Elastic Windows Event Explorer


Publisher - Microsoft-Windows-User Device Registration

Event ID 330

Message:

Azure DRS and Enterprise DRS are configured for this device. Only one DRS instance can be configured for an environment. AzureADTenantName:%{AzureADTenantName} EnterpriseDrsName:%{EnterpriseDrsName}

Event Data:

# Name In Type
Out Type
1 AzureADTenantName win:UnicodeString xs:string
2 EnterpriseDrsName win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: MHDJBJTW67JE4