--- Start at:2025-06-11T10:39:40
"AreaName" : "deviceprovisioning;"
Collected EventViewer Entry: microsoft-windows-aad/operational
Collected EventViewer Entry: microsoft-windows-devicemanagement-enterprise-diagnostics-provider/admin
Collected EventViewer Entry: microsoft-windows-provisioning-diagnostics-provider/admin
Collected EventViewer Entry: microsoft-windows-shell-core/operational
--- 4 EventViewer entries are collected
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_5_11_15_5_35.etl, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_5_11_15_5_35.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_5_14_1_47_43.etl, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_5_14_1_47_43.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_6_2_17_54_9.etl, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_6_2_17_54_9.etl
Copied file:c:\programdata\microsoft\diagnosticlogcsp\collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_6_7_7_52_57.etl, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_6_7_7_52_57.etl
Copied file:c:\windows\systemtemp\MDMDiagReport.xml, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\MDMDiagReport.xml
Copied file:c:\windows\systemtemp\MDMDiagHTMLReport.html, to:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\MDMDiagHTMLReport.html
--- 3 file entries are collected
--- 0 HKCU registry entries are collected
Succeeded to dump HKLM registry:software\microsoft\multivariant
Succeeded to dump HKLM registry:software\microsoft\provisioning
--- 2 HKLM registry entries are collected
metadataFile generated:C:\WINDOWS\SystemTemp\MdmLogCollector_4916\MdmDiagLogMetadata.json
--- End at:2025-06-11T10:39:40
