Please explain to me what this is and who exactly is remote accessing my computer and why?

[Mindizzle23]

<Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event

">


- <System>


<Provider Name="Microsoft-Windows-User Device Registration" Guid="{23b8d46b-67dd-40a3-b636-d43e50552c6d}" />


<EventID>360</EventID>


<Version>0</Version>


<Level>3</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x8000000000000000</Keywords>


<TimeCreated SystemTime="2020-12-29T18:32:23.2378721Z" />


<EventRecordID>23</EventRecordID>


<Correlation />


<Execution ProcessID="6412" ThreadID="6576" />


<Channel>Microsoft-Windows-User Device Registration/Admin</Channel>


<Computer>DESKTOP-7F7NCGS</Computer>


<Security UserID="S-1-5-21-3764376316-977428748-3544415821-1001" />


</System>


- <EventData>


<Data Name="Message">Windows Hello for Business provisioning will not be launched.</Data>


<Data Name="DeviceIsJoined">Not Tested</Data>


<Data Name="AADPrt">No</Data>


<Data Name="NgcPolicyEnabled">Not Tested</Data>


<Data Name="NgcPostLogonProvisioningEnabled">Not Tested</Data>


<Data Name="NgcHardwarePolicyMet">Not Tested</Data>


<Data Name="UserIsRemote">Yes</Data>


<Data Name="LogonCertRequired">Not Tested</Data>


<Data Name="MachinePolicySource">none</Data>


</EventData>


</Event>

 

[Bruce]

try this;

Solved - Remove Windows Hello for Business

I am using Windows 10 Professional (x64) Version 1803 (build 17134.165) I am going through my Event Viewer trying to identify various problems I am experiencing and trying to eliminate them one by one. I am receiving a Warning Event ID 360 and the Source is User Device Registration. The...

pchelpforum.net

PS: no one is remotely accessing your computer.

 

[phillpower2]

Thread closed due to lack of any feedback from the OP.