AppSense Environment Manager Event IDs
AppSense DesktopNow offers the tech heads among us a wide range of Event IDs that can be generated from the endpoint CCA (Client Communications Agent). Some are classed as “High Priority Events”. These are non configurable and are sent direct to the AMC (AppSense Managment Centre) database via HTTP from the endpoint when they are generated. Other, configurable, events are sent by the CCA to the AMC database during the default poll period set on the distribution group.
These events are stored locally in an .evt format. At each poll period, set on the deployment group, the CCA will zip the .evt file and transfer it to the AMC using BITS. You will normally find the .evt file in the “C:\Program Files\AppSense\Management Center\CCA\Upload” folder. I am only going to deal with Environment Manager Event IDs here in this article.
NOTE: If it helps, ALL Environment Manager event IDs are in the 93xx - 96xx Event ID range. A full, comprehensive Event ID guide can be found in the “Management Center Product Guide” available on http://www.myappsense.com
Below are the predefined, non configurable, High Priority Events for EM:-
Event Description
9390 The Environment Manager Agent ended unexpectedly.
9391 The Environment Manager Agent has restarted.
9392 The Environment Manager Agent has been terminated due to being in the starting or stopping state for a prolonged period.
9393 The Environment Manager Agent has exceeded its maximum restart attempts.
9495 AppSense Environment Manager has not been configured.
9496 An old configuration has been foundThose configurable (you can switch them on or off) events that can be managed for Environment Manager are:-
Event Event Type Event Name
9300 Information Self healing process started
9301 Information Self healing registry key replaced
9302 Information Self healing registry key removed
9303 Information Self healing file replaced
9304 Information Self healing file removed
9305 Information Self healing service stopped
9306 Information Self healing service started Self healing service started
9307 Information Self healing registry value replaced
9308 Information Self healing registry removed
9399 Warning Software is not licensed
9400 Information Lockdown edit control blocked drive
9401 Information Lockdown edit control blocked text
9402 Information Lockdown accelerator keys blocked
9403 Information Lockdown dialog blocked
9404 Information Lockdown MSAA access blocked
9405 Information User logon action success
9406 Information User logon action fail
9407 Information User logoff action success
9408 Information User logoff action fail
9409 Information Computer startup action success
9410 Information Computer startup action fail
9420 Information User session reconnect action success
9421 Information User session reconnect action fail
9422 Information User session disconnect action success
9423 Information User session disconnect action fail
9424 Information User session locked action success
9425 Information User session locked action fail
9426 Information User session unlocked action success
9427 Information User session unlocked action fail
9428 Information Process start action success
9429 Information Process start action fail
9430 Information Process stopped action success
9431 Information Process stopped action fail
9432 Information Network connection action success
9433 Information Network connection action fail
9434 Information Network disconnected action success
9435 Information Network disconnected action fail
9495 Warning Not configured (EM)
9496 Warning Configuration unsupported
9501 Information Removable storage device has been disabled
9502 Information Removable storage device has read-only access
9600 Error Failed to connect to Personalization Database
9601 Error Windows Impersonation Logon Failed.
9602 Error Failed Database Compatibility Check
9650 Information Managed application start
9651 Information Managed application stop
9652 Error Personalization load error
9653 Error Personalization save error
9654 Information Blacklisted process started
9655 Information Personalization not saved
9656 Information Offline resiliency save started
9657 Information Offline resiliency save complete
9658 Information Personalization settings purged
9659 Information Personalization settings updated
9660 Error Personalization failed
9661 Warning Timeout Communicating with Personalization Server
9662 Information Trigger Action TimesThat is it really. Another helpful tip (thanks Richard Kelly@QA for this) is that ALL AppSense DesktopNow Event IDs ending in xx99 are to do with licencing issues.