touch keyboard should show or hide. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBN_KEYBOARD_SET_VISIBLE_NOTIFICATION0xF840539A3BCC035Update the show/hide status of touch keyboard that is being tracked in tabtip. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_TKBR_CHANGE_SYSTEM0x13840539A3BC08F5This state name is used to notify system components about state changes in the Token Broker
WNF_TKBR_CHANGE_APP0x13840539A3BC1075This state name is used to notify apps about state changes in the Token Broker
WNF_TKBR_CHANGE_APP_INTERNAL0x13840539A3BC18F5This state name is used to notify apps about state changes in the Token Broker
WNF_TPM_OWNERSHIP_TAKEN0x418B1E39A3BC0875This event signals when the Win32_TPM provider has completed taking ownership of the TPM.
WNF_TPM_DEVICEID_STATE0x418B1E39A3BC1075This event signals the state of the TPM-based DeviceID.
WNF_TPM_PROVISION_TRIGGER0x418B1E39A3BC1875This event triggers the TPM provisioning/status check to run.
WNF_TPM_CLEAR_PENDING0x418B1E39A3BC2075This event signals a TPM Clear will be attempted.
WNF_TPM_CLEAR_RESULT0x418B1E39A3BC2875This event signals if ownership was taken during TPM Provisioning and the result of TPM Clear on last reboot.
WNF_TPM_DISABLE_DEACTIVATE_PENDING0x418B1E39A3BC3075This event signals a TPM Disable or TPM Deactivate will be attempted.
WNF_TPM_ENABLE_ACTIVATE_COMPLETED0x418B1E39A3BC3875This event signals after the TPM is Enabled or Activated.
WNF_TPM_MAINTENANCE_TASK_STATUS0x418B1E39A3BC4075This event signals the TPM maintenance task status.
WNF_TPM_PROVISION_STATUS0x418B1E39A3BC4875Indicates which steps have been completed in TPM Provisioning.
WNF_UBPM_POWER_SOURCE0xC960C38A3BC0875The machine power source state
WNF_UBPM_CONSOLE_MONITOR0xC960C38A3BC1075The machine console monitor on/off state
WNF_UBPM_FRMU_ALLOWED0xC960C38A3BC1875The user is present and machine is on batteries and the battery level is above firmware update thershold
WNF_UBPM_PRESHUTDOWN_PHASE0xC960C38A3BC2075The machine entered pre shutdown phase
WNF_UMDF_WUDFSVC_START0x7820338A3BC0875Trigger the Driver Manager service start
WNF_UMDF_DRVMGR_STATUS0x7820338A3BC1075State name indicating the status of the UMDF driver manager
WNF_USO_STATE_CHANGE0x41891D38A3BC0875Signals that a state transition occurred for an update session.
WNF_USO_STATE_ATTENTION_REQUIRED0x41891D38A3BC1075Signals that a state encounter a condition that requires attention.
WNF_USO_UPDATE_PROGRESS0x41891D38A3BC1875Signals the a change in progess of an update session.
WNF_USO_REBOOT_REQUIRED0x41891D38A3BC2075Signals that a reboot is required to complete the update session.
WNF_USO_ACTIVE_SESSION0x41891D38A3BC2875Signals that the current active session is changed.
WNF_USO_UPDATE_SUCCEEDED0x41891D38A3BC3075Signals that updates have installed successfully on lite servicing stack.
WNF_USO_UPTODATE_STATUS_CHANGED0x41891D38A3BC3875Signals that the machine’s up to date status has changed.
WNF_USO_REBOOT_BLOCK_REQUESTED0x41891D38A3BC4075Signals that USO should not reboot the system.
WNF_USO_DOWNLOAD_STARTED0x41891D38A3BC4875Signals that update download has started on lite servicing stack.
WNF_USO_INSTALL_STARTED0x41891D38A3BC5075Signals that update install has started on lite servicing stack.
WNF_USO_INSTALL_STATE0x41891D38A3BC5875Signals various install states on lite servicing stack.
WNF_USO_SERVICE_STOPPING0x41891D38A3BC6075Signals that USO is stopping.
WNF_USO_SETTINGS_REFRESHED0x41891D38A3BC6875Signals that USO settings have been refreshed.
WNF_USO_ACTIVEHOURS_STARTED0x41891D38A3BC7075Signals that USO active hours have started.
WNF_DICT_CONTENT_ADDED0x15850729A3BC0875A word was added to the User Dictionary. Datasize is the byte count of MAX_PATH + uint32 + BOOL. SDDL SID’s come from capability ID_CAP_INPUT_CORE (both application and service SID’s), and DefAppsCapabilitiesGroup
WNF_DICT_PERSONALIZATION_FEEDBACK_SIGNAL0x15850729A3BC1075A word was added to the User Dictionary. Datasize is the byte count of MAX_PATH + MAX_PATH. SDDL SID’s come from capability ID_CAP_INPUT_CORE (both application and service SID’s), and DefAppsCapabilitiesGroup
WNF_UMGR_SIHOST_READY0x13810338A3BC0835Shell Infrastructure host is ready.
WNF_UMGR_USER_LOGIN0x13810338A3BC1075The user was logged in to the system.
WNF_UMGR_USER_LOGOUT0x13810338A3BC1875The user was logged out of the system.
WNF_UMGR_SYSTEM_USER_CONTEXT_CHANGED0x13810338A3BC2075Default system user, as defined by start view, has changed.
WNF_UMGR_SESSIONUSER_TOKEN_CHANGE0x13810338A3BC2875Token for the session user changed.
WNF_UMGR_SESSION_ACTIVE_SHELL_USER_CHANGE0x13810338A3BC3035Session active shell user changed.
WNF_UMGR_USER_TILE_CHANGED0x13810338A3BC3875The user tile for the specified SID was changed. The payload is the String user sid and the datasize is the byte count of MAX_PATH.
WNF_UMGR_USER_PICTURE_CHANGED0x13810338A3BC4075The picture for one of the logged in users has changed. There is no payload.
WNF_UMGR_USER_PICTURE_ID0x13810338A3BC48F5The correlation ID for the user picture. The payload is the string correlation ID and the datasize is the byte count of GUID string length + 1 for null (39).
WNF_UWF_OVERLAY_WARNING0x41801938A3BC0875The UWF overlay consumption is at warning level.
WNF_UWF_OVERLAY_CRITICAL0x41801938A3BC1075The UWF overlay consumption is at critical level.
WNF_UWF_OVERLAY_NORMAL0x41801938A3BC1875The UWF overlay consumption is at normal level.
WNF_VAN_VANUI_STATUS0x41880F3BA3BC0875The VAN UI open close status
WNF_VTSV_CDS_SYNC0x17951A3BA3BC0875Notification for syncing CDS WebCredential store
WNF_VTSV_ADD_CRED_NOTIFY0x17951A3BA3BC1075Notification for New Credential Added
WNF_VPN_CLIENT_CONNECTIVITY_STATUS0x41881E3BA3BC0875The VPN Client connectivity status. SDDL gives RasMan read/write permissions, rescap:networkingVpnProvider read permissions, and Authenticated User read permissions.
WNF_WAAS_QUALITY_IMPACT0x12870F3AA3BC0875WaaS Assessment Impact level for quality update
WNF_WAAS_FEATURE_IMPACT0x12870F3AA3BC1075WaaS Assessment Impact level for feature update
WNF_WCM_INTERFACE_LIST0x418B0D3AA3BC0875This event signals when a WCM-managed network interface has been added or removed
WNF_WCM_SERVICE_STATUS0x418B0D3AA3BC1075Connection Manager service restart
WNF_WCM_MAPPING_POLICY_UPDATED0x418B0D3AA3BC1875WNF state for refreshing WCM service mapping policies cache
WNF_WCM_PROFILE_CONFIG_UPDATED0x418B0D3AA3BC2075WNF state for refreshing WCM’s selection multiplex table and selectable connection list
WNF_WCM_INTERFACE_CONNECTION_STATE0x418B0D3AA3BC2875This event signals when a WCM-managed network interface has changed its connection quality state
WNF_CNET_DPU_GLOBAL_STATE_OVER_LIMIT0x1583002EA3BC1075the data of this state is 1 when the global data usage state is less than or equal to OVER_LIMIT, otherwise it is 0
WNF_CNET_DPU_GLOBAL_STATE_OFF_TRACK0x1583002EA3BC1875the data of this state is 1 when the global data usage state is less than or equal to OFF_TRACK, otherwise it is 0
WNF_CNET_DPU_GLOBAL_STATE_ON_TRACK0x1583002EA3BC2075the data of this state is 1 when the global data usage state is less than or equal to ON_TRACK, otherwise it is 0
WNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACK0x1583002EA3BC2875the data of this state is 1 when the global data usage state is less than or equal to UNDER_TRACK, otherwise it is 0
WNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKED0x1583002EA3BC3075the data of this state is 1 when the global data usage state is less than or equal to NOT_TRACKED, otherwise it is 0
WNF_CNET_CELLULAR_CONNECTIONS_AVAILABLE0x1583002EA3BC4875State name for Cellular connections available State. WcmSvc and Netprofmsvc have publish permission.
WNF_CNET_NON_CELLULAR_CONNECTED0x1583002EA3BC6875The state is 1 when a non cellular connection is in connected state, otherwise it is 0. WcmSvc and Netprofmsvc have publish permission.
WNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTED0x1583002EA3BC7075The state is 1 when Radio is active or a non cellular connection is in connected state, otherwise it is 0. WcmSvc and Netprofmsvc have publish permission.
WNF_CNET_RADIO_ACTIVITY0x1583002EA3BC7875The state is 1 when Cellular data is active, otherwise it is 0. SDDL grants read access for everyone, including AppContainers, and write access for System
WNF_CNET_WIFI_ACTIVITY0x1583002EA3BC8075The state is 1 when WiFi is active, otherwise it is 0. SDDL grants read access for everyone, including AppContainers, and write access for System
WNF_DUSM_TASK_TOAST0xC951B29A3BC0875Trigger task scheduler to launch task for toast
WNF_DUSM_IS_CELLULAR_BACKGROUND_RESTRICTED0xC951B29A3BC1075The state is 1 when cellular internet connection is not allowed to any UWP Application running in background, the state is 0 when cellular internet connection is allowed to any applications running in foreground or background.
WNF_WDAG_SETTINGS_CHANGED_USER0x6870A3AA3BC0875A Settings for WDAG requiring the user context has changed.
WNF_WDAG_SETTINGS_CHANGED_SYSTEM0x6870A3AA3BC1075A Settings for WDAG requiring system context has changed.
WNF_ATP_PUSH_NOTIFICATION_RECEIVED0x41961A2CA3BC0875This is fired every time the WDATP Cloud service has a new command. struct {UINT64 TimeLastChanged;}
WNF_WDSC_ACCOUNT_PROTECTION_REFRESH0x2950A3AA3BC0875This event triggers a refresh for the account pillar state
WNF_WEBA_CTAP_DEVICE_STATE0x840B3AA3BC0875This event signals CTAP device state changes.
WNF_WEBA_CTAP_DEVICE_CHANGE_NOTIFY0x840B3AA3BC1075This event signals CTAP device was inserted or tapped.
WNF_WER_SERVICE_START0x41940B3AA3BC0875The WER service needs to start. CAPABILITY_SID_LpacInstrumentation – S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187
WNF_WER_QUEUED_REPORTS0x41940B3AA3BC1075The number of reports queued to the machine store. CAPABILITY_SID_LpacInstrumentation – S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187
WNF_WER_CRASH_STATE0x41940B3AA3BC1875Information about applications currently crashing.
WNF_WIFI_CONNECTION_STATUS0x880073AA3BC0875State name for Wifi radio and connection status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_CPL_STATUS0x880073AA3BC1075State name for Wifi CPL status flags
WNF_WIFI_SERVICE_NOTIFICATIONS0x880073AA3BC2075Notifications received from the WiFi Conn Svc. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_HOTSPOT_HOST_READY0x880073AA3BC2875State name for Wifi Hotspot Host ready flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_AOAC_STATUS0x880073AA3BC4875State name for Wifi power status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_CONNECTION_SCORE0x880073AA3BC5875State name for Wifi connection status and connection score updates
WNF_WIFI_TILE_UPDATE0x880073AA3BC6075State name for Wifi network tiles updated. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_AVERAGE_TRANSMIT0x880073AA3BC6875Average peak transmitted traffic seen by NCSI
WNF_WIFI_MEDIA_STREAMING_MODE0x880073AA3BC7075Last media streaming mode state change
WNF_WIFI_TASK_TRIGGER0x880073AA3BC7875State name triggering WiFiNetworkManager background task. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_L3_AUTH_STATE0x880073AA3BC8075State for triggering browser UI when a network is hijacked. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml
WNF_WIFI_WLANSVC_NOTIFICATION0x880073AA3BC8875This event sends notifications from wlansvc
WNF_WIFI_HOTSPOT2_REGISTRATION_STATUS0x880073AA3BC9075State name for triggering hotspot2 registration status from online signup server
WNF_WIFI_PROTECTED_SCENARIO0x880073AA3BC9875Signals that the Wi-Fi stack is handling an important scenario which must be protected from disruptive activity such as unexpected scans, or activity on a shared radio.
WNF_WIFI_MOVEMENT_DETECTED0x880073AA3BCA075Event indicating that the user may have moved to a different location based on nearby AP RSSI and other signals. Value is a counter indicating how many times movement has been detected.
WNF_WCDS_SYNC_WLAN0x12820D3AA3BC0875State name for starting the WLAN scheduled task.
WNF_WFDN_WFD_DISCONNECTION_PROPERTIES0xF82083AA3BC0875Reports properties about a Wi-Fi Display disconnect
WNF_WFDN_MOVEMENT_DETECTED0xF82083AA3BC1075Event indicating that the user may have moved to a different location during the Infracast session. Value is a counter indicating how many times movement has been detected.
WNF_WFDN_STAY_CONNECTED_TRIGGER0xF82083AA3BC1875Event indicating the current state of the infra walk-away listener. 0: Listening, 1: User elected to stay connected, 2: Auto Disconnect was triggered, 3: Session ended without triggering movement detection.
WNF_WIL_FEATURE_STORE0x418A073AA3BC0C75Event indicating the Normal feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml
WNF_WIL_BOOT_FEATURE_STORE0x418A073AA3BC1475Event indicating the Boot feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml
WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_10x418A073AA3BC1C75Event to indicate the first use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_20x418A073AA3BC2475Event to indicate the first use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_30x418A073AA3BC2C75Event to indicate the first use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_USAGE_TRACKING_10x418A073AA3BC3475Event to indicate unique use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_USAGE_TRACKING_20x418A073AA3BC3C75Event to indicate unique use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_USAGE_TRACKING_30x418A073AA3BC4475Event to indicate unique use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_10x418A073AA3BC4C75Event to indicate uniquely observed code failures on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_20x418A073AA3BC5475Event to indicate uniquely observed code failures on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_30x418A073AA3BC5C75Event to indicate uniquely observed code failures on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_40x418A073AA3BC6475Event to indicate uniquely observed code failures on this device (4). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_50x418A073AA3BC6C75Event to indicate uniquely observed code failures on this device (5). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_HEALTH_TRACKING_60x418A073AA3BC7475Event to indicate uniquely observed code failures on this device (6). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_MACHINE_FEATURE_STORE0x418A073AA3BC7C75Event indicates changes of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_MACHINE_FEATURE_STORE_MODIFIED0x418A073AA3BC8075Event fires once per boot on modification of WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_USER_FEATURE_STORE0x418A073AA3BC88F5Event indicates modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_USER_FEATURE_STORE_MODIFIED0x418A073AA3BC90F5Event fires once per user session on modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582.
WNF_WIL_FEATURE_USAGE_FOR_SRUM0x418A073AA3BC9835Event indicates there is unique and custom usage of a feature. This is for SRUM consumption. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582
WNF_WBIO_ENROLLMENT_FINISHED0xE8F0C3AA3BC0875This event is fired when an enrollment completes, either successfully, or unsuccessfully.
WNF_SRT_WINRE_CONFIGURATION_CHANGE0x41921C3EA3BC0875Triggered each time there is a configuration change in WinRE
WNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATED0x13891A3EA3BC0875This WNF event fires when the OEM, MO, and Device Hardware values change in the registry.
WNF_STOR_CONFIGURATION_MO_TASK_RUNNING0x13891A3EA3BC1075This WNF event fires when the MO discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
WNF_STOR_CONFIGURATION_OEM_TASK_RUNNING0x13891A3EA3BC1875This WNF event fires when the OEM discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running.
WNF_WUA_NUM_PER_USER_UPDATES0x41871B3AA3BC08F5State stores the number of per-user updates for the current user
WNF_WUA_AU_SCAN_COMPLETE0x41871B3AA3BC1075Triggered each time an AU scan is completed
WNF_WUA_CALL_HANG0x41871B3AA3BC1875State stores information regarding WU call hangs
WNF_WUA_SERVICE_HANG0x41871B3AA3BC2075State stores information regarding WU service hangs
WNF_WUA_STAGEUPDATE_DETAILS0x41871B3AA3BC2875Triggered when a StageUpdate call has completed for a phone update installation.
WNF_WUA_UPDATE_EXPIRING0x41871B3AA3BC3075Indicates an update will expire on the next WU service scavenge task. The data type is a GUID which represents the update ID.
WNF_WHTP_WINHTTP_PROXY_DISCOVERED0x1192063AA3BC0875A network proxy has been discovered. WinHttpAutoProxySvc can write, NlaSvc can read.
WNF_WHTP_WINHTTP_PROXY_AUTHENTICATION_REQUIRED0x1192063AA3BC1075A proxy has returned a 407 status code.
WNF_WSQM_IS_OPTED_IN0xC971D3AA3BC0875Mirrors the state of CEIPEnable and CEIPSampledIn registry settings.
WNF_WNS_CONNECTIVITY_STATUS0x4195003AA3BC0875The WNS Connection Provider connectivity status
WNF_WOF_OVERLAY_CONFIGURATION_CHANGE0x4180013AA3BC0875Overlay configuration change
WNF_SHR_SHARING_CHANGED0x4194063EA3BC0835System sharing status changed
WNF_SHR_DHCP_IPv4_LEASE_LIST0x4194063EA3BC1075ICS DHCP IPv4 lease list changed
WNF_SHR_DHCP_IPv4_FASTIP_ADDRS0x4194063EA3BC1875New assigned Fast-IP Address(es)
WNF_KSV_STREAMSTATE0x41901D26A3BC0875This is the current stream state of a camera for a process in a given session
WNF_KSV_DEVICESTATE0x41901D26A3BC1075This is the current device state
WNF_KSV_FSSTREAMACTIVITY0x41901D26A3BC1875This is stream activity indicator
WNF_KSV_KSSTREAMACTIVITY0x41901D26A3BC2075This is stream activity indicator
WNF_KSV_CAMERAPRIVACY0x41901D26A3BC2875This is user global camera privacy state indicator when switched via physical button
WNF_TB_SYSTEM_TIME_CHANGED0x41C60C39A3BC0875Time Broker has finished processing a change ot time
WNF_UDM_SERVICE_INITIALIZED0x418B0A38A3BC0835BOOL + UserContextToken indicating whether the UserDataService service has been initialized for the specified user. On OneCore, SDDL gives read access to callers with userDataSystem/userDataSystem capablity group and all access to IU/AU/System. On phone, SDDL comes from ID_CAP_APPOINTMENTS, ID_CAP_COMMS_COMMON, ID_CAP_CONTACTS, ID_CAP_EVERYONE, ID_CAP_PLATFORM_EXTENSIBILITY, UserDataSvc and ID_CAP_SMS in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
WNF_UDA_CONTACT_SORT_CHANGED0x41870A38A3BC2835State name for aggregate sort and display order changes. SDDL comes from ID_CAP_COMMS_APPLICATIONS and ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml
WNF_XBOX_APPLICATION_CONTEXT_CHANGED0x19890C35A3BC0875The application specific context has changed in steady state. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_XBOX_APPLICATION_FOCUS_CHANGED0x19890C35A3BC1075The currently focused application has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_XBOX_APPLICATION_ACTIVATING0x19890C35A3BC1875An application is activating.
WNF_XBOX_APPLICATION_COMPONENT_FOCUS0x19890C35A3BC2075The currently focused application component has changed.
WNF_XBOX_SHELL_TOAST_NOTIFICATION0x19890C35A3BC2875A new toast notification has been delivered to the shell.
WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_LAUNCH0x19890C35A3BC3075A package is about to be unmounted from the System OS ready to launch it on the Title OS.
WNF_XBOX_PACKAGE_INSTALL_STATE_CHANGED0x19890C35A3BC3875A new application package has been added or an existing one has been removed.
WNF_XBOX_IDLE_DIMMER_CHANGED0x19890C35A3BC4075Idle dimmer has changed state.
WNF_XBOX_GLOBALIZATION_SETTING_CHANGED0x19890C35A3BC4875An application package has been removed.
WNF_XBOX_APPLICATION_NO_LONGER_RUNNING0x19890C35A3BC5075An application is no longer running.
WNF_XBOX_AUTOPLAY_CONTENT_DETECTED0x19890C35A3BC5875An optical disc or other media has been detected with content.
WNF_XBOX_APPLICATION_ERROR0x19890C35A3BC6075Application error handler
WNF_XBOX_STORAGE_ERROR0x19890C35A3BC6875Handler for achievement cache and game save storage
WNF_XBOX_LIVE_CONNECTIVITY_CHANGED0x19890C35A3BC7075Connectivity to the Xbox LIVE service has changed.
WNF_XBOX_SYSTEM_TITLE_AUTH_STATUS_CHANGED0x19890C35A3BC7875System Title Authentication status has changed.
WNF_XBOX_ACHIEVEMENTS_RAW_NOTIFICATION_RECEIVED0x19890C35A3BC8075A new achievements-related raw notifications was received.
WNF_XBOX_ERA_VM_STATUS_CHANGED0x19890C35A3BC8875ERA VM status has changed.
WNF_XBOX_APPLICATION_LAYOUT_CHANGED0x19890C35A3BC9075One or more application layouts changed.
WNF_XBOX_SYSTEM_IDLE_TIMEOUT_CHANGED0x19890C35A3BC9875System Idle Timeout has changed.
WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGED0x19890C35A3BCA075System constrained status has changed. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991.
WNF_XBOX_APPLICATION_COM_RESILIENCY_STATUS_CHANGED0x19890C35A3BCD875Application’s COM resiliency status has changed.
WNF_XBOX_SYSTEM_USER_CONTEXT_CHANGED0x19890C35A3BCE075Default system user, as defined by start view, has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_XBOX_HOST_STORAGE_CONFIGURATION_CHANGED0x19890C35A3BCF075A storage device was either plugged or unplugged.
WNF_XBOX_EXIT_SILENT_BOOT_MODE0x19890C35A3BCF875The system is exiting silent boot mode.
WNF_XBOX_APPLICATION_LICENSE_CHANGED0x19890C35A3BD0075The license used by the application has changed.
WNF_XBOX_SHELL_INITIALIZED0x19890C35A3BD0875The system shell is initialized and ready.
WNF_XBOX_PASS3_UPDATE_NOTIFICATION0x19890C35A3BD1875Pass 3 system update has progressed and is sending a notification.
WNF_XBOX_MSA_ENVIRONMENT_CONFIGURED0x19890C35A3BD2075The MSA and WNS environments have been configured to match the XBL environment.
WNF_XBOX_SIP_VISIBILITY_CHANGED0x19890C35A3BD2875The visibility of the Software Input Pane has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622.
WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGED0x19890C35A3BD3075Game streaming state has changed.
WNF_XBOX_SIP_FOCUS_TRANSFER_NOTIFICATION0x19890C35A3BD3875It is possible to transfer focus away from the Software Input Pane.
WNF_XBOX_XAM_SMB_SHARES_INIT_ALLOW_SYSTEM_READY0x19890C35A3BD4075SMB shares have been launched.
WNF_XBOX_XBBLACKBOX_SNAP_NOTIFICATION0x19890C35A3BD4875A snap of XBBlackbox has occurred
WNF_XBOX_SYSTEM_LOW_POWER_MAINTENANCE_WORK_ALLOWED0x19890C35A3BD5075Maintenance work is allowed in low power mode
WNF_XBOX_ERA_TITLE_LAUNCH_NOTIFICATION0x19890C35A3BD5875ERA launch notification with XBL title info
WNF_XBOX_STORAGE_STATUS0x19890C35A3BD6075Status of attached storage devices
WNF_XBOX_STORAGE_CHANGED0x19890C35A3BD6875A storage device, or its contents, have changed
WNF_XBOX_PACKAGE_STREAMING_STATE0x19890C35A3BD7075Current state of the streaming package
WNF_XBOX_STREAMING_QUEUE_CHANGED0x19890C35A3BD7875The install streaming queue contents have changed
WNF_XBOX_QUERY_UPDATE_NOTIFICATION0x19890C35A3BD8075An update is available for installing content.
WNF_XBOX_REPOSITORY_CHANGED0x19890C35A3BD8875A change has been made to the pre-indexed state repository.
WNF_XBOX_LIVETV_TUNER_COUNT_CHANGED0x19890C35A3BD9075The number of LiveTV tuners connected to the system has changed
WNF_XBOX_PACKAGECACHE_CHANGED0x19890C35A3BD9875A change has been made to the package cache.
WNF_XBOX_WPN_PLATFORM_HOST_INITIALIZED0x19890C35A3BDA075The WPN platform host is initialized and ready.
WNF_XBOX_NARRATOR_RECT_CHANGED0x19890C35A3BDA875The rectangle visual of the Narrator has changed.
WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_UNINSTALL0x19890C35A3BDB075A package is about to be unmounted from the System OS for uninstall.
WNF_XBOX_SEND_LTV_COMMAND_REQUESTED0x19890C35A3BDB875A module requested for an ltv command to be issued.
WNF_XBOX_SHELL_DATACACHE_ENTITY_CHANGED0x19890C35A3BDC075An entity has changed in the shell data cache.
WNF_XBOX_NOTIFICATION_UNREAD_COUNT0x19890C35A3BDD075Number of unread notifications for the current system user.
WNF_XBOX_EXTENDED_RESOURCE_MODE_CHANGED0x19890C35A3BDD875Extended resource mode has been toggled
WNF_XBOX_AUTO_SIGNIN_IN_PROGRESS0x19890C35A3BDE075Indicates whether the shell is in the process of auto-signin. Payload is UINT32 with a 1 or 0.
WNF_XBOX_REMOTE_SIGNOUT0x19890C35A3BDE875A local user has signed out remotely via SPOP.
WNF_XBOX_ACCESSIBILITY_NARRATOR_ENABLED0x19890C35A3BDF075Indicates whether the Narrator is enabled. Payload is UINt32 with 1 (enabled) or 0 (disabled).
WNF_XBOX_GLOBAL_SPEECH_INPUT_NOTIFICATION0x19890C35A3BDF875A global speech command was recognized that translates to a controller button press.
WNF_XBOX_APPLICATION_CURRENT_USER_CHANGED0x19890C35A3BE0075The current user of the application has changed.
WNF_XBOX_ERA_VM_INSTANCE_CHANGED0x19890C35A3BE0875ERA VM Instance has come up or gone down
WNF_XBOX_RESET_IDLE_TIMER0x19890C35A3BE1075Idle monitor timer should be reset due to user activity.
WNF_XBOX_KINECT_IS_REQUIRED0x19890C35A3BE2875An application that requires Kinect has connected to the NuiService.
WNF_XBOX_ADJUST_SNAP_CPU_AFFINITY0x19890C35A3BE3075Adjust an app’s CPU affinity if in constrained mode
WNF_XBOX_VIDEOPLAYER_ACTIVEPLAYER0x19890C35A3BE3875The active shared video player host has changed.
WNF_XBOX_VIDEOPLAYER_PLAYERSTATE0x19890C35A3BE4075The video player app has changed internal state.
WNF_XBOX_VIDEOPLAYER_PLAYBACKPROGRESS0x19890C35A3BE4875The video player app has changed playback progress.
WNF_XBOX_SAFEAREA_SETTING_CHANGED0x19890C35A3BE5075Indicates whether the safe area setting is enabled. Payload is UINT32 with a 1 or 0.
WNF_XBOX_ACTIVE_BACKGROUNDAUDIO_APPLICATION_CHANGED0x19890C35A3BE5875The application providing audio from the background has changed.
WNF_XBOX_KEYBOARD_LOCALE_CHANGED0x19890C35A3BE6075Indicates that the desired keyboard locale has changed.
WNF_XBOX_GAMER_ACCOUNT_CHANGED0x19890C35A3BE6875The local gamer account has signed in or out. Payload is uint32 representing sessionid
WNF_XBOX_ERA_VM_IOPRIORITY_CHANGED0x19890C35A3BE7075ERA VM IO priority has been changed
WNF_XBOX_SPEECH_INPUT_DEVICE0x19890C35A3BE7875Input device changed for OneCore speech
WNF_XBOX_ACCESSIBILITY_EXCLUSIVE_INPUT_MODE_CHANGED0x19890C35A3BE9075The exclusive input modality for an accessibility component changed
WNF_XBOX_PROACTIVE_NOTIFICATION_TRIGGERED0x19890C35A3BE9875Proactive notification service is triggered
WNF_XBOX_ACHIEVEMENT_TRACKER_STATE_CHANGED0x19890C35A3BEA075Notification for when the Achievement Tracker’s state should change
WNF_XBOX_GUIDE_DIRECT_ACTIVATION0x19890C35A3BEA875Event to trigger direct activation of xbox guide
WNF_XBOX_TITLE_SPOP_VETO_RECEIVED0x19890C35A3BEB075A title SPOP veto has been received.
WNF_XBOX_LIBRARY_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEB875A new library-related raw notifications was received.
WNF_XBOX_MESSAGING_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEC075A new messaging-related raw notifications was received.
WNF_XBOX_PEOPLE_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEC875A new people-related raw notifications was received.
WNF_XBOX_MULTIPLAYER_RAW_NOTIFICATION_RECEIVED0x19890C35A3BED075A new multiplayer-related raw notifications was received.
WNF_XBOX_LIVETV_RAW_NOTIFICATION_RECEIVED0x19890C35A3BED875A new live tv-related raw notifications was received.
WNF_XBOX_SYSTEMUI_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEE075A new SystemUI-related raw notifications was received.
WNF_XBOX_CLUB_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEE875A new club-related raw notifications was received.
WNF_XBOX_CLUBCHAT_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEF075A new club chat-related raw notifications was received.
WNF_XBOX_SETTINGS_RAW_NOTIFICATION_RECEIVED0x19890C35A3BEF875A new settings-related raw notifications was received.
WNF_XBOX_MEDIA_IS_PLAYING_CHANGED0x19890C35A3BF0075Notification of whether any media is playing.
WNF_XBOX_EXPANDED_RESOURCES_INACTIVE0x19890C35A3BF0875An expandedResources app has gone inactive.
WNF_XBOX_PARENTAL_RESTRICTIONS_CHANGED0x19890C35A3BF1075The maximum age rating currently permissable has changed.
WNF_XBOX_PARTY_OVERLAY_STATE_CHANGED0x19890C35A3BF1875Notification for when the Party Overlay’s state should change
WNF_XBOX_CLOUD_SETTINGS_UPDATED0x19890C35A3BF2075A cloud settings collection was updated
WNF_XBOX_ERA_FAST_ITERATION_STATUS_CHANGED0x19890C35A3BF2875ERA Fast Iteration Mode has changed.
WNF_XBOX_NTM_CONSTRAINED_MODE_CHANGED0x19890C35A3BF3075The Network Transfer Manager’s constrained mode changed.
WNF_XBOX_NARRATOR_INPUT_LEARNING_MODE_CHANGED0x19890C35A3BF3875Narrator input learning mode changed.
WNF_XBOX_SUSPEND_SKELETAL_TRACKING_INITIALIZATION0x19890C35A3BF4075Initialization of the skeletal tracking pipeline should be suspended / resumed.
WNF_XBOX_NEON_SETTING_CHANGED0x19890C35A3BF4875Immersive background or connected animation setting changed.
WNF_XBOX_COPYONLAN_UPLOAD_STATE_CHANGED0x19890C35A3BF5075Copy on LAN upload state has changed.
WNF_XBOX_DASHBOARD_DIRECT_ACTIVATION0x19890C35A3BF5875Event to trigger direct activation of xbox dashboard.
WNF_XBOX_COMMANDSERVICE_RAW_NOTIFICATION_RECEIVED0x19890C35A3BF6075A new Command Service raw notification was received.
WNF_XBOX_NOTIFICATION_SETTING_CHANGED0x19890C35A3BF6875A notification settings was updated
WNF_XBOX_GUEST_VM_CRASH_DUMP_NOTIFICATION0x19890C35A3BF7075A new guest VM crash dump file was written.
WNF_XBOX_TEST_NETWORK_CONNECTION_COMPLETE0x19890C35A3BF7875User initiated network connection test has completed with no errors
WNF_XBOX_GAMECORE_TITLE_LAUNCH_NOTIFICATION0x19890C35A3BF8075GameCore launch notification with title info
WNF_XBOX_HOST_XVC_CORRUPTION_DETECTED0x19890C35A3BF8875XVC corruption has been detected.
WNF_XBOX_ERA_INITIAL_PRESENT0x19890C35A3BF9075ERA title has presented its first frame.
WNF_XBOX_HAS_NETWORK_CONNECTIVITY0x19890C35A3BF9875Indicates the state of network connectivity. Payload is a UINT32 with a value of 0 or 1 depending on if the network is connected
WNF_XBOX_CONNECTED_STANDBY_HISTORY0x19890C35A3BFA075Indicates the state of the current connected standby session.
WNF_XBOX_GAMECORE_NETWORK_READY0x19890C35A3BFA875GameCore network ready signal.
WNF_XBOX_ERA_TITLE_ACTIVATION_COMPLETED0x19890C35A3BFB075ERA title has completed activation.
WNF_XBOX_SUBSCRIPTION_PURCHASED0x19890C35A3BFB875An RTA notification has come in that a subscription has been purcahsed.
WNF_XBOX_TIME_ZONE_CHANGED0x19890C35A3BFC075Indicates the time zone has changed.
WNF_XBOX_ENTITLEMENTS_CHANGED0x19890C35A3BFC875Indicates that the game and app entitlements for the current set of users has changed.
WNF_XBOX_PASS_ENTITLEMENTS_CHANGED0x19890C35A3BFD075Indicates that the pass entitlements for the current set of users has changed.
WNF_XBOX_REBOOT_REQUIRED_TO_ENABLE_KINECT0x19890C35A3BFD875A reboot is required to enable Kinect support.
WNF_XBOX_ACQUIRED_GAMEPASS0x19890C35A3BFE075A GamePass subscription has just been purchased
WNF_XBOX_SHUTDOWN_INITIATED0x19890C35A3BFE875Indication that a system shutdown has been initiated.
WNF_XBOX_CONSOLE_STREAMING_STATUS_CHANGED0x19890C35A3BFF075The console’s streaming status has changed
WNF_XBOX_POWERSTATE_CHANGED0x19890C35A3BFF875The console’s power state has changed.
WNF_UTS_USERS_ENROLLED0x41951A38A3BC0C75Indicates whether there are any enrolled users.
WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGERED0x41951A38A3BC1475Triggered when the lock screen is dismissed to kick-off trusted signals.
WNF_USB_TYPE_C_PARTNER_STATE0x41841D38A3BC0875This event indicates the state of a USB Type-C connector’s partner device.
WNF_USB_BILLBOARD_CHANGE0x41841D38A3BC1075This event indicates that the number of Billboard devices in the system has changed.
WNF_USB_PEER_DEVICE_STATE0x41841D38A3BC1875This is the state of a peer device.
WNF_USB_FUNCTION_CONTROLLER_STATE0x41841D38A3BC2875This event indicates the state of a USB function controller, such as detached, or attached, and successfully enumerated with host PC.
WNF_USB_ERROR_NOTIFICATION0x41841D38A3BC3075This event indicates that a USB error notification needs to be published.
WNF_USB_POLICY_MANAGER_HUB_COLLECTION_STATE0x41841D38A3BC3875This indicates that the hub collection in USB Policy Manager has changed.
WNF_USB_XHCI_AUDIO_OFFLOAD_STATE0x41841D38A3BC4075This event indicates the state of a USB XHCI controller’s audio offload state.

16 maj 2022  
Tagi: WNF



Wywołanie skryptu przez IPTABLES, czyli automatyczne uruchomienie serwera

openWrt, Sieci komputerowe Brak komentarzy »

Podczas realizacji rozproszonej bramki SMS w ramach projektu na uczelnie uruchamiałem na swoim komputerze serwer. Obsługiwał on modem GSM oraz umożliwiał połączenie za pomocą pulpitu zdalnego. Ponieważ serwer ten nie był nam potrzebny przez cały czas, komputer również nie musiał ciągle pracować. Zdecydowałem się, na jego automatyczne uruchamianie podczas próby nawiązania połączenia z serwerem. Do realizacja zadania postanowiłem wykorzystać mój router pracujący pod kontrolą openWrt. Czytaj dalszą część wpisu »


27 marzec 2014  
Tagi: iptables, openwrt, router, run, sieć, wol



Źródła kokoNotifier

C++, Strona, WTW Brak komentarzy »

Dzisiaj zostałem zapytany o możliwość dokonania aktualizacji wtyczki kokoNotifier dla komunikatora WTW. Jak najbardziej, taka aktualizacja była by możliwa. Nawet obiecałem usunięcie pewnych błędów kilka lat temu. I właśnie w tym miejscu pojawia się takie magiczne słowo – ale. Jako, że mój zapał do tworzenia wtyczek dla komunikatorów już dawno wygasł, a ja nie miałem przez ostatnie lata tyle czasu na swoją pasje co kiedyś, temat ten umarł śmiercią naturalną. Czytaj dalszą część wpisu »


22 marzec 2014  



Szybkie, darmowe i wygodne pobieranie z Wrzuta.pl bez Javy!

Strona Brak komentarzy »

Dzisiaj moja koleżanka znowu poruszyła słynny temat pobierania z Wrzuta.pl. Jak zapewne wiedzą wszystkie osoby zainteresowane tym tematem, portal ten nie udostępnia opcji pobierania plików. Co prawda istnieje wiele stron oferujących “zrzucanie” plików. Niestety obecnie wszystkie, które testowałem wymagają uruchomienia appletu javy. Czytaj dalszą część wpisu »


24 październik 2012  



kokoNotifer – Specjalnie powiadomienia o dostępności wybranych kontaktów

C++, WTW Brak komentarzy »

Miło mi zaprezentować moją pierwszą wtyczkę do komunikatora WTW – kokoNotifer.

Wtyczka pozwala na ustawienie specjalnych powiadomień w okolicy tray-a o zmianie stanu wybranych kontaktów. Dodatkowo możemy zdefiniować dla każdego kontaktu dźwięk *.wav towarzyszący powiadomieniu oraz automatycznie otworzyć okienko rozmowy lub wysłać wiadomość. Czytaj dalszą część wpisu »


17 wrzesień 2011  



(Wielki) powrót Koko

Strona, Tlen, WTW Brak komentarzy »

Minęło blisko 14 miesięcy od czasu mojego ostatniego wpisu. Huuh. Ale ten czas leci. Przez miniony rok sporo się zmieniło w moim życiu jak i w programowaniu. Jednak z założenia ten blog Czytaj dalszą część wpisu »


6 wrzesień 2011  



TlenRadio – Wrzuta.pl 1.3.2.10

Bez kategorii Brak komentarzy »

Kolejne zmiany w serwisie wrzuta.pl skutecznie unieruchomiły wszelkie strony i programy pozwalające na pobieranie plików z tego serwisu. Niestety dotknęły one również moją bibliotekę do wtyczki Tlen.Radio. Modyfikacje polegały na zwiększeniu “bezpieczeństwa” plików w portalu, a tak naprawdę zapewne miały zablokować działające dodatki do wrzuty. Czytaj dalszą część wpisu »


19 lipiec 2010  



GGAvatar 1.1.4.8

Strona, Tlen Komentarze: 7 »

Jest już dostępna nowa wersja wtyczki GGAvatar, która pokazuje avatary użytkowników GG na tlenowej liście kontaktów. Powodem nie działania poprzedniej wersji wtyczki, była wprowadzona przez Gadu-Gadu zmiana formatów linków. Czytaj dalszą część wpisu »


19 styczeń 2010  
Tagi: GGAvatar, Tlen, tlen.pl



GG8Proto 1.2.0.16

Delphi, Tlen Komentarze: 22 »

Nadeszła pora na nową wersję GG8Proto, zawierającą kilka poprawek. Najważniejszą z nich, jest poprawne parasowanie nowych typów XML, wprowadzonych przez GG. Uciążliwe komunikaty zostały domyślnie wyłączone. Czytaj dalszą część wpisu »


23 listopad 2009  
Tagi: Gadu-Gadu, GG 8.0, gg8, GG8Proto, nowegg



GGAvatar 1.1.3.8

Delphi, Gadu-Gadu, Tlen Komentarze: 3 »

Witam po długiej nie obecności! Oddaje w wasze ręce najnowszą wersję wtyczki GGAvatar. Najważniejszą zmianą jest większa współpraca z GG8Proto (wymagane do GGLive). Poprawiłem wyświetlanie obecnego avatara w oknie ustawień wtyczki, i usunąłem opcje informowania o nowych blogach znajomych – przeniesiono ją całkowicie do GG8Proto.

Download

PS. Jak się domyślacie nadchodzi nowa wersja GG8Proto!


23 listopad 2009  
Tagi: GGAvatar



Wcześniejsze wpisy
  • Kategorie

    • Bez kategorii
    • Gadu-Gadu
    • openWrt
    • Programy
      • C++
      • Delphi
      • PHP
      • Turbo Pascal
    • Reverse engineering
    • Sieci komputerowe
    • Strona
    • Tlen
    • WTW
  • Archiwa

    • maj 2022
    • marzec 2014
    • październik 2012
    • wrzesień 2011
    • lipiec 2010
    • styczeń 2010
    • listopad 2009
    • wrzesień 2009
    • lipiec 2009
    • czerwiec 2009
    • maj 2009
    • kwiecień 2009
    • luty 2009
    • sierpień 2008
    • lipiec 2008
    • czerwiec 2008
    • maj 2008
  • Ostatnie wpisy

    • Windows Notification Facility (WNF) IDs from Windows 10.0.19041.1503
    • Wywołanie skryptu przez IPTABLES, czyli automatyczne uruchomienie serwera
    • Źródła kokoNotifier
    • Szybkie, darmowe i wygodne pobieranie z Wrzuta.pl bez Javy!
    • kokoNotifer – Specjalnie powiadomienia o dostępności wybranych kontaktów
    • (Wielki) powrót Koko
    • TlenRadio – Wrzuta.pl 1.3.2.10
    • GGAvatar 1.1.4.8
    • GG8Proto 1.2.0.16
    • GGAvatar 1.1.3.8
  • Linki

Kategorie
  • Bez kategorii
  • Gadu-Gadu
  • openWrt
  • Programy
    • C++
    • Delphi
    • PHP
    • Turbo Pascal
  • Reverse engineering
  • Sieci komputerowe
  • Strona
  • Tlen
  • WTW
O mnie

Witaj na www.kokosoftware.pl, gdzie znajdziesz zawsze najbardziej aktualne wersję programów komputerowych mojego autorstwa.

Witaj, nazywam się Adrian Warecki i jestem programistą komputerowym, twórcą stron internetowych, wtyczek i konsultantem z zakresu informatyki. Więcej o mnie

Copyright © 2023 Koko Software Wszystkie prawa zastrzeżone XHTML CSS Skórka Wp autorstwa I Software Reviews, tłumaczenie: Skórki WP