Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider

Event ID 208

Message:

MDM Session: OMA-DM session started for EnrollmentID (%{Message1}) with server: (%{Message2}), Server version: (%{Message3}), Client Version: (%{Message4}), Origin: (%{HexInt1}), Initiator: (%{HexInt2}), Mode: (%{HexInt3}), SessionID: (%{UInt1}), Authentication Type: (%{UInt2}).

Event Data:

# Name In Type
Out Type
1 Message1 win:UnicodeString xs:string
2 Message2 win:UnicodeString xs:string
3 Message3 win:UnicodeString xs:string
4 Message4 win:UnicodeString xs:string
5 HexInt1 win:HexInt32 win:HexInt32
6 HexInt2 win:HexInt32 win:HexInt32
7 HexInt3 win:HexInt32 win:HexInt32
8 UInt1 win:UInt32 win:HexInt32
9 UInt2 win:UInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: GWLLYPRGZCER2