AppSense DesktopNow offers the tech heads among us a wide range of Event IDs that can be generated from the endpoint CCA (Client Communications Agent). Some are classed as “High Priority Events”. These are non configurable and are sent direct to the AMC (AppSense Managment Centre) database via HTTP from the endpoint when they are generated. Other, configurable, events are sent by the CCA to the AMC database during the default poll period set on the distribution group. These events are stored locally in an .evt format. At each poll period, set on the deployment group, the CCA will zip the .evt file and transfer it to the AMC using BITS. You will normally find the .evt file in the “C:\Program Files\AppSense\Management Center\CCA\Upload” folder. I am only going to deal with Environment Manager Event IDs here in this article.

NOTE: If it helps, ALL Environment Manager event IDs are in the 93xx – 96xx Event ID range. A full, comprehensive Event ID guide can be found in the “Management Center Product Guide” available on

Below are the predefined, non configurable, High Priority Events for EM:-

  Event Description
  9390   The Environment Manager Agent ended unexpectedly.
  9391   The Environment Manager Agent has restarted.
  9392   The Environment Manager Agent has been terminated due to being in the starting or stopping state for a prolonged period.
  9393   The Environment Manager Agent has exceeded its maximum restart attempts.
  9495   AppSense Environment Manager has not been configured.
  9496   An old configuration has been found

Those configurable (you can switch them on or off) events that can be managed for Environment Manager are:-

  Event   Event Type     Event Name
  9300    Information    Self healing process started
  9301    Information    Self healing registry key replaced
  9302    Information    Self healing registry key removed
  9303    Information    Self healing file replaced
  9304    Information    Self healing file removed
  9305    Information    Self healing service stopped
  9306    Information    Self healing service started Self healing service started
  9307    Information    Self healing registry value replaced
  9308    Information    Self healing registry removed
  9399    Warning        Software is not licensed
  9400    Information    Lockdown edit control blocked drive
  9401    Information    Lockdown edit control blocked text
  9402    Information    Lockdown accelerator keys blocked
  9403    Information    Lockdown dialog blocked
  9404    Information    Lockdown MSAA access blocked
  9405    Information    User logon action success
  9406    Information    User logon action fail
  9407    Information    User logoff action success
  9408    Information    User logoff action fail
  9409    Information    Computer startup action success
  9410    Information    Computer startup action fail
  9420    Information    User session reconnect action success
  9421    Information    User session reconnect action fail
  9422    Information    User session disconnect action success
  9423    Information    User session disconnect action fail
  9424    Information    User session locked action success
  9425    Information    User session locked action fail
  9426    Information    User session unlocked action success
  9427    Information    User session unlocked action fail
  9428    Information    Process start action success
  9429    Information    Process start action fail
  9430    Information    Process stopped action success
  9431    Information    Process stopped action fail
  9432    Information    Network connection action success
  9433    Information    Network connection action fail
  9434    Information    Network disconnected action success
  9435    Information    Network disconnected action fail
  9495    Warning        Not configured (EM)
  9496    Warning        Configuration unsupported
  9501    Information    Removable storage device has been disabled
  9502    Information    Removable storage device has read-only access
  9600    Error          Failed to connect to Personalization Database
  9601    Error          Windows Impersonation Logon Failed.
  9602    Error          Failed Database Compatibility Check
  9650    Information    Managed application start
  9651    Information    Managed application stop
  9652    Error          Personalization load error
  9653    Error          Personalization save error
  9654    Information    Blacklisted process started
  9655    Information    Personalization not saved
  9656    Information    Offline resiliency save started
  9657    Information    Offline resiliency save complete
  9658    Information    Personalization settings purged
  9659    Information    Personalization settings updated
  9660    Error          Personalization failed
  9661    Warning        Timeout Communicating with Personalization Server
  9662    Information    Trigger Action Times

That is it really. Another helpful tip (thanks Richard Kelly@QA for this) is that ALL AppSense DesktopNow Event IDs ending in xx99 are to do with licencing issues.

AppSense Environment Manager Event IDs

AppSense Environment Manager Event IDs

AppSense Environment Manager Event IDs
Rate this post

Leave a Reply

Your email address will not be published.

Time limit is exhausted. Please reload CAPTCHA.