Getting Used To Windows 10, Event Viewer Guidance and Aid.

alphaomega16 · 29 Dec 2021 at 17:38

Hello all, system is in spec but im trying to get used to any and all new errors in log so looking for some others more familiar with this operating system as I google and try to find out answers incase I cannot do it alone.

I am a bit of a worry wart when it comes to these things.

I am getting Event ID 37 Kernel Processor Power errors about reduced performance state, is this usual for the auto management of the cores.

Event ID 63 WMI regarding IntelMEProv to local system account.

Event ID 86 CertificateServicesClient regarding SCEP Certificate enrollment initialization for workgroup.

Event ID 5038 Audit Failure - Code integrity determined that the image hash of a file is not valid, points to \device\harddiskvolume3\windows\installer\ARPRODUCTION.exe

I am unsure how to find harddiskvolume numbers to check and googling keeps pointing back to seriel number of drive.

I have 2xNVME drives in this machine, installed windows 10 via USB drive created by Microsofts online tool.

In sharing center its set to private, cannot see any option on W10 to join the workgroup for the two W7 machines in the house.

PS
Should info on operating system say "Windows Feature Experience Pack" or did I download the wrong W10 from MS

smogsy · 29 Dec 2021 at 22:42

1. Why do you want to join the work group
2. Are these event logs errors warnings or info?
3. I would sfc /scannow in cmd as admin to double check files in windows which may fix error 3 and 4.

4. Where does it say Microsoft experience pack?

Screen shots of all errors and details would be useful here. Maybe to help as ex mcp

alphaomega16 · 29 Dec 2021 at 22:59

smogsy said:
1. Why do you want to join the work group
2. Are these event logs errors warnings or info?
3. I would sfc /sxannow in cmd as admin to double check files in windows which may fix error 3 and 4.

4. Where does it say Microsoft experience pack?

Screen shots of all errors and details would be useful here. Maybe to help as ex mcp

1. Was having issues accessing my main PC over network for some programs but now resolved, was odd I could access dads PC but when trying mine it said couldn't but a refresh of window and it was fine, guess just fresh install hiccups.
2. They are I believe warnings, the yellow triangle, perhaps caused by being on local account or the intel management engine install, I installed all the stuff from the drivers page on MSI website.
3. Will do so tomorrow when got PC on again
4.

smogsy · 30 Dec 2021 at 09:53

alphaomega16 said:
1. Was having issues accessing my main PC over network for some programs but now resolved, was odd I could access dads PC but when trying mine it said couldn't but a refresh of window and it was fine, guess just fresh install hiccups.
2. They are I believe warnings, the yellow triangle, perhaps caused by being on local account or the intel management engine install, I installed all the stuff from the drivers page on MSI website.
3. Will do so tomorrow when got PC on again
4.

1 cool
2. see how it is after 3.
3. cool
4. believe thats when you enrolled on extra feature previews (early access to some new features)

alphaomega16 · 30 Dec 2021 at 16:16

smogsy said:
1 cool
2. see how it is after 3.
3. cool
4. believe thats when you enrolled on extra feature previews (early access to some new features)

strange how sfc found issues on a clean install, mostly saying

2021-12-30 16:09:31, Info CSI 000000f5 Warning: Overlap: Directory \??\C:\ProgramData\Microsoft\Windows\Start Menu\ is owned twice or has its security set twice
Original owner: Microsoft-Windows-shell32, version 10.0.19041.1266, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}
New owner: Microsoft-Windows-shell32, version 10.0.19041.1266, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}

pretty much all overlap and set twice security.

Aside from that pc "seems" fine, played couple hours of world of tanks, hour of star trek online fine.

just need to replace this 670gtx with a 3080

alphaomega16 · 2 Jan 2022 at 18:35

Audit Failure Event ID 5038

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume3\Windows\Installer\{AC44C09E-6D45-4F0F-8749-C3DF69A55FDE}\ARPPRODUCTICON.exe

Still unsure what is causing this or how to find out where "harddiskvolume" numbers are

Edit
Found out its referring to c drive but there is no installer folder in windows