Log Name: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
Source: DeviceManagement-Enterprise-Diagnostics-Provider
Event ID: 400
Computer: DESKTOP PC
User: System
Details: MDM ConfigurationManager: Command failure status. Configuration Source ID: (9B5DC01F-D64E-488A-BB24-F0E9DA4FBF47), Enrollment Name: (MDMFull), Provider Name: (RemoteWipe), Command Type: (CmdType_Execute), CSP URI: (./Vendor/MSFT/RemoteWipe/doWipe), Result: (The request is not supported.).
XML:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider" Guid="{3DA494E4-0FE2-415C-B895-FB5265C5C83B}" />
<EventID>400</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-06-29T13:18:40.644619600Z" />
<EventRecordID>17327</EventRecordID>
<Correlation />
<Execution ProcessID="2560" ThreadID="8612" />
<Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel>
<Computer>DESKTOP PC</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="Message1">9B5DC01F-D64E-488A-BB24-F0E9DA4FBF47</Data>
<Data Name="Message2">MDMFull</Data>
<Data Name="Message3">RemoteWipe</Data>
<Data Name="Message4">CmdType_Execute</Data>
<Data Name="Message5">./Vendor/MSFT/RemoteWipe/doWipe</Data>
<Data Name="HexInt1">0x80070032</Data>
</EventData>
</Event>