Elastic Windows Event Explorer


Publisher - Microsoft-Windows-All-User-Install-Agent

Event ID 1302

Message:

The Windows All-User Install Agent will delete %{NumberOfPackages} packages for user SID %{UserSid} because the profile was deleted.

Event Data:

# Name In Type
Out Type
1 NumberOfPackages win:Int32 xs:int
2 UserSid win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 6E7XZZGGCCAOC