Skip to content

Event ID 201: Task Scheduler successfully completed task "…" , instance "…" , action "…" with return code

Windows Event ID Lookup: What Windows event IDs mean: 4625, 4624, 4740, 6008, 41, 7045, 1102 and 3,000 more, with Windows' own message text, the fields and what to check.

Look up a Windows event ID from Event Viewer, a SIEM alert or a log export: what it means, the fields it records, and what to check. Many IDs are used by more than one source (event 41 is both a Kernel-Power crash and a boot error), so every definition is shown, the one people usually mean first. The message text is Windows' own, read from the event providers of Windows 10.0.26200.0, 2026-10-28; the notes are ours, based on Microsoft's security auditing reference.

Try: 4625, 4624, 4740, 6008, 41, 1074, 7045, 1102, 4104, 1149

Task Scheduler successfully completed task "…" , instance "…" , action "…" with return code

Event 201
TaskScheduler
TaskScheduler/Operational log
Information

A scheduled task's action completed, with its return code.

What to check: A non-zero return code means the program reported a failure.

Related: 200

Message and fields (as Event Viewer shows them) 
Task Scheduler successfully completed task "…" , instance "…" , action "…" with return code ….

A push subscription was created for

Event 201
Eventlog
Security / System log
Verbose
Message and fields (as Event Viewer shows them) 
A push subscription was created for ….

A command was submitted to the TPM.

Event 201
Kernel-Boot
System log
Information
Message and fields (as Event Viewer shows them) 
A command was submitted to the TPM.
Command code: ….
Response code: ….
Elapsed time: …ms.

NtfsLogFileFull VolumeId: …, Reason

Event 201
Ntfs
System log
Information
Message and fields (as Event Viewer shows them) 
NtfsLogFileFull VolumeId: …, Reason: …

Request servicing time taken by lower driver stack(s).

Event 201
StorPort
System log
Information
Message and fields (as Event Viewer shows them) 
Request servicing time taken by lower driver stack(s).

Attempt to use Kerberos unconstrained delegation failed.

Event 201
Security-Kerberos
System log
Warning
Message and fields (as Event Viewer shows them) 
Attempt to use Kerberos unconstrained delegation failed.

Target server: …
Supplied user: …
Supplied domain: …
PID of client process: …
Name of client process: …
LUID of client process: …
User identity of client process: …
Domain name of user identity of client process: …
Mechanism OID: …

Kerberos unconstrained delegation is not allowed for this user. For more information, see https://go.microsoft.com/fwlink/?linkid=856824.

End boot start drivers phase

Event 201
Kernel-PnP
System log
Information
Message and fields (as Event Viewer shows them) 
End boot start drivers phase

SMB2 Work Item allocated

Event 201
SMBServer
SMBServer/Operational log
Information
Message and fields (as Event Viewer shows them) 
SMB2 Work Item allocated

Session Setup Error: … Location: … Context

Event 201
SMBClient
SMBClient/Connectivity log
Error
Message and fields (as Event Viewer shows them) 
Session Setup Error: … Location: … Context: …

The BITS job named "…" was unable to contact any HTTP proxy server in its proxy list.

Event 201
Bits-Client
Bits-Client/Operational log
Warning
Message and fields (as Event Viewer shows them) 
The BITS job named "…" was unable to contact any HTTP proxy server in its proxy list.  This may indicate a problem with the proxy servers or with the client's network configuration.  An administrator should verify whether the proxy list is correct.  BITS will periodically try to transfer the job.  The HTTP proxy list is "…".  The proxy-bypass list is "…".