--- Start at:2026-10-14T16:28:00
"AreaName" : "deviceenrollment;deviceprovisioning;autopilot;"
Collected EventViewer Entry: microsoft-windows-aad/operational
Collected EventViewer Entry: microsoft-windows-appxdeploymentserver/operational
Collected EventViewer Entry: microsoft-windows-crypto-ncrypt/operational
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/admin
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/autopilot
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/debug
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/operational
Collected EventViewer Entry: microsoft-windows-laps/operational
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/autopilot
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/diagnostics
Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/managementservice
Collected EventViewer Entry: microsoft-windows-user device registration/admin
Collected EventViewer Entry: application
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/enrollment
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/sync
Collected EventViewer Entry: system
Collected EventViewer Entry: microsoft-windows-provisioning-diagnostics-provider/admin
Collected EventViewer Entry: microsoft-windows-shell-core/operational
Collected EventViewer Entry: microsoft-windows-assignedaccess/admin
Collected EventViewer Entry: microsoft-windows-assignedaccess/operational
Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/admin
Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/operational
--- 22 EventViewer entries are collected
Failed (HResult: 0x80070003) to CollectFileEntry:c:\programdata\microsoft\dc\hostos\*.xml
Failed (HResult: 0x80070002) to CollectFileEntry:c:\programdata\microsoft\diagnosticlogcsp\collectors\diagnosticlogcsp_collector_deviceenrollment*.*
Copied file:c:\windows\system32\logfiles\wmi\Wifi.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\Wifi.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_18_50_48.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_18_50_48.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_20_33_11.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_20_33_11.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_20_3_12.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_13_20_3_12.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_14_17_10_13.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_DeviceProvisioning_2026_10_14_17_10_13.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_10_13_18_52_54.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_Autopilot_2026_10_13_18_52_54.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_10_13_9_55_8.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_Autopilot_2026_10_13_9_55_8.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2026_10_14_18_27_33.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticLogCSP_Collector_Autopilot_2026_10_14_18_27_33.etl
Failed (HResult: 0x80070003) to CollectFileEntry:c:\programdata\microsoft\intunemanagementextension\logs\*.log
Copied file:c:\windows\panther\unattendgc\setupact.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\setupact.log
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\autopilotconfigurationfile.json
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\profileouput.pml
Failed (HResult: 0x80070003) to CollectFileEntry:c:\windows\servicestate\autopilot\*
Copied file:c:\windows\servicestate\wmansvc\AutopilotDDSZTDFile.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\AutopilotDDSZTDFile.json
Copied file:c:\windows\servicestate\wmansvc\AutopilotTagPoliciesFile.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\AutopilotTagPoliciesFile.json
Copied file:c:\windows\system32\logfiles\wmi\CloudExperienceHostOobe.etl.004, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\CloudExperienceHostOobe.etl.004
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\system32\winevt\logs\*bootstrapperagentservicelog*
Copied file:c:\windows\systemtemp\\DeviceHash_DESKTOP-SNLO6K6.csv, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DeviceHash_DESKTOP-SNLO6K6.csv
Copied file:c:\windows\systemtemp\\TpmHliInfo_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\TpmHliInfo_Output.txt
Copied file:c:\windows\systemtemp\\DiagnosticsFrameworkData.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DiagnosticsFrameworkData.json
Copied file:c:\windows\systemtemp\\UEFI_Data_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\UEFI_Data_Output.txt
Copied file:c:\windows\systemtemp\DESKTOP-SNLO6K6_2026-10-14-16-28.devicelink.csv, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\DESKTOP-SNLO6K6_2026-10-14-16-28.devicelink.csv
Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\systemtemp\mdmdiagreport.xml
--- 19 file entries are collected
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\enterprisemodernappmanagement
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\scep
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\assignedaccessconfiguration
Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\currentversion\useroobe
--- 4 HKCU registry entries are collected
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\cdndownload
Succeeded to dump HKLM registry:software\microsoft\declaredconfiguration
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\dmorchestrator
Succeeded to dump HKLM registry:software\microsoft\enrollment
Succeeded to dump HKLM registry:software\microsoft\enrollments
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\enterprisedesktopappmanagement
Succeeded to dump HKLM registry:software\microsoft\enterpriseresourcemanager
Succeeded to dump HKLM registry:software\microsoft\policymanager
Succeeded to dump HKLM registry:software\microsoft\provisioning
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\scep
Succeeded to dump HKLM registry:system\currentcontrolset\control\clouddomainjoin
Succeeded to dump HKLM registry:system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy
Succeeded to dump HKLM registry:software\microsoft\multivariant
Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\intunemanagementextension
Succeeded to dump HKLM registry:software\microsoft\windows nt\currentversion\update\targetinginfo
Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccessconfiguration
Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccesscsp
Succeeded to dump HKLM registry:software\microsoft\windows\autopilot
Succeeded to dump HKLM registry:software\microsoft\windows\currentversion\setup\oobe
--- 19 HKLM registry entries are collected
metadataFile generated:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_2256\MdmDiagLogMetadata.json
--- End at:2026-10-14T16:28:01
