Identifiers extracted from ContentDeliveryManager.Utilities.dll
| WNF_9P_UNKNOWN_DISTRO_NAME | 0x41C61E54A3BC0875 | The Plan 9 Redirector got a request for an unknown WSL distribution and there is no user callback registered to query it. |
| WNF_9P_REDIRECTOR_STARTED | 0x41C61E54A3BC1075 | The Plan 9 Redirector was started and is ready to accept requests. |
| WNF_AAD_DEVICE_REGISTRATION_STATUS_CHANGE | 0x41820F2CA3BC0875 | This event is signalled when device changes status of registration in Azure Active Directory. |
| WNF_AAD_DEVICE_ATTRIBUTES_UPDATE | 0x41820F2CA3BC1075 | This event is signalled when device attribute value changes are detected. |
| WNF_ACC_EC_ENABLED | 0x41850D2CA3BC0835 | This event is bool signaled to indicate the EC accessibility feature enabled state |
| WNF_ACT_DATA_UPDATED | 0x41920D2CA3BC0835 | Indicates Activity Data has been updated |
| WNF_AFD_IGNORE_ORDERLY_RELEASE_CHANGE | 0x4182082CA3BC0875 | A system entity has requested a change in AFD’s orderly release behavior. |
| WNF_AOW_BOOT_PROGRESS | 0x4191012CA3BC0875 | This state is incremented when a discrete part of the AoW boot sequence has completed. Security: WNF_STATE_SUBSCRIBE (1) by everyone (WD) and app containers (S-1-15-2-1); WNF_STATE_SUBSCRIBE | WNF_STATE_PUBLISH (3) by Local System (SY) and the Interactive User account (IU). |
| WNF_BCST_APP_BROADCAST_STREAM_STATE | 0x15950D2FA3BC0875 | Contains the current stream state information for the app broadcast service. |
| WNF_AI_USERTILE | 0x41C6072CA3BC0875 | AppInstallation state name to receive RAW notifications |
| WNF_AI_PACKAGEINSTALL | 0x41C6072CA3BC1075 | This event is signalled when a package install operation completes |
| WNF_AI_PACKAGEUPDATE | 0x41C6072CA3BC1875 | This event is signalled when a package update operation completes |
| WNF_AI_PACKAGEUNINSTALL | 0x41C6072CA3BC2075 | This event is signalled when a package uninstall operation completes |
| WNF_AI_USER_PACKAGEINSTALL | 0x41C6072CA3BC28F5 | This event is signalled when a package install operation completes |
| WNF_AI_USER_PACKAGEUPDATE | 0x41C6072CA3BC30F5 | This event is signalled when a package update operation completes |
| WNF_AI_USER_PACKAGEUNINSTALL | 0x41C6072CA3BC38F5 | This event is signalled when a package uninstall operation completes |
| WNF_A2A_APPURIHANDLER_INSTALLED | 0x41877C2CA3BC0875 | An app implementing windows.AppUriHandler contract has been installed |
| WNF_AA_LOCKDOWN_CHANGED | 0x41C60F2CA3BC0875 | Mobile lockdown configuration has been changed |
| WNF_AA_CURATED_TILE_COLLECTION_STATUS | 0x41C60F2CA3BC1075 | Curate tile collection for all allowed apps for current AssignedAccess account has been created |
| WNF_AA_MDM_STATUS_EVENT_LOGGED | 0x41C60F2CA3BC1875 | Events are logged to the assigned access status trace logging. |
| WNF_AUDC_CPUSET_ID | 0x2821B2CA3BC08B5 | This state holds the CPU Set ID for audio threads. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_AUDC_PHONECALL_ACTIVE | 0x2821B2CA3BC1075 | This state indicates an active phone call, which can be from a cellular call or active Communications category audio streams |
| WNF_AUDC_TUNER_DEVICE_AVAILABILITY | 0x2821B2CA3BC1875 | This notification indicates whether or not the tuner endpoint is available. |
| WNF_AUDC_HEALTH_PROBLEM | 0x2821B2CA3BC2075 | State for problems detected in the audio core. |
| WNF_AUDC_CPUSET_ID_SYSTEM | 0x2821B2CA3BC2875 | This state keeps other system services apprised of the audio-reserved CPU set ID. |
| WNF_AUDC_RENDER | 0x2821B2CA3BC3075 | Reports the number of, and all endpoints currently rendering audio. Returns a WNF_STREAM_EVENT_HEADER data structure |
| WNF_AUDC_VOLUME_CONTEXT | 0x2821B2CA3BC3875 | This notification is raised when contextual volume for endpoints have changed. |
| WNF_AUDC_CAPTURE | 0x2821B2CA3BC4075 | Reports the number of, and process ids of all applications currently capturing audio. Returns a WNF_CAPTURE_STREAM_EVENT_HEADER data structure |
| WNF_AUDC_RINGERVIBRATE_STATE_CHANGED | 0x2821B2CA3BC4875 | Reports the changes to the Ringervibrate state of the device |
| WNF_AUDC_SPATIAL_STATUS | 0x2821B2CA3BC5075 | Reports for each spatial audio endpoint if spatial audio is currently being rendered. Returns a WNF_SPATIAL_STATUS_HEADER data structure |
| WNF_AUDC_DEFAULT_RENDER_ENDPOINT_PROPERTIES | 0x2821B2CA3BC5875 | Reports certain properties of the default render multimedia endpoint whenever the default endpoint changes or a property of interest changes on the default render endpoint |
| WNF_AUDC_CHAT_APP_CONTEXT | 0x2821B2CA3BC6075 | Publishes a list of the current chat applications on the device |
| WNF_AUDC_VAM_ACTIVE | 0x2821B2CA3BC6875 | Reports whether or not the voice activation manager has an active hardware keyword spotter. |
| WNF_AUDC_POSTURE | 0x2821B2CA3BC7075 | Reports the current posture of the device. |
| WNF_AUDC_ORIENTATION | 0x2821B2CA3BC7875 | Reports the current orientation of the device. |
| WNF_AVA_SOUNDDETECTOR_PATTERN_MATCH | 0x4187182CA3BC0875 | This notification is used to signal that a match has been detected for Voice Activation |
| WNF_AVLC_DRIVER_REQUEST | 0x28A182CA3BC0875 | A driver requst permission for volume limit change. |
| WNF_AVLC_VOLUME_WARNING_ACCEPTED | 0x28A182CA3BC1075 | This event propagates the user’s choice from the warning dialog. |
| WNF_AVLC_SHOW_VOLUMELIMITWARNING | 0x28A182CA3BC1875 | This event informs the system that we need to show reached volume limit warning message |
| WNF_ACHK_SP_CORRUPTION_DETECTED | 0xA8E0D2CA3BC0875 | Event fired when we scan the System Partition and find corruption. |
| WNF_BMP_BG_PLAYSTATE_CHANGED | 0x4196032FA3BC0875 | The background media player’s playstate has changed. |
| WNF_BMP_BG_PLAYBACK_REVOKED | 0x4196032FA3BC1075 | The following tasks aren’t able to play under current policy |
| WNF_OS_IP_OVER_USB_AVAILABLE | 0x41C61D22A3BC8075 | IP Over USB Availability. SDDL comes from ID_CAP_EVERYONE and IpOverUsb in %SDXROOT%\src\baseos\prod\packages\MfgIpOverUsb\MfgIpOverUsb.pkg.xml |
| WNF_OS_IU_PROGRESS_REPORT | 0x41C61D22A3BC8875 | Update progress reporting status. SDDL comes from ID_CAP_BASEOS_UPDATEAPI in %SDXROOT%\src\baseos\prod\packages\imgupd\MainOS\ImgUpd.pkg.xml |
| WNF_FVE_DE_SUPPORT | 0x4183182BA3BC0875 | This event triggers when Device Encryption support status is evaluated, and receives the result of that evaluation. |
| WNF_FVE_DE_MANAGED_VOLUMES_COUNT | 0x4183182BA3BC1075 | This event triggers when the BitLocker service detects a change in the count of DE-managed volumes, and includes the count of such volumes. |
| WNF_FVE_WIM_HASH_GENERATION_TRIGGER | 0x4183182BA3BC1875 | This event triggers or signals to stop WIM hash generation task. |
| WNF_FVE_WIM_HASH_GENERATION_COMPLETION | 0x4183182BA3BC2075 | This event signals completion of WIM hash generation. |
| WNF_FVE_WIM_HASH_DELETION_TRIGGER | 0x4183182BA3BC2875 | This event triggers WIM hash deletion. |
| WNF_FVE_BDESVC_TRIGGER_START | 0x4183182BA3BC3075 | This event trigger-starts BdeSvc service. |
| WNF_FVE_STATE_CHANGE | 0x4183182BA3BC3875 | This event triggers on every BitLocker state change. |
| WNF_FVE_MDM_POLICY_REFRESH | 0x4183182BA3BC4075 | This event triggers where RequireDeviceEncryption policy arrives under the BitLocker area. |
| WNF_FVE_REQUIRE_SDCARD_ENCRYPTION | 0x4183182BA3BC4875 | This event triggers SD card encrytion policy arrival notification. |
| WNF_FVE_SDCARD_ENCRYPTION_REQUEST | 0x4183182BA3BC5075 | This event triggers SecTask to enable/disable SD Card encryption. |
| WNF_FVE_SDCARD_ENCRYPTION_STATUS | 0x4183182BA3BC5875 | This event indicates completion of SD Card encryption/decryption request. |
| WNF_FVE_DETASK_TRIGGER_START | 0x4183182BA3BC6075 | This event trigger-starts device encryption task. |
| WNF_FVE_BITLOCKER_ENCRYPT_ALL_DRIVES | 0x4183182BA3BC6875 | This event triggers BitLocker task to enable BitLocker on all volumes. |
| WNF_FVE_DETASK_SYNC_PROVISIONING_COMPLETE | 0x4183182BA3BC7075 | State of the synchronous provisioning phase of WCOS DE. |
| WNF_FVE_PROCESS_PERSISTENT_REQUEST | 0x4183182BA3BC7875 | This event indicates requests such as keyroll or AAD Keydelete are created in system volume information and need to be processed. |
| WNF_BLTH_BLUETOOTH_STATUS | 0x992022FA3BC0875 | State name for Bluetooth overall status notification. Flags from the BLUETOOTH_GLOBAL_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTConnMgr in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml |
| WNF_BLTH_BLUETOOTH_AUDIO_GATEWAY_STATUS | 0x992022FA3BC1075 | State name for Bluetooth Audio Gateway status notification. A 32-bit bitmask of BLUETOOTH_AUDIO_GATEWAY_STATUS enum are returned. SDDL comes from ID_CAP_EVERYONE and BTAGService in %SDXROOT%\src\net\Bluetooth\Packages\Product\Bluetooth\Bluetooth.pkg.xml |
| WNF_BLTH_BLUETOOTH_MAP_STATUS | 0x992022FA3BC1875 | State name for Bluetooth MAP status notification. A 32-bit bitmask of BLUETOOTH_MAP_STATUS enum are returned. |
| WNF_BLTH_BLUETOOTH_CONNECTION_STATE_CHANGE | 0x992022FA3BC2075 | Indicates when a Bluetooth Device gets connected and disconnected |
| WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_REQUEST | 0x992022FA3BC2875 | Indicates that a legacy Gatt client request is present. The local radio and remote device BTH_ADDR are returned. |
| WNF_BLTH_BLUETOOTH_GATT_CLIENT_LEGACY_INVALIDATE_TOKEN | 0x992022FA3BC3075 | Indicates that a legacy Gatt client request was no longer present. The previously granted access token to be revoked is returned. |
| WNF_BLTH_BLUETOOTH_QUICKPAIR_STATUS_CHANGED | 0x992022FA3BC3875 | Notification that the user requested a change to the status of the QuickPair engine. |
| WNF_BLTH_BLUETOOTH_AVRCP_VOLUME_CHANGED | 0x992022FA3BC4075 | Notification that the user has changed the volume level using AVRCP on a Bluetooth peripheral. |
| WNF_BLTH_BLUETOOTH_DEVICE_BATTERY_IS_LOW | 0x992022FA3BC4875 | Notification that a Bluetooth device’s battery is low. |
| WNF_BLTH_BLUETOOTH_LE_ADV_SCANNING_STATUS | 0x992022FA3BC5075 | Exposes the status of Bluetooth LE Advertisement scanning. |
| WNF_BLTH_BLUETOOTH_SHOW_PBAP_CONSENT | 0x992022FA3BC5875 | Signals for the PBAP Consent UI to be shown |
| WNF_BLTH_BLUETOOTH_DEVICE_DOCK_STATUS | 0x992022FA3BC6075 | Aggregated status for one or more Bluetooth peripheral charging docks located on the system. |
| WNF_BLTH_BLUETOOTH_HFP_HF_LINE_AVAILABLE | 0x992022FA3BC6875 | Notification that a HFP Hands-Free line is available. BTAGService can publish. Authenticated users and PhoneSvc can subscribe. |
| WNF_BLTH_BLUETOOTH_HFP_AG_DIAL | 0x992022FA3BC7075 | Notification that a dial command has been recieved from the remote hands-free device. Payload contains the phonenumber to dial. BTAGService can publish when testhooks enabled. |
| WNF_BOOT_DIRTY_SHUTDOWN | 0x1589012FA3BC0875 | The state is published once the previous shutdown was not clean. |
| WNF_BOOT_INVALID_TIME_SOURCE | 0x1589012FA3BC1075 | The state is published if system time is initialized with a backup time source. |
| WNF_BOOT_MEMORY_PARTITIONS_RESTORE | 0x1589012FA3BC1875 | The state reflects memory partiton restoration state (nothing to restore, restore in progress, restore completed, failure) |
| WNF_BRI_ACTIVE_WINDOW | 0x418F1C2FA3BC0875 | Notifies brightness classes of the active window in order to apply their brightness preferences |
| WNF_BI_BROKER_WAKEUP_CHANNEL | 0x41C6072FA3BC0875 | Background work execution trigger |
| WNF_BI_USER_LOGON_CHANNEL | 0x41C6072FA3BC1075 | BI user logon system state notification channel |
| WNF_BI_USER_LOGOFF_CHANNEL | 0x41C6072FA3BC1875 | BI user logoff system state notification channel |
| WNF_BI_SESSION_CONNECT_CHANNEL | 0x41C6072FA3BC2075 | BI session connect system state notification channel |
| WNF_BI_SESSION_DISCONNECT_CHANNEL | 0x41C6072FA3BC2875 | BI session disconnect system state notification channel |
| WNF_BI_APPLICATION_UNINSTALL_CHANNEL | 0x41C6072FA3BC3075 | BI application uninstall system state notification channel |
| WNF_BI_APPLICATION_SERVICING_START_CHANNEL | 0x41C6072FA3BC3875 | BI application servicing start system state notification channel |
| WNF_BI_APPLICATION_SERVICING_STOP_CHANNEL | 0x41C6072FA3BC4075 | BI application servicing stop system state notification channel |
| WNF_BI_LOCK_SCREEN_UPDATE_CHANNEL | 0x41C6072FA3BC4875 | BI lock screen update system state notification channel |
| WNF_BI_EVENT_DELETION | 0x41C6072FA3BC5075 | BI event deletion system state notification channel |
| WNF_BI_PSM_TEST_HOOK_CHANNEL | 0x41C6072FA3BC5875 | PSM policy test hook |
| WNF_BI_QUIET_MODE_UPDATE_CHANNEL | 0x41C6072FA3BC6075 | BI Quiet Mode update system state notification channel |
| WNF_BI_BI_READY | 0x41C6072FA3BC6835 | Indicates that BI is ready and also publish channels list for each session |
| WNF_BI_NOTIFY_NEW_SESSION | 0x41C6072FA3BC7075 | BI notify new session system state notification channel |
| WNF_BI_QUERY_APP_USAGE | 0x41C6072FA3BC7875 | PSM notification to clients for querying application performance usage |
| WNF_BI_NETWORK_LIMITED_CHANNEL | 0x41C6072FA3BC8075 | Notification that the system is entering or exiting a network limited standby |
| WNF_BSC_SETTING_CHANGED | 0x41851D2FA3BC0875 | IE setting changed |
| WNF_CCTL_BUTTON_REQUESTS | 0xD920D2EA3BC08B5 | A button press has caused a request. |
| WNF_CAM_APPDIAGNOSTICS_ACCESS_CHANGED | 0x418B0F2EA3BC0935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_APPOINTMENTS_ACCESS_CHANGED | 0x418B0F2EA3BC1135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_BLUETOOTH_ACCESS_CHANGED | 0x418B0F2EA3BC1935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_CAMERA_ACCESS_CHANGED | 0x418B0F2EA3BC2135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_CELLULARDATA_ACCESS_CHANGED | 0x418B0F2EA3BC2935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_CHAT_ACCESS_CHANGED | 0x418B0F2EA3BC3135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_CONTACTS_ACCESS_CHANGED | 0x418B0F2EA3BC3935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_EMAIL_ACCESS_CHANGED | 0x418B0F2EA3BC4135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_HID_ACCESS_CHANGED | 0x418B0F2EA3BC4935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_LOCATION_ACCESS_CHANGED | 0x418B0F2EA3BC5135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_MICROPHONE_ACCESS_CHANGED | 0x418B0F2EA3BC5935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_PHONECALL_ACCESS_CHANGED | 0x418B0F2EA3BC6135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_PHONECALLHISTORY_ACCESS_CHANGED | 0x418B0F2EA3BC6935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_POS_ACCESS_CHANGED | 0x418B0F2EA3BC7135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_RADIOS_ACCESS_CHANGED | 0x418B0F2EA3BC7935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_SENSORSCUSTOM_ACCESS_CHANGED | 0x418B0F2EA3BC8135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_SERIAL_ACCESS_CHANGED | 0x418B0F2EA3BC8935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_USB_ACCESS_CHANGED | 0x418B0F2EA3BC9135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_USERACCOUNTINFO_ACCESS_CHANGED | 0x418B0F2EA3BC9935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_USERDATATASKS_ACCESS_CHANGED | 0x418B0F2EA3BCA135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_USERNOTIFICATIONLISTENER_ACCESS_CHANGED | 0x418B0F2EA3BCA935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_DOCUMENTSLIBRARY_ACCESS_CHANGED | 0x418B0F2EA3BCB135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_PICTURESLIBRARY_ACCESS_CHANGED | 0x418B0F2EA3BCB935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_VIDEOSLIBRARY_ACCESS_CHANGED | 0x418B0F2EA3BCC135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_GAZEINPUT_ACCESS_CHANGED | 0x418B0F2EA3BCC935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_BROADFILESYSTEMACCESS_ACCESS_CHANGED | 0x418B0F2EA3BCD135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_ACTIVITY_ACCESS_CHANGED | 0x418B0F2EA3BCD935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_BLUETOOTHSYNC_ACCESS_CHANGED | 0x418B0F2EA3BCE135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_WIFIDIRECT_ACCESS_CHANGED | 0x418B0F2EA3BCE935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_APPACTIVATION_WITHVOICE_CHANGED | 0x418B0F2EA3BCF135 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_APPACTIVATION_WITHVOICEABOVELOCK_CHANGED | 0x418B0F2EA3BCF935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_APPDIAGNOSTICS_USAGE_CHANGED | 0x418B0F2EA3BD0135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_APPOINTMENTS_USAGE_CHANGED | 0x418B0F2EA3BD0935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_CAMERA_USAGE_CHANGED | 0x418B0F2EA3BD1135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_CELLULARDATA_USAGE_CHANGED | 0x418B0F2EA3BD1935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_CHAT_USAGE_CHANGED | 0x418B0F2EA3BD2135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_CONTACTS_USAGE_CHANGED | 0x418B0F2EA3BD2935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_EMAIL_USAGE_CHANGED | 0x418B0F2EA3BD3135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_LOCATION_USAGE_CHANGED | 0x418B0F2EA3BD3935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_MICROPHONE_USAGE_CHANGED | 0x418B0F2EA3BD4135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_PHONECALL_USAGE_CHANGED | 0x418B0F2EA3BD4935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_PHONECALLHISTORY_USAGE_CHANGED | 0x418B0F2EA3BD5135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_RADIOS_USAGE_CHANGED | 0x418B0F2EA3BD5935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_USERACCOUNTINFO_USAGE_CHANGED | 0x418B0F2EA3BD6135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_USERDATATASKS_USAGE_CHANGED | 0x418B0F2EA3BD6935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_USERNOTIFICATIONLISTENER_USAGE_CHANGED | 0x418B0F2EA3BD7135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_DOCUMENTSLIBRARY_USAGE_CHANGED | 0x418B0F2EA3BD7935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_PICTURESLIBRARY_USAGE_CHANGED | 0x418B0F2EA3BD8135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_VIDEOSLIBRARY_USAGE_CHANGED | 0x418B0F2EA3BD8935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_GAZEINPUT_USAGE_CHANGED | 0x418B0F2EA3BD9135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_BROADFILESYSTEMACCESS_USAGE_CHANGED | 0x418B0F2EA3BD9935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_ACTIVITY_USAGE_CHANGED | 0x418B0F2EA3BDA135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_DOWNLOADSFOLDER_ACCESS_CHANGED | 0x418B0F2EA3BDA935 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_DOWNLOADSFOLDER_USAGE_CHANGED | 0x418B0F2EA3BDB135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_WIFIDATA_ACCESS_CHANGED | 0x418B0F2EA3BDB935 | Event fired when access to the corresponding named app capability changes |
| WNF_CAM_WIFIDATA_USAGE_CHANGED | 0x418B0F2EA3BDC135 | Event fired when usage of the corresponding named app capability changes |
| WNF_CAM_BACKGROUNDSPATIALPERCEPTION_ACCESS_CHANGED | 0x418B0F2EA3BDC935 | Event fired when access to the corresponding named app capability changes |
| WNF_CDP_CDPSVC_READY | 0x41960A2EA3BC0875 | Indicates CDP Service is ready |
| WNF_CDP_CDPSVC_STOPPING | 0x41960A2EA3BC1075 | Indicates CDP Service is stopping |
| WNF_CDP_CDPUSERSVC_READY | 0x41960A2EA3BC1835 | Indicates CDP User Service is ready |
| WNF_CDP_CDPUSERSVC_STOPPING | 0x41960A2EA3BC2035 | Indicates CDP User Service is stopping |
| WNF_CDP_CDP_MESSAGES_QUEUED | 0x41960A2EA3BC2875 | Indicates CDP service queued the message(s) for designated applications |
| WNF_CDP_CDP_ACTIVITIES_RECIEVED | 0x41960A2EA3BC3075 | Indicates CDP service received new activities |
| WNF_CDP_USERAUTH_POLICY_CHANGE | 0x41960A2EA3BC3875 | Indicates that the user has changed the CDP policy |
| WNF_CDP_CDP_NOTIFICATION_ACTION_FORWARD_FAILURE | 0x41960A2EA3BC4075 | Indicates failure either delivering or invoking a Notification Action on a remote device |
| WNF_CDP_USER_ROME_SETTING_CHANGE | 0x41960A2EA3BC4835 | Indicates that the user has changed Rome SDK authorization setting |
| WNF_CDP_USER_NEAR_SHARE_SETTING_CHANGE | 0x41960A2EA3BC5035 | Indicates that the user has changed Near Share authorization setting |
| WNF_CDP_ENABLE_ACTIVITYFEED_POLICY_CHANGE | 0x41960A2EA3BC5875 | Indicates whether ActivityFeed is enabled. It is responsible for mirroring different activity types (as applicable) across device graph of the user. |
| WNF_CDP_PUBLISH_USER_ACTIVITIES_POLICY_CHANGE | 0x41960A2EA3BC6075 | Indicates the settings policy (enabled/disabled) for ‘User Activity’ publishing has changed. |
| WNF_CDP_CDP_LOCAL_ACTIVITIES_RECIEVED | 0x41960A2EA3BC6875 | Indicates CDP service received local activities |
| WNF_CDP_USER_RESOURCE_INFO_CHANGED | 0x41960A2EA3BC7075 | Indicates the persisted values associated with a resource has changed. |
| WNF_CDP_UPLOAD_USER_ACTIVITIES_POLICY_CHANGE | 0x41960A2EA3BC7875 | Indicates the settings policy (enabled/disabled) for ‘User Activity’ upload has changed. |
| WNF_CDP_ALLOW_CLIPBOARDHISTORY_POLICY_CHANGE | 0x41960A2EA3BC8075 | Indicates clipboard history policy has changed. |
| WNF_CDP_ALLOW_CROSSDEVICECLIPBOARD_POLICY_CHANGE | 0x41960A2EA3BC8875 | Indicates cross device clipboard policy has changed. |
| WNF_CELL_POWER_STATE_MODEM0 | 0xD8A0B2EA3BC0875 | Modem power state of the first modem, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_EVERYONE, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SIGNAL_STRENGTH_BARS_CAN0 | 0xD8A0B2EA3BC1075 | Number of bars (0..5) of signal strength for the first cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SYSTEM_TYPE_CAN0 | 0xD8A0B2EA3BC1875 | System type of the first cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_STATUS_CAN0 | 0xD8A0B2EA3BC2075 | Current registration status of the first cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_STATUS_SLOT0 | 0xD8A0B2EA3BC2875 | Status of the UICC in the first slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_AIRPLANEMODE | 0xD8A0B2EA3BC3075 | The current state of airplanemode. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_OPERATOR_NAME_CAN0 | 0xD8A0B2EA3BC3875 | Current serving operator for the first cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CDMA_ACTIVATION_CAN0 | 0xD8A0B2EA3BC4075 | Activation, PRL, and provisioning state for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_NETWORK_TIME_CAN0 | 0xD8A0B2EA3BC4875 | NITZ information for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_AVAILABLE_OPERATORS_CAN0 | 0xD8A0B2EA3BC5075 | List of available operators for the first cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_DEVICE_INFO_CAN0 | 0xD8A0B2EA3BC5875 | Device info (RIL_GetDeviceInfo) for the first cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_DATA_ENABLED_BY_USER_MODEM0 | 0xD8A0B2EA3BC6475 | Cellular data enabled state as set by user. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PHONE_NUMBER_CAN0 | 0xD8A0B2EA3BC6875 | Phone number (MSISDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_VOICEMAIL_NUMBER_CAN0 | 0xD8A0B2EA3BC7075 | Voicemail number (MBDN) for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_PREFERENCES_CAN0 | 0xD8A0B2EA3BC7C75 | Registration preferences for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CAN_STATE_CAN0 | 0xD8A0B2EA3BC8075 | Can state (between CellManager and CellUX) for the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0 | 0xD8A0B2EA3BC8C75 | Power state of the modem as last preferred by the user, values defined by MODEMPOWERSTATE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_AIRPLANEMODE_DETAILS | 0xD8A0B2EA3BC9075 | The current state of airplanemode details. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and Airplanemode (service) in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0 | 0xD8A0B2EA3BC9875 | This is triggered if cellcore suspects that data activity may have been affected. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SYSTEM_CONFIG | 0xD8A0B2EA3BCA475 | Root state describing cellular system configuration (all modems and their cans). SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0 | 0xD8A0B2EA3BCA875 | Detailed registration status of the first cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_EVERYONE, ID_CAP_ISV_CAMERA, WwanSvc, ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0 | 0xD8A0B2EA3BCB075 | bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PERSO_STATUS_CAN0 | 0xD8A0B2EA3BCB875 | bitmask of supported system types by the first cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_HOME_OPERATOR_CAN0 | 0xD8A0B2EA3BCC075 | MCC, MNC (or SID, NID) of the ‘home’ operator. SDDL comes from ID_CAP_CAMERA, ID_CAP_CELL_WNF, ID_CAP_ISV_CAMERA and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_HOME_PRL_ID_CAN0 | 0xD8A0B2EA3BCC875 | PRL ID of ‘home’ operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UTK_SETUP_MENU_SLOT0 | 0xD8A0B2EA3BCE875 | UICC toolkit setup menu notification for slot 0. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UTK_PROACTIVE_CMD | 0xD8A0B2EA3BCF075 | UICC toolkit proactive command notification for all slots. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CSP_WWAN_PLUS_READYNESS | 0xD8A0B2EA3BCF875 | CM CSPWWAN+ readyness state. SDDL comes from ID_CAP_CMCSPWWAN_PLUS in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_CELL_CALLFORWARDING_STATUS_CAN0 | 0xD8A0B2EA3BD0075 | Call-forwarding status for the first cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_RADIO_TYPE_MODEM0 | 0xD8A0B2EA3BD0C75 | Modem radio type of the first modem, values defined by RILRADIOCONFIGURATIONRADIOTYPE. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SIGNAL_STRENGTH_BARS_CAN1 | 0xD8A0B2EA3BD1075 | Number of bars (0..5) of signal strength for the second cellular can. In the case of dual registration (SVLTE or CDMA) this is the primary signal strength. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SYSTEM_TYPE_CAN1 | 0xD8A0B2EA3BD1875 | System type of the second cellular Can, a bitmask of RIL_SYSTEMTYPE_ values. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_STATUS_CAN1 | 0xD8A0B2EA3BD2075 | Current registration status of the second cellular can, bits defined by RILREGSTAT. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_STATUS_SLOT1 | 0xD8A0B2EA3BD2875 | Status of the UICC in the second slot. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_OPERATOR_NAME_CAN1 | 0xD8A0B2EA3BD4075 | Current serving operator for the second cellular can, name as a Unicode string. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CDMA_ACTIVATION_CAN1 | 0xD8A0B2EA3BD4875 | Activation, PRL, and provisioning state for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_NETWORK_TIME_CAN1 | 0xD8A0B2EA3BD5075 | NITZ information for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, WwanSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_AVAILABLE_OPERATORS_CAN1 | 0xD8A0B2EA3BD5875 | List of available operators for the second cellular can, an array of RILOPERATORINFO. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_DEVICE_INFO_CAN1 | 0xD8A0B2EA3BD6075 | Device info (RIL_GetDeviceInfo) for the second cellular can, as a set of Unicode strings. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PHONE_NUMBER_CAN1 | 0xD8A0B2EA3BD7075 | Phone number (MSISDN) for the second cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_PREFERENCES_CAN1 | 0xD8A0B2EA3BD8C75 | Registration preferences for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CAN_STATE_CAN1 | 0xD8A0B2EA3BD9075 | Can state (between CellManager and CellUX) for the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1 | 0xD8A0B2EA3BD9875 | Detailed registration status of the second cellular can, defined by WNFCELLSTATETYPE(REGISTRATION_STATUS_DETAILS). SDDL comes from ID_CAP_CELL_WNF, ID_CAP_EVERYONE, WwanSvc, ImsSvc and tzautoupdate in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1 | 0xD8A0B2EA3BDA075 | bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_HOME_OPERATOR_CAN1 | 0xD8A0B2EA3BDA875 | MCC, MNC (or SID, NID) of the ‘home’ operator. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_HOME_PRL_ID_CAN1 | 0xD8A0B2EA3BDB075 | PRL ID of ‘home’ operator. Is Valid only if there is a valid 3GPP2 line available. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UTK_SETUP_MENU_SLOT1 | 0xD8A0B2EA3BDD075 | UICC toolkit setup menu notification for slot 1. SDDL comes from ID_CAP_CELL_WNF_PII and UtkService in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CALLFORWARDING_STATUS_CAN1 | 0xD8A0B2EA3BDE075 | Call-forwarding status for the second cellular can. The same struct is used to indicate the latest state for a given callforwarding-reason. SDDL comes from ID_CAP_CELL_API_TELEPHONY, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PERSO_STATUS_CAN1 | 0xD8A0B2EA3BDE875 | bitmask of supported system types by the second cellular can. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CONFIGURED_LINES_CAN0 | 0xD8A0B2EA3BDF475 | Configured lines for the first cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CONFIGURED_LINES_CAN1 | 0xD8A0B2EA3BDFC75 | Configured lines for the second cellular can. SDDL comes from ID_CAP_CELL_API_COMMON, ID_CAP_CELL_WNF, ImsSvc and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_STATUS_DETAILS_SLOT0 | 0xD8A0B2EA3BE0075 | Status details of the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_STATUS_DETAILS_SLOT1 | 0xD8A0B2EA3BE0875 | Status details of the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PREFERRED_LANGUAGES_SLOT0 | 0xD8A0B2EA3BE1075 | Preferred languages in the first slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PREFERRED_LANGUAGES_SLOT1 | 0xD8A0B2EA3BE1875 | Preferred languages in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IMSI_CAN0 | 0xD8A0B2EA3BE2075 | IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IMSI_CAN1 | 0xD8A0B2EA3BE2875 | IMSI for the first cellular can, as a Unicode string. SDDL comes from ID_CAP_CELL_WNF_PII and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_LEGACY_SETTINGS_MIGRATION | 0xD8A0B2EA3BE3075 | Migration action for legacy cellcore settings. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_ATR_SLOT0 | 0xD8A0B2EA3BE3875 | Answer to reset from the UICC in the first slot. SDDL comes from ID_CAP_CELL_WNF in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_ATR_SLOT1 | 0xD8A0B2EA3BE4075 | Answer to reset from the UICC in the second slot. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_SIMSEC_SLOT0 | 0xD8A0B2EA3BE4875 | Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 0. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_SIMSEC_SLOT1 | 0xD8A0B2EA3BE5075 | Indication for Phone subsystem to show Sim Security (PIN, Perso) related UI for Slot 1. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0 | 0xD8A0B2EA3BE5875 | Indication that all executors have been configured and that there are no outstanding configurations pending in the modem. SDDL comes from WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_REGISTRATION_CHANGED_TRIGGER_MV | 0xD8A0B2EA3BE6075 | This is published when cellcore needs MV to kick in. SDDL comes from ID_CAP_EVERYONE, ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0 | 0xD8A0B2EA3BE7075 | Signal-strength details for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1 | 0xD8A0B2EA3BE7875 | Signal-strength details for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_EMERGENCY_CALLBACK_MODE_STATUS | 0xD8A0B2EA3BE6875 | Indication about the current emergency callback mode. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IMS_STATUS_CAN0 | 0xD8A0B2EA3BE8075 | Current IMS registration for Can 0. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IMS_STATUS_CAN1 | 0xD8A0B2EA3BE8875 | Current IMS registration for Can 1. SDDL comes from ID_CAP_EVERYONE and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IWLAN_AVAILABILITY_CAN0 | 0xD8A0B2EA3BE9075 | iWLAN availability for Can 0, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_IWLAN_AVAILABILITY_CAN1 | 0xD8A0B2EA3BE9875 | iWLAN availability for Can 1, value is BOOLEAN. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PS_MEDIA_PREFERENCES_CAN0 | 0xD8A0B2EA3BEA475 | PS Media preferences for Can 0, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_PS_MEDIA_PREFERENCES_CAN1 | 0xD8A0B2EA3BEAC75 | PS Media preferences for Can 1, a DWORD and an array of CellularMediaConfigration. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_WIFI_CALL_SETTINGS_CAN0 | 0xD8A0B2EA3BEB075 | Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_WIFI_CALL_SETTINGS_CAN1 | 0xD8A0B2EA3BEB875 | Reports if executor is capable of Wi-fi calling. SDDL comes from ID_CAP_CELL_WNF and WwanSvc in %SDXROOT%\src\net\Cellcore\packages\Cellcore\Cellcore.pkg.xml |
| WNF_CELL_UICC_PIN_STATE_SLOT0 | 0xD8A0B2EA3BEC075 | Reports detailed states of PIN on slot 0. It is private for Wwansvc access only |
| WNF_CELL_UICC_PIN_STATE_SLOT1 | 0xD8A0B2EA3BEC875 | Reports detailed states of PIN on slot 1. It is private for Wwansvc access only |
| WNF_CELL_NITZ_INFO | 0xD8A0B2EA3BED075 | NITZ information received from the modem. SDDL comes from ID_CAP_CELL_WNF, WwanSvc and tzautoupdate |
| WNF_WWAN_OBJECT_LIST | 0xF87193AA3BC0875 | Table of all modems and executors under it. |
| WNF_WWAN_EUICC_ARRIVAL | 0xF87193AA3BC1075 | This event is published by WwanSvc to indicate the arrival of an eUICC. |
| WNF_WWAN_CELLULAR_STATE_SNAPSHOT_CHANGE | 0xF87193AA3BC1875 | This event is published by WwanSvc to indicate a change in cellular state snapshot. |
| WNF_WWAN_TASK_TRIGGER | 0xF87193AA3BC2075 | State name triggering WiFiTask from WwanSvc. |
| WNF_WWAN_OOBE_DISCOVERY_TASK_TRIGGER | 0xF87193AA3BC2875 | Event to trigger Oobe Discovery Task. |
| WNF_SMSR_READY | 0x1395033EA3BC0875 | Sms Router Broker is ready. |
| WNF_SMSR_WWAN_READ_DONE | 0x1395033EA3BC1075 | Sms Router Broker is ready. |
| WNF_SMSR_NEW_MESSAGE_RECEIVED | 0x1395033EA3BC1875 | Sms Router received a new incoming SMS message. |
| WNF_IMS_PUSH_NOTIFICATION_RECEIVED | 0x41950324A3BC0875 | Push Notification Received from Entitlement Server |
| WNF_MBAE_ACCOUNT_PARSED | 0x4870C20A3BC0875 | MBAE Parser Task has successfully parsed the Account from Device Metadata |
| WNF_CERT_FLUSH_CACHE_TRIGGER | 0x15940B2EA3BC0875 | This event signals flush cache in all processes where flush is enabled. |
| WNF_CERT_FLUSH_CACHE_STATE | 0x15940B2EA3BC1075 | This event signals when flush cache was started and completed in each process where enabled. |
| WNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGED | 0x12960F2EA3BC0875 | Central Access Policies have been updated |
| WNF_CLIP_CONTENT_CHANGED | 0x118F022EA3BC0875 | This notification is triggered when contents on the clipboard change |
| WNF_CLIP_HISTORY_CHANGED | 0x118F022EA3BC1035 | This notification is triggered when contents of the clipboard history change |
| WNF_CLIP_ROAMING_CLIPBOARD_ENABLED_CHANGED | 0x118F022EA3BC1835 | This notification is triggered when roaming clipboard enabled/disabled setting value changes |
| WNF_CLIP_CLIPBOARD_HISTORY_ENABLED_CHANGED | 0x118F022EA3BC2035 | This notification is triggered when clipboard history enabled/disabled setting value changes |
| WNF_CLIP_CLIPBOARD_USERSVC_READY | 0x118F022EA3BC2835 | Indicates Clipboard User Service is ready |
| WNF_CLIP_CLIPBOARD_USERSVC_STOPPED | 0x118F022EA3BC3035 | Indicates Clipboard User Service has stopped |
| WNF_CXH_WEBAPP_STATUS | 0x418E162EA3BC0835 | Notification of web app status change. Payload is status type plus web app cxid of length 512 |
| WNF_CXH_APP_FINISHED | 0x418E162EA3BC1035 | Notification when CloudExperienceHost app is finished. Payload is result plus result string of length 512 |
| WNF_CXH_BACK_STATE | 0x418E162EA3BC1835 | Notification of web app back button state. Payload is a boolean for on/off |
| WNF_CXH_BACK | 0x418E162EA3BC2035 | Notification when back command is issued |
| WNF_CXH_OOBE_APP_READY | 0x418E162EA3BC2875 | System-wide signal that the CloudExperienceHost app launched during OOBE is ready with its first webapp visible. Payload is a boolean for true/false |
| WNF_CMFC_FEATURE_CONFIGURATION_CHANGED | 0x280032EA3BC0875 | This notification is raised when a change to the system’s feature configuration is made. The payload contains the current feature configuration change stamp. |
| WNF_CI_SMODE_CHANGE | 0x41C6072EA3BC0875 | This event signals that change of S mode has occurred. |
| WNF_CI_HVCI_IMAGE_INCOMPATIBLE | 0x41C6072EA3BC1075 | This event signals that an image has been blocked from loading as it is incompatible with HVCI. |
| WNF_CI_BLOCKED_DRIVER | 0x41C6072EA3BC1875 | This event signals that an image has been blocked from loading by PNP |
| WNF_CSHL_COMPOSER_LAUNCH_READY | 0xD8E1D2EA3BC0835 | Core shell has initialized, including all of its services (e.g. TLAVM), and the Product Composer can be launched. If the event has not been fired, then CoreShell is still initializing and the Composer cannot be launched. Payload is a DWORD to inidicate it has been fired. |
| WNF_CSHL_UI_AUTOMATION | 0xD8E1D2EA3BC1035 | On UI Automation. |
| WNF_CSHL_VIEWHOSTING_READY | 0xD8E1D2EA3BC2035 | Fired every time a Composer registers with TLAVM and inidicates that the composer is ready to host applications. If the event has not been fired, then no composer is ready to host applications. Payload is a DWORD to inidicate it has been fired. |
| WNF_CSHL_PRODUCT_READY | 0xD8E1D2EA3BC2835 | Fired every time a Product Composer has finished initializing and indicates that Shell has entered normal operations (i.e. not in restricted mode or running OOBE/PostUpdateUX). If the event has not been fired, then the Product Composer is still initializing. Payload is a DWORD to inidicate it has been fired. |
| WNF_CSHL_COMPOSER_TEARDOWN | 0xD8E1D2EA3BC3035 | When set to the value 1, it indicates that the current composer has finished unintializing. |
| WNF_CSHL_COMPOSER_CONTEXT_CHANGED | 0xD8E1D2EA3BC3835 | Indicates the composer has changed which updates the registry (ComposerManagerBaseKey) indicating which composer can be restored after a crash |
| WNF_CSHL_SKIP_OOBE_CXH | 0xD8E1D2EA3BC4035 | Fired when a test job wants to skip CXH stage of OOBE |
| WNF_CFCL_SC_CONFIGURATIONS_CHANGED | 0xD85082EA3BC0875 | Triggered each time one or more flight configurations changes. |
| WNF_CFCL_SC_CONFIGURATIONS_DELETED | 0xD85082EA3BC1075 | Triggered each time one or more flight configurations is deleted. |
| WNF_CFCL_SC_CONFIGURATIONS_ADDED | 0xD85082EA3BC1875 | Triggered each time one or more flight configurations is added. |
| WNF_CONT_RESTORE_FROM_SNAPSHOT_COMPLETE | 0x1588012EA3BC0875 | Components blocked waiting for restore from snapshot can now continue |
| WNF_CSH_LAUNCH_EXPLORER_REQUESTED | 0x418E1D2EA3BC08F5 | A request has been raised for CustomShellHost to launch Explorer.exe as shell |
| WNF_DO_MANAGER_ACTIVE | 0x41C60129A3BC0875 | This event triggers when the Delivery Optimization service manager is active or idle |
| WNF_DO_POLICY_CHANGED | 0x41C60129A3BC1075 | Delivery Optimization system policy has been updated |
| WNF_DBA_DEVICE_ACCESS_CHANGED | 0x41870C29A3BC0875 | This event triggers when the user changes device access for an applocation or the user |
| WNF_SFA_AUTHENTICATION_STAGE_CHANGED | 0x4187083EA3BC0875 | This event signals when authentication stage change. |
| WNF_DSM_DSMAPPINSTALLED | 0x418B1D29A3BC0C75 | Notification for when an app is installed so we can register a device background task if necessary. |
| WNF_DSM_DSMAPPREMOVED | 0x418B1D29A3BC1475 | Notification for when an app is removed so we can clean up any registered device background tasks if necessary. |
| WNF_DMF_MIGRATION_STARTED | 0x41800329A3BC0875 | Signals that Migration started. DWORD[1] = {started flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml |
| WNF_DMF_MIGRATION_COMPLETE | 0x41800329A3BC1075 | Signals that Migration completed. DWORD[2] = {completed flag, status}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml |
| WNF_DMF_MIGRATION_PROGRESS | 0x41800329A3BC1875 | Current Migration state. DWORD[4] = {Phase, Total Phases, Step, Total Steps}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS and DuMigrationManager in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml |
| WNF_DMF_UX_COMPLETE | 0x41800329A3BC2075 | Signals when data migration is complete after reboot and update results need to be displayed. DWORD[1] = {completed flag}. SDDL comes from ID_CAP_DU_MIGRATION_WNF_EVENTS in %SDXROOT%\src\devmgmt\du\packages\Migration\Migration.pkg.xml and DuPostUpdateUX in %SDXROOT%\src\devmgmt\du\packages\UX\UX.pkg.xml and WINCAP_SHELL_EXPERIENCE_COMPOSER in %SDXROOT%\shellcommon\Composable\Core\dll\microsoft-windows-coreshell.wm.xml |
| WNF_DCSP_POLICIES_UPDATED | 0x11950D29A3BC0875 | Some value under Policies registry key has been updated |
| WNF_DX_STEREO_CONFIG | 0x41C61629A3BC0C75 | State stores the current stereo cpl setting. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_MODE_CHANGE_NOTIFICATION | 0x41C61629A3BC1035 | Triggered by kernel when mode change happens. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_OCCLUSION_CHANGE_NOTIFICATION | 0x41C61629A3BC1835 | Triggered by kernel when any occlusion related OS state change happens. |
| WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATION | 0x41C61629A3BC2035 | Triggered by kernel when the state of a network display device is changed. |
| WNF_DX_MONITOR_CHANGE_NOTIFICATION | 0x41C61629A3BC2835 | Triggered by kernel when monitor change happens. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_VIDMM_TRIM_NOTIFICATION | 0x41C61629A3BC30B5 | Triggered by kernel when video memory has to be trimmed. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATION | 0x41C61629A3BC3875 | Triggered by kernel when video memory budget for an application changes. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATION | 0x41C61629A3BC4075 | Triggered by hardware content protection tilt detection. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_INTERNAL_PANEL_DIMENSIONS | 0x41C61629A3BC4875 | Stores information about the physical dimensions (in mm) of the integrated panel if available, and 0’s if not. |
| WNF_DX_MODERN_OUTPUTDUPLICATION | 0x41C61629A3BC5035 | Triggered when a lowbox application starts or stops using OutputDuplication. |
| WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATION | 0x41C61629A3BC5835 | Triggered by kernel when a change is made to the display configuration. |
| WNF_DX_DEVICE_REMOVAL | 0x41C61629A3BC60B5 | Triggered when a device has been removed for any reason, not just adapter removal. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_DX_MODERN_OUTPUTDUPLICATION_CONTEXTS | 0x41C61629A3BC6835 | Triggered when a lowbox application starts or stops using OutputDuplication and provides list of active lowbox contexts |
| WNF_DX_COLOR_PROFILE_CHANGE | 0x41C61629A3BC7075 | Triggered when the default color profile for any attached display changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_DX_GPM_TARGET | 0x41C61629A3BC7875 | State is used to indicate the process that should be targeted by GPM. |
| WNF_DX_CONSOLE_ADAPTER_START | 0x41C61629A3BC8075 | Triggered by kernel when a GPU is started. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_CONSOLE_ADAPTER_STOP | 0x41C61629A3BC8875 | Triggered by kernel when a GPU is stopped. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_SDR_WHITE_LEVEL_CHANGED | 0x41C61629A3BC9035 | Triggered by kernel when SDR white level value is changed for any display. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_DX_COLOR_OVERRIDE_STATE_CHANGE | 0x41C61629A3BC9875 | Triggered when any of the color overrides are changed for any display. |
| WNF_DX_DISPLAY_COLORIMETRY_DATA_CHANGED | 0x41C61629A3BCA075 | Triggered by kernel when colorimetry data is changed for any display. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_DX_VAIL_CHANGE_NOTIFICATION | 0x41C61629A3BCA8B5 | Triggered when Vail states are changed for this remote session on virtual machine. |
| WNF_DX_ADAPTIVE_COLOR_FORCED_STATE_CHANGE | 0x41C61629A3BCB075 | Triggered when the default color profile changes, as this may force on/off adaptive color. |
| WNF_DX_REMOTE_ADAPTER_START | 0x41C61629A3BCB835 | Triggered by kernel when a sessionized graphics adapter is started. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DX_REMOTE_ADAPTER_STOP | 0x41C61629A3BCC035 | Triggered by kernel when a sessionized graphics adapter is stopped. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_DISK_SCRUB_REQUIRED | 0xA950729A3BC0875 | This event signals when a disk that requires scrubbing is brought online |
| WNF_DISP_DISPLAY_CHANGE | 0x11950729A3BC0875 | Triggered when HMONITOR configuration changes. |
| WNF_DISP_WORKAREA_CHANGE | 0x11950729A3BC1075 | Triggered when the work area of at least one HMONITOR changes. |
| WNF_DXGK_ADAPTER_TDR_NOTIFICATION | 0xA811629A3BC0875 | Triggered by the kernel when any adapter receives a TDR or PNP event. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_DXGK_PATH_FAILED_OR_INVALIDATED | 0xA811629A3BC1075 | Triggered by the kernel when an active display path asynchronously transitions to either a failed or invalidated state |
| WNF_DNS_ALL_SERVER_TIMEOUT | 0x41950029A3BC1075 | When all the DNS Servers Timeout, this event is notified |
| WNF_DWM_RUNNING | 0x418B1929A3BC0835 | Triggered when the dwm starts/terminates |
| WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE_LOW_FRAMERATE | 0x418B1929A3BC1035 | Triggered when exclusive mode apps are presenting at a low framerate to the holographic compositor |
| WNF_DWM_HOLOGRAPHIC_COMPOSITOR_HAS_PROTECTED_CONTENT | 0x418B1929A3BC1835 | Triggered when the compositor toggles between not having and having (any) protected content |
| WNF_DWM_HOLOGRAPHIC_COMPOSITOR_LOW_FRAMERATE | 0x418B1929A3BC2035 | Triggered when 3D compositor is presenting at a low framerate |
| WNF_DWM_COMPOSITIONCAPABILITIES | 0x418B1929A3BC2835 | Triggered when the dwm composition capabilities changes |
| WNF_DWM_HOLOGRAPHIC_COMPOSITOR_EXCLUSIVE | 0x418B1929A3BC3035 | Triggered when exclusive mode apps are presenting in the holographic compositor |
| WNF_DWM_DUMP_REQUEST | 0x418B1929A3BC3835 | Triggered when DWM requests dumps from other processes or the kernel for a given reason. |
| WNF_DWM_DISPLAY_RESET_REQUEST | 0x418B1929A3BC4035 | Triggered when DWM requests that a Display Stack reset is performed. |
| WNF_EAP_APPLICATION_HANDLE | 0x41960F28A3BC0875 | State name for holding application window handle of calling UX |
| WNF_EOA_NARRATOR_FOCUS_CHANGE | 0x41870128A3BC08F5 | Narrator has moved its focused region |
| WNF_EOA_NARRATOR_RUNNING | 0x41870128A3BC1075 | Represents whether Narrator is currently running. A 32-bit unsigned integer with a zero value meaning Narrator is off. |
| WNF_EOA_UISETTINGS_CHANGED | 0x41870128A3BC1875 | UISettings have changed. |
| WNF_EOA_ATMANAGER_ATS_STARTED | 0x41870128A3BC2035 | Indicates whether ATManager has already attempted to start user configured ATs for the current session. |
| WNF_EOA_NARRATOR_KEYBOARD_REMAP | 0x41870128A3BC2875 | Narrator keyboard remap state. 0 is the default value, 1 means keyboard remap page need to be opened. |
| WNF_EOA_MAGNIFIER_RENDERING_INPUT | 0x41870128A3BC3035 | Indicates if inbox Magnifier is rendering for the current input. 1 means Magnifier is rendering the input. |
| WNF_EDGE_LAST_NAVIGATED_HOST | 0x4810A28A3BC08F5 | This event is fired when a top level frame navigation is complete, the payload contains the host name |
| WNF_EDGE_EXTENSION_INSTALLED | 0x4810A28A3BC10F5 | This event is fired when an extension is installed. The payload is the extension id |
| WNF_EDGE_EXTENSION_AVAILABLE | 0x4810A28A3BC18F5 | This event is fired on edge open if any extension is installed |
| WNF_EDGE_INPRIVATE_EXTENSION_AVAILABLE | 0x4810A28A3BC20F5 | This event is fired on edge open if any extension, supported in InPrivate, is installed |
| WNF_EDP_TAGGED_APP_LAUNCHED | 0x41960A28A3BC0835 | The application was launched in the specified mode under the specified Enterprise context. |
| WNF_EDP_IDENTITY_REVOKED | 0x41960A28A3BC10F5 | The keys associated with a data protection identity were removed. |
| WNF_EDP_DPL_KEYS_STATE | 0x41960A28A3BC1875 | Current state of the Data Protection under Lock private keys |
| WNF_EDP_CLIPBOARD_METADATA_CHANGED | 0x41960A28A3BC2035 | Either a copy or override operation occurred, leading to clipboard metadata changes. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201. |
| WNF_EDP_DIALOG_CANCEL | 0x41960A28A3BC2835 | An EDP blocking dialog has been canceled programmatically. |
| WNF_EDP_APP_UI_ENTERPRISE_CONTEXT_CHANGED | 0x41960A28A3BC3035 | Application UI EDP context has been changed for the process. |
| WNF_EDP_AAD_REAUTH_REQUIRED | 0x41960A28A3BC3875 | The AAD token used by EDP has expired. |
| WNF_EDP_ENTERPRISE_CONTEXTS_UPDATED | 0x41960A28A3BC4475 | The EDP enterprise contexts have been updated. |
| WNF_EDP_PROCESS_UI_ENFORCEMENT | 0x41960A28A3BC4875 | EDP process UI enforcement global state. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201. |
| WNF_EDP_PROCESS_TLS_INDEX | 0x41960A28A3BC50B5 | EDP thread UI enforcement. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201. |
| WNF_EDP_DPL_KEYS_DROPPING | 0x41960A28A3BC5875 | Data Protection under Lock private keys will be dropped from memory shortly. |
| WNF_EDP_MISSING_CREDENTIALS | 0x41960A28A3BC6075 | EDP cred service cannot access credentials required |
| WNF_EDP_PURGE_APP_LEARNING_EVT | 0x41960A28A3BC6875 | Purge application learning events cache |
| WNF_EDP_CREDENTIALS_UPDATING | 0x41960A28A3BC7075 | Cred service is updating user credentials. |
| WNF_EDU_PRINTER_POLICY_CHANGED | 0x41930A28A3BC0875 | This event is triggered when an MDM printer policy is changed. |
| WNF_EFS_SERVICE_START | 0x41950828A3BC0875 | This event trigger-starts EFS service. |
| WNF_EFS_SOFTWARE_HIVE_AVAILABLE | 0x41950828A3BC1075 | EFS service needs to check GP at boot, which requires the SOFTWARE hive in HKLM. This signals its availability when EFS worker thread detects it. |
| WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGED | 0x13920028A3BC0875 | Current changed policy values represented as bits for the Device Lock policy area. SDDL comes from NgcctnrSvc in %SDXROOT%\src\baseos\prod\packages\ngc\ngc.pkg.xml and ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml, %sdxroot%\onecoreuap\admin\dm\wap\service\dmwappushservice.wm.xml |
| WNF_ENTR_WIFI_POLICY_VALUE_CHANGED | 0x13920028A3BC1075 | Current changed policy values represented as bits for the Wifi policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml. S-1-5-80-3935728946-315639613-922904133-3250794525-491832002 – IcsSvc (TetheringService) |
| WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGED | 0x13920028A3BC1875 | Current changed policy values represented as bits for the System policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xmlSDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_CONNECTIVITY_POLICY_VALUE_CHANGED | 0x13920028A3BC2075 | Current changed policy values represented as bits for the Connectivity policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_EXPERIENCE_POLICY_VALUE_CHANGED | 0x13920028A3BC2875 | Current changed policy values represented as bits for the Experience policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ACCOUNTS_POLICY_VALUE_CHANGED | 0x13920028A3BC3075 | Current changed policy values represented as bits for the Accounts policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_SECURITY_POLICY_VALUE_CHANGED | 0x13920028A3BC3875 | Current changed policy values represented as bits for the Security policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_BROWSER_POLICY_VALUE_CHANGED | 0x13920028A3BC4075 | Current changed policy values represented as bits for the Browser policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_UPDATE_POLICY_VALUE_CHANGED | 0x13920028A3BC4875 | Current changed policy values represented as bits for the Update policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_CAMERA_POLICY_VALUE_CHANGED | 0x13920028A3BC5075 | Current changed policy values represented as bits for the Camera policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGED | 0x13920028A3BC5875 | Current changed policy values represented as bits for the ApplicationManagement policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_REQUIRE_DEVICE_ENCRYPTION_POLICY_VALUE_CHANGED | 0x13920028A3BC6075 | Current changed security policy RequireDeviceEncryption value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_PUSH_NOTIFICATION_RECEIVED | 0x13920028A3BC6875 | An MDM Push notification has been received. SDDL comes from ID_CAP_CSP_DMCLIENT in %SDXROOT%\src\devmgmt\dm\packages\dmapps\dmapps.pkg.xml |
| WNF_ENTR_SEARCH_POLICY_VALUE_CHANGED | 0x13920028A3BC7075 | Current changed policy values represented as bits for the Search policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGED | 0x13920028A3BC7875 | Current changed policy values represented as bits for the AboveLock policy area. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ALLOWAPPLICATIONS_POLICY_VALUE_CHANGED | 0x13920028A3BC8075 | A Dataprotection AllowApplications provider policy value has changed. |
| WNF_ENTR_EDPENFORCEMENTLEVEL_POLICY_VALUE_CHANGED | 0x13920028A3BC8875 | A Dataprotection EDPEnforcementLevel provider policy value has changed. |
| WNF_ENTR_WAP_MESSAGE_FOR_DMWAPPUSHSVC_READY | 0x13920028A3BC9075 | A WAP message has been received that dmwappushsvc needs to handle. |
| WNF_ENTR_CONTEXT_STATE_CHANGE | 0x13920028A3BC9875 | An enterprise context has changed it’s state |
| WNF_ENTR_PUSH_RECEIVED | 0x13920028A3BCA075 | An enterprise WNS based push was received |
| WNF_ENTR_ALLOWINPUTPANEL_POLICY_VALUE_CHANGED | 0x13920028A3BCA875 | A TextInput AllowInputPanel provider policy value has changed. |
| WNF_ENTR_SEARCH_ALLOW_USING_DIACRITICS | 0x13920028A3BCB075 | Allow use of diacritics for indexing. |
| WNF_ENTR_SEARCH_ALWAYS_USE_AUTO_LANG_DETECTION | 0x13920028A3BCB875 | Always use automatic language detection when indexing content and properties. |
| WNF_ENTR_SEARCH_DISABLE_REMOVABLE_DRIVE_INDEXING | 0x13920028A3BCC075 | Do not allow locations on removable drives to be added to libraries. |
| WNF_ENTR_SEARCH_PREVENT_INDEXING_LOW_DISK_SPACE_MB | 0x13920028A3BCC875 | Stop indexing in the event of limited hard drive space. |
| WNF_ENTR_SEARCH_ALLOW_INDEXING_ENCRYPTED_STORES_OR_ITEMS | 0x13920028A3BCD075 | Allow indexing of encrypted files. |
| WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGED | 0x13920028A3BCD875 | Bluetooth policy configuration has changed. SDDL comes from ID_CAP_POLICY_MANAGER in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_EDPNETWORKING_POLICY_VALUE_CHANGED | 0x13920028A3BCE075 | A Dataprotection networking policy value has changed. |
| WNF_ENTR_REQUIRE_DPL_POLICY_VALUE_CHANGED | 0x13920028A3BCE875 | DataProtection Require Protection Under Lock Config policy change. |
| WNF_ENTR_WINDOWS_DEFENDER_POLICY_VALUE_CHANGED | 0x13920028A3BCF075 | Windows Defender policy configuration has changed. |
| WNF_ENTR_ALLOWALLTRUSTEDAPPS_POLICY_VALUE_CHANGED | 0x13920028A3BCF875 | ApplicationManagement AllowAllTrustedApps provider policy value has changed. |
| WNF_ENTR_ALLOWSHAREDUSERDATA_POLICY_VALUE_CHANGED | 0x13920028A3BD0075 | ApplicationManagement AllowSharedUserAppData provider policy value has changed. |
| WNF_ENTR_RESTRICTAPPTOSYTEMVOLUME_POLICY_VALUE_CHANGED | 0x13920028A3BD0875 | ApplicationManagement RestrictAppToSystemVolume provider policy value has changed. |
| WNF_ENTR_RESTRICTAPPDATATOSYTEMVOLUME_POLICY_VALUE_CHANGED | 0x13920028A3BD1075 | ApplicationManagement RestrictAppDataToSystemVolume provider policy value has changed. |
| WNF_ENTR_ALLOWDEVELOPERUNLOCK_POLICY_VALUE_CHANGED | 0x13920028A3BD1875 | ApplicationManagement AllowDeveloperUnlock provider policy value has changed. |
| WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGED | 0x13920028A3BD2075 | Update AllowUpdateService provider policy value has changed. |
| WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGED | 0x13920028A3BD2875 | Update UpdateServiceUrl provider policy value has changed. |
| WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGED | 0x13920028A3BD3075 | Update AllowNonMicrosoftSignedUpdate provider policy value has changed. |
| WNF_ENTR_ALLOW_WBA_EXECUTION_POLICY_VALUE_CHANGED | 0x13920028A3BD3875 | DisableWBA policy value has changed. |
| WNF_ENTR_DOMAIN_NAMES_FOR_EMAIL_SYNC_POLICY_VALUE_CHANGED | 0x13920028A3BD4075 | The domains for which email is disabled have changed. |
| WNF_ENTR_ALLOWCELLULARDATAROAMING_POLICY_VALUE_CHANGED | 0x13920028A3BD4875 | The AllowCellularDataRoaming policy value has changed. |
| WNF_ENTR_ALLOWCELLULARDATA_POLICY_VALUE_CHANGED | 0x13920028A3BD5075 | The AllowCellularData policy value has changed. |
| WNF_ENTR_EDPENFORCEMENTLEVEL_CACHED_POLICY_VALUE_CHANGED | 0x13920028A3BD5C75 | EDPEnforcementLevel cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201. |
| WNF_ENTR_PROTECTEDDOMAINNAMES_CACHED_POLICY_VALUE_CHANGED | 0x13920028A3BD6475 | EnterpriseProtectedDomainNames cached policy have changed. CAPABILITY_SID_LpacEnterprisePolicyChangeNotifications – S-1-15-3-1024-126078593-3658686728-1984883306-821399696-3684079960-564038680-3414880098-3435825201. |
| WNF_ENTR_ALLOWMESSAGESYNC_POLICY_VALUE_CHANGED | 0x13920028A3BD6875 | The AllowMessageSync policy value has changed. |
| WNF_ENTR_DISABLEADVERTISINGID_POLICY_VALUE_CHANGED | 0x13920028A3BD7075 | Privacy DisableAdvertisingId policy value has changed. |
| WNF_ENTR_EVALUATE_EDP_CONFIGURATION_STATE | 0x13920028A3BD7875 | EnterpriseDataProtection (EDP) state has changed. |
| WNF_ENTR_APPHVSI_CACHED_POLICY_VALUE_CHANGED | 0x13920028A3BD8475 | AllowAppHVSI cached policy has changed. |
| WNF_ENTR_NETWORKISOLATION_POLICY_VALUE_CHANGED | 0x13920028A3BD8875 | A NetworkIsolation area policy value has changed. |
| WNF_ENTR_EVALUATE_APPHVSI_CONFIGURATION_STATE | 0x13920028A3BD9075 | AppHVSI (Hypervisor-based Virtualized Security Isolation) state has changed. |
| WNF_ENTR_EDPSHOWICONS_CACHED_POLICY_VALUE_CHANGED | 0x13920028A3BD9C75 | EdpShowIcons policy value has changed. |
| WNF_ENTR_ALLOWDEVICEHEALTHMONITORING_POLICY_VALUE_CHANGED | 0x13920028A3BDA075 | The AllowDeviceHealthMonitoring policy value has changed. |
| WNF_ENTR_ALLOWWIFI_POLICY_VALUE_CHANGED | 0x13920028A3BDB075 | AllowWifi policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ALLOWMANUALWIFICONFIGURATION_POLICY_VALUE_CHANGED | 0x13920028A3BDB875 | AllowManualWifiConfiguration policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_SEARCH_ALLOW_INDEXER | 0x13920028A3BDC075 | Allow windows indexer. |
| WNF_ENTR_ALLOWWIFIDIRECT_POLICY_VALUE_CHANGED | 0x13920028A3BDC875 | AllowWifiDirect policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ALLOWPROJECTIONTOPC_POLICY_VALUE_CHANGED | 0x13920028A3BDD075 | AllowProjectionToPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_ALLOWMESSAGE_MMS_POLICY_VALUE_CHANGED | 0x13920028A3BDD875 | The AllowMessageMMS policy value has changed. |
| WNF_ENTR_ALLOWMESSAGE_RCS_POLICY_VALUE_CHANGED | 0x13920028A3BDE075 | The AllowMessageRCS policy value has changed. |
| WNF_ENTR_EDPSMB_POLICY_VALUE_CHANGED | 0x13920028A3BDE875 | SMBAutoEncryptedFileExtensions policy value has changed. |
| WNF_ENTR_APPHVSI_POLICY_VALUE_CHANGED | 0x13920028A3BDF075 | Any AppHVSI policy value is changed |
| WNF_ENTR_ALLOWSET24HOURCLOCK_POLICY_VALUE_CHANGED | 0x13920028A3BDF875 | The AllowSet24HourClock policy value has changed. |
| WNF_ENTR_ALLOWPROJECTIONFROMPC_POLICY_VALUE_CHANGED | 0x13920028A3BE0075 | AllowProjectionFromPC policy value changed. SDDL comes from ID_CAP_POLICY_MANAGER and ID_CAP_POLICY_MANAGER_READONLY in %SDXROOT%\src\devmgmt\enterprise\product\policymanager\packages\policymanager.pkg.xml |
| WNF_ENTR_EXPLOITGUARD_POLICY_VALUE_CHANGED | 0x13920028A3BE0875 | The ExploitGuard policy values have changed. |
| WNF_ENTR_WINDOWSDEFENDERSECURITYCENTER_POLICY_VALUE_CHANGED | 0x13920028A3BE1075 | The WindowsDefenderSecurityCenter policy values have changed. |
| WNF_ENTR_APPPRIVACY_POLICY_VALUE_CHANGED | 0x13920028A3BE1875 | Event fired when app privacy policy values have changed |
| WNF_ENTR_ENABLETOUCHKEYBOARDAUTOINVOKE_POLICY_VALUE_CHANGED | 0x13920028A3BE2075 | A TextInput EnableTouchKeyboardAutoInvokeInDesktopMode policy value has changed. |
| WNF_ENTR_FULLLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE2875 | A TextInput TouchKeyboardFullModeAvailability policy value has changed. |
| WNF_ENTR_WIDELAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE3075 | A TextInput TouchKeyboardWideModeAvailability policy value has changed. |
| WNF_ENTR_NARROWLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE3875 | A TextInput TouchKeyboardNarrowModeAvailability policy value has changed. |
| WNF_ENTR_HANDWRITING_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE4075 | A TextInput TouchKeyboardHandwritingModeAvailability policy value has changed. |
| WNF_ENTR_SPLITLAYOUT_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE4875 | A TextInput TouchKeyboardSplitModeAvailability policy value has changed. |
| WNF_ENTR_EMOJI_AVAILABILITY_POLICY_VALUE_CHANGED | 0x13920028A3BE5075 | A TextInput TouchKeyboardEmojiButtonAvailability policy value has changed. |
| WNF_ENTR_FORCEDOCKED_TOUCHKEYBOARD_POLICY_VALUE_CHANGED | 0x13920028A3BE5875 | A TextInput ForceTouchKeyboardDockedState policy value has changed. |
| WNF_ENTR_TOUCHKEYBOARDDICTATION_POLICY_VALUE_CHANGED | 0x13920028A3BE6075 | A TextInput TouchKeyboardDictationButtonAvailability policy value has changed. |
| WNF_ENTR_BITS_POLICY_VALUE_CHANGED | 0x13920028A3BE6875 | BITS policy area value has changed. |
| WNF_ENTR_REMOVABLEDISK_DENY_WRITE_POLICY_VALUE_CHANGED | 0x13920028A3BE7075 | Removable disk deny write access policy area value has changed. |
| WNF_ENTR_WIN32APPLICATION_POLICY_METADATA_VALUE_CHANGED | 0x13920028A3BE7875 | Win32 Application policy metadata value has changed. |
| WNF_ENTR_WIN32APPLICATION_POLICY_PROVIDERDATA_VALUE_CHANGED | 0x13920028A3BE8075 | Win32 Application policy provider data value has changed. |
| WNF_ENTR_ALLOWLINGUISTICDATACOLLECTION_POLICY_VALUE_CHANGED | 0x13920028A3BE8875 | A TextInput AllowLinguisticDataCollection policy value has changed. |
| WNF_ENTR_WPDDEVICES_DENY_WRITE_USER_POLICY_VALUE_CHANGED | 0x13920028A3BE9075 | Wpd devices deny write access per user policy area value has changed. |
| WNF_ENTR_WPDDEVICES_DENY_READ_USER_POLICY_VALUE_CHANGED | 0x13920028A3BE9875 | Wpd devices deny read access per user policy area value has changed. |
| WNF_ENTR_WPDDEVICES_DENY_WRITE_DEVICE_POLICY_VALUE_CHANGED | 0x13920028A3BEA075 | Wpd devices deny write access per device policy area value has changed. |
| WNF_ENTR_WPDDEVICES_DENY_READ_DEVICE_POLICY_VALUE_CHANGED | 0x13920028A3BEA875 | Wpd devices deny read access per device policy area value has changed. |
| WNF_ETW_SUBSYSTEM_INITIALIZED | 0x41911A28A3BC0875 | ETW subsystem initialized |
| WNF_EXEC_OSTASKCOMPLETION_REVOKED | 0x2831628A3BC0875 | This event signal when a task completion has been revoked due to memory pressure |
| WNF_EXEC_THERMAL_LIMITER_CLOSE_APPLICATION_VIEWS | 0x2831628A3BC1875 | This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates all application views should be closed |
| WNF_EXEC_THERMAL_LIMITER_TERMINATE_BACKGROUND_TASKS | 0x2831628A3BC2075 | This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates background tasks should be terminated |
| WNF_EXEC_THERMAL_LIMITER_DISPLAY_WARNING | 0x2831628A3BC2875 | This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates a warning should be displayed to the user |
| WNF_EXEC_THERMAL_LIMITER_STOP_MRC | 0x2831628A3BC3075 | This event is signaled by the thermal limiter when a power or thermal trip point has been reached that indicates MRC should be stopped |
| WNF_EXEC_THERMAL_LIMITER_MITIGATION_STATUS | 0x2831628A3BC3875 | This event is signaled by the thermal limiter when a power or thermal trip point has been reached, which is causing the system to take action to reduce power consumption. The WNF data indicates the number of areas on the device which are being mitigated. |
| WNF_WFS_SETTINGS | 0x4195083AA3BC0875 | Family Safety settings have changed in the cloud service but have not been downloaded and committed |
| WNF_WFS_TIMEREMAININGALERTS | 0x4195083AA3BC1075 | Family Safety time remaining alerts to warn the user the allocated time is running out. The data is published as json blob with fileds U.SID for User SID as wide character and TR for time remaining in minutes as int value |
| WNF_WFS_FAMILYMEMBERLOGIN | 0x4195083AA3BC1875 | Family member login event |
| WNF_WFS_SETTINGSREFRESH | 0x4195083AA3BC2075 | Family Safety settings have changed and have downloaded and committed. Clients should refresh Family Safety settings. |
| WNF_FCON_PROCESS_LKG | 0xF890D2BA3BC0875 | This state is to trigger ReconcoleFeatures scheduled task to process LKG configurations |
| WNF_FDBK_QUESTION_NOTIFICATION | 0xA840A2BA3BC0875 | This event contains a feedback question for the user. Payload is a JSON string specifying the feedback question. |
| WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY | 0x1287083AA3BC0875 | Free network available or not |
| WNF_FLYT_IDS_CHANGED | 0x159F022BA3BC0875 | Triggered every time there is a change in flight IDs |
| WNF_FLTN_WNF_ARRIVED | 0xF92022BA3BC0875 | Triggered every time upon WNS notification or policy change |
| WNF_FLT_RUNDOWN_WAIT | 0x4192022BA3BC0875 | Wait for rundown release in Filter Manager may be blocked by a suspended Modern application |
| WNF_FOD_STATE_CHANGE | 0x4182012BA3BC0875 | Installation status of Features on demand |
| WNF_FSRL_TIERED_VOLUME_DETECTED | 0xD941D2BA3BC0875 | This event signals when a tiered volume is mounted |
| WNF_FSRL_OPLOCK_BREAK | 0xD941D2BA3BC1075 | Oplock break acknowledgement may be blocked by a suspended Modern application |
| WNF_GC_INITIAL_PRESENT | 0x41C60D2AA3BC0875 | This event is signalled when the graphics driver presents the initial frame. |
| WNF_GC_RESTORED | 0x41C60D2AA3BC1075 | This event is signalled after a restore occurs |
| WNF_GC_SUSPEND | 0x41C60D2AA3BC1875 | This event is signalled during a suspend |
| WNF_GC_RESUME | 0x41C60D2AA3BC2075 | This event is signalled during a resume |
| WNF_GC_CONSTRAIN | 0x41C60D2AA3BC2875 | This event is signalled during a constrain |
| WNF_GC_UNCONSTRAIN | 0x41C60D2AA3BC3075 | This event is signalled during an unconstrain |
| WNF_GC_SUSPEND_COMPLETE | 0x41C60D2AA3BC3875 | This event is signalled after a suspend completes |
| WNF_GC_RESUME_PENDING | 0x41C60D2AA3BC4075 | This event is signalled before a resume |
| WNF_GC_CRASHDUMP_EVENT | 0x41C60D2AA3BC4875 | This event is signalled during a crashdump start or complete |
| WNF_GIP_ADAPTER_CHANGE | 0x4196072AA3BC0875 | This event is fired for GIP adapter state change, such as connect/disconnect |
| WNF_LOC_DEVICE_BROKER_ACCESS_CHANGED | 0x41850121A3BC0875 | This event triggers when the user changes Geolocation access for an application or the user. |
| WNF_LOC_RESERVED_WNF_EVENT | 0x41850121A3BC1075 | Do not use this WNF event, it is deprecated. Was WIN32_API_ACCESS_CHANGED. |
| WNF_LOC_SHOW_SYSTRAY | 0x41850121A3BC1875 | This event triggers when there is an event that accesses location data — this trigger starts LocationNotifications.exe which is a systray app. |
| WNF_LFS_STATE | 0x41950821A3BC0875 | This is triggered when an app is making use of the location service. It has two possible data values associated to it: BOOL TRUE: one or more applications are using location. BOOL FALSE: no application is using location. |
| WNF_LFS_RUNNING_STATE | 0x41950821A3BC1075 | This state is used to notify when the location service starts or stops running |
| WNF_LFS_MASTERSWITCH_STATE | 0x41950821A3BC1875 | This state is used to notify when the phone location master switch status changes with BOOL as payload. TRUE indicating master switch is ON and FALSE indicating master switch is OFF |
| WNF_LFS_GEOFENCETRACKING_STATE | 0x41950821A3BC2075 | This state is used to notify Geofence tracking state for the geofences added by the applications. TRUE if atleast one geofence is actively being tracked and FALSE if there are no geofences being tracked. |
| WNF_LFS_RESERVED_WNF_EVENT_2 | 0x41950821A3BC2875 | Do not use this WNF event, it is deprecated. Was WNF_LFS_BACKGROUND_PERMISSIONCHANGE_STATE |
| WNF_LFS_POSITION_AVAILABLE | 0x41950821A3BC3075 | This state is used to notify when a new freely available position can be queried from the location framework. |
| WNF_LFS_CLIENT_RECALCULATE_PERMISSIONS | 0x41950821A3BC3875 | This state is published whenever the permissions of an active client have changed. Every client on the system receives it, and should run domain-specific logic to see what the impact is (e.g., reconnect location session when permission re-allowed). |
| WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGED | 0x41950821A3BC4075 | This event notifies when the permission regarding the ability to show the location notification icon has changed. The current state needs to be queried for as it is different for each user. |
| WNF_LFS_ACTION_DIALOG_AVAILABLE | 0x41950821A3BC4875 | This event notifies when a new action dialog is available |
| WNF_LFS_SIGNIFICANT_LOCATION_EVENT | 0x41950821A3BC5075 | This event notifies when there’s a significant change in the location of the device. |
| WNF_LFS_VISITS_SIGNIFICANT_LOCATION_EVENT | 0x41950821A3BC5875 | This event notifies when there’s a visit or a significant change in the location of the device. |
| WNF_LFS_LOCATION_MDM_AREA_POLICY_CHANGED | 0x41950821A3BC6075 | This event is fired when an MDM Location policy change occurs. |
| WNF_LFS_LOCATION_MDM_POLICY_ENABLELOCATION_CHANGED | 0x41950821A3BC6875 | This event is fired when an MDM EnableLocation policy change occurs. |
| WNF_NLS_USER_DEFAULT_LOCALE_CHANGED | 0x41950223A3BC0835 | The user default locale has changed. Subscribers should query for the new value and invalidate any cached date/time or locale sensitive strings. |
| WNF_NLS_USER_UILANG_CHANGED | 0x41950223A3BC1035 | This state is notified when the User Default UI language (MUI) changes. Subscribers should query Subscribers should query for the new value and invalidate any cached localized resources, strings, other UI related data. |
| WNF_NLS_LOCALE_INFO_CHANGED | 0x41950223A3BC1835 | This state is notified when the locale info changes by means of calling SetLocaleInfo. The data value is a DWORD that indicates the LCTYPE that changed. |
| WNF_NLS_GEOID_CHANGED | 0x41950223A3BC2035 | This state is notified when the user Geo ID (or Geo Name) changes by means of calling SetUserGeoID (or SetUserGeoName). The data value is a DWORD that indicates the new GeoID. (Note: Geo Names should be preferred and used instead of GeoIDs.) |
| WNF_GLOB_USERPROFILE_LANGLIST_CHANGED | 0x389022AA3BC0875 | This state is notified when the User Preferred Language List has changed. Subscribers should query GetUserLanguages to get the updated language list. |
| WNF_GLOB_GLOBALIZATION_PREFERENCES_CHANGED | 0x389022AA3BC1035 | The user globalization preferences have changed. Subscribers should query for new globalization values and invalidate any cached data. |
| WNF_GLOB_GLOBALIZATION_CLOUD_DATA_AVAILABLE | 0x389022AA3BC1875 | Updated user globalization preferences are available from the cloud data store. NLS needs to update the cached data. |
| WNF_GPOL_SYSTEM_CHANGES | 0xD891E2AA3BC0875 | System policy has been updated |
| WNF_GPOL_USER_CHANGES | 0xD891E2AA3BC10F5 | User policy has been updated |
| WNF_HAS_VERIFY_HEALTH_CERT | 0x41950F25A3BC0875 | This event signals a request to get (if needed) and verify Health Certificate with HAS |
| WNF_HOLO_USER_DISPLAY_CONTEXT | 0xE8A0125A3BC0835 | Event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext |
| WNF_HOLO_USER_INPUT_CONTEXT | 0xE8A0125A3BC1035 | Event raised when the input context changes (ex. from 3D input to 2D Desktop input). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext |
| WNF_HOLO_SHELL_STATE | 0xE8A0125A3BC1835 | Event raised when the Holographic Shell running state changes (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState |
| WNF_HOLO_INPUT_FOCUS_CHANGE | 0xE8A0125A3BC2075 | This event signals when input focus changes to a different window. Data is a MPCInputFocusChange struct. |
| WNF_HOLO_FORCE_ROOM_BOUNDARY | 0xE8A0125A3BC2835 | If payload is non-zero, room boundary is forced to be visible. |
| WNF_HOLO_STREAMING_STATE | 0xE8A0125A3BC3035 | This event signals whether streaming is active. Data contains a bool indicating if streaming is active. |
| WNF_HOLO_ROOM_BOUNDARY_DATA_CHANGED | 0xE8A0125A3BC3835 | This event signals that the persisted room boundary data has changed. |
| WNF_HOLO_ROOM_BOUNDARY_VISIBILITY | 0xE8A0125A3BC4035 | A non-zero payload indicates the room boundary is visible to the user. Writable by DWM and System. |
| WNF_HOLO_SHELL_INPUT_3DSWITCH_DISABLE | 0xE8A0125A3BC4835 | This event signals when various input types should be disabled from natively working in the Windows Holographic shell, useful for apps that simulate GGV via mouse and/or gamepad. Data contains a DWORD of bitflags from Windows::Internal::Shell::Holographic::ShellInput3DSwitchDisableFlags. |
| WNF_HOLO_ENVIRONMENT_AUDIO_ASSET | 0xE8A0125A3BC5075 | This event contains the file path for the environment app’s audio asset, which is used by Triton |
| WNF_HOLO_UNINSTALL_PREPARE | 0xE8A0125A3BC5875 | This event signals that it’s time for uninstall preparations, which includes shutting down Oasis apps. |
| WNF_HOLO_UNINSTALL_COMPLETE | 0xE8A0125A3BC6075 | This event signals that uninstall has finished. Data contains a HRESULT representing uninstall success. |
| WNF_HOLO_SET_SHELL_SPAWN_POINT | 0xE8A0125A3BC6835 | This event signals that the shell spawn point should be moved. Data is a DWORD indicating the id of the point that should be set. |
| WNF_HOLO_RETAIL_DEMO_TIMER | 0xE8A0125A3BC7035 | Event raised when the Windows Mixed Reality retail demo timer state changes. Data contains a DWORD equivalent to MixedRealityPortal::RetailDemoTimerState. |
| WNF_HOLO_DISPLAY_QUALITY_LEVEL | 0xE8A0125A3BC7835 | Event raised when the benchmarked quality level changes. Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:DisplayQualityState |
| WNF_HOLO_SYSTEM_DISPLAY_CONTEXT_CHANGE | 0xE8A0125A3BC8875 | System scoped event raised when the display context changes (ex. from physical monitor to HMD). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:UserDisplayContext |
| WNF_HOLO_REQUEST_HMD_USE_STATE | 0xE8A0125A3BC9035 | This event signals the desire to change the HMD use state (the overrideable internal setting, not the physical presence state reported by the HMD). Meant to be used by non-shell inbox applications to trigger the equivalent of the input switch hotkey. Data contains a DWORD equivalent to a bool; true = HmdUseState::InUse, false = HmdUseState::Idle. |
| WNF_HOLO_REQUEST_HOLOGRAPHIC_ACTIVATION_REALM | 0xE8A0125A3BC9835 | This event signals the desire to change the current input foreground to go to the last active 3D window. Meant to be used by non-shell inbox applications to return focus to 3D realm. |
| WNF_HOLO_RESET_IDLE_TIMER | 0xE8A0125A3BCA035 | This event signals a reset of the holographic idle timer. Writable by DWM and System. |
| WNF_HOLO_SHELL_STATE_INTERACTIVE_USER | 0xE8A0125A3BCA875 | Event raised when the Holographic Shell running state changes on the interactive users session (ex. from Running to Suspended). Data contains a DWORD equivalent to Windows::Internal::Shell::Holographic:ShellState |
| WNF_HOLO_SHARING_SESSION_CONTEXT | 0xE8A0125A3BCB035 | This event signals whether sharing session is active. Data contains a name of the data provider. |
| WNF_HOLO_PROJECTION_REQUEST | 0xE8A0125A3BCB835 | This event signals a miracast projection to establish. |
| WNF_HOLO_CAPTURE_STATE | 0xE8A0125A3BCC035 | This event signals whether recording is active. Data contains a bool indicating if recording is active. |
| WNF_HOLO_SHELL_USER_PRESENCE_STATE | 0xE8A0125A3BCC875 | Signals an app to transition between passive/active state. Data contains a bool indicating if user presence is Active (value false) or Passive (value true). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_HOLO_BACKGROUND_POSE_ACCESS_LIST | 0xE8A0125A3BCD075 | This event signals changes to the list of applications granted background pose access. The data is 32 DWORDs; the first is the current number of process ids that follow, up to 31. It can read by Systen and Authenticated Users. It can only be written by Spectrum |
| WNF_HOLO_FANCY_CORE_STATE | 0xE8A0125A3BCD875 | Triggered when state changes occur in FancyCore |
| WNF_HOLO_DISPLAY_SAVE_UIF_DISPLAY_DIAGNOSTIC_DATA_JSON | 0xE8A0125A3BCE075 | This event is published by Feedback Hub Brokered API to signal HoloSI to save DisplayDiagnosticData.json to a predetermined location. |
| WNF_HOLO_DISPLAY_SAVE_FALLBACK_DISPLAY_DIAGNOSTIC_DATA_JSON | 0xE8A0125A3BCE875 | This event is published by Fallback Diagnostics to signal HoloSI to save DisplayDiagnosticData.json to a predetermined location. |
| WNF_HOLO_DISPLAY_DELETE_DISPLAY_DIAGNOSTIC_DATA_JSON | 0xE8A0125A3BCF075 | This event is published by Feedback Hub Brokered API or Fallback Diagnostics to signal HoloSI to delete DisplayDiagnosticData.json located at the predetermined location. |
| WNF_HVL_CPU_MGMT_PARTITION | 0x418A1825A3BC0875 | This state signals NTOS has CPU management privileges in the current partition. |
| WNF_HYPV_HOST_WMI_OBJECT_PROVIDER_STATE | 0x17961725A3BC0875 | The state of Hyper-V’s host-only WMI object provider. |
| WNF_HYPV_HOST_WMI_EVENT_PROVIDER_STATE | 0x17961725A3BC1075 | The state of Hyper-V’s host-only WMI event provider. |
| WNF_IMSN_MONITORMODECHANGED | 0xF950324A3BC0835 | A monitor has changed immersive modes |
| WNF_IMSN_LAUNCHERVISIBILITY | 0xF950324A3BC1035 | The immersive launcher’s visibility has changed |
| WNF_IMSN_IMMERSIVEMONITORCHANGED | 0xF950324A3BC1835 | The monitor the immersive environment is running on has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_IMSN_KILL_LOGICAL_FOCUS | 0xF950324A3BC3035 | User-perceived focus has left an edit box. |
| WNF_IMSN_PROJECTIONDISPLAYAVAILABLE | 0xF950324A3BC3835 | Projection display availability has changed |
| WNF_IMSN_TRANSPARENCYPOLICY | 0xF950324A3BC4035 | The user experience transparency policy stores the global system transparency policy as a DWORD which contains 0 for disabled and 1 for enabled. |
| WNF_IMSN_GLOBALLIGHTSINVALIDATED | 0xF950324A3BC4835 | The global/shared lights have changed. |
| WNF_IUIS_SCALE_CHANGED | 0x128F1B24A3BC0835 | The immersive UI scale has changed for the current session. |
| WNF_ISM_LAST_USER_ACTIVITY | 0x418B1D24A3BC0835 | Last recorded user activity |
| WNF_ISM_INPUT_UPDATE_AFTER_TRACK_INTERVAL | 0x418B1D24A3BC1035 | Fires if there is new input after track interval. |
| WNF_ISM_CURSOR_MANAGER_READY | 0x418B1D24A3BC1835 | Cursor Manager is initialized. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_ISM_GAMECONTROLLER_ZEPHYRUS_FAULT | 0x418B1D24A3BC2075 | This event signals when the Zephyrus controller has encountered a fault that requires a shell notification. |
| WNF_INPT_SETTINGS_CHANGE | 0x15960024A3BC0875 | Fires when settings change. |
| WNF_INPT_MOUSE_SYNC_DATA_AVAILABLE | 0x15960024A3BC1075 | Fires when input cloud data has changed. |
| WNF_INPT_PEN_SYNC_DATA_AVAILABLE | 0x15960024A3BC1875 | Fires when input cloud data has changed. |
| WNF_INPT_TOUCHPAD_SYNC_DATA_AVAILABLE | 0x15960024A3BC2075 | Fires when input cloud data has changed. |
| WNF_IOT_EMBEDDED_MODE_POLICY_VALUE_CHANGED | 0x41920124A3BC0875 | Embedded mode policy value has changed. |
| WNF_IOT_STARTUP_SETTINGS_CHANGED | 0x41920124A3BC1075 | settings for the foreground app and/or iot startup type background tasks have changed |
| WNF_LANG_FOD_INSTALLATION_STARTED | 0x6880F21A3BC0875 | Installation of language features on demand was started (either through Settings or through installation task). |
| WNF_LED_SETTINGSCHANGED | 0x41820B21A3BC0875 | LedAlert settings has changed |
| WNF_LM_PACKAGE_SUSPEND_REQUIRED | 0x41C60321A3BC0875 | A running package’s license is now invalid and the package must be suspended or terminated. |
| WNF_LM_CONTENT_LICENSE_CHANGED | 0x41C60321A3BC1075 | A content license’s state has been modified. |
| WNF_LM_ROOT_LICENSE_CHANGED | 0x41C60321A3BC1875 | A root license’s state has been modified. |
| WNF_LM_OPTIONAL_PACKAGE_SUSPEND_REQUIRED | 0x41C60321A3BC2075 | A running optional package’s license is lost. |
| WNF_LM_APP_LICENSE_EVENT | 0x41C60321A3BC2875 | Multi-purpose event for app license notifications. |
| WNF_LM_OFFLINE_PC_CHANGED | 0x41C60321A3BC3075 | A offline pc state has been changed. |
| WNF_LM_LICENSE_REFRESHED | 0x41C60321A3BC3875 | Licenses have been refreshed. |
| WNF_LIC_NO_APPLICABLE_LICENSES_FOUND | 0x41850721A3BC0875 | Failed to launch the modern app because no valid licenses and leases were found |
| WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCE | 0x41850721A3BC1075 | The device license hardware ID is out of tolerance with the device’s hardware ID |
| WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCE | 0x41850721A3BC1875 | The hardware ID has changed but is still with in tolerance with the device’s hardware ID |
| WNF_LIC_DEVICE_LICENSE_UPDATED | 0x41850721A3BC2075 | A new device license with a different device ID was installed |
| WNF_LIC_DEVICE_LICENSE_REMOVED | 0x41850721A3BC2875 | The device license was uninstalled |
| WNF_LIC_DEVICE_LICENSE_MISSING | 0x41850721A3BC3075 | The required device license was nout found |
| WNF_LIC_INT_DEVICE_LICENSE_EXPIRED | 0x41850721A3BC3875 | The integration device license has expired and can no longer be used to verify or decrypt modern app licenses. |
| WNF_LIC_LOCAL_MIGRATED_LICENSES_FOUND | 0x41850721A3BC4075 | Found a local migrated license which needs to be refereshed with a store signed license. |
| WNF_LIC_MANAGE_DEVICE_REGISTRATION_AND_REACTIVATION | 0x41850721A3BC4875 | The MDM Licensing Device Registration Policy has been refreshed. |
| WNF_OLIC_OS_EDITION_CHANGE | 0x28F0222A3BC5075 | OS Edition has changed. |
| WNF_OLIC_OS_LICENSE_POLICY_CHANGE | 0x28F0222A3BC5875 | OS Policy has changed. |
| WNF_OLIC_OS_LICENSE_TERMS_ACCEPTED | 0x28F0222A3BC6075 | The License Terms can be considered as accepted on this device. |
| WNF_OLIC_OS_LICENSE_NON_GENUINE | 0x28F0222A3BC6875 | OS will soon notify user of non-genuine state. |
| WNF_LOGN_EOA_FLYOUT_POSITION | 0xF810121A3BC0835 | Indicates where the ease of access flyout should appear in LogonUI and User Oobe, the data type is RECT. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts |
| WNF_LOGN_SLIDE_TO_SHUTDOWN | 0xF810121A3BC1035 | Indicates that a shutdown has been triggered via Slide-to-shutdown. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts |
| WNF_LOGN_RETURN_TO_LOCK | 0xF810121A3BC1835 | Indicates that user intends to interact with the lock screen (e.g. for Projection or Cortana) and LogonUI should return to the lock screen. |
| WNF_LOGN_PINPAD_VISIBLE | 0xF810121A3BC2035 | Indicates that the mobile pinpad is visible. |
| WNF_LOGN_LOCAL_SIGNON | 0xF810121A3BC2875 | Indicates logon from local console happened, the data type is a GUID which represents the logged-on credential provider CLSID. The sddl string grants subscribe and publish permission to System |
| WNF_LOGN_CREDENTIAL_TILE_SELECTION_CHANGED | 0xF810121A3BC3075 | This event signals when a credential tile has been selected or deselected. |
| WNF_LOGN_SUPPRESS_FINGERPRINT_WAKE | 0xF810121A3BC3835 | Indicates that device wake via fingerprint sensor should be disabled. The sddl string grants subscribe and publish permission to both System and Authenticated user accounts, and to App Containers with the userSignInSupport Capability |
| WNF_LOGN_BIO_ENROLLMENT_APP_INSTANCE_CHANGED | 0xF810121A3BC4075 | This event fires when number of bio enrollment app instance changes. The sddl string grants subscribe and publish permission (3) to Authenticated user accounts (AU), Local System (SY), and App containers with the userSignInSupport Capability |
| WNF_MAPS_MAPLOADER_PROGRESS | 0x12960F20A3BC1075 | Current progress of the MapLoader background engine. |
| WNF_MAPS_MAPLOADER_STATUS_CHANGE | 0x12960F20A3BC1875 | The new status of ODML. |
| WNF_MAPS_MAPLOADER_PACKAGE_CHANGE | 0x12960F20A3BC2075 | A map package has been added or removed or repositioned in the list. |
| WNF_SYNC_REQUEST_PROBE | 0x288173EA3BC0875 | Sync sets this value to request a wifi probe due to SSL error. SDDL comes from ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml |
| WNF_MUR_MEDIA_UI_REQUEST_WLAN | 0x41941B20A3BC0875 | Interface to Media-UI-request-State mapping for WLAN (802.1x) interfaces |
| WNF_MUR_MEDIA_UI_REQUEST_LAN | 0x41941B20A3BC1075 | Interface to Media-UI-request-State mapping for LAN (802.3) interfaces |
| WNF_MSA_ACCOUNTSTATECHANGE | 0x41871D20A3BC0835 | Notification for alerting client apps that the connected account ticketing state has changed |
| WNF_MSA_TPM_AVAILABLE | 0x41871D20A3BC1475 | Notification for alerting client apps that the server has reported TPM claims are available in new tickets. Payload is DWORD (enum TpmKeyStateServer) and permanent since it represents device capability needed across reboot. |
| WNF_MSA_TPM_SERVER_CLIENT_KEY_STATE_UPDATED | 0x41871D20A3BC1875 | Notification for alerting client apps about the current client and server TPM state for logging and retry logic. Payload is a struct of two DWORDs (enum TpmKeyStateServer, enum TpmKeyStateClient). |
| WNF_MSA_TPM_ATTESTATION_ATTEMPT_READY | 0x41871D20A3BC2075 | This event signals WLIDSVC to start TPM identity attestation. Payload is DWORD and mimics WNF_TPM_MAINTENANCE_TASK_STATUS for compatibility (status == 2 for ready). |
| WNF_MSA_GLOBAL_DEVICE_IDENTITY_PROVISIONED | 0x41871D20A3BC2C75 | Notification for alerting client apps about provisioning of new globabl device identity. |
| WNF_MSA_HARDWARE_DEVICE_IDENTITY_UPDATED | 0x41871D20A3BC3475 | Notification for alerting client apps about updates to hardware device identity. |
| WNF_MU_REPAINT_HWNDS | 0x41C61B20A3BC0875 | This is triggered when we want to repaint all of the windows in Win32App in WCOS. |
| WNF_MM_BAD_MEMORY_PENDING_REMOVAL | 0x41C60320A3BC0875 | This notification is raised when the memory manager is unable to automatically offline a bad memory page |
| WNF_MM_PHYSICAL_MEMORY_CHANGE | 0x41C60320A3BC1075 | This notification is raised when the memory manager adds or removes physical memory |
| WNF_MON_THERMAL_CAP_CHANGED | 0x41880120A3BC0875 | Triggered by a monitor device when the thermal limit on brightness is changed. Payload is a MONITOR_THERMAL_BRIGHTNESS_LIMIT_LIST. |
| WNF_MRT_QUALIFIER_CONTRAST_CHANGED | 0x41921C20A3BC0875 | This state is notified when the constrast qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml |
| WNF_MRT_QUALIFIER_THEME_CHANGED | 0x41921C20A3BC1075 | This state is notified when the theme qualifier changed its value. There is nothing in the payload. Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml |
| WNF_MRT_PERSISTENT_QUALIFIER_CHANGED | 0x41921C20A3BC1C75 | This state is notified when some persistent qualifier changed its value. Payload is qualifier@package_name with a max length of 512 bytes (256 WCHARs including null terminator). Subscribers will need to query the qualifier value provider for the latest value. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers |
| WNF_MRT_MERGE_SYSTEM_PRI_FILES | 0x41921C20A3BC2075 | This state is notified when system PRI files are merged. Payload has a max length of 128 bytes (64 WCHARs including null terminator) and consists of ‘start [starting timestamp]’ or ‘done [starting timestamp] [ending timestamp]’. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers |
| WNF_MRT_SYSTEM_PRI_MERGE | 0x41921C20A3BC2875 | This state is notified when a system PRI file is merged. Payload has a max length of 512 bytes (256 WCHARs including null terminator) and consists of either ‘start [path] [starting timestamp]’ or ‘{done,skipped} [path] [starting timestamp] [ending timestamp]’. SDDL comes from ID_CAP_EVERYONE and ID_CAP_PM_1ST_PARTY in %SDXMAPROOT%\src\appplat\packages\appplatform\appplatform.pkg.xml, plus all rights for all containers. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_NASV_USER_PRESENT | 0x17950F23A3BC0835 | NaAuth User Presence Status |
| WNF_NASV_SERVICE_RUNNING | 0x17950F23A3BC1075 | NaAuth Service Running |
| WNF_NASV_USER_AUTHENTICATION | 0x17950F23A3BC1835 | NaAuth User Authentication Status |
| WNF_NASV_DYNAMIC_LOCK_BLUETOOTH_STATUS | 0x17950F23A3BC2075 | NaAuth Extended Dynamic Lock Status for Bluetooth plugin |
| WNF_NASV_DYNAMIC_LOCK_RECALIBRATE | 0x17950F23A3BC2875 | NaAuth Extended Dynamic Lock Status for Bluetooth plugin recalibration |
| WNF_NCB_APP_AVAILABLE | 0x41840D23A3BC0875 | NCB indication of CCT or Socket Broker Based App availability. |
| WNF_NDIS_ADAPTER_ARRIVAL | 0x128F0A23A3BC0875 | NDIS finds a network adapter that needs to be configured by NetSetupSvc. |
| WNF_NDIS_CORRUPTED_STORE | 0x128F0A23A3BC1075 | NDIS detects corruption in the binding store. |
| WNF_NLM_VPN_RECONNECT_CHANGE | 0x418B0223A3BC0875 | This event is signalled by rasman about reconnect VPN state change and is used by NLM |
| WNF_NLM_INTERNET_PRESENT | 0x418B0223A3BC1075 | This event is signalled by NLM when the aggregated network conditions indicate that a connection to the internet is present |
| WNF_NLM_HNS_HIDDEN_INTERFACE | 0x418B0223A3BC1875 | This event is signalled by HNS when it establishes a vNIC which it needs NLM to hide |
| WNF_NLM_GLOBAL_CONNECTIVITY_STATE | 0x418B0223A3BC2075 | This event is signalled by NLM when aggregated network conditions (cost, connectivity level and flags) change |
| WNF_NFC_SE_CARD_EMULATION_STATE_CHANGED | 0x41850823A3BC0875 | This state is used to notify that the NFC CE policy changed. |
| WNF_PAY_CANMAKEPAYMENT_BROKER_READY | 0x419F0F3DA3BC0875 | This state is used to notify that the CanMakePayment background broker is initialized and ready. |
| WNF_NGC_PREGEN_TRIGGER | 0x41850923A3BC0875 | This event signals when an caller wants to trigger KeyPregenTask. |
| WNF_NGC_AIKCERT_TRIGGER | 0x41850923A3BC1075 | This event signals when an caller wants to trigger AikCertEnrollTask. |
| WNF_NGC_PRO_CSP_POLICY_CHANGED | 0x41850923A3BC1875 | This event is fired when a policy change occurs in the NGC Pro CSP. |
| WNF_NGC_PREGEN_DELAY_TRIGGER | 0x41850923A3BC2075 | This event signals when an caller wants to trigger KeyPregenTask with some delay. |
| WNF_NGC_GESTURE_AUTHENTICATED | 0x41850923A3BC2875 | This event signals when NGC container service (ngcctnrsvc) authenticates a gesture. |
| WNF_NGC_CRYPTO_MDM_POLICY_CHANGED | 0x41850923A3BC3075 | This event is fired when an MDM cryptographic policy change occurs. |
| WNF_NGC_CREDENTIAL_REFRESH_REQUIRED | 0x41850923A3BC3875 | This event is fired when an activity occurs that requires the NGC PIN cred prov to refresh its credential state. |
| WNF_NGC_PIN_RESET_SCENARIO_STATE_CHANGE | 0x41850923A3BC4035 | This event is fired when the state has changed during the PIN reset scenario. |
| WNF_NGC_LAUNCH_PIN_RESET_SCENARIO | 0x41850923A3BC4875 | This event is fired from the NGC PIN cred prov to signal that the PIN reset scenario should be launched. |
| WNF_NGC_CREDENTIAL_RESET_EXPERIENCE_ACTIVE | 0x41850923A3BC5075 | Boolean state representing whether or not the Credential Reset User Experience is active. |
| WNF_NGC_LAUNCH_NTH_USER_SCENARIO | 0x41850923A3BC6075 | This event is fired from the NGC PIN cred prov to signal that an Nth user scenario should be launched. |
| WNF_NGC_PREGEN_NGCISOCTNR_TRIGGER | 0x41850923A3BC6875 | This event triggers the NgcIsoCtnr key pre-gen pool to start generating a key. |
| WNF_NLA_CAPABILITY_CHANGE | 0x41870223A3BC0875 | This event is notified when NCSI detects a capability change |
| WNF_NLA_TASK_TRIGGER | 0x41870223A3BC1875 | State name triggering WiFiTask from NlaSvc |
| WNF_WPN_USER_PLATFORM_READY | 0x41881E3AA3BC08F5 | This WNF state indicates to users of WPN endpoints (except AppEndpoint) that platform is ready to use. This state can also be used to know if WPN platform restarted. |
| WNF_WPN_PLATFORM_INITIALIZED | 0x41881E3AA3BC10F5 | This WNF state can be used by first party Apps / Services to determine when WPN platform is ready to handle app related requests like posting toast / tile and getting channel uri. |
| WNF_WPN_SYSTEM_PLATFORM_READY | 0x41881E3AA3BC1875 | State indicating that system notification platform has been registered and ready to user. |
| WNF_WPN_USER_IN_SESSION_PLATFORM_READY | 0x41881E3AA3BC2035 | This WNF state indicates that USER_PLATFORM_READY was fired for a user in the current session. This is intended to provide a workaround for the inability to use RtlSubscribeWnfStateChangeNotification for a user other than the current process token. A process can register for this WNF and then poll the per-user WNF states under impersonation. |
| WNF_WPN_CHANNELS_REVOKED | 0x41881E3AA3BC2875 | Notifies listeners that the wns channels have become obsolete. |
| WNF_NPSM_SERVICE_STARTED | 0xC951E23A3BC0875 | This notification is to indicate that the NPSM service has started up. |
| WNF_NSI_SERVICE_STATUS | 0x418F1D23A3BC0875 | NSI service status. The SDDL grants subscribe access to all who have access to NSI RPC interface and subcribe + publish access to NSI service. |
| WNF_CSC_SERVICE_START | 0x41851D2EA3BC0875 | CSC Service start trigger |
| WNF_WOSC_ML_MODELS_CHANGED | 0x295013AA3BC0875 | Triggered every time there is a change in the OneSettings configuration for machine learning model configurations |
| WNF_WOSC_FEATURE_CONFIGURATION_CHANGED | 0x295013AA3BC1075 | Triggered every time there is a change in the OneSettings configuration for Velocity feature configurations |
| WNF_WOSC_MITIGATION_CONFIGURATION_CHANGED | 0x295013AA3BC1875 | Triggered every time there is a change in the OneSettings configuration for Mitigation App configurations |
| WNF_WOSC_DIRECTX_DATABASE_CHANGED | 0x295013AA3BC2075 | Triggered every time there is a change in the OneSettings configuration for DirectX Database configurations |
| WNF_WOSC_MUSE_CONFIGURATION_CHANGED | 0x295013AA3BC2875 | Triggered every time there is a change in the OneSettings configuration for Muse UX and USO configurations |
| WNF_WOSC_FEATURE_CONFIGURATION_COMPLETED | 0x295013AA3BC3075 | Triggered every time a feature configuration was completed (as a response to FEATURE_CONFIGURATION_CHANGED) |
| WNF_WOSC_REFRESH_ALL_REQUESTED | 0x295013AA3BC3875 | Triggers WOSC to refresh all configurations |
| WNF_OOBE_SHL_MAGNIFIER_QUERY | 0x4840122A3BC0835 | Notification from ISM to OOBE to query the user whether to activate the always-on Magnifier in OOBE |
| WNF_OOBE_SHL_MAGNIFIER_CONFIRM | 0x4840122A3BC1035 | Notification from OOBE to ISM whether the user confirms to activate the always-on Magnifier in OOBE |
| WNF_OOBE_SHL_MONITOR_STATE | 0x4840122A3BC1875 | Notification to User OOBE monitor on where the progress is |
| WNF_OOBE_SHL_SPEECH_CONTROLLER | 0x4840122A3BC2035 | Notification of speech controller state change. Payload is state type plus string of length 512 |
| WNF_OVRD_OVERRIDESCALEUPDATED | 0x5941822A3BC0875 | The window’s override scale has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_PFG_PEN_FIRST_TAP | 0x4181083DA3BC0875 | First Pen Tap Gesture |
| WNF_PFG_PEN_FIRST_DRAG | 0x4181083DA3BC1075 | First Pen Drag Gesture |
| WNF_PMEM_MEMORY_ERROR | 0xC83033DA3BC0875 | There is a new persistent memory error. |
| WNF_PO_SCENARIO_CHANGE | 0x41C6013DA3BC0875 | Sent when the WDI session corresponding to a power scenario changes |
| WNF_PO_COMPOSITE_BATTERY | 0x41C6013DA3BC1075 | Sent when the composite battery is updated. CAPABILITY_SID_VmCapability – S-1-15-3-1024-2268835264-3721307629-241982045-173645152-1490879176-104643441-2915960892-1612460704 (for Hyper-V support) |
| WNF_PO_POWER_STATE_CHANGE | 0x41C6013DA3BC1875 | Sent after WNF_PO_COMPOSITE_BATTERY when batteries are added or removed and when one or more batteries’ AC, charging, or discharging states changes |
| WNF_PO_ENERGY_SAVER_STATE | 0x41C6013DA3BC2075 | Triggered when Energy Saver state changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_PO_ENERGY_SAVER_SETTING | 0x41C6013DA3BC2875 | Triggered when Energy Saver setting changes |
| WNF_PO_ENERGY_SAVER_OVERRIDE | 0x41C6013DA3BC3075 | Triggered to indicate Energy Saver override settings |
| WNF_PO_THERMAL_STANDBY | 0x41C6013DA3BC3875 | Triggered to indicate CR3 condition |
| WNF_PO_THERMAL_SHUTDOWN_OCCURRED | 0x41C6013DA3BC4075 | Sent when the previous shutdown was due to a thermal trip |
| WNF_PO_THERMAL_HIBERNATE_OCCURRED | 0x41C6013DA3BC4875 | Sent when the previous hibernate was due to a thermal trip |
| WNF_PO_DISCHARGE_ESTIMATE | 0x41C6013DA3BC5075 | Estimated time until full discharge in seconds |
| WNF_PO_DISCHARGE_START_FILETIME | 0x41C6013DA3BC5C75 | Filetime of last known start of discharge |
| WNF_PO_CHARGE_ESTIMATE | 0x41C6013DA3BC6075 | Estimated time until full charge in seconds |
| WNF_PO_THERMAL_OVERTHROTTLE | 0x41C6013DA3BC6875 | Triggered to indicate excessive thermal throttling |
| WNF_PO_USER_AWAY_PREDICTION | 0x41C6013DA3BC7075 | Sent to indicate whenever user-away prediction is updated. |
| WNF_PO_DISPLAY_REQUEST_ACTIVE | 0x41C6013DA3BC7835 | Sent to indicate whether a display request is active in the current session. |
| WNF_PO_BATTERY_CHARGE_LEVEL | 0x41C6013DA3BC8075 | Triggered when battery charge crosses well-known charge level boundaries. |
| WNF_PO_SLEEP_STUDY_USER_PRESENCE_CHANGED | 0x41C6013DA3BC8875 | Sent when the global user presence changes. |
| WNF_PO_DEPRECATED1 | 0x41C6013DA3BC9075 | Unused notification |
| WNF_PO_BATTERY_DISCHARGING | 0x41C6013DA3BC9875 | Triggered when battery is being discharged, irrespective of AC/DC state of the system. |
| WNF_PO_PRIMARY_DISPLAY_VISIBLE_STATE | 0x41C6013DA3BCA075 | Visible state of the primary display as MONITOR_DISPLAY_STATE |
| WNF_PO_PRIMARY_DISPLAY_LOGICAL_STATE | 0x41C6013DA3BCA875 | Logical state of the primary display as MONITOR_LOGICAL_DISPLAY_STATE |
| WNF_PO_PREVIOUS_SHUTDOWN_STATE | 0x41C6013DA3BCB075 | Sent on every boot to notify previous shutdown state |
| WNF_PO_MODERN_STANDBY_EXIT_INITIATED | 0x41C6013DA3BCB875 | Triggered at the start of a transition to exit modern standby |
| WNF_PO_SW_HW_DRIPS_DIVERGENCE | 0x41C6013DA3BCC075 | Sent when SW DRIPS is more than HW DRIPS by a specific threshold |
| WNF_PO_DRIPS_DEVICE_CONSTRAINTS_REGISTERED | 0x41C6013DA3BCC875 | Sent once platform idle states and associated device constraints have been registered |
| WNF_PO_BASIC_BRIGHTNESS_ENGINE_DISABLED | 0x41C6013DA3BCD075 | One time system-wide transition to switch from the basic brightness engine to the high-precision brightness engine. |
| WNF_PO_BRIGHTNESS_ALS_OFFSET | 0x41C6013DA3BCD875 | ALS brightness offset consumed by the basic brightness engine. |
| WNF_PO_VIDEO_INITIALIALIZED | 0x41C6013DA3BCE075 | Set to TRUE when the video system is initialized. |
| WNF_PO_OVERLAY_POWER_SCHEME_UPDATE | 0x41C6013DA3BCE875 | Notification for power-setting overlay scheme change. |
| WNF_PO_CAD_STICKY_DISABLE_CHARGING | 0x41C6013DA3BCF075 | Set when an you want IOCTL_CAD_DISABLE_CHARGING to behave in a sticky manner |
| WNF_PO_POWER_BUTTON_STATE | 0x41C6013DA3BCF875 | Describes the current state of the power button. |
| WNF_PO_SYSTEM_TIME_CHANGED | 0x41C6013DA3BD0075 | Supplies the notification about system time changed. Payload has 2 ULONGLONG for new time and old time. |
| WNF_PO_WEAK_CHARGER | 0x41C6013DA3BD0875 | Triggered when a weak charger is detected. Note that there may be several minute delay between when charger is plugged in and when the notification is produced. |
| WNF_PO_PRESLEEP_NOTIFICATION | 0x41C6013DA3BD1075 | Triggered several minutes prior to idling to sleep. |
| WNF_PO_INPUT_SUPPRESS_NOTIFICATION | 0x41C6013DA3BD1875 | Triggered when device is sourced from battery(DC) with lid closed and no external monitor connected. |
| WNF_PO_WAKE_ON_VOICE_STATE | 0x41C6013DA3BD2075 | Sent when wake on voice state changes. |
| WNF_PO_OPPORTUNISTIC_CS | 0x41C6013DA3BD2875 | Sent to indicate period of opportunistic connectivity in standby. |
| WNF_PO_INPUT_SUPPRESS_NOTIFICATION_EX | 0x41C6013DA3BD3075 | Describes the input suppression state for modern standby system based on power source, lid state, monitor state, external monitor state and system opted-in policy. |
| WNF_PO_BATTERY_CHARGE_LIMITING_MODE | 0x41C6013DA3BD3875 | Set to TRUE when one of the battery is in charge limiting mode and FALSE when none of the battery is in charge limiting mode. |
| WNF_PO_DYNAMIC_BRIGHTNESS_SLIDER | 0x41C6013DA3BD4075 | Set to TRUE on systems that have a brightness slider that continuously auto-adjusts to the actual brightness of the screen. |
| WNF_PO_PDC_SHELL_PHASE_NOTIFICATION | 0x41C6013DA3BD4875 | Triggered whenever PDC enters or exits Shell phase. |
| WNF_PO_BRIGHTNESS_HOTKEY_NOTIFICATION | 0x41C6013DA3BD5075 | Triggered whenever a brightness hotkey is pressed. 1 means up was pressed and 0 means down was pressed. This will be only used by DES |
| WNF_PO_DRIPS_DEVICE_CONSTRAINTS_UPDATED | 0x41C6013DA3BD5875 | Sent when device constraints for drips state have been dynamically updated |
| WNF_PO_UMPO_SCENARIO_CHANGE | 0x41C6013DA3BD6075 | Triggered whenever the power session changes for UMPO to snap the current session |
| WNF_PO_RECONCILED_WEAK_CHARGER | 0x41C6013DA3BD6875 | Triggered whenever the battery miniclass driver or USB stack reports a weak charger |
| WNF_PNPA_DEVNODES_CHANGED | 0x96003DA3BC0875 | This corresponds to a DBT_DEVNODES_CHANGED message |
| WNF_PNPA_DEVNODES_CHANGED_SESSION | 0x96003DA3BC1035 | This corresponds to a DBT_DEVNODES_CHANGED message |
| WNF_PNPA_VOLUMES_CHANGED | 0x96003DA3BC1875 | This corresponds to a drive letter arrival/removal message |
| WNF_PNPA_VOLUMES_CHANGED_SESSION | 0x96003DA3BC2035 | This corresponds to a drive letter arrival/removal message |
| WNF_PNPA_HARDWAREPROFILES_CHANGED | 0x96003DA3BC2875 | This corresponds to a hardware profiles changed message |
| WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION | 0x96003DA3BC3035 | This corresponds to a hardware profiles changed message |
| WNF_PNPA_PORTS_CHANGED | 0x96003DA3BC3875 | This corresponds to a ports changes message |
| WNF_PNPA_PORTS_CHANGED_SESSION | 0x96003DA3BC4035 | This corresponds to a ports changes message |
| WNF_PNPB_AWAITING_RESPONSE | 0x396003DA3BC0875 | This corresponds to kernel PNP waiting synchronously for user-mode clients |
| WNF_PNPC_REBOOT_REQUIRED | 0x296003DA3BC0875 | This corresponds to a reboot of the system needs to be performed due to a device installation |
| WNF_PNPC_DEVICE_INSTALL_REQUESTED | 0x296003DA3BC1075 | Device installation is requested. |
| WNF_PNPC_CONTAINER_CONFIG_REQUESTED | 0x296003DA3BC1875 | A change that requires a device container to be updated has occured. |
| WNF_PROV_TURN_COMPLETE | 0x17891C3DA3BC0875 | Fired when a full set of packages are processed. |
| WNF_PROV_TPM_ATTEST_COMPLETE | 0x17891C3DA3BC1075 | Fired when TPM, NGC, and MSA all report ready for new tickets to contain the TPM claim. Event contains the HRESULT for the operation. |
| WNF_PROV_AUTOPILOT_PROFILE_AVAILABLE | 0x17891C3DA3BC1875 | Fired when an AutoPilot profile is available locally and is non-empty. Event contains the HRESULT for the operation. |
| WNF_PROV_AUTOPILOT_ASYNC_COMPLETE | 0x17891C3DA3BC2075 | Fired when the AutoPilot profile manager completes and is ready to unload. |
| WNF_PROV_DEVICE_BOOTSTRAP_COMPLETE | 0x17891C3DA3BC3475 | Fired when the Server provisioning in the blocking Device Bootstrap page of commercial OOBE is complete. Data passed in is a DWORD. 0x1, if Bootstrap is complete. |
| WNF_PROV_AUTOPILOT_DEVICE_NOT_MANAGED | 0x17891C3DA3BC3875 | Fired when the client OOBE is confident that the device will not be AutoPilot managed. Event contains the HRESULT for the operation. |
| WNF_DEVM_PROVISIONING_COMPLETE | 0xC900B29A3BC0875 | State of boot provisioning tasks. Set to 1 when provisioning is complete. SDDL comes from ID_CAP_PHONEPROVISIONER_EVENTS and PhoneProvisioner in %SDXROOT%\src\devmgmt\dm\packages\provisioning\provisioning.pkg.xml and MvProvisionHost in %SDXROOT%\src\devmgmt\dm\packages\multivariant\multivariant.pkg.xml |
| WNF_DEVM_DMWAPPUSHSVC_READY | 0xC900B29A3BC1875 | Multivariant is ready to deliver SMS messages to RILAdaptation (or any registered recipient) |
| WNF_DEVM_MULTIVARIANT_PROVISIONING_SESSIONS | 0xC900B29A3BC3075 | Multivariant provisioning session status (per slot). Everyone (WD) can subscribe, but just Local System and Admin can publish (SY, BA). |
| WNF_PS_WAKE_CHARGE_RESOURCE_POLICY | 0x41C61D3DA3BC0875 | This corresponds to an application that has eclipsed job wake charge resource policy |
| WNF_PTI_WNS_RECEIVED | 0x418F1A3DA3BC0875 | A WNS notification has been received and the Push To Install service should process it. |
| WNF_SRC_SYSTEM_RADIO_CHANGED | 0x41851C3EA3BC0875 | This event signals when system radio is changed |
| WNF_RDR_SMB1_NOT_IN_USE_STATE_CHANGE | 0x41940A3FA3BC0875 | This event signals when the client didn’t discover SMB1 usage for a specific period |
| WNF_RTSC_PRIVACY_SETTINGS_CHANGED | 0x2951A3FA3BC0875 | Triggered every time there is a change in Group Policy/ MDM Settings related to Recommended Troubleshooting Privacy Settings |
| WNF_RTSC_INVOKE_TROUBLESHOOTER | 0x2951A3FA3BC1075 | Triggered when a Windows system component needs to invoke a troubleshooter using the RTSC |
| WNF_RM_MEMORY_MONITOR_USAGE_METRICS | 0x41C6033FA3BC0875 | Supplies the current RM memory monitor memory usage metrics. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_RM_GAME_MODE_ACTIVE | 0x41C6033FA3BC1075 | Supplies the process ID of the current game mode recipient, or 0 if no recipient is active |
| WNF_RM_QUIET_MODE | 0x41C6033FA3BC1875 | Supplies the current quiet mode state as recorded by central resource manager |
| WNF_HAM_SYSTEM_STATE_CHANGED | 0x418B0F25A3BC0875 | Supplies the current state of the system as recorded by the system state tracker |
| WNF_RPCF_FWMAN_RUNNING | 0x7851E3FA3BC0875 | This event signals when the RPC firewall manager is initialized |
| WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED | 0x12821A3FA3BC0875 | An RPC service trigger has been added or removed |
| WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED | 0x12821A3FA3BC1875 | A named pipe service trigger has been added or removed |
| WNF_SCH_BCRYPT_RELOAD | 0x418E0D3EA3BC0875 | This event indicates that Schannel has refreshed the Signature or CipherSuite list. |
| WNF_SCH_REGISTRY_RELOAD | 0x418E0D3EA3BC1075 | This event indicates that schannel has retrieved the latest registry settings. |
| WNF_SCH_ECC_RELOAD | 0x418E0D3EA3BC1875 | This event indicates that Schannel has refreshed the Curve list. |
| WNF_SCM_AUTOSTART_STATE | 0x418B0D3EA3BC0875 | This event triggers to indicate SCM autostart state |
| WNF_SBS_UPDATE_AVAILABLE | 0x41950C3EA3BC0875 | This event signals that there is an update available to the Secure Boot variables. |
| WNF_WSC_SECURITY_CENTER_USER_NOTIFICATION | 0x41851D3AA3BC0875 | A notification dialog should be shown to the user. |
| WNF_WSC_SECURITY_CENTER_STARTUP_NOTIFICATION | 0x41851D3AA3BC1075 | A notification to inform subscribers that WSCVC is RUNNING and ready to receive provider health queries. |
| WNF_SDO_ORIENTATION_CHANGE | 0x41890A3EA3BC0875 | This event triggers when there is a simple device orientation change. It’s data value is one of the SimpleDeviceOrientation enum values. Rights: SensorService can publish, Everyone can subscribe. |
| WNF_DEP_OOBE_COMPLETE | 0x41960B29A3BC0C75 | This event triggers when the system has completed OOBE (Windows Welcome) |
| WNF_DEP_UNINSTALL_DISABLED | 0x41960B29A3BC1475 | This event triggers when the Uninstall of the system has been disabled |
| WNF_SHEL_IMMERSIVE_SHELL_RUNNING | 0xD83063EA3BC0875 | This event signals when the Immersive Shell is started |
| WNF_SHEL_NOTIFICATIONS | 0xD83063EA3BC1035 | Set to 0 or more to indicate whether there are any unseen notifications in the notification center. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable the notification on OneCore |
| WNF_SHEL_LOGON_COMPLETE | 0xD83063EA3BC1875 | This system-scope event is signaled each time a user’s desktop becomes ready. Consider using WNF_SHEL_SESSION_LOGON_COMPLETE for a session-scoped version. |
| WNF_SHEL_OOBE_USER_LOGON_COMPLETE | 0xD83063EA3BC2475 | This event signals when logon of the first user after OOBE is complete. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed access. |
| WNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSED | 0xD83063EA3BC2875 | TDL dispatcher pipe has been closed |
| WNF_SHEL_TILECHANGE | 0xD83063EA3BC3075 | This event is signalled when there is a tile change to a background task |
| WNF_SHEL_NOTIFICATION_SETTINGS_CHANGED | 0xD83063EA3BC3835 | Event signals when toast notification settings have changed. |
| WNF_SHEL_SOFTLANDING_RULE_TRIGGERED | 0xD83063EA3BC4075 | This event signals when a SoftLanding rule is triggered |
| WNF_SHEL_START_LAYOUT_READY | 0xD83063EA3BC4875 | This event signals when Start Experience Host completes loading the Start menu layout |
| WNF_SHEL_APPRESOLVER_SCAN | 0xD83063EA3BC5075 | Event signals a full app resolver scan has been invoked. |
| WNF_SHEL_LOCKSCREEN_ACTIVE | 0xD83063EA3BC5835 | Set to 0 or 1 to indicate whether the lock screen is active. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don’t have multiple sessions, otherwise anyone can read and system can write. Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write. |
| WNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHED | 0xD83063EA3BC6075 | This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_INSTALL_FINISHED event from TDL |
| WNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTED | 0xD83063EA3BC6875 | This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_DOWNLOAD_STARTED event from TDL |
| WNF_SHEL_APPLICATION_STATE_UPDATE | 0xD83063EA3BC7075 | Event is for the shell to notify when app layout state is changed. Payload is ShellApplicationStateWnf struct. |
| WNF_SHEL_FOCUS_CHANGE | 0xD83063EA3BC7875 | This event signals when focus changes to a different process, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile. |
| WNF_SHEL_GAMECONTROLLER_LISTENER_INFO | 0xD83063EA3BC8075 | This event signals to toggle exclusive gamepad listening on and off, scoped to System, DWM SID and ID_CAP_INPUT_CORE appcontainer capability and DEFAPPS_CAPABILITY_GROUP SID on Mobile. |
| WNF_SHEL_GAMECONTROLLER_FOCUS_INFO | 0xD83063EA3BC8875 | This event signals to toggle exclusive gamepad input on and off |
| WNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGED | 0xD83063EA3BC9475 | This even signals when Start layout MDM policy has been applied |
| WNF_SHEL_CORTANA_APPINDEX_UPDATED | 0xD83063EA3BC9875 | Event signals when the apps have been pushed to the indexer has completed |
| WNF_SHEL_SOFTLANDING_RULES_UPDATED | 0xD83063EA3BCA075 | This event signals when SoftLanding rules folder is updated |
| WNF_SHEL_NOTIFICATIONS_CRITICAL | 0xD83063EA3BCA835 | This event signals that a critical notification such as an incoming call was posted. Original SDDL comes from dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml, updated to enable notification on OneCore |
| WNF_SHEL_START_VISIBILITY_CHANGED | 0xD83063EA3BCB035 | This event signals when Start visibility changes |
| WNF_SHEL_TRAY_SEARCHBOX_VISIBILITY_CHANGED | 0xD83063EA3BCB875 | Set to 0 or 1 to indicate whether the searchbox is visibile in the tray. SDDL follows DEVICE_LOCK_STATE SDDL on skus that don’t have multiple sessions, otherwise anyone can read and only system can write. |
| WNF_SHEL_DEVICE_UNLOCKED | 0xD83063EA3BCC075 | This event signals that the device is unlocked in the current session |
| WNF_SHEL_PLACES_CHANGED | 0xD83063EA3BCC875 | This event signals the changes in places’ database (clientgraph) |
| WNF_SHEL_SUSPEND_APP_BACKGROUND_ACTIVITY | 0xD83063EA3BCD075 | Event is for the shell to notify when app background activity should be suspended. Payload is DWORD set to 1 or 0. |
| WNF_SHEL_CREATIVE_EVENT_TRIGGERED | 0xD83063EA3BCD875 | This event signals a creative event has been triggered |
| WNF_SHEL_JUMPLIST_CHANGED | 0xD83063EA3BCE075 | Event signals that the jumplist for an app has changed. Payload is a struct containing the current sessionId as well as a string representing the aumid of the app whose jumplist was updated. |
| WNF_SHEL_START_APPLIFECYCLE_UNINSTALL_FINISHED | 0xD83063EA3BCE875 | This event signals when Start Experience Host receives an VISUALELEMENT_EVENT_APPLIFECYCLE_UNINSTALL_FINISHED event from TDL |
| WNF_SHEL_GAMECONTROLLER_NEXUS_INFO | 0xD83063EA3BCF075 | This event signals whenever the nexus button policy changes. |
| WNF_SHEL_SETTINGS_CHANGED | 0xD83063EA3BCF875 | This event signals when a settings toggle has changed |
| WNF_SHEL_TOAST_PUBLISHED | 0xD83063EA3BD0035 | This event signals when a new toast is published |
| WNF_SHEL_SOFTLANDING_PUBLISHED | 0xD83063EA3BD0835 | This event signals when a new soft landing tip is published |
| WNF_SHEL_REQUEST_CORTANA_SETTINGSCONSTRAINTINDEX_BUILD | 0xD83063EA3BD1075 | Event signals when an app requests cortana to build the settings constraint index |
| WNF_SHEL_DICTATION_RUNNING | 0xD83063EA3BD1835 | This is the state of dictation. SDDL comes from dwm.exe in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml and WPNarrator in %SDXROOT%\src\media\apps\packages\Apps\WPNarrator.pkg.xml. And Phone DefApps group is required too. |
| WNF_SHEL_DDC_COMMAND_AVAILABLE | 0xD83063EA3BD2075 | This event signals when a parsed command is ready for processing |
| WNF_SHEL_DDC_WNS_COMMAND | 0xD83063EA3BD2875 | This event signals when a command has been delivered via WNS |
| WNF_SHEL_DDC_SMS_COMMAND | 0xD83063EA3BD3075 | This event signals when a command has been delivered via SMS |
| WNF_SHEL_DEVICE_LOCKED | 0xD83063EA3BD3875 | This event signals that the device is locked in the current session |
| WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_ACTIVATED | 0xD83063EA3BD4075 | This event signals a subscription has been activated. |
| WNF_SHEL_TARGETED_CONTENT_SUBSCRIPTION_UPDATED | 0xD83063EA3BD4875 | This event signals the content of one or more subscriptions has been updated. |
| WNF_SHEL_LOCKSCREEN_IMAGE_CHANGED | 0xD83063EA3BD5075 | This event signals that lock screen image had changed. It contains the user sid whose image was changed |
| WNF_SHEL_SCREEN_COVERED | 0xD83063EA3BD5875 | Set to 0 (uncovered or unknown) or 1 (covered). |
| WNF_SHEL_DDC_CONNECTED_ACCOUNTS_CHANGED | 0xD83063EA3BD6075 | This event signals when connected accounts have changed and register device should be called |
| WNF_SHEL_OOBE_ENABLE_PROVISIONING | 0xD83063EA3BD6835 | This event signals when OOBE in a Shell should enable its provisioning flow |
| WNF_SHEL_LOCK_APP_SHOWN | 0xD83063EA3BD7035 | This event signals that the Lock application has been presented to the user. It contains an instance cookie as specified from LogonUI. |
| WNF_SHEL_LOCK_APP_REQUESTING_UNLOCK | 0xD83063EA3BD7835 | This event signals that the Lock application is requesting to unlock so the user can enter credentials. |
| WNF_SHEL_TILEINSTALL | 0xD83063EA3BD8075 | This event is signalled when there is a tile install to a background task |
| WNF_SHEL_TILEUPDATE | 0xD83063EA3BD8875 | This event is signalled when there is a tile update to a background task |
| WNF_SHEL_TILEUNINSTALL | 0xD83063EA3BD9075 | This event is signalled when there is a tile uninstall to a background task |
| WNF_SHEL_ABOVE_LOCK_APP_ACTIVE | 0xD83063EA3BD9835 | This event is signalled when there is an app launched (1) or terminated (0) above lock. Processes with the WINCAP_SHELL_EXPERIENCE_COMPOSER capability are allowed full access, while all other app containers have read access. |
| WNF_SHEL_RADIALCONTROLLER_EXPERIENCE_RESTART | 0xD83063EA3BDA035 | This event is signalled when the RadialController Experience has restarted to allow registered API component to re-establish connection and repopulate state |
| WNF_SHEL_ABOVE_LOCK_BIO_ACTIVE | 0xD83063EA3BDA835 | This event is signalled when there is bio feedback active (1) or inactive (0) above lock |
| WNF_SHEL_CORTANA_SPEECH_CANCELHANDSFREE_REQUESTED | 0xD83063EA3BDB035 | This event can be signalled when a handsfree device needs to request Cortana to cancel speech activity. |
| WNF_SHEL_CALM_DISPLAY_ACTIVE | 0xD83063EA3BDB875 | Set to 0 (inactive) or 1 (active). |
| WNF_SHEL_INSTALL_PLACEHOLDER_TILES | 0xD83063EA3BDC075 | This event signals a start layout change to a background task so that assets can be retrieved if necessary. Payload is PlaceholderTileWnf. |
| WNF_SHEL_PEOPLE_PINNED_LIST_CHANGED | 0xD83063EA3BDC835 | This event is signalled when there is a change to the Pinned People list |
| WNF_SHEL_LOCKSTATE | 0xD83063EA3BDD075 | Current lock state of the device. Payload is DEVICE_LOCKSTATE. On multisession SKUs, everyone can read while only SYSTEM can write. On single session SKUs, everyone can read while only DefaultAccount can write. On single session SKUs, also include allow list from the SDDL for DEVICE_LOCK_STATE. Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write. |
| WNF_SHEL_APPLICATION_SPATIAL_INFO_UPDATE | 0xD83063EA3BDD875 | Event is for the shell to notify when app spatial information has changed. Payload is ApplicationSpatialInformationWnf struct. |
| WNF_SHEL_CORTANA_AUDIO_ACTIVE | 0xD83063EA3BDE075 | Indicates the state of Cortana speech input and output. |
| WNF_SHEL_LOCKSCREEN_INFO_UPDATED | 0xD83063EA3BDE835 | This event signals that the LockScreen info is updated. |
| WNF_SHEL_CDM_FEATURE_CONFIG_FIRST_USAGE | 0xD83063EA3BDF875 | This event notifies the CDM when a new feature configuration is first used. The SDDL is scoped to AuthenticatedUsers, AppContainers and LPACs (CAPABILITY_SID_LpacAppExperience),MpsSvc |
| WNF_SHEL_APPLICATION_STARTED | 0xD83063EA3BE0075 | This event is signals when an application launches. The Payload is the appID. |
| WNF_SHEL_APPLICATION_TERMINATED | 0xD83063EA3BE0875 | This event is signals when an application is terminated. The Payload is the appID. |
| WNF_SHEL_WINDOWSTIP_CONTENT_PUBLISHED | 0xD83063EA3BE10F5 | This event is signals when a request is made to show a Windows Tip bubble. The Payload is the content id(String). |
| WNF_SHEL_USER_IDLE | 0xD83063EA3BE1875 | This event signals when the first time a user is idle after logon. The payload is the time the user has been idled for |
| WNF_SHEL_PEOPLE_PANE_VIEW_CHANGED | 0xD83063EA3BE2035 | This event is signalled when there is a change to the People Pane Views |
| WNF_SHEL_LOCK_APP_RELOCK | 0xD83063EA3BE2835 | This event signals that the lock screen should be reset due to a re-lock request. |
| WNF_SHEL_LOCK_APP_READY | 0xD83063EA3BE3035 | This event signals that the lock screen is ready after a reset was requested. |
| WNF_SHEL_SESSION_LOGON_COMPLETE | 0xD83063EA3BE3835 | This event is scoped to the user session and signaled when the desktop is ready after a logon |
| WNF_SHEL_HEALTH_STATE_CHANGED | 0xD83063EA3BE4075 | This event signals when the health state of the device changes |
| WNF_SHEL_CONTENT_DELIVERY_MANAGER_NEEDS_REMEDIATION | 0xD83063EA3BE4875 | This event signals that Content Delivery Manager content needs remediation |
| WNF_SHEL_DESKTOP_APPLICATION_STARTED | 0xD83063EA3BE5075 | This event is signals when a desktop application launches. The Payload is the executable name. |
| WNF_SHEL_DESKTOP_APPLICATION_TERMINATED | 0xD83063EA3BE5875 | This event is signals when a desktop application is terminated. The Payload is the executable name. |
| WNF_SHEL_SUGGESTED_APP_READY | 0xD83063EA3BE60F5 | This event signals that the app launched by sign in suggestions is ready. |
| WNF_SHEL_CDM_REGISTRATION_COMPLETE | 0xD83063EA3BE6835 | This event is scoped to the user session and signaled when the CDM registration is complete |
| WNF_SHEL_CONTENT_DELIVERY_MANAGER_MONITORING | 0xD83063EA3BE70F5 | This event signals that Content Delivery Manager Cache Monitoring is Enabled or not. |
| WNF_SHEL_SIGNAL_LOGONUI | 0xD83063EA3BE7835 | Used to signal logon controller across the desktop boundary. Only local system or the composer can read and write. Currently payload is present but ignored. |
| WNF_SHEL_ENTERPRISE_HIDE_PEOPLE_BAR_POLICY_VALUE_CHANGED | 0xD83063EA3BE8075 | This event signals when the HidePeopleBar MDM policy has been updated |
| WNF_SHEL_CDM_FEATURE_USAGE | 0xD83063EA3BE9075 | This event notifies the CDM when a feature configuration is used |
| WNF_SHEL_OOBE_PROVISIONING_COMPLETE | 0xD83063EA3BE9C75 | This event signals when OOBE in a Shell has completed its provisioning flow. It is permanent since provisioning is only supported during first user OOBE. |
| WNF_SHEL_SIGNAL_MANAGER_SIGNAL_TRIGGERED | 0xD83063EA3BEA075 | This event signals when the signal manager fires a signal |
| WNF_SHEL_CLOUD_FILE_INDEXED_CHANGE | 0xD83063EA3BEA875 | Notification is incremented / signaled when a cloudfile state change is detected by the indexer service. Payload is count of changes. User can subscribe, but only service (indexer) can publish |
| WNF_SHEL_CLOUD_FILE_PROGRESS_CHANGE | 0xD83063EA3BEB075 | Notification when a sync client or shell session updates in-memory progress within the indexer service. Payload is the tick count when the last change occurred. User can subscribe, but only service (indexer) can publish |
| WNF_SHEL_START_LAYOUT_MIGRATED | 0xD83063EA3BEB8F5 | This event signals when Start Experience Host completes a layout migration |
| WNF_SHEL_ENTERPRISE_START_PLACES_POLICY_VALUE_CHANGED | 0xD83063EA3BEC075 | This event signals when a Start place MDM policy (AllowPinnedFolder*) has been applied |
| WNF_SHEL_SIGNAL_MANAGER_FEATURE_TRIGGERED | 0xD83063EA3BEC875 | This event is used by the Signal Manager for WIL Feature Usage subscriptions required by registered signal triggers. |
| WNF_SHEL_ACTIONCENTER_VIEWSTATE_CHANGED | 0xD83063EA3BED035 | This event signals the current view state of action center. |
| WNF_SHEL_CACHED_CLOUD_NETWORK_STATE | 0xD83063EA3BED875 | State of the network as reflected by shell32 listeners. Subscribed to, and published from, explorer.exe, a user process. |
| WNF_SHEL_SIGNAL_MANAGER_TESTING | 0xD83063EA3BEE075 | This wnf is used for testing purposes. |
| WNF_SHEL_APPLIFECYCLE_INSTALL_STATE | 0xD83063EA3BEE875 | This event signals for different app install state from the Store. The Payload is the aumId and app state. |
| WNF_SHEL_RESTORE_PAYLOAD_COMPLETE | 0xD83063EA3BEF075 | CDS restore payload data is downloaded during OOBE |
| WNF_SHEL_LATEST_CONNECTED_AUTOPLAY_DEVICE | 0xD83063EA3BEF875 | This wnf is signaled everytime the user connects an autoplay device. The payload is the device id (VID and PID). |
| WNF_SHEL_CORTANA_QUIET_MOMENT_AT_HOME | 0xD83063EA3BF0475 | This wnf is signaled when Cortana’s QuietMoment @Home inferred that the user has arrived of left home . |
| WNF_SHEL_CORTANA_BEACON_STATE_CHANGED | 0xD83063EA3BF1075 | This wnf is signaled everytime the Action Center/Cortana beacon state changes. Payload is an int mapping to an enum representing the new state. |
| WNF_SHEL_QUIETHOURS_ACTIVE_PROFILE_CHANGED | 0xD83063EA3BF1C75 | This wnf is signaled whenever active quiet hours profile/mode changes. The value is the restrictive level of an active profile and the restrictive level is unique per profile |
| WNF_SHEL_LOCK_ON_LOGON | 0xD83063EA3BF2035 | This wnf is signaled when WinLogon detects an automatic lock on logon sequence to optimize displaying the user lock screen when the shell is ready. |
| WNF_SHEL_DEVICE_OPEN | 0xD83063EA3BF2875 | This wnf indicates for some types of devices if a lid, cover or enclosure around it is closed (zero value) or open (non-zero value). |
| WNF_SHEL_CREATIVE_EVENT_BATTERY_SAVER_OVERRIDE_TRIGGERED | 0xD83063EA3BF3075 | This event signals a creative event has been triggered that will allow to run during battery saver |
| WNF_SHEL_START_PROCESS_SUSPENDED_INTERNAL | 0xD83063EA3BF3835 | This event allows user-mode services such as Windows Notification Platform to determine when Start is suspended |
| WNF_SHEL_SYSTEMDIALOG_PUBLISHED | 0xD83063EA3BF4035 | This event signals when a new System Dialog toast is published |
| WNF_SHEL_SETTINGS_ENVIRONMENT_CHANGED | 0xD83063EA3BF4875 | This wnf indicates that a variable in the settings environment has changed. The payload is the current sessionId. |
| WNF_SHEL_QUIET_MOMENT_SHELL_MODE_CHANGED | 0xD83063EA3BF5075 | This event signals when Quiet Hours mode has changed state in shell |
| WNF_SHEL_NEXT_NOTIFICATION_SINK_SESSION_ID | 0xD83063EA3BF5875 | A system-wide unique rolling id for notification controller sink sessions |
| WNF_SHEL_TAB_SHELL_INIT_COMPLETE | 0xD83063EA3BF6035 | Event signals Tab Shell component initialization is complete, potentially after an explorer crash. Payload is an incrementing DWORD that can be used to poll if the current objects are new. |
| WNF_SHEL_LOCKAPPHOST_ACTIVE | 0xD83063EA3BF6835 | Set to 0 or 1 to indicate whether lockapphost is currently active. Anyone (including apps) can read, system has write access (but on multi-session skus authenticated users also have write access). Additionally, processes with the WINCAP_CORE_SHELL or WINCAP_SHELL_EXPERIENCE_COMPOSER capability can write. |
| WNF_SHEL_CORTANA_CAPABILTIES_CHANGED | 0xD83063EA3BF7035 | This wnf indicates that a cortana capabilties have changed. The payload will be the changed capabilties. The below sids are the CShell compser, cortana app, and cortana test app sids |
| WNF_SHEL_TASKBAR_PINS_UPDATED | 0xD83063EA3BF7875 | This event indicates taskbar pins were updated. The SDDL is scoped to AuthenticatedUsers. |
| WNF_SHEL_WCOS_SESSION_ID | 0xD83063EA3BF8075 | This system-scope event is signaled each time the shell attempts to start a local session on WCOS-based SKUs. It carries the latest session ID. Everyone can read from it. Authenticated users can write to it. Apps in general can read from it. Apps with WINCAP_SHELL_EXPERIENCE_COMPOSER can write to it. |
| WNF_SHEL_ASSISTANT_STATE_CHANGE | 0xD83063EA3BF8875 | This wnf indicates that the assistant state has changed, e.g Talking, idle, thinking, notification pending etc |
| WNF_SHEL_TOAST_PUBLISHED_SYSTEMSCOPE | 0xD83063EA3BF9075 | This event is similar to TOAST_PUBLISHED but at a system rather than session scope |
| WNF_SHEL_ACTIONCENTER_READY | 0xD83063EA3BF9835 | This event signals that a process hosting Action Center has started, such as Shell Experience Host. |
| WNF_SHEL_SIGNALMANAGER_SIGNAL_REGISTRATION_UPDATED | 0xD83063EA3BFA075 | This event is fired each time that a signal is registered or unregistered through the SignalRegistration runtime class. |
| WNF_SHEL_PASTE_SUGGESTION_MESSAGE | 0xD83063EA3BFA835 | This event signals the suggested content to paste. More details are at https://garagehackbox.azurewebsites.net/hackathons/1235/projects/76296 site. |
| WNF_SHEL_WINDOW_ACTIVATED | 0xD83063EA3BFB035 | This event signals that a foreground app changed. |
| WNF_SHEL_BACKGROUND_IMAGE_CHANGED | 0xD83063EA3BFB875 | This event signals that a background image has changed. It contains the user sid whose image was changed. |
| WNF_SHEL_SHOW_SCOOBE_TOAST | 0xD83063EA3BFC0F5 | This event is used to signal an appropriate time to show a SCOOBE toast for a specific scenario. |
| WNF_SHEL_BACKGROUND_SLIDESHOW_CHANGED | 0xD83063EA3BFC875 | This event signals that a background slideshow folder has changed. It contains the user sid whose slideshow was changed. |
| WNF_SHEL_ACCESSIBILITY_EVENT | 0xD83063EA3BFD075 | When received shell must show confirmation dialog in a way similar to desktop when accessibility feature hot key was detected (like press Shift 5 times). This dialog must ask whether a user wants to enable this accessibility feature, yes or no. Provided argument rcan be one of the following values: ACCESS_FILTERKEYS, ACCESS_STICKYKEYS, ACCESS_MOUSEKEYS, ACCESS_HIGHCONTRAST, ACCESS_TOGGLEKEYS |
| WNF_SHEL_PLAY_RIT_SOUND | 0xD83063EA3BFD875 | When this event is received shell must play a specific sound. This event provides sound id and a number of times the sound must be played. These two pieces of information are encoded in a single byte. Sound id stored in low 4 bits and the number of times the sound should be played stored in high 4 bits. Look at comments left for WNF_ACCESSIBILITY_NOTIFICATION structure. Sound id can be one of the following values: RITSOUND_UPSIREN, RITSOUND_DOWNSIREN, RITSOUND_LOWBEEP, RITSOUND_HIGHBEEP, RITSOUND_KEYCLICK, RITSOUND_DOBEEP. The max number of times the sound should be played is 5. |
| WNF_SHEL_VAIL_RDP_LOGIN_COMPLETE | 0xD83063EA3BFE075 | Indicates RDP login for VAIL container is complete.. The data type is a GUID which represents the container ID. This is meant to be used for single container environment only, since container ID can be overwritten in multi-container environment. |
| WNF_SHEL_LOCK_SCREEN_TRACE_COLLECTION | 0xD83063EA3BFE835 | This event signals that the trace collection is triggered above lock screen |
| WNF_SHEL_UPDATE_PACKAGE_TELEMETRY | 0xD83063EA3BFF075 | This event signals that a new package has been registered and the telemetry data should be updated to reflect the new package version. |
| WNF_SHEL_LAUNCH_SYSTEM_DESKTOP_BACKGROUND_ADJUSTMENT | 0xD83063EA3BFF875 | This event signals the composer to launch the background adjustment mode. |
| WNF_SHEL_PACKAGE_SERVICING_STATUS | 0xD83063EA3B800F5 | This event comes in pairs and signals the start and end of Shell package updating, which is done behind lock screen or at logon time. The parameter is a boolean indicating Shell package updating is started (true) or finished (false). Because package registration is per user, this notification is per user scope. |
| WNF_SHEL_NEW_BROWSER_UNINSTALLED | 0xD83063EA3B808F5 | Signals that the new system browser was uninstalled and data (start tiles, etc.) should be repaired and point to the old one |
| WNF_SHEL_SYSTEM_USES_LIGHT_MODE_CHANGED | 0xD83063EA3B81075 | This event signals when the system light mode value is changed. |
| WNF_SHEL_GAMECONTROLLER_SHARE_INFO | 0xD83063EA3B81875 | This event signals whenever the share button policy changes. |
| WNF_SHEL_PPI_WIN32VTCAPP_PROCESS_STARTED | 0xD83063EA3B82035 | This event signals the Win32 Vtc app has started, sending the process ID for lifetime handling purposes. (Surface Hub Only) |
| WNF_SIO_PIN_ENROLLED | 0x4189073EA3BC0875 | Used to notify the PIN list that a PIN has been enrolled and that it should refresh. |
| WNF_SIO_BIO_ENROLLED | 0x4189073EA3BC1075 | Used to notify the Delay Lock settings that Biometric enrollment has been modified. |
| WNF_SKYD_FILE_SYNC | 0x59F053EA3BC0875 | A file has changed on storage and a request is received to sync. |
| WNF_SKYD_QUOTA_CHANGE | 0x59F053EA3BC1075 | A user’s quota has changed. |
| WNF_SMS_CHECK_ACCESS | 0x4195033EA3BC0875 | This event triggers when the user revokes SMS access. |
| WNF_SMSS_MEMORY_COOLING_COMPATIBLE | 0x1295033EA3BC0875 | This event triggers when the system has multiple memory channels and memory cooling can be started |
| WNF_SPAC_SPACEPORT_PROPERTY_CHANGED | 0x2871E3EA3BC0875 | This notification is issued when a property of an object changes |
| WNF_SPAC_SPACEPORT_WORK_REQUESTED | 0x2871E3EA3BC1075 | This notification is issued to request work in user-mode |
| WNF_SPCH_INPUT_STATE_UPDATE | 0x9851E3EA3BC0835 | Indicates the state of the shared recognizer. |
| WNF_SPCH_REMOTE_SESSION_REQUEST | 0x9851E3EA3BC1075 | Indicates the data pertaining to a remote request to start/stop a speech recognition session. Published by BTAGService and HidSrv. Publish/subscribe granted to btagservice and aarsvc services. |
| WNF_SPCH_DISABLE_KWS_REQUEST | 0x9851E3EA3BC1875 | Indicates the KWS request from a remote device. Certain peripherals that support in-built KWS may request the system to disable the KWS runnning on Windows. Published by BTAGService. Publish/subscribe granted to btagservice and aarsvc services. |
| WNF_SPCH_ALLOW_REMOTE_SPEECH_SERVICES | 0x9851E3EA3BC2075 | This event is fired when system administrator change GP and MDM policy which governs capability to connect to speech service. |
| WNF_SRUM_SCREENONSTUDY_SESSION | 0xC931C3EA3BC0875 | Sent when a screen on study session starts or ends |
| WNF_SRV_SRV2_STATE_CHANGE | 0x41901C3EA3BC0875 | This event signals when the server (SRV2) start/stop |
| WNF_SRV_SMB1_NOT_IN_USE_STATE_CHANGE | 0x41901C3EA3BC1075 | This event signals when the server didn’t discover SMB1 usage for a specific period |
| WNF_OSWN_STORAGE_PRESENCE_CHANGE | 0xF911D22A3BC6075 | This event indicates a change in the mount state of an SD card. |
| WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGE | 0xF911D22A3BC6875 | This event indicates a change in the volume status of an SD card. |
| WNF_OSWN_STORAGE_FREE_SPACE_CHANGE | 0xF911D22A3BC7075 | This event indicates a change in the free space state of storage. |
| WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGE | 0xF911D22A3BC7875 | This event indicates a change in the temp file cleanup state of storage. |
| WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATE | 0xF911D22A3BCB875 | This event indicates completion of an update of storage usage categories. |
| WNF_OSWN_SYSTEM_CLOCK_CHANGED | 0xF911D22A3BC5875 | This event informs the system tray that the date-time has changed |
| WNF_OSWN_STORAGE_SHELLHWD_EVENT | 0xF911D22A3BCC075 | This event informs StorSvc that SHSVCS received a device handle event. |
| WNF_OSWN_STORAGE_APP_PAIRING_CHANGE | 0xF911D22A3BC8075 | This event indicates a change in the app pairing state of an SD card. |
| WNF_SUPP_ENABLE_ERROR_DETAILS_CACHE | 0x11961B3EA3BC0875 | Enable the Error Details Cache |
| WNF_SYS_SHUTDOWN_IN_PROGRESS | 0x4195173EA3BC0875 | The state is published when the system has begun the shutdown or reboot process. |
| WNF_SEB_INTERNET_PRESENT | 0x41840B3EA3BC0875 | Internet available or not |
| WNF_SEB_FREE_NETWORK_PRESENT | 0x41840B3EA3BC1075 | Free network available or not |
| WNF_SEB_SMS_RECEIVED | 0x41840B3EA3BC1875 | SMS has been received |
| WNF_SEB_NETWORK_STATE_CHANGES | 0x41840B3EA3BC2075 | Network state has changed |
| WNF_SEB_MBAE_NOTIFICATION_RECEIVED | 0x41840B3EA3BC2875 | Radio Operator Message received |
| WNF_SEB_NETWORK_CONTROL_CHANNEL_TRIGGER_RESET | 0x41840B3EA3BC3075 | Network control channel triggers have been reset |
| WNF_SEB_TIME_ZONE_CHANGE | 0x41840B3EA3BC3875 | Time zone change |
| WNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGE | 0x41840B3EA3BC4075 | Online ID connected state changed. SDDL comes from ID_CAP_EVERYONE in %SDXROOT%\src\baseos\prod\packages\WLId\WLId.pkg.xml |
| WNF_SEB_SYSTEM_IDLE | 0x41840B3EA3BC4875 | system is idle or not |
| WNF_SEB_BATTERY_LEVEL | 0x41840B3EA3BC5075 | System is idle or not |
| WNF_SEB_DOMAIN_JOINED | 0x41840B3EA3BC5875 | System is domain joined or not |
| WNF_SEB_BOOT | 0x41840B3EA3BC6075 | System has booted |
| WNF_SEB_USER_PRESENT | 0x41840B3EA3BC6875 | System has at least 1 user present |
| WNF_SEB_SYSTEM_AC | 0x41840B3EA3BC7075 | System is AC or DC |
| WNF_SEB_MONITOR_ON | 0x41840B3EA3BC7875 | Monitor is ON or OFF |
| WNF_SEB_IP_ADDRESS_AVAILABLE | 0x41840B3EA3BC8075 | IP address is available or not |
| WNF_SEB_BACKGROUND_WORK_COST_CHANGE | 0x41840B3EA3BC8875 | Indicate a change in the background work cost |
| WNF_SEB_BACKGROUND_WORK_COST_HIGH | 0x41840B3EA3BC9075 | Background work cost is high or not |
| WNF_SEB_SYSTEM_LPE | 0x41840B3EA3BC9875 | System is in Low Power Epoch or not |
| WNF_SEB_SMART_CARD_TRANSACTION_NOTIFICATION | 0x41840B3EA3BCA075 | Smart card transaction notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml |
| WNF_SEB_SYSTEM_MAINTENANCE | 0x41840B3EA3BCA875 | System is in good state for maintenance |
| WNF_SEB_GEOLOCATION | 0x41840B3EA3BCB075 | Geolocation service should be started |
| WNF_SEB_DEV_MNF_CUSTOM_NOTIFICATION_RECEIVED | 0x41840B3EA3BCB875 | OEM custom notification received |
| WNF_SEB_MOB_OPERATOR_CUSTOM_NOTIFICATION_RECEIVED | 0x41840B3EA3BCC075 | MO custom notification received |
| WNF_SEB_CACHED_FILE_UPDATED | 0x41840B3EA3BCC875 | Cached file has updated |
| WNF_SEB_SMART_CARD_FIELD_INFO_NOTIFICATION | 0x41840B3EA3BCD075 | Smart card field entry/exit notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml |
| WNF_SEB_SMART_CARD_HCE_APPLICATION_ACTIVATION_NOTIFICATION | 0x41840B3EA3BCD875 | Smart card HCE application activation notification. SDDL comes from ID_CAP_NFC_ADMIN in %SDXROOT%\src\net\NFC\packages\product\NFC\NFC.pkg.xml |
| WNF_SEB_DEPRECATED7 | 0x41840B3EA3BCE075 | Unused notification |
| WNF_SEB_DEPRECATED8 | 0x41840B3EA3BCE875 | Unused notification |
| WNF_SEB_LOW_LATENCY_POWER_REQUEST | 0x41840B3EA3BCF075 | Low-latency power request notification |
| WNF_SEB_RESILIENCY_NOTIFICATION_PHASE | 0x41840B3EA3BCF875 | Resiliency phase notification |
| WNF_SEB_FULL_SCREEN_VIDEO_PLAYBACK | 0x41840B3EA3BD0075 | Fullscreen video playback notification |
| WNF_SEB_NFC_PERF_BOOST | 0x41840B3EA3BD0875 | Indicates high-performance boost mode for critical NFC background activity |
| WNF_SEB_APP_LAUNCH_PREFETCH | 0x41840B3EA3BD1075 | Indicates app launch pre-fetch phase |
| WNF_SEB_DEPRECATED1 | 0x41840B3EA3BD1875 | Unused notification |
| WNF_SEB_APP_RESUME | 0x41840B3EA3BD2075 | Indicates app resume phase |
| WNF_SEB_DEPRECATED2 | 0x41840B3EA3BD2875 | Unused notification |
| WNF_SEB_DEPRECATED3 | 0x41840B3EA3BD3075 | Unused notification |
| WNF_SEB_DEPRECATED4 | 0x41840B3EA3BD3875 | Unused notification |
| WNF_SEB_DEPRECATED5 | 0x41840B3EA3BD4075 | Unused notification |
| WNF_SEB_DEPRECATED6 | 0x41840B3EA3BD4875 | Unused notification |
| WNF_SEB_CALL_STATE_CHANGED | 0x41840B3EA3BD5075 | Call state change notification |
| WNF_SEB_VOICEMAIL_CHANGED | 0x41840B3EA3BD5875 | Voicemail change notification |
| WNF_SEB_CALL_HISTORY_CHANGED | 0x41840B3EA3BD6075 | Call history change notification |
| WNF_SEB_LINE_CHANGED | 0x41840B3EA3BD6875 | Phone line change notification |
| WNF_SEB_AIRPLANE_MODE_DISABLED_FOR_EMERGENCY_CALL | 0x41840B3EA3BD7075 | Airplane mode disabled for emergency call notification |
| WNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGE | 0x41840B3EA3BD7875 | Registration state has changed |
| WNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGE | 0x41840B3EA3BD8075 | Radio state has changed |
| WNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGE | 0x41840B3EA3BD8875 | Pin lock state has changed |
| WNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATION | 0x41840B3EA3BD9075 | Device service command has been received |
| WNF_SEB_DEFAULT_SIGN_IN_ACCOUNT_CHANGE | 0x41840B3EA3BD9875 | Default Sign In account has changed |
| WNF_SEB_NETWORK_CONNECTIVITY_IN_STANDBY | 0x41840B3EA3BDA075 | Network connectivity in Standby |
| WNF_SEB_USER_PRESENCE_CHANGED | 0x41840B3EA3BDA875 | User presence changed |
| WNF_SEB_AUDIO_ACTIVITY | 0x41840B3EA3BDB075 | Audio activity in progress |
| WNF_SEB_FULL_SCREEN_HDR_VIDEO_PLAYBACK | 0x41840B3EA3BDB875 | Fullscreen HDR video playback notification |
| WNF_SEB_UWP_APP_LAUNCH | 0x41840B3EA3BDC075 | Indicates UWP app launch phase |
| WNF_SEB_MOBILE_BROADBAND_PCO_VALUE_CHANGE | 0x41840B3EA3BDC875 | Pco data has been received |
| WNF_SEB_MIXED_REALITY | 0x41840B3EA3BDD075 | Mixed reality notification |
| WNF_SEB_GAME_MODE | 0x41840B3EA3BDD875 | Game mode scenario |
| WNF_SEB_MOBILE_HOTSPOT | 0x41840B3EA3BDE075 | System WiFi/Bluetooth hotspot state |
| WNF_SPI_LOGICALDPIOVERRIDE | 0x418F1E3EA3BC0835 | Signals a change caused by SystemParametersInfo(SPI_SETLOGICALDPIOVERRIDE). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_SPI_PRIMARY_MONITOR_DPI_CHANGED | 0x418F1E3EA3BC1035 | This is triggered when the Primary monitor’s DPI is different than the session’s DPI. |
| WNF_TMCN_ISTABLETMODE | 0xF850339A3BC0835 | The computer has changed density mode. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TEAM_SHELL_HOTKEY_PRESSED | 0xC870B39A3BC0875 | Indicates a hotkey was pressed |
| WNF_TEAM_DEVICE_ACCOUNT_FLOW_COMPLETED | 0xC870B39A3BC1075 | Indicates that device account setup has completed |
| WNF_TEAM_DEVICE_ACCOUNT_CREATED | 0xC870B39A3BC1875 | Indicates that device account has been created |
| WNF_TEAM_OOBE_HEALTH_CHANNEL_A | 0xC870B39A3BC2075 | Data for OOBE health metrics |
| WNF_TEL_STORAGE_CAPACITY | 0x418A0B39A3BE0875 | This is fired every time an SENSE’s storage fullness crosses into a new tier or is reset. struct { DWORD PercentageFull[4]; } |
| WNF_TEL_DAILY_UPLOAD_QUOTA | 0x418A0B39A3BE1075 | This is fired every time an SENSE’s daily upload quota crosses into a new tier or is reset. struct { DWORD PercentageFull; } |
| WNF_TEL_ONESETTINGS_UPDATED | 0x418A0B39A3BE1875 | This is fired every time a onesettings namespace is updated. {UINT64 SettingsCount; struct {UINT64 NamespaceHash; UINT64 TimeLastChanged;}[16]} |
| WNF_TEL_SETTINGS_PUSH_NOTIFICATION_RECEIVED | 0x418A0B39A3BE2075 | This is fired every time a push notification is received from the OneSettings service. UTF8 string. |
| WNF_TEL_TIMER_RECONFIGURED | 0x418A0B39A3BE2875 | This is fired every time a UTC service timer changes its configuration values so subscribers can call GetTimerConfiguration to check any new values. |
| WNF_PHN_CALL_STATUS | 0x4188063DA3BC2875 | Bitmask containing the current relevant call states. Any 3rd party app is allowed to listen to this. See PhoneWnf.h for valid values. SID referenced below is that of the Phone service. |
| WNF_PHN_CALLFORWARDING_STATUS_LINE0 | 0x4188063DA3BC3075 | Bitmask containing the call forwarding state for phone line 0. See PhoneWnf.h for valid values. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml |
| WNF_PHNP_SERVICE_INITIALIZED | 0x1188063DA3BC3875 | BOOL indicating whether the Phone service has been initialized. SDDL comes from phoneCall and voipCall, PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml |
| WNF_PHNP_SIMSEC_READY | 0x1188063DA3BC4075 | BOOL indicating whether SimSec is ready to receive requests. SDDL comes from ID_CAP_PHONE_2ND_PARTY, ID_CAP_PHONE_INTERNAL and dwm in %SDXROOT%\src\uxplat\MobileUI\Packages\MobileUI\MobileUI.pkg.xml |
| WNF_PHNP_ANNOTATION_ENDPOINT | 0x1188063DA3BC4875 | Wide string indicating the call annotation provider’s RPC endpoint name. SDDL comes from ID_CAP_CALLMESSAGING_FILTER and PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml |
| WNF_PHNL_LINE1_READY | 0xD88063DA3BC4075 | BOOL indicating whether the line is ready. SDDL comes from PhoneSvc in %SDXROOT%\onecoreuap\net\Phone\PhoneService\Service\lib\Microsoft-Windows-Telephony-Phoneservice.wm.xml |
| WNF_TR_UPDATED_ENDPOINTS | 0x41C61C39A3BC0875 | Alert consumers that there are new Tenant Restriction endpoints |
| WNF_TETH_TETHERING_STATE | 0x9920B39A3BC0875 | State name for the Tethering service notification of all state changes |
| WNF_TETH_AUTOSTART_BLUETOOTH | 0x9920B39A3BC1075 | State name for starting Tethering service over Bluetooth |
| WNF_IME_INPUT_MODE_LABEL | 0x41830324A3BC0875 | Input Mode Indicator label IME want to show on systray. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_IME_EXPLICIT_PRIVATE_MODE | 0x41830324A3BC1035 | Explicit IME private mode status. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 |
| WNF_IME_AUTOMATIC_PRIVATE_MODE | 0x41830324A3BC1835 | Automatic IME private mode status. |
| WNF_IME_INPUT_SWITCH_NOTIFY | 0x41830324A3BC2035 | short cut(ctrl + shift or alt + shift) pressed. |
| WNF_THME_THEME_CHANGED | 0x48B0639A3BC0875 | Notifies when the theme of the system changes. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TZ_LEGACY_STORE_CHANGED | 0x41C61439A3BC0875 | Time Zone Legacy store is updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TZ_STORE_CHANGED | 0x41C61439A3BC1075 | Time Zone store is updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TZ_TIMEZONE_CHANGED | 0x41C61439A3BC1875 | This state is notified when the timezone is changed via SetTimeZoneInformationByID – The data value is a UINT that indicates the new TZID. SDDL comes from ID_CAP_BUILTIN_SETTIME, ID_CAP_EVERYONE and tzautoupdate in %SDXROOT%\src\globplat\product\packages\winnls\winnls.pkg.xml |
| WNF_TZ_LAST_TIME_SYNC_INFO | 0x41C61439A3BC2075 | This event has information about last time sync. SDDL comes from autotimesvc’s account. |
| WNF_TZ_NETWORK_TIME_SYNC_TRIGGER | 0x41C61439A3BC2875 | This event is used to trigger Network Sync. SDDL comes from autotimesvc’s account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml |
| WNF_TZ_AUTOTIMEUPDATE_STATE_CHANGED | 0x41C61439A3BC3075 | This state is notified when autotimeupdate state changed. The data value is a DWORD that indicates if autotimeupdate is enabled (1) or disabled (0). SDDL comes from autotimesvc’s account and ID_CAP_BUILTIN_SETTIME in %SDXROOT%\src\media\shell\packages\settings\Settings.pkg.xml |
| WNF_TOPE_INP_POINTER_DEVICE_ACTIVITY | 0x4960139A3BC0875 | Touch Event |
| WNF_TKBN_KEYBOARD_VISIBILITY | 0xF840539A3BC0835 | The touch keyboard’s appearance on the screen has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITY | 0xF840539A3BC1035 | The restricted mode touch keyboard’s appearance on the screen has changed. |
| WNF_TKBN_IMMERSIVE_FOCUS_TRACKING | 0xF840539A3BC1835 | An immersive application has encountered a focus change. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_TOUCH_EVENT | 0xF840539A3BC2035 | An application encountered a touch down/up event. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_RESTRICTED_TOUCH_EVENT | 0xF840539A3BC2835 | An application encountered a touch down/up event |
| WNF_TKBN_LANGUAGE | 0xF840539A3BC3035 | The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_FOREGROUND_WINDOW | 0xF840539A3BC3835 | The active keyboard layout has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_CARET_TRACKING | 0xF840539A3BC4035 | Caret tracking has updated on the desktop. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_AUTOCOMPLETE | 0xF840539A3BC4835 | The autocomplete window has been updated. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_MODERN_KEYBOARD_FOCUS_TRACKING | 0xF840539A3BC5035 | Determines whether focus is in an editable field for the purposes of the modern keyboard. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_KEYBOARD_VIEW_CHANGE | 0xF840539A3BC5835 | The view being shown by the touch keyboard has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_RESTRICTED_KEYBOARD_VIEW_CHANGE | 0xF840539A3BC6035 | The view being shown by the restricted mode touch keyboard has changed. |
| WNF_TKBN_KEYBOARD_GESTURE | 0xF840539A3BC6835 | The keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_RESTRICTED_KEYBOARD_GESTURE | 0xF840539A3BC7035 | The restricted keyboard has recognized a gesture. State is not relevant for this notification and it should not be queried after the fact. |
| WNF_TKBN_CANDIDATE_WINDOW_STATE | 0xF840539A3BC7835 | The candidate window state has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_KEYBOARD_LAYOUT_CHANGE | 0xF840539A3BC8035 | The layout being shown by the touch keyboard has changed. |
| WNF_TKBN_RESTRICTED_KEYBOARD_LAYOUT_CHANGE | 0xF840539A3BC8835 | The layout being shown by the restricted mode touch keyboard has changed. |
| WNF_TKBN_COMPOSITION_STATE | 0xF840539A3BC9035 | The composition state has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_SYSTEM_IMMERSIVE_FOCUS_TRACKING | 0xF840539A3BC9835 | A System Mode Application(Logon/OOBE) has encountered a focus change |
| WNF_TKBN_SYSTEM_TOUCH_EVENT | 0xF840539A3BCA035 | A System Mode application(Logon/OOBE) encountered a touch down/up event |
| WNF_TKBN_INPUT_PANE_DISPLAY_POLICY | 0xF840539A3BCA835 | The edit control in focus has changed the input pane display policy (manual/automatic). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_DESKTOP_MODE_AUTO_IHM | 0xF840539A3BCB035 | The system is in desktop mode but the user prefers tablet-mode IHM behavior. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_KEYBOARD_SET_VISIBLE | 0xF840539A3BCB835 | The touch keyboard should show or hide. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBN_KEYBOARD_SET_VISIBLE_NOTIFICATION | 0xF840539A3BCC035 | Update the show/hide status of touch keyboard that is being tracked in tabtip. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_TKBR_CHANGE_SYSTEM | 0x13840539A3BC08F5 | This state name is used to notify system components about state changes in the Token Broker |
| WNF_TKBR_CHANGE_APP | 0x13840539A3BC1075 | This state name is used to notify apps about state changes in the Token Broker |
| WNF_TKBR_CHANGE_APP_INTERNAL | 0x13840539A3BC18F5 | This state name is used to notify apps about state changes in the Token Broker |
| WNF_TPM_OWNERSHIP_TAKEN | 0x418B1E39A3BC0875 | This event signals when the Win32_TPM provider has completed taking ownership of the TPM. |
| WNF_TPM_DEVICEID_STATE | 0x418B1E39A3BC1075 | This event signals the state of the TPM-based DeviceID. |
| WNF_TPM_PROVISION_TRIGGER | 0x418B1E39A3BC1875 | This event triggers the TPM provisioning/status check to run. |
| WNF_TPM_CLEAR_PENDING | 0x418B1E39A3BC2075 | This event signals a TPM Clear will be attempted. |
| WNF_TPM_CLEAR_RESULT | 0x418B1E39A3BC2875 | This event signals if ownership was taken during TPM Provisioning and the result of TPM Clear on last reboot. |
| WNF_TPM_DISABLE_DEACTIVATE_PENDING | 0x418B1E39A3BC3075 | This event signals a TPM Disable or TPM Deactivate will be attempted. |
| WNF_TPM_ENABLE_ACTIVATE_COMPLETED | 0x418B1E39A3BC3875 | This event signals after the TPM is Enabled or Activated. |
| WNF_TPM_MAINTENANCE_TASK_STATUS | 0x418B1E39A3BC4075 | This event signals the TPM maintenance task status. |
| WNF_TPM_PROVISION_STATUS | 0x418B1E39A3BC4875 | Indicates which steps have been completed in TPM Provisioning. |
| WNF_UBPM_POWER_SOURCE | 0xC960C38A3BC0875 | The machine power source state |
| WNF_UBPM_CONSOLE_MONITOR | 0xC960C38A3BC1075 | The machine console monitor on/off state |
| WNF_UBPM_FRMU_ALLOWED | 0xC960C38A3BC1875 | The user is present and machine is on batteries and the battery level is above firmware update thershold |
| WNF_UBPM_PRESHUTDOWN_PHASE | 0xC960C38A3BC2075 | The machine entered pre shutdown phase |
| WNF_UMDF_WUDFSVC_START | 0x7820338A3BC0875 | Trigger the Driver Manager service start |
| WNF_UMDF_DRVMGR_STATUS | 0x7820338A3BC1075 | State name indicating the status of the UMDF driver manager |
| WNF_USO_STATE_CHANGE | 0x41891D38A3BC0875 | Signals that a state transition occurred for an update session. |
| WNF_USO_STATE_ATTENTION_REQUIRED | 0x41891D38A3BC1075 | Signals that a state encounter a condition that requires attention. |
| WNF_USO_UPDATE_PROGRESS | 0x41891D38A3BC1875 | Signals the a change in progess of an update session. |
| WNF_USO_REBOOT_REQUIRED | 0x41891D38A3BC2075 | Signals that a reboot is required to complete the update session. |
| WNF_USO_ACTIVE_SESSION | 0x41891D38A3BC2875 | Signals that the current active session is changed. |
| WNF_USO_UPDATE_SUCCEEDED | 0x41891D38A3BC3075 | Signals that updates have installed successfully on lite servicing stack. |
| WNF_USO_UPTODATE_STATUS_CHANGED | 0x41891D38A3BC3875 | Signals that the machine’s up to date status has changed. |
| WNF_USO_REBOOT_BLOCK_REQUESTED | 0x41891D38A3BC4075 | Signals that USO should not reboot the system. |
| WNF_USO_DOWNLOAD_STARTED | 0x41891D38A3BC4875 | Signals that update download has started on lite servicing stack. |
| WNF_USO_INSTALL_STARTED | 0x41891D38A3BC5075 | Signals that update install has started on lite servicing stack. |
| WNF_USO_INSTALL_STATE | 0x41891D38A3BC5875 | Signals various install states on lite servicing stack. |
| WNF_USO_SERVICE_STOPPING | 0x41891D38A3BC6075 | Signals that USO is stopping. |
| WNF_USO_SETTINGS_REFRESHED | 0x41891D38A3BC6875 | Signals that USO settings have been refreshed. |
| WNF_USO_ACTIVEHOURS_STARTED | 0x41891D38A3BC7075 | Signals that USO active hours have started. |
| WNF_DICT_CONTENT_ADDED | 0x15850729A3BC0875 | A word was added to the User Dictionary. Datasize is the byte count of MAX_PATH + uint32 + BOOL. SDDL SID’s come from capability ID_CAP_INPUT_CORE (both application and service SID’s), and DefAppsCapabilitiesGroup |
| WNF_DICT_PERSONALIZATION_FEEDBACK_SIGNAL | 0x15850729A3BC1075 | A word was added to the User Dictionary. Datasize is the byte count of MAX_PATH + MAX_PATH. SDDL SID’s come from capability ID_CAP_INPUT_CORE (both application and service SID’s), and DefAppsCapabilitiesGroup |
| WNF_UMGR_SIHOST_READY | 0x13810338A3BC0835 | Shell Infrastructure host is ready. |
| WNF_UMGR_USER_LOGIN | 0x13810338A3BC1075 | The user was logged in to the system. |
| WNF_UMGR_USER_LOGOUT | 0x13810338A3BC1875 | The user was logged out of the system. |
| WNF_UMGR_SYSTEM_USER_CONTEXT_CHANGED | 0x13810338A3BC2075 | Default system user, as defined by start view, has changed. |
| WNF_UMGR_SESSIONUSER_TOKEN_CHANGE | 0x13810338A3BC2875 | Token for the session user changed. |
| WNF_UMGR_SESSION_ACTIVE_SHELL_USER_CHANGE | 0x13810338A3BC3035 | Session active shell user changed. |
| WNF_UMGR_USER_TILE_CHANGED | 0x13810338A3BC3875 | The user tile for the specified SID was changed. The payload is the String user sid and the datasize is the byte count of MAX_PATH. |
| WNF_UMGR_USER_PICTURE_CHANGED | 0x13810338A3BC4075 | The picture for one of the logged in users has changed. There is no payload. |
| WNF_UMGR_USER_PICTURE_ID | 0x13810338A3BC48F5 | The correlation ID for the user picture. The payload is the string correlation ID and the datasize is the byte count of GUID string length + 1 for null (39). |
| WNF_UWF_OVERLAY_WARNING | 0x41801938A3BC0875 | The UWF overlay consumption is at warning level. |
| WNF_UWF_OVERLAY_CRITICAL | 0x41801938A3BC1075 | The UWF overlay consumption is at critical level. |
| WNF_UWF_OVERLAY_NORMAL | 0x41801938A3BC1875 | The UWF overlay consumption is at normal level. |
| WNF_VAN_VANUI_STATUS | 0x41880F3BA3BC0875 | The VAN UI open close status |
| WNF_VTSV_CDS_SYNC | 0x17951A3BA3BC0875 | Notification for syncing CDS WebCredential store |
| WNF_VTSV_ADD_CRED_NOTIFY | 0x17951A3BA3BC1075 | Notification for New Credential Added |
| WNF_VPN_CLIENT_CONNECTIVITY_STATUS | 0x41881E3BA3BC0875 | The VPN Client connectivity status. SDDL gives RasMan read/write permissions, rescap:networkingVpnProvider read permissions, and Authenticated User read permissions. |
| WNF_WAAS_QUALITY_IMPACT | 0x12870F3AA3BC0875 | WaaS Assessment Impact level for quality update |
| WNF_WAAS_FEATURE_IMPACT | 0x12870F3AA3BC1075 | WaaS Assessment Impact level for feature update |
| WNF_WCM_INTERFACE_LIST | 0x418B0D3AA3BC0875 | This event signals when a WCM-managed network interface has been added or removed |
| WNF_WCM_SERVICE_STATUS | 0x418B0D3AA3BC1075 | Connection Manager service restart |
| WNF_WCM_MAPPING_POLICY_UPDATED | 0x418B0D3AA3BC1875 | WNF state for refreshing WCM service mapping policies cache |
| WNF_WCM_PROFILE_CONFIG_UPDATED | 0x418B0D3AA3BC2075 | WNF state for refreshing WCM’s selection multiplex table and selectable connection list |
| WNF_WCM_INTERFACE_CONNECTION_STATE | 0x418B0D3AA3BC2875 | This event signals when a WCM-managed network interface has changed its connection quality state |
| WNF_CNET_DPU_GLOBAL_STATE_OVER_LIMIT | 0x1583002EA3BC1075 | the data of this state is 1 when the global data usage state is less than or equal to OVER_LIMIT, otherwise it is 0 |
| WNF_CNET_DPU_GLOBAL_STATE_OFF_TRACK | 0x1583002EA3BC1875 | the data of this state is 1 when the global data usage state is less than or equal to OFF_TRACK, otherwise it is 0 |
| WNF_CNET_DPU_GLOBAL_STATE_ON_TRACK | 0x1583002EA3BC2075 | the data of this state is 1 when the global data usage state is less than or equal to ON_TRACK, otherwise it is 0 |
| WNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACK | 0x1583002EA3BC2875 | the data of this state is 1 when the global data usage state is less than or equal to UNDER_TRACK, otherwise it is 0 |
| WNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKED | 0x1583002EA3BC3075 | the data of this state is 1 when the global data usage state is less than or equal to NOT_TRACKED, otherwise it is 0 |
| WNF_CNET_CELLULAR_CONNECTIONS_AVAILABLE | 0x1583002EA3BC4875 | State name for Cellular connections available State. WcmSvc and Netprofmsvc have publish permission. |
| WNF_CNET_NON_CELLULAR_CONNECTED | 0x1583002EA3BC6875 | The state is 1 when a non cellular connection is in connected state, otherwise it is 0. WcmSvc and Netprofmsvc have publish permission. |
| WNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTED | 0x1583002EA3BC7075 | The state is 1 when Radio is active or a non cellular connection is in connected state, otherwise it is 0. WcmSvc and Netprofmsvc have publish permission. |
| WNF_CNET_RADIO_ACTIVITY | 0x1583002EA3BC7875 | The state is 1 when Cellular data is active, otherwise it is 0. SDDL grants read access for everyone, including AppContainers, and write access for System |
| WNF_CNET_WIFI_ACTIVITY | 0x1583002EA3BC8075 | The state is 1 when WiFi is active, otherwise it is 0. SDDL grants read access for everyone, including AppContainers, and write access for System |
| WNF_DUSM_TASK_TOAST | 0xC951B29A3BC0875 | Trigger task scheduler to launch task for toast |
| WNF_DUSM_IS_CELLULAR_BACKGROUND_RESTRICTED | 0xC951B29A3BC1075 | The state is 1 when cellular internet connection is not allowed to any UWP Application running in background, the state is 0 when cellular internet connection is allowed to any applications running in foreground or background. |
| WNF_WDAG_SETTINGS_CHANGED_USER | 0x6870A3AA3BC0875 | A Settings for WDAG requiring the user context has changed. |
| WNF_WDAG_SETTINGS_CHANGED_SYSTEM | 0x6870A3AA3BC1075 | A Settings for WDAG requiring system context has changed. |
| WNF_ATP_PUSH_NOTIFICATION_RECEIVED | 0x41961A2CA3BC0875 | This is fired every time the WDATP Cloud service has a new command. struct {UINT64 TimeLastChanged;} |
| WNF_WDSC_ACCOUNT_PROTECTION_REFRESH | 0x2950A3AA3BC0875 | This event triggers a refresh for the account pillar state |
| WNF_WEBA_CTAP_DEVICE_STATE | 0x840B3AA3BC0875 | This event signals CTAP device state changes. |
| WNF_WEBA_CTAP_DEVICE_CHANGE_NOTIFY | 0x840B3AA3BC1075 | This event signals CTAP device was inserted or tapped. |
| WNF_WER_SERVICE_START | 0x41940B3AA3BC0875 | The WER service needs to start. CAPABILITY_SID_LpacInstrumentation – S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187 |
| WNF_WER_QUEUED_REPORTS | 0x41940B3AA3BC1075 | The number of reports queued to the machine store. CAPABILITY_SID_LpacInstrumentation – S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187 |
| WNF_WER_CRASH_STATE | 0x41940B3AA3BC1875 | Information about applications currently crashing. |
| WNF_WIFI_CONNECTION_STATUS | 0x880073AA3BC0875 | State name for Wifi radio and connection status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_CPL_STATUS | 0x880073AA3BC1075 | State name for Wifi CPL status flags |
| WNF_WIFI_SERVICE_NOTIFICATIONS | 0x880073AA3BC2075 | Notifications received from the WiFi Conn Svc. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_HOTSPOT_HOST_READY | 0x880073AA3BC2875 | State name for Wifi Hotspot Host ready flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_AOAC_STATUS | 0x880073AA3BC4875 | State name for Wifi power status flags. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_CONNECTION_SCORE | 0x880073AA3BC5875 | State name for Wifi connection status and connection score updates |
| WNF_WIFI_TILE_UPDATE | 0x880073AA3BC6075 | State name for Wifi network tiles updated. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_AVERAGE_TRANSMIT | 0x880073AA3BC6875 | Average peak transmitted traffic seen by NCSI |
| WNF_WIFI_MEDIA_STREAMING_MODE | 0x880073AA3BC7075 | Last media streaming mode state change |
| WNF_WIFI_TASK_TRIGGER | 0x880073AA3BC7875 | State name triggering WiFiNetworkManager background task. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_L3_AUTH_STATE | 0x880073AA3BC8075 | State for triggering browser UI when a network is hijacked. SDDL comes from WcmSvc service in %SDXROOT%\src\net\NetCore\Packages\NetCore\NetCore.pkg.xml |
| WNF_WIFI_WLANSVC_NOTIFICATION | 0x880073AA3BC8875 | This event sends notifications from wlansvc |
| WNF_WIFI_HOTSPOT2_REGISTRATION_STATUS | 0x880073AA3BC9075 | State name for triggering hotspot2 registration status from online signup server |
| WNF_WIFI_PROTECTED_SCENARIO | 0x880073AA3BC9875 | Signals that the Wi-Fi stack is handling an important scenario which must be protected from disruptive activity such as unexpected scans, or activity on a shared radio. |
| WNF_WIFI_MOVEMENT_DETECTED | 0x880073AA3BCA075 | Event indicating that the user may have moved to a different location based on nearby AP RSSI and other signals. Value is a counter indicating how many times movement has been detected. |
| WNF_WCDS_SYNC_WLAN | 0x12820D3AA3BC0875 | State name for starting the WLAN scheduled task. |
| WNF_WFDN_WFD_DISCONNECTION_PROPERTIES | 0xF82083AA3BC0875 | Reports properties about a Wi-Fi Display disconnect |
| WNF_WFDN_MOVEMENT_DETECTED | 0xF82083AA3BC1075 | Event indicating that the user may have moved to a different location during the Infracast session. Value is a counter indicating how many times movement has been detected. |
| WNF_WFDN_STAY_CONNECTED_TRIGGER | 0xF82083AA3BC1875 | Event indicating the current state of the infra walk-away listener. 0: Listening, 1: User elected to stay connected, 2: Auto Disconnect was triggered, 3: Session ended without triggering movement detection. |
| WNF_WIL_FEATURE_STORE | 0x418A073AA3BC0C75 | Event indicating the Normal feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml |
| WNF_WIL_BOOT_FEATURE_STORE | 0x418A073AA3BC1475 | Event indicating the Boot feature store has been modified. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml |
| WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_1 | 0x418A073AA3BC1C75 | Event to indicate the first use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_2 | 0x418A073AA3BC2475 | Event to indicate the first use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_DEVICE_USAGE_TRACKING_3 | 0x418A073AA3BC2C75 | Event to indicate the first use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_USAGE_TRACKING_1 | 0x418A073AA3BC3475 | Event to indicate unique use of a feature on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_USAGE_TRACKING_2 | 0x418A073AA3BC3C75 | Event to indicate unique use of a feature on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_USAGE_TRACKING_3 | 0x418A073AA3BC4475 | Event to indicate unique use of a feature on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_1 | 0x418A073AA3BC4C75 | Event to indicate uniquely observed code failures on this device (1). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_2 | 0x418A073AA3BC5475 | Event to indicate uniquely observed code failures on this device (2). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_3 | 0x418A073AA3BC5C75 | Event to indicate uniquely observed code failures on this device (3). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_4 | 0x418A073AA3BC6475 | Event to indicate uniquely observed code failures on this device (4). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_5 | 0x418A073AA3BC6C75 | Event to indicate uniquely observed code failures on this device (5). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_HEALTH_TRACKING_6 | 0x418A073AA3BC7475 | Event to indicate uniquely observed code failures on this device (6). CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_MACHINE_FEATURE_STORE | 0x418A073AA3BC7C75 | Event indicates changes of the WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_MACHINE_FEATURE_STORE_MODIFIED | 0x418A073AA3BC8075 | Event fires once per boot on modification of WIL Machine feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_USER_FEATURE_STORE | 0x418A073AA3BC88F5 | Event indicates modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_USER_FEATURE_STORE_MODIFIED | 0x418A073AA3BC90F5 | Event fires once per user session on modification of the WIL User feature store. SDDL comes from featureStagingInfo in %SDXROOT%\onecore\base\wil\mbs\Microsoft-Windows-Internal-Libraries-Capabilities\wil.wm.xml. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582. |
| WNF_WIL_FEATURE_USAGE_FOR_SRUM | 0x418A073AA3BC9835 | Event indicates there is unique and custom usage of a feature. This is for SRUM consumption. DPS service SID: S-1-5-80-2970612574-78537857-698502321-558674196-1451644582 |
| WNF_WBIO_ENROLLMENT_FINISHED | 0xE8F0C3AA3BC0875 | This event is fired when an enrollment completes, either successfully, or unsuccessfully. |
| WNF_SRT_WINRE_CONFIGURATION_CHANGE | 0x41921C3EA3BC0875 | Triggered each time there is a configuration change in WinRE |
| WNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATED | 0x13891A3EA3BC0875 | This WNF event fires when the OEM, MO, and Device Hardware values change in the registry. |
| WNF_STOR_CONFIGURATION_MO_TASK_RUNNING | 0x13891A3EA3BC1075 | This WNF event fires when the MO discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running. |
| WNF_STOR_CONFIGURATION_OEM_TASK_RUNNING | 0x13891A3EA3BC1875 | This WNF event fires when the OEM discovery task state changes. It will send an 0x00000000 if not running and 0x00000001 if running. |
| WNF_WUA_NUM_PER_USER_UPDATES | 0x41871B3AA3BC08F5 | State stores the number of per-user updates for the current user |
| WNF_WUA_AU_SCAN_COMPLETE | 0x41871B3AA3BC1075 | Triggered each time an AU scan is completed |
| WNF_WUA_CALL_HANG | 0x41871B3AA3BC1875 | State stores information regarding WU call hangs |
| WNF_WUA_SERVICE_HANG | 0x41871B3AA3BC2075 | State stores information regarding WU service hangs |
| WNF_WUA_STAGEUPDATE_DETAILS | 0x41871B3AA3BC2875 | Triggered when a StageUpdate call has completed for a phone update installation. |
| WNF_WUA_UPDATE_EXPIRING | 0x41871B3AA3BC3075 | Indicates an update will expire on the next WU service scavenge task. The data type is a GUID which represents the update ID. |
| WNF_WHTP_WINHTTP_PROXY_DISCOVERED | 0x1192063AA3BC0875 | A network proxy has been discovered. WinHttpAutoProxySvc can write, NlaSvc can read. |
| WNF_WHTP_WINHTTP_PROXY_AUTHENTICATION_REQUIRED | 0x1192063AA3BC1075 | A proxy has returned a 407 status code. |
| WNF_WSQM_IS_OPTED_IN | 0xC971D3AA3BC0875 | Mirrors the state of CEIPEnable and CEIPSampledIn registry settings. |
| WNF_WNS_CONNECTIVITY_STATUS | 0x4195003AA3BC0875 | The WNS Connection Provider connectivity status |
| WNF_WOF_OVERLAY_CONFIGURATION_CHANGE | 0x4180013AA3BC0875 | Overlay configuration change |
| WNF_SHR_SHARING_CHANGED | 0x4194063EA3BC0835 | System sharing status changed |
| WNF_SHR_DHCP_IPv4_LEASE_LIST | 0x4194063EA3BC1075 | ICS DHCP IPv4 lease list changed |
| WNF_SHR_DHCP_IPv4_FASTIP_ADDRS | 0x4194063EA3BC1875 | New assigned Fast-IP Address(es) |
| WNF_KSV_STREAMSTATE | 0x41901D26A3BC0875 | This is the current stream state of a camera for a process in a given session |
| WNF_KSV_DEVICESTATE | 0x41901D26A3BC1075 | This is the current device state |
| WNF_KSV_FSSTREAMACTIVITY | 0x41901D26A3BC1875 | This is stream activity indicator |
| WNF_KSV_KSSTREAMACTIVITY | 0x41901D26A3BC2075 | This is stream activity indicator |
| WNF_KSV_CAMERAPRIVACY | 0x41901D26A3BC2875 | This is user global camera privacy state indicator when switched via physical button |
| WNF_TB_SYSTEM_TIME_CHANGED | 0x41C60C39A3BC0875 | Time Broker has finished processing a change ot time |
| WNF_UDM_SERVICE_INITIALIZED | 0x418B0A38A3BC0835 | BOOL + UserContextToken indicating whether the UserDataService service has been initialized for the specified user. On OneCore, SDDL gives read access to callers with userDataSystem/userDataSystem capablity group and all access to IU/AU/System. On phone, SDDL comes from ID_CAP_APPOINTMENTS, ID_CAP_COMMS_COMMON, ID_CAP_CONTACTS, ID_CAP_EVERYONE, ID_CAP_PLATFORM_EXTENSIBILITY, UserDataSvc and ID_CAP_SMS in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml |
| WNF_UDA_CONTACT_SORT_CHANGED | 0x41870A38A3BC2835 | State name for aggregate sort and display order changes. SDDL comes from ID_CAP_COMMS_APPLICATIONS and ID_CAP_COMMS_SERVICES in %SDXROOT%\comms\Packages\CommsPlat\Comms.pkg.xml |
| WNF_XBOX_APPLICATION_CONTEXT_CHANGED | 0x19890C35A3BC0875 | The application specific context has changed in steady state. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_XBOX_APPLICATION_FOCUS_CHANGED | 0x19890C35A3BC1075 | The currently focused application has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_XBOX_APPLICATION_ACTIVATING | 0x19890C35A3BC1875 | An application is activating. |
| WNF_XBOX_APPLICATION_COMPONENT_FOCUS | 0x19890C35A3BC2075 | The currently focused application component has changed. |
| WNF_XBOX_SHELL_TOAST_NOTIFICATION | 0x19890C35A3BC2875 | A new toast notification has been delivered to the shell. |
| WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_LAUNCH | 0x19890C35A3BC3075 | A package is about to be unmounted from the System OS ready to launch it on the Title OS. |
| WNF_XBOX_PACKAGE_INSTALL_STATE_CHANGED | 0x19890C35A3BC3875 | A new application package has been added or an existing one has been removed. |
| WNF_XBOX_IDLE_DIMMER_CHANGED | 0x19890C35A3BC4075 | Idle dimmer has changed state. |
| WNF_XBOX_GLOBALIZATION_SETTING_CHANGED | 0x19890C35A3BC4875 | An application package has been removed. |
| WNF_XBOX_APPLICATION_NO_LONGER_RUNNING | 0x19890C35A3BC5075 | An application is no longer running. |
| WNF_XBOX_AUTOPLAY_CONTENT_DETECTED | 0x19890C35A3BC5875 | An optical disc or other media has been detected with content. |
| WNF_XBOX_APPLICATION_ERROR | 0x19890C35A3BC6075 | Application error handler |
| WNF_XBOX_STORAGE_ERROR | 0x19890C35A3BC6875 | Handler for achievement cache and game save storage |
| WNF_XBOX_LIVE_CONNECTIVITY_CHANGED | 0x19890C35A3BC7075 | Connectivity to the Xbox LIVE service has changed. |
| WNF_XBOX_SYSTEM_TITLE_AUTH_STATUS_CHANGED | 0x19890C35A3BC7875 | System Title Authentication status has changed. |
| WNF_XBOX_ACHIEVEMENTS_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BC8075 | A new achievements-related raw notifications was received. |
| WNF_XBOX_ERA_VM_STATUS_CHANGED | 0x19890C35A3BC8875 | ERA VM status has changed. |
| WNF_XBOX_APPLICATION_LAYOUT_CHANGED | 0x19890C35A3BC9075 | One or more application layouts changed. |
| WNF_XBOX_SYSTEM_IDLE_TIMEOUT_CHANGED | 0x19890C35A3BC9875 | System Idle Timeout has changed. |
| WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGED | 0x19890C35A3BCA075 | System constrained status has changed. CAPABILITY_SID_LpacMedia – S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991. |
| WNF_XBOX_APPLICATION_COM_RESILIENCY_STATUS_CHANGED | 0x19890C35A3BCD875 | Application’s COM resiliency status has changed. |
| WNF_XBOX_SYSTEM_USER_CONTEXT_CHANGED | 0x19890C35A3BCE075 | Default system user, as defined by start view, has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_XBOX_HOST_STORAGE_CONFIGURATION_CHANGED | 0x19890C35A3BCF075 | A storage device was either plugged or unplugged. |
| WNF_XBOX_EXIT_SILENT_BOOT_MODE | 0x19890C35A3BCF875 | The system is exiting silent boot mode. |
| WNF_XBOX_APPLICATION_LICENSE_CHANGED | 0x19890C35A3BD0075 | The license used by the application has changed. |
| WNF_XBOX_SHELL_INITIALIZED | 0x19890C35A3BD0875 | The system shell is initialized and ready. |
| WNF_XBOX_PASS3_UPDATE_NOTIFICATION | 0x19890C35A3BD1875 | Pass 3 system update has progressed and is sending a notification. |
| WNF_XBOX_MSA_ENVIRONMENT_CONFIGURED | 0x19890C35A3BD2075 | The MSA and WNS environments have been configured to match the XBL environment. |
| WNF_XBOX_SIP_VISIBILITY_CHANGED | 0x19890C35A3BD2875 | The visibility of the Software Input Pane has changed. CAPABILITY_SID_LpacAppExperience – S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622. |
| WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGED | 0x19890C35A3BD3075 | Game streaming state has changed. |
| WNF_XBOX_SIP_FOCUS_TRANSFER_NOTIFICATION | 0x19890C35A3BD3875 | It is possible to transfer focus away from the Software Input Pane. |
| WNF_XBOX_XAM_SMB_SHARES_INIT_ALLOW_SYSTEM_READY | 0x19890C35A3BD4075 | SMB shares have been launched. |
| WNF_XBOX_XBBLACKBOX_SNAP_NOTIFICATION | 0x19890C35A3BD4875 | A snap of XBBlackbox has occurred |
| WNF_XBOX_SYSTEM_LOW_POWER_MAINTENANCE_WORK_ALLOWED | 0x19890C35A3BD5075 | Maintenance work is allowed in low power mode |
| WNF_XBOX_ERA_TITLE_LAUNCH_NOTIFICATION | 0x19890C35A3BD5875 | ERA launch notification with XBL title info |
| WNF_XBOX_STORAGE_STATUS | 0x19890C35A3BD6075 | Status of attached storage devices |
| WNF_XBOX_STORAGE_CHANGED | 0x19890C35A3BD6875 | A storage device, or its contents, have changed |
| WNF_XBOX_PACKAGE_STREAMING_STATE | 0x19890C35A3BD7075 | Current state of the streaming package |
| WNF_XBOX_STREAMING_QUEUE_CHANGED | 0x19890C35A3BD7875 | The install streaming queue contents have changed |
| WNF_XBOX_QUERY_UPDATE_NOTIFICATION | 0x19890C35A3BD8075 | An update is available for installing content. |
| WNF_XBOX_REPOSITORY_CHANGED | 0x19890C35A3BD8875 | A change has been made to the pre-indexed state repository. |
| WNF_XBOX_LIVETV_TUNER_COUNT_CHANGED | 0x19890C35A3BD9075 | The number of LiveTV tuners connected to the system has changed |
| WNF_XBOX_PACKAGECACHE_CHANGED | 0x19890C35A3BD9875 | A change has been made to the package cache. |
| WNF_XBOX_WPN_PLATFORM_HOST_INITIALIZED | 0x19890C35A3BDA075 | The WPN platform host is initialized and ready. |
| WNF_XBOX_NARRATOR_RECT_CHANGED | 0x19890C35A3BDA875 | The rectangle visual of the Narrator has changed. |
| WNF_XBOX_PACKAGE_UNMOUNTED_FROM_SYSTEM_FOR_UNINSTALL | 0x19890C35A3BDB075 | A package is about to be unmounted from the System OS for uninstall. |
| WNF_XBOX_SEND_LTV_COMMAND_REQUESTED | 0x19890C35A3BDB875 | A module requested for an ltv command to be issued. |
| WNF_XBOX_SHELL_DATACACHE_ENTITY_CHANGED | 0x19890C35A3BDC075 | An entity has changed in the shell data cache. |
| WNF_XBOX_NOTIFICATION_UNREAD_COUNT | 0x19890C35A3BDD075 | Number of unread notifications for the current system user. |
| WNF_XBOX_EXTENDED_RESOURCE_MODE_CHANGED | 0x19890C35A3BDD875 | Extended resource mode has been toggled |
| WNF_XBOX_AUTO_SIGNIN_IN_PROGRESS | 0x19890C35A3BDE075 | Indicates whether the shell is in the process of auto-signin. Payload is UINT32 with a 1 or 0. |
| WNF_XBOX_REMOTE_SIGNOUT | 0x19890C35A3BDE875 | A local user has signed out remotely via SPOP. |
| WNF_XBOX_ACCESSIBILITY_NARRATOR_ENABLED | 0x19890C35A3BDF075 | Indicates whether the Narrator is enabled. Payload is UINt32 with 1 (enabled) or 0 (disabled). |
| WNF_XBOX_GLOBAL_SPEECH_INPUT_NOTIFICATION | 0x19890C35A3BDF875 | A global speech command was recognized that translates to a controller button press. |
| WNF_XBOX_APPLICATION_CURRENT_USER_CHANGED | 0x19890C35A3BE0075 | The current user of the application has changed. |
| WNF_XBOX_ERA_VM_INSTANCE_CHANGED | 0x19890C35A3BE0875 | ERA VM Instance has come up or gone down |
| WNF_XBOX_RESET_IDLE_TIMER | 0x19890C35A3BE1075 | Idle monitor timer should be reset due to user activity. |
| WNF_XBOX_KINECT_IS_REQUIRED | 0x19890C35A3BE2875 | An application that requires Kinect has connected to the NuiService. |
| WNF_XBOX_ADJUST_SNAP_CPU_AFFINITY | 0x19890C35A3BE3075 | Adjust an app’s CPU affinity if in constrained mode |
| WNF_XBOX_VIDEOPLAYER_ACTIVEPLAYER | 0x19890C35A3BE3875 | The active shared video player host has changed. |
| WNF_XBOX_VIDEOPLAYER_PLAYERSTATE | 0x19890C35A3BE4075 | The video player app has changed internal state. |
| WNF_XBOX_VIDEOPLAYER_PLAYBACKPROGRESS | 0x19890C35A3BE4875 | The video player app has changed playback progress. |
| WNF_XBOX_SAFEAREA_SETTING_CHANGED | 0x19890C35A3BE5075 | Indicates whether the safe area setting is enabled. Payload is UINT32 with a 1 or 0. |
| WNF_XBOX_ACTIVE_BACKGROUNDAUDIO_APPLICATION_CHANGED | 0x19890C35A3BE5875 | The application providing audio from the background has changed. |
| WNF_XBOX_KEYBOARD_LOCALE_CHANGED | 0x19890C35A3BE6075 | Indicates that the desired keyboard locale has changed. |
| WNF_XBOX_GAMER_ACCOUNT_CHANGED | 0x19890C35A3BE6875 | The local gamer account has signed in or out. Payload is uint32 representing sessionid |
| WNF_XBOX_ERA_VM_IOPRIORITY_CHANGED | 0x19890C35A3BE7075 | ERA VM IO priority has been changed |
| WNF_XBOX_SPEECH_INPUT_DEVICE | 0x19890C35A3BE7875 | Input device changed for OneCore speech |
| WNF_XBOX_ACCESSIBILITY_EXCLUSIVE_INPUT_MODE_CHANGED | 0x19890C35A3BE9075 | The exclusive input modality for an accessibility component changed |
| WNF_XBOX_PROACTIVE_NOTIFICATION_TRIGGERED | 0x19890C35A3BE9875 | Proactive notification service is triggered |
| WNF_XBOX_ACHIEVEMENT_TRACKER_STATE_CHANGED | 0x19890C35A3BEA075 | Notification for when the Achievement Tracker’s state should change |
| WNF_XBOX_GUIDE_DIRECT_ACTIVATION | 0x19890C35A3BEA875 | Event to trigger direct activation of xbox guide |
| WNF_XBOX_TITLE_SPOP_VETO_RECEIVED | 0x19890C35A3BEB075 | A title SPOP veto has been received. |
| WNF_XBOX_LIBRARY_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEB875 | A new library-related raw notifications was received. |
| WNF_XBOX_MESSAGING_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEC075 | A new messaging-related raw notifications was received. |
| WNF_XBOX_PEOPLE_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEC875 | A new people-related raw notifications was received. |
| WNF_XBOX_MULTIPLAYER_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BED075 | A new multiplayer-related raw notifications was received. |
| WNF_XBOX_LIVETV_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BED875 | A new live tv-related raw notifications was received. |
| WNF_XBOX_SYSTEMUI_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEE075 | A new SystemUI-related raw notifications was received. |
| WNF_XBOX_CLUB_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEE875 | A new club-related raw notifications was received. |
| WNF_XBOX_CLUBCHAT_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEF075 | A new club chat-related raw notifications was received. |
| WNF_XBOX_SETTINGS_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BEF875 | A new settings-related raw notifications was received. |
| WNF_XBOX_MEDIA_IS_PLAYING_CHANGED | 0x19890C35A3BF0075 | Notification of whether any media is playing. |
| WNF_XBOX_EXPANDED_RESOURCES_INACTIVE | 0x19890C35A3BF0875 | An expandedResources app has gone inactive. |
| WNF_XBOX_PARENTAL_RESTRICTIONS_CHANGED | 0x19890C35A3BF1075 | The maximum age rating currently permissable has changed. |
| WNF_XBOX_PARTY_OVERLAY_STATE_CHANGED | 0x19890C35A3BF1875 | Notification for when the Party Overlay’s state should change |
| WNF_XBOX_CLOUD_SETTINGS_UPDATED | 0x19890C35A3BF2075 | A cloud settings collection was updated |
| WNF_XBOX_ERA_FAST_ITERATION_STATUS_CHANGED | 0x19890C35A3BF2875 | ERA Fast Iteration Mode has changed. |
| WNF_XBOX_NTM_CONSTRAINED_MODE_CHANGED | 0x19890C35A3BF3075 | The Network Transfer Manager’s constrained mode changed. |
| WNF_XBOX_NARRATOR_INPUT_LEARNING_MODE_CHANGED | 0x19890C35A3BF3875 | Narrator input learning mode changed. |
| WNF_XBOX_SUSPEND_SKELETAL_TRACKING_INITIALIZATION | 0x19890C35A3BF4075 | Initialization of the skeletal tracking pipeline should be suspended / resumed. |
| WNF_XBOX_NEON_SETTING_CHANGED | 0x19890C35A3BF4875 | Immersive background or connected animation setting changed. |
| WNF_XBOX_COPYONLAN_UPLOAD_STATE_CHANGED | 0x19890C35A3BF5075 | Copy on LAN upload state has changed. |
| WNF_XBOX_DASHBOARD_DIRECT_ACTIVATION | 0x19890C35A3BF5875 | Event to trigger direct activation of xbox dashboard. |
| WNF_XBOX_COMMANDSERVICE_RAW_NOTIFICATION_RECEIVED | 0x19890C35A3BF6075 | A new Command Service raw notification was received. |
| WNF_XBOX_NOTIFICATION_SETTING_CHANGED | 0x19890C35A3BF6875 | A notification settings was updated |
| WNF_XBOX_GUEST_VM_CRASH_DUMP_NOTIFICATION | 0x19890C35A3BF7075 | A new guest VM crash dump file was written. |
| WNF_XBOX_TEST_NETWORK_CONNECTION_COMPLETE | 0x19890C35A3BF7875 | User initiated network connection test has completed with no errors |
| WNF_XBOX_GAMECORE_TITLE_LAUNCH_NOTIFICATION | 0x19890C35A3BF8075 | GameCore launch notification with title info |
| WNF_XBOX_HOST_XVC_CORRUPTION_DETECTED | 0x19890C35A3BF8875 | XVC corruption has been detected. |
| WNF_XBOX_ERA_INITIAL_PRESENT | 0x19890C35A3BF9075 | ERA title has presented its first frame. |
| WNF_XBOX_HAS_NETWORK_CONNECTIVITY | 0x19890C35A3BF9875 | Indicates the state of network connectivity. Payload is a UINT32 with a value of 0 or 1 depending on if the network is connected |
| WNF_XBOX_CONNECTED_STANDBY_HISTORY | 0x19890C35A3BFA075 | Indicates the state of the current connected standby session. |
| WNF_XBOX_GAMECORE_NETWORK_READY | 0x19890C35A3BFA875 | GameCore network ready signal. |
| WNF_XBOX_ERA_TITLE_ACTIVATION_COMPLETED | 0x19890C35A3BFB075 | ERA title has completed activation. |
| WNF_XBOX_SUBSCRIPTION_PURCHASED | 0x19890C35A3BFB875 | An RTA notification has come in that a subscription has been purcahsed. |
| WNF_XBOX_TIME_ZONE_CHANGED | 0x19890C35A3BFC075 | Indicates the time zone has changed. |
| WNF_XBOX_ENTITLEMENTS_CHANGED | 0x19890C35A3BFC875 | Indicates that the game and app entitlements for the current set of users has changed. |
| WNF_XBOX_PASS_ENTITLEMENTS_CHANGED | 0x19890C35A3BFD075 | Indicates that the pass entitlements for the current set of users has changed. |
| WNF_XBOX_REBOOT_REQUIRED_TO_ENABLE_KINECT | 0x19890C35A3BFD875 | A reboot is required to enable Kinect support. |
| WNF_XBOX_ACQUIRED_GAMEPASS | 0x19890C35A3BFE075 | A GamePass subscription has just been purchased |
| WNF_XBOX_SHUTDOWN_INITIATED | 0x19890C35A3BFE875 | Indication that a system shutdown has been initiated. |
| WNF_XBOX_CONSOLE_STREAMING_STATUS_CHANGED | 0x19890C35A3BFF075 | The console’s streaming status has changed |
| WNF_XBOX_POWERSTATE_CHANGED | 0x19890C35A3BFF875 | The console’s power state has changed. |
| WNF_UTS_USERS_ENROLLED | 0x41951A38A3BC0C75 | Indicates whether there are any enrolled users. |
| WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGERED | 0x41951A38A3BC1475 | Triggered when the lock screen is dismissed to kick-off trusted signals. |
| WNF_USB_TYPE_C_PARTNER_STATE | 0x41841D38A3BC0875 | This event indicates the state of a USB Type-C connector’s partner device. |
| WNF_USB_BILLBOARD_CHANGE | 0x41841D38A3BC1075 | This event indicates that the number of Billboard devices in the system has changed. |
| WNF_USB_PEER_DEVICE_STATE | 0x41841D38A3BC1875 | This is the state of a peer device. |
| WNF_USB_FUNCTION_CONTROLLER_STATE | 0x41841D38A3BC2875 | This event indicates the state of a USB function controller, such as detached, or attached, and successfully enumerated with host PC. |
| WNF_USB_ERROR_NOTIFICATION | 0x41841D38A3BC3075 | This event indicates that a USB error notification needs to be published. |
| WNF_USB_POLICY_MANAGER_HUB_COLLECTION_STATE | 0x41841D38A3BC3875 | This indicates that the hub collection in USB Policy Manager has changed. |
| WNF_USB_XHCI_AUDIO_OFFLOAD_STATE | 0x41841D38A3BC4075 | This event indicates the state of a USB XHCI controller’s audio offload state. |
16 maj 2022
Tagi: WNF
