Elastic Windows Event Explorer

Publisher - Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider

Event ID 1600

Message:

DMClient Configuration Service Provider: Server initiated unenroll started. Enrollment ID: (%{Message1}).

Event Data:

Observed Windows Versions:

• Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 0

Fingerprint: 3AD4Z53R5UIIE