Elastic Windows Event Explorer

Publisher - Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider

Event ID 1118

Message:

Device Management Account CSP: Device Management account added. Provider ID: (%{Message1}), session Enrollment ID: (%{Message2}), new Enrollment ID: (%{Message3}), Result: (%{HRESULT}).

Event Data:

#	Name	In Type	Out Type
1	Message1	win:UnicodeString	xs:string
2	Message2	win:UnicodeString	xs:string
3	Message3	win:UnicodeString	xs:string
4	HRESULT	win:HexInt32	win:Win32Error

Observed Windows Versions:

Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 0

Fingerprint: 67PO5COKRHBVI