Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider

Event ID 881

Message:

MDM Wins Over GP: MDMWinsOverGP policy enabled and GP setting is blocked, Value: (%{Message1}), Namespace: (%{Message2}), Operation: (%{Message3}).

Event Data:

# Name In Type
Out Type
1 Message1 win:UnicodeString xs:string
2 Message2 win:UnicodeString xs:string
3 Message3 win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: T4MWK5BX5MSSU