Elastic Windows Event Explorer

Publisher - Microsoft-Windows-Diagnosis-DPS

Event ID 120


Diagnostic module %{DiagnosticModuleId} (%{DiagnosticModuleImageName}) finished troubleshooting scenario %{ScenarioId}, instance %{InstanceId}, original activity ID %{OriginalActivityId}.  It set resolution %{ResolutionId} for user %{ResolutionSID} in session %{ResolutionSessionId} with expiration date %{ResolutionExpirationDate}.  The resolution was queued to start later.

Event Data:

# Name In Type
Out Type
1 ScenarioId win:GUID xs:GUID
2 InstanceId win:GUID xs:GUID
3 OriginalActivityId win:GUID xs:GUID
4 DiagnosticModuleImageName win:UnicodeString xs:string
5 ResolutionId win:GUID xs:GUID
6 ResolutionSID win:SID xs:string
7 ResolutionSessionId win:UInt32 xs:unsignedInt
8 ResolutionExpirationDate win:FILETIME xs:dateTime
9 DiagnosticModuleId win:GUID xs:GUID

Observed Windows Versions:

Version: 0

Fingerprint: QOS466T6ZB4NU