This task ensures that your Microsoft Office installation can be monitored for performance issues. <QueryList><Query Id="0" Path="Application"><Select Path="Application">*[System[Provider[@Name='Microsoft Office 16'] and EventID=2050]]</Select></Query></QueryList> true NT AUTHORITY\SYSTEM HighestAvailable IgnoreNew false false true true false false false true true false false PT0S 7 C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe