Event Viewer ID Question

I am studying for my MCITP 70-622 and have a quick question on event ID's.  

The text says that when an event begins it is assigned a number for example

4000 for user start up.  Got that

Then it says that when the event completes it will have an event id that is exactly 4000 higher so Event ID 8000 would have a description of "completed computer boot policy...."  I understand that.

The problem is that in the very next line it says for events 5000-5299 indicate group policy processing has completed successfully....these events will always have an event id 1000 heigher than the corresponding scenario start event

That is exactly what they said about the 8000-8299 range.  

What is the difference between the 8000-8299 and 5000-5299 range?
Is one for the computer group policy configuration and one for user group policy configuration because the book doesn't make that distinction?

Any help would be much appreciated.  Thanks

Who is Participating?
Jerry MillerConnect With a Mentor Commented:
Here is a link that explains the events that correspond to particular event ids:


The difference is that some are events for Group Policy (4000–4007) and some are events for components of Group Policy (4016–4299, 500-5029).
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.