Elastic Windows Event Explorer

Publisher - Microsoft-Windows-All-User-Install-Agent

Event ID 1300


The Windows All-User Install Agent could not delete the registered packages after the profile was deleted for user SID %{UserSid}. Error code: %{Error}.  Additional information: %{location}.

Event Data:

# Name In Type
Out Type
1 UserSid win:UnicodeString xs:string
2 Error win:HexInt32 win:ErrorCode
3 location win:Int32 xs:int

Observed Windows Versions:

Version: 0

Fingerprint: GKWBTREHHEL34