--- Start at:2023-10-21T16:42:51 "AreaName" : "deviceenrollment;deviceprovisioning;autopilot;" Collected EventViewer Entry: microsoft-windows-aad/operational Collected EventViewer Entry: microsoft-windows-appxdeploymentserver/operational Collected EventViewer Entry: microsoft-windows-crypto-ncrypt/operational Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/admin Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/autopilot Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/debug Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/operational Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/autopilot Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/diagnostics Collected EventViewer Entry: microsoft-windows-moderndeployment-diagnostics-provider/managementservice Collected EventViewer Entry: microsoft-windows-provisioning-diagnostics-provider/admin Collected EventViewer Entry: microsoft-windows-shell-core/operational Collected EventViewer Entry: microsoft-windows-assignedaccess/admin Collected EventViewer Entry: microsoft-windows-assignedaccess/operational Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/admin Collected EventViewer Entry: microsoft-windows-assignedaccessbroker/operational Collected EventViewer Entry: microsoft-windows-user device registration/admin --- 17 EventViewer entries are collected Failed (HResult: 0x80070003) to CollectFileEntry:c:\programdata\microsoft\dc\hostos\*.xml Failed (HResult: 0x80070002) to CollectFileEntry:c:\programdata\microsoft\diagnosticlogcsp\collectors\diagnosticlogcsp_collector_deviceenrollment*.* Copied file:c:\windows\system32\logfiles\wmi\Wifi.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\Wifi.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_14_21_35_1.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_14_21_35_1.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_18_23_23_30.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_18_23_23_30.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_19_22_21_20.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_19_22_21_20.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_21_21_57_16.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_10_21_21_57_16.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_8_20_1_8_43.etl.merged, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_DeviceProvisioning_2023_8_20_1_8_43.etl.merged Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2023_10_22_0_42_44.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_Autopilot_2023_10_22_0_42_44.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_12_21.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_12_21.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_2_26.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_2_26.etl Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_9_41.etl, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticLogCSP_Collector_Autopilot_2023_2_17_19_9_41.etl Failed (HResult: 0x80070003) to CollectFileEntry:c:\programdata\microsoft\intunemanagementextension\logs\*.log Copied file:c:\windows\panther\unattendgc\setupact.log, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\setupact.log Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\autopilotconfigurationfile.json Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\provisioning\autopilot\profileouput.pml Failed (HResult: 0x80070003) to CollectFileEntry:c:\windows\servicestate\autopilot\* Failed (HResult: 0x80070002) to CollectFileEntry:c:\windows\system32\logfiles\wmi\cloudexperiencehostoobe* Copied file:c:\windows\systemtemp\\DeviceHash_ALLEN_NOTEPAD.csv, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DeviceHash_ALLEN_NOTEPAD.csv Copied file:c:\windows\systemtemp\\TpmHliInfo_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\TpmHliInfo_Output.txt Copied file:c:\windows\systemtemp\\DiagnosticsFrameworkData.json, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\DiagnosticsFrameworkData.json Copied file:c:\windows\systemtemp\\UEFI_Data_Output.txt, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\UEFI_Data_Output.txt Copied file:c:\windows\systemtemp\MDMDiagReport.xml, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\MDMDiagReport.xml Copied file:c:\windows\systemtemp\MDMDiagHTMLReport.html, to:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\MDMDiagHTMLReport.html --- 18 file entries are collected Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\enterprisemodernappmanagement Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\assignedaccessconfiguration Failed (HResult:0x80070002) to dump HKCU registry:software\microsoft\windows\currentversion\useroobe --- 3 HKCU registry entries are collected Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\cdndownload Succeeded to dump HKLM registry:software\microsoft\declaredconfiguration Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\dmorchestrator Succeeded to dump HKLM registry:software\microsoft\enrollments Failed (HResult:0x80070002) to dump HKLM registry:software\microsoft\enterprisedesktopappmanagement Succeeded to dump HKLM registry:software\microsoft\enterpriseresourcemanager Succeeded to dump HKLM registry:software\microsoft\policymanager Succeeded to dump HKLM registry:software\microsoft\provisioning Succeeded to dump HKLM registry:software\microsoft\multivariant Succeeded to dump HKLM registry:software\microsoft\windows nt\currentversion\update\targetinginfo Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccessconfiguration Succeeded to dump HKLM registry:software\microsoft\windows\assignedaccesscsp Succeeded to dump HKLM registry:software\microsoft\windows\autopilot Succeeded to dump HKLM registry:software\microsoft\windows\currentversion\setup\oobe --- 14 HKLM registry entries are collected metadataFile generated:C:\ProgramData\Microsoft\MdmDiagnostics\MdmLogCollector_6598\MdmDiagLogMetadata.json --- End at:2023-10-21T16:42:52