Level Date and Time Source Event ID Task Category Information 13-May-24 1:58:47 PM Service Control Manager 7040 None "The description for Event ID 7040 from source Service Control Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Background Intelligent Transfer Service demand start auto start BITS Element not found " Warning 13-May-24 1:57:25 PM Microsoft-Windows-DistributedCOM 10016 None "The description for Event ID 10016 from source Microsoft-Windows-DistributedCOM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: application-specific Local Activation {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} {15C20B67-12E7-4BB6-92BB-7AFF07997402} SORROW user S-1-5-21-1776307024-2867011509-3865716895-1001 LocalHost (Using LRPC) Unavailable Unavailable Element not found " Warning 13-May-24 1:57:06 PM Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user SORROW\user SID (S-1-5-21-1776307024-2867011509-3865716895-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13-May-24 1:55:04 PM Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13-May-24 1:52:35 PM Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 13-May-24 1:48:54 PM Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user SORROW\user SID (S-1-5-21-1776307024-2867011509-3865716895-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 13-May-24 1:47:55 PM Service Control Manager 7022 None The Windows Search service hung on starting. Information 13-May-24 1:45:35 PM Service Control Manager 7040 None The start type of the Touch Keyboard and Handwriting Panel Service service was changed from demand start to auto start. Information 13-May-24 1:45:30 PM Service Control Manager 7040 None The start type of the Touch Keyboard and Handwriting Panel Service service was changed from auto start to demand start. Information 13-May-24 1:41:53 PM Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 13-May-24 1:41:51 PM Service Control Manager 7040 None The start type of the Touch Keyboard and Handwriting Panel Service service was changed from demand start to auto start. Information 13-May-24 1:41:49 PM Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam" Information 13-May-24 1:41:46 PM Microsoft-Windows-FilterManager 6 None File System Filter 'gameflt' (10.0, ‎2049‎-‎09‎-‎06T04:52:00.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:26 PM Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 13-May-24 1:41:26 PM Service Control Manager 7040 None The start type of the TabletInputService service was changed from auto start to demand start. Information 13-May-24 1:41:21 PM Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 13-May-24 1:41:21 PM Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 13-May-24 1:41:21 PM Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1991‎-‎09‎-‎23T13:59:56.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2010‎-‎08‎-‎23T08:03:45.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2053‎-‎02‎-‎13T15:36:37.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2053‎-‎02‎-‎13T15:36:37.000000000Z) unloaded successfully. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2053‎-‎02‎-‎13T15:36:37.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2104‎-‎08‎-‎14T23:22:11.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:21 PM Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2047‎-‎08‎-‎27T00:28:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:20 PM Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 13-May-24 1:41:20 PM Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 13-May-24 1:41:20 PM Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 13-May-24 1:41:20 PM Microsoft-Windows-Wininit 14 None Credential Guard configuration: 0x0, 0 Information 13-May-24 1:41:18 PM Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is 300. Information 13-May-24 1:41:15 PM Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{da3d24d5-0000-0000-0000-70b0e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 13-May-24 1:41:15 PM Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume5) is healthy. No action is needed. Information 13-May-24 1:41:04 PM Microsoft-Windows-Kernel-Power 508 (159) "The system has been constrained to a periodic tick Reason: Errata Manager override." Information 13-May-24 1:41:04 PM Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 13-May-24 1:41:04 PM Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 13-May-24 1:41:04 PM Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{da3d24d5-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 13-May-24 1:41:03 PM Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2025‎-‎01‎-‎05T21:41:12.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:41:00 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3068 Maximum performance percentage: 100 Minimum performance percentage: 52 Minimum throttle percentage: 52" Information 13-May-24 1:40:58 PM Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2053‎-‎03‎-‎18T06:17:45.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:58 PM Microsoft-Windows-FilterManager 6 None File System Filter 'aswMonFlt' (10.0, ‎2024‎-‎04‎-‎23T05:23:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:58 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2002‎-‎03‎-‎01T06:12:42.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:58 PM Microsoft-Windows-FilterManager 6 None File System Filter 'aswSnx' (10.0, ‎2024‎-‎04‎-‎23T05:24:47.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:58 PM Microsoft-Windows-FilterManager 6 None File System Filter 'aswSP' (10.0, ‎2024‎-‎04‎-‎23T05:24:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:56 PM Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 13-May-24 1:40:43 PM Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2090‎-‎03‎-‎16T13:56:17.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:43 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2062‎-‎12‎-‎23T00:21:06.000000000Z) has successfully loaded and registered with Filter Manager. Information 13-May-24 1:40:41 PM Microsoft-Windows-HAL 16 None The iommu fault reporting has been initialized. Information 13-May-24 1:41:21 PM EventLog 6013 None The system uptime is 41 seconds. Information 13-May-24 1:41:21 PM EventLog 6005 None The Event log service was started. Information 13-May-24 1:41:21 PM EventLog 6009 None Microsoft (R) Windows (R) 10.00. 19045 Multiprocessor Free. Error 13-May-24 1:41:21 PM EventLog 6008 None The previous system shutdown at 1:40:16 PM on ‎5/‎13/‎2024 was unexpected. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x0. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 13-May-24 1:40:40 PM Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2024‎-‎05‎-‎13T18:40:40.500000000Z.