Windows 10: WINDOWS 11 22H2 EVENT VIEWER ERRORS LSA 6155, 360 WIN HELLO, 15 WININIT, 1108...

All updates up to and including 22621.525 I don't have this issue with 22H1. I don't see any follow up with this issue from MS. I cannot upgrade with this type of error.Since the begining of the release of 22H2, all versions in my case and others that filed a similar response on insider have generated Windows hello for business messages event 360 accompanied by LSA errors event 6155, Wininit event 15 errors and multiple Event viewer errors event 1108. All of this is related to credential guard. I tried to disable credential guard, LSA service, Windows hello for business and so on to

:)

 

Event 28 Kernel-EventTracing, Event 6147, Event 6155 LSA (LSAsrv)

Event 28 Kernel-EventTracing

Error setting traits on Provider {77811378-e885-4ac2-a580-bc86e4f1bc93}. Error 0x C0000005

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>

<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2}" />

<EventID>28</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>3</Task>

<Opcode>25</Opcode>

<Keywords>0x8000000000000a20</Keywords>

<TimeCreated SystemTime="2022-07-21T19:07:40.0480940Z" />

<EventRecordID>29</EventRecordID>

<Correlation />

<Execution ProcessID="840" ThreadID="972" />

<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>

<Computer>DESKTOP-0687UEC</Computer>

<Security UserID="S-1-5-18" />

</System>

- <EventData>

<Data Name="ProviderGuid">{77811378-e885-4ac2-a580-bc86e4f1bc93}</Data>

<Data Name="ErrorCode">3221225477</Data>

</EventData>

</Event>

Event 6147 LSA (LSAsrv)

Credential Guard is configured to run, but is not licensed. Credential Guard was not started.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>

<Provider Name="LsaSrv" Guid="{199fe037-2b82-40a9-82ac-e1d46c792b99}" />

<EventID>6147</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2022-07-21T19:07:40.0549256Z" />

<EventRecordID>16775</EventRecordID>

<Correlation />

<Execution ProcessID="1036" ThreadID="1040" />

<Channel>System</Channel>

<Computer>DESKTOP-0687UEC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData />

</Event>

Event 6155 LSA (LSAsrv)

Package LSA not signed as expected. This can cause unexpected behavior with Credential Guard service. (this is translated, I think I got it right)

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>

<Provider Name="LsaSrv" Guid="{199fe037-2b82-40a9-82ac-e1d46c792b99}" />

<EventID>6155</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2022-07-21T19:07:40.1805070Z" />

<EventRecordID>16787</EventRecordID>

<Correlation ActivityID="{1fb28316-9d35-0008-5083-b21f359dd801}" />

<Execution ProcessID="1036" ThreadID="1040" />

<Channel>System</Channel>

<Computer>DESKTOP-0687UEC</Computer>

<Security UserID="S-1-5-18" />

</System>

- <EventData>

<Data Name="PackageName">msv1_0</Data>

</EventData>

</Event>

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

Event 360 / Windows Hello for Business


Hi all

A gumby-level question.

1. I noted today:

Event Viewer > Custom Views > Administrative Events > Warning, 22/04/2018, 9:03:25 AM.

"Event 360, User Device Registration", which is associated with Windows Hello for Business.

2. I have Windows 10 Home Edition, v. 1709, build 16299.371.

3. Why, I wonder, is my OS fussing with a Business version of Hello Windows?

Any thoughts?

Cheers