Defender VPN Integrator messages
Defender VPN Integrator can write the following messages to the Windows Event Log, all with Source = pgwcserv, Event = 0:
- Handler not installed 
 - Service stopped 
 - Bad service request 
 - Service started 
 
 
    Defender Report Scheduler messages
Defender Report Scheduler can write the following messages to Windows Event Log, all with Source = Defender Report Scheduler:
- 1000: The Defender Report Scheduler was initialized successfully 
 - 1001: The Defender Report Scheduler failed to initialize 
 - 1002: The Defender Report Scheduler has been shutdown 
 - 1003: The Defender Report DCOM object failed to load. <Error Message> (<Error Code>) 
 - 1004: Generated scheduled report - <Name of report generated> 
 
 
    Defender Administration Console messages
Defender Administration Console can write the following messages to the Windows Event Log, all with Source = Defender Console:
- 1000: Token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User> 
 - 1001: Failed to assign token <Distinguished Name of the Token> to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1002: Defender Password assigned to user <Distinguished Name of the User> 
 - 1003: Failed to assign Defender Password to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1004: Set PIN on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User> 
 - 1005: Failed to set PIN on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1006: Set temporary response on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User> 
 - 1007: Failed to set temporary response on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1008: Cleared temporary response on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User> 
 - 1009: Failed to clear temporary response on token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1010: Modified data of token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User> 
 - 1011: Failed to modify data of token <Distinguished Name of the Token> assigned to user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1012: Token <Distinguished Name of the Token> unassigned from user <Distinguished Name of the User> 
 - 1013: Failed to unassign token <Distinguished Name of the Token> from <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1014: Defender Password unassigned from user <Distinguished Name of the User> 
 - 1015: Failed to unassign Defender Password from user <Distinguished Name of the User>, error (<Error Code>) <Error Message> 
 - 1016: Token <Distinguished Name of the Token> replicated to all Global Catalog servers 
 - 1017: Token <Distinguished Name of the Token> replicated to <count> of <total count> Global Catalog servers 
 - 1018: Token <Distinguished Name of the Token> replicated to all AD servers 
 - 1019: Token <Distinguished Name of the Token> replicated to <count> of <total count> AD servers 
 
 
    Appendix F: Defender Client SDK
The Defender Client SDK provides a public interface to drive the Defender authentication process from a client program. The interface is exposed through the DefenderAuthenticator.Authenticator COM class. The installation program automatically registers this COM class on the client machine.