Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 110

Message:

The registration status has been successfully cleared from the device. 
Join type: %{JoinType} (%{JoinTypeSymbolicName}) 
Tenant ID: %{TenantId} 
UPN: %{UPN}

Event Data:

# Name In Type
Out Type
1 JoinType win:Int32 xs:int
2 JoinTypeSymbolicName win:UnicodeString xs:string
3 TenantId win:UnicodeString xs:string
4 UPN win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: KUQF6NJ4KXPMU