You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md
-1
Original file line number
Diff line number
Diff line change
@@ -29,7 +29,6 @@ You can learn more about Windows functional and diagnostic data through these ar
29
29
30
30
- [Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
31
31
- [Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
32
-
- [Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
33
32
- [Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
34
33
- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
35
34
- [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md)
Copy file name to clipboardExpand all lines: windows/privacy/optional-diagnostic-data.md
+7-7
Original file line number
Diff line number
Diff line change
@@ -15,17 +15,17 @@ ms.topic: reference
15
15
# Optional diagnostic data for Windows 11 and Windows 10
16
16
17
17
Applies to:
18
+
- Windows 11, version 24H2
18
19
- Windows 11, version 23H2
19
20
- Windows 11, version 22H2
20
-
- Windows 11, version 21H2
21
21
- Windows 10, version 22H2
22
22
- Windows 10, version 21H2
23
23
- Windows 10, version 1809
24
24
25
25
> [!NOTE]
26
-
> The information in this article also applies to these versions of Windows 10: 21H1, 20H2, 2004, 1909, 1903, 1803, and 1709. But those versions have reached their end of servicing date. For more information, see [Microsoft Product Lifecycle](/lifecycle/products).
26
+
> The information in this article also applies to Windows 11 (version 21H2) and these versions of Windows 10: 21H1, 20H2, 2004, 1909, 1903, 1803, and 1709. But those versions have reached their end of servicing date. For more information, see [Microsoft Product Lifecycle](/lifecycle/products).
27
27
28
-
Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of optional diagnostic data collected by Windows, with comprehensive examples of data we collect per each type. For additional, detailed technical descriptions of Basic data items, see [Windows 11 required diagnostic events and fields](/windows/privacy/required-windows-11-diagnostic-events-and-fields).
28
+
Microsoft uses Windows diagnostic data to keep Windows secure and up-to-date, troubleshoot problems, and make product improvements. For users who have turned on "Tailored experiences", it can also be used to offer you personalized tips, ads, and recommendations to enhance Microsoft products and services for your needs. This article describes all types of optional diagnostic data collected by Windows, with comprehensive examples of data we collect per each type.
29
29
30
30
In addition, this article provides references to equivalent definitions for the data types and examples from [ISO/IEC 19944-1:2020 Information technology - Cloud computing - Cloud services and devices: Data flow, data categories, and data use](https://www.iso.org/standard/79573.html). Each data type also has a Data Use statement, for diagnostics and for Tailored experiences on the device, using the terms as defined by the standard. These Data Use statements define the purposes for which Microsoft processes each type of Windows diagnostic data, using a uniform set of definitions referenced at the end of this document and based on the ISO standard. Reference to the ISO standard provides additional clarity about the information collected, and allows easy comparison with other services or guidance that also references the standard.
31
31
@@ -54,9 +54,9 @@ Information that is added to most diagnostic events, if relevant and available:
54
54
- Diagnostic level - Required or Optional, Sample level - for sampled data, what sample level is this device opted into (8.2.3.2.4 Observed Usage of the Service Capability)
55
55
- Operating system name, version, build, and locale (8.2.3.2.2 Telemetry data)
56
56
- Event collection time (8.2.3.2.2 Telemetry data)
57
-
- User ID - a unique identifier associated with the user's Microsoft Account (if one is used) or local account. The user's Microsoft Account identifier is not collected from devices configured to send Basic - diagnostic data (8.2.5 Account data)
57
+
- User ID - a unique identifier associated with the user's Microsoft Account (if one is used) or local account. The user's Microsoft Account identifier isn't collected from devices configured to send Basic - diagnostic data (8.2.5 Account data)
58
58
- Xbox UserID (8.2.5 Account data)
59
-
- Device ID - This ID is not the user provided device name, but an ID that is unique for that device. (8.2.3.2.3 Connectivity data)
59
+
- Device ID - This ID isn't the user provided device name, but an ID that is unique for that device. (8.2.3.2.3 Connectivity data)
60
60
- Device class - Desktop, Server, or Mobile (8.2.3.2.3 Connectivity data)
61
61
- Environment from which the event was logged - Application ID of app or component that logged the event, Session GUID. Used to track events over a given period of time, such as the amount of time an app is running or between boots of the operating system (8.2.4 Cloud service provider data)
62
62
- Diagnostic event name, Event ID, ETW opcode, version, schema signature, keywords, and flags (8.2.4 Cloud service provider data)
@@ -194,7 +194,7 @@ This type of data includes details about the usage of the device, operating syst
194
194
**With (optional) Tailored experiences:**<br>
195
195
If a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Usage data from Windows 10 and Windows 11 is used by Microsoft to [personalize](#personalize), [recommend](#recommend), and [offer](#offer) Microsoft products and services to Windows 10 and Windows 11 users. Also, if a user has enabled Tailored experiences on the device, [pseudonymized](#pseudo) Product and Service Usage data from Windows 10 and Windows 11 is used by Microsoft to [promote](#promote) third-party Windows apps, services, hardware, and peripherals to Windows 10 and Windows 11 users. For example:
196
196
197
-
- If data shows that a user has not used a particular feature of Windows, we might recommend that the user try that feature.
197
+
- If data shows that a user hasn't used a particular feature of Windows, we might recommend that the user try that feature.
198
198
- Data about which apps are most-used on a device is used to provide recommendations for similar or complementary (Microsoft or third-party) apps. These apps might be free or paid.
199
199
200
200
@@ -303,7 +303,7 @@ If a user has enabled Tailored experiences on the device, [pseudonymized](#pseud
303
303
304
304
- Video Width, height, color palette, encoding (compression) type, and encryption type
305
305
- Instructions about how to stream content for the user - the smooth streaming manifest of content file chunks that must be pieced together to stream the content based on screen resolution and bandwidth
306
-
- URL for a specific two-second chunk of content if there is an error
306
+
- URL for a specific two-second chunk of content if there's an error
307
307
- Full-screen viewing mode details
308
308
309
309
**Music & TV subtype:** Information about music and TV consumption on the device
Copy file name to clipboardExpand all lines: windows/privacy/required-diagnostic-events-fields-windows-11-22H2.md
+9-10
Original file line number
Diff line number
Diff line change
@@ -29,7 +29,6 @@ Use this article to learn about diagnostic events, grouped by event area, and th
29
29
You can learn more about Windows functional and diagnostic data through these articles:
30
30
31
31
-[Required diagnostic events and fields for Windows 11, version 24H2](required-diagnostic-events-fields-windows-11-24H2.md)
32
-
-[Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
33
32
-[Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
34
33
-[Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
35
34
-[Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
@@ -488,7 +487,7 @@ The following fields are available:
This event represents the basic metadata about a file on the system. The file must be part of an app and either have a block in the compatibility database or be part of an antivirus program. The data collected with this event is used to help keep Windows up to date.
490
+
This event represents the basic metadata about a file on the system. The file must be part of an app and either have a block in the compatibility database or be part of an antivirus program. The data collected with this event is used to help keep Windows up to date.
492
491
493
492
This event includes fields from [Ms.Device.DeviceInventoryChange](#msdevicedeviceinventorychange).
494
493
@@ -497,7 +496,7 @@ The following fields are available:
497
496
-**AppraiserVersion** The version of the Appraiser file generating the events.
498
497
-**AvDisplayName** If the app is an antivirus app, this is its display name.
499
498
-**AvProductState** Indicates whether the antivirus program is turned on and the signatures are up to date.
-**BinFileVersion** An attempt to clean up FileVersion at the client that tries to place the version into 4 octets.
502
501
-**BinProductVersion** An attempt to clean up ProductVersion at the client that tries to place the version into 4 octets.
503
502
-**BoeProgramId** If there's no entry in Add/Remove Programs, this is the ProgramID that is generated from the file metadata.
@@ -997,7 +996,7 @@ The following fields are available:
997
996
-**AzureOSIDPresent** Represents the field used to identify an Azure machine.
998
997
-**AzureVMType** Represents whether the instance is Azure VM PAAS, Azure VM IAAS or any other VMs.
999
998
-**CDJType** Represents the type of cloud domain joined for the machine.
1000
-
-**CommercialId** Represents the GUID for the commercial entity that the device is a member of. Will be used to reflect insights back to customers.
999
+
-**CommercialId** Represents the GUID for the commercial entity that the device is a member of. Will be used to reflect insights back to customers.
1001
1000
-**ContainerType** The type of container, such as process or virtual machine hosted.
1002
1001
-**EnrollmentType** Defines the type of MDM enrollment on the device.
1003
1002
-**HashedDomain** The hashed representation of the user domain used for login.
@@ -1065,7 +1064,7 @@ The following fields are available:
1065
1064
-**IsPortableOperatingSystem** Retrieves whether OS is running Windows-To-Go
1066
1065
-**IsSecureBootEnabled** Retrieves whether Boot chain is signed under UEFI.
1067
1066
-**LanguagePacks** The list of language packages installed on the device.
1068
-
-**LicenseStateReason** Retrieves why (or how) a system is licensed or unlicensed. The HRESULT may indicate an error code that indicates a key blocked error, or it may indicate that we're running an OS License granted by the MS store.
1067
+
-**LicenseStateReason** Retrieves why (or how) a system is licensed or unlicensed. The HRESULT may indicate an error code that indicates a key blocked error, or it may indicate that we're running an OS License granted by the MS store.
1069
1068
-**OA3xOriginalProductKey** Retrieves the License key stamped by the OEM to the machine.
1070
1069
-**OSEdition** Retrieves the version of the current OS.
1071
1070
-**OSInstallType** Retrieves a numeric description of what install was used on the device i.e. clean, upgrade, refresh, reset, etc
@@ -1118,7 +1117,7 @@ The following fields are available:
1118
1117
-**InternalPrimaryDisplayPhysicalDPIY** Retrieves the physical DPI in the y-direction of the internal display.
1119
1118
-**InternalPrimaryDisplayResolutionHorizontal** Retrieves the number of pixels in the horizontal direction of the internal display.
1120
1119
-**InternalPrimaryDisplayResolutionVertical** Retrieves the number of pixels in the vertical direction of the internal display.
1121
-
-**InternalPrimaryDisplaySizePhysicalH** Retrieves the physical horizontal length of the display in mm. Used for calculating the diagonal length in inches.
1120
+
-**InternalPrimaryDisplaySizePhysicalH** Retrieves the physical horizontal length of the display in mm. Used for calculating the diagonal length in inches.
1122
1121
-**InternalPrimaryDisplaySizePhysicalY** Retrieves the physical vertical length of the display in mm. Used for calculating the diagonal length in inches
1123
1122
-**NumberofExternalDisplays** Retrieves the number of external displays connected to the machine
1124
1123
-**NumberofInternalDisplays** Retrieves the number of internal displays in a machine.
@@ -1281,7 +1280,7 @@ The following fields are available:
1281
1280
-**popSample** Represents the effective sample rate for this event at the time it was generated by a client.
1282
1281
-**providerGuid** The ETW provider ID associated with the provider name.
1283
1282
-**raId** Represents the ETW Related ActivityId. Logged via TraceLogging or directly via ETW.
1284
-
-**seq** Represents the sequence field used to track absolute order of uploaded events. It's an incrementing identifier for each event added to the upload queue. The Sequence helps track how many events were fired and how many events were uploaded and enables identification of data lost during upload and de-duplication of events on the ingress server.
1283
+
-**seq** Represents the sequence field used to track absolute order of uploaded events. It's an incrementing identifier for each event added to the upload queue. The Sequence helps track how many events were fired and how many events were uploaded and enables identification of data lost during upload and de-duplication of events on the ingress server.
1285
1284
-**sqmId** The Windows SQM (Software Quality Metrics—a precursor of Windows 10 Diagnostic Data collection) device identifier.
1286
1285
-**stId** Represents the Scenario Entry Point ID. This is a unique GUID for each event in a diagnostic scenario. This used to be Scenario Trigger ID.
1287
1286
-**wcmp** The Windows Shell Composer ID.
@@ -2932,7 +2931,7 @@ The following fields are available:
2932
2931
2933
2932
### Setup360Telemetry.PreInstallUX
2934
2933
2935
-
This event sends data regarding OS updates and upgrades from Windows 7, Windows 8, and Windows 10, to help keep Windows up-to-date. Specifically, it indicates the outcome of the PreinstallUX portion of the update process.
2934
+
This event sends data regarding OS updates and upgrades from Windows 7, Windows 8, and Windows 10, to help keep Windows up-to-date. Specifically, it indicates the outcome of the PreinstallUX portion of the update process.
2936
2935
2937
2936
The following fields are available:
2938
2937
@@ -3167,7 +3166,7 @@ The following fields are available:
This event is sent after sending the inventory of the products installed to determine whether updates for those products are available. It's used to help keep Windows up-to-date and secure.
3169
+
This event is sent after sending the inventory of the products installed to determine whether updates for those products are available. It's used to help keep Windows up-to-date and secure.
3171
3170
3172
3171
The following fields are available:
3173
3172
@@ -3561,7 +3560,7 @@ This event sends data on whether Update Management Policies were enabled on a de
3561
3560
The following fields are available:
3562
3561
3563
3562
-**configuredPoliciescount** Number of policies on the device.
3564
-
-**policiesNamevaluesource** Policy name and source of policy (group policy, MDM or flight).
3563
+
-**policiesNamevaluesource** Policy name and source of policy (group policy, MDM, or flight).
3565
3564
-**updateInstalluxsetting** Indicates whether a user has set policies via a user experience option.
Copy file name to clipboardExpand all lines: windows/privacy/required-diagnostic-events-fields-windows-11-24H2.md
-1
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,6 @@ Use this article to learn about diagnostic events, grouped by event area, and th
28
28
You can learn more about Windows functional and diagnostic data through these articles:
29
29
30
30
-[Required diagnostic events and fields for Windows 11, versions 23H2 and 22H2](required-diagnostic-events-fields-windows-11-22H2.md)
31
-
-[Required diagnostic events and fields for Windows 11, version 21H2](required-windows-11-diagnostic-events-and-fields.md)
32
31
-[Required diagnostic events and fields for Windows 10, versions 22H2 and 21H2](required-windows-diagnostic-data-events-and-fields-2004.md)
33
32
-[Windows 10, version 1809 basic diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields-1809.md)
34
33
-[Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
0 commit comments