Home | Site Map | Cisco How To | Net How To | Wireless | Case Studies | Forums | Services | Donations | Careers | About Us | Contact Us|
Why bother deciphering Event logs
when GFI
EventsManager can do everything for you?
Free trial
here!
|
|
Home | Site Map | Cisco How To | Net How To | Wireless | Case Studies | Forums | Services | Donations | Careers | About Us | Contact Us| |
|
|
|
Event ID
Event Viewer display no information
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here! Event ID 0 - The following fatal error occurred in the Remote Web Workplace Application Event ID 1 ThinPrint – Incorrect function Error in function number 3, error #: 11e0001 Event ID 2 - IAS related Event IDs and Reason Codes. Event ID 3: IAS Reason-Code = 5 Event ID 10 - User administrator at host x.x.x.x has timed-out after 120 seconds of inactivity Event ID 11- There are multiple accounts with name host/printsrv.chicagotech.net of type 10 Event ID 13: RADIUS message was received from invalid client Event ID 14: Attempt to set time which differs by more than Event ID 18: authenticator attribute that is not valid Event ID: 21 and 41, Source: TermServLicensing Event ID 29 - W32time Resolution: Event ID 29 and 7024 - TS Licensing Event ID 30 - The server was unable to read the file... Event ID 38, 47 and 29 - Source: W32Time Event ID 41 - The file system structure on the disk is corrupt and unusable. Event ID 52 - Description: Object Name not found Event ID: 112 - Details: Not enough space to write to the disk. Event ID 201 – “No license was available Event ID 202 - License Service Event ID 215 - The backup has been stopped because it was halted by the client Event ID 333 - An I/O operation initiated by the Registry failed unrecoverablly Event ID 434 - HP Network Team #1: PROBLEM Event ID: 504 - DNS server could not create zone Event ID 529 - Logon Failure Event ID 529 - OWA error 401 Event ID 534 - Logon Failure: The user has not been granted the requested Event ID: 537 - An error occurred during logon Event ID 538 Event ID 539 - Logon Failure: Account locked out Event ID 552 - Logon attempt using explicit credentials Event ID 560 Event ID 675 – Pre-authentication failed Event ID: 675 Event ID 675 Event ID: 1000 Source: Application Error Event ID 1000 and 1001 Event ID: 1000 - The safe mode service of Windows SharePoint Services has failed to initialize because of an unknown error. Event ID 1000 - Faulting application spoolsv.exe Event id 1000 - Faulting application spoolsv.exe or tcpmon.dll Event ID 1000 - Your computer has lost the lease to its IP address <IP address> on the Network Card with network address <MAC address>. Event id 1000 and 1004 regarding spoolsv.exe Event ID: 1000 Description: Faulting application explorer.exe Event ID 1000, 1500, 1517 and 1524 related to Roaming Profile Event ID 1002 - sent a DHCPNACK message Event ID 1003 - Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address <MAC address>. Event ID 1003 Your computer was not able to renew address Event ID 1005 and 9149 - Event Source: MSExchangeSA Event ID 1010 - Perflib Event ID 1010, 1014, 1016 DHCPServer Error TS Event ID 1011 Event id 1019, 1023 and 1035 - POP3 Connector Error Event ID 1029 - The service principal name for the VMRC server could not be registered. Event ID 1030, 1058 and 1059 Event ID 1030 and 1058 - Domain Group Policy issue Event ID 1030 and 1058 after changed password Event ID 1030 and 1058 Stop folder redirection with Event ID 1030 Can't understand this issue with event id 1030 and 1058 Receive Event ID 1030 and 1058 after changed password Event ID: 1030 - Windows cannot query for the list of Group Policy objects Event ID 1041 - The DHCP service Event ID 1042 - Case Study Event ID 1051 - The DHCP/BINL service has determined that it is not authorized to service clients Event ID 1051 - The DHCP/BINL service has determined that it is not authorized... Event ID 1053 - Userenv Event ID 1054 - Windows cannot obtain the domain controller name for your computer network. Event ID 1056 - DHCP has no credentials configured Event ID 1076 - Server shutdown unexpected with different Reason Code Event ID 1058, 1059 and 1030 Event ID 1058 - Windows cannot access the file gpt.ini Event ID 1058 - Windows cannot access the file gpt.ini for GPO - Case Study Solved: Event ID 1058 and 1030 Can't understand this issue with event id 1030 and 1058 Event ID: 1059 DhcpServer - Case Study Event ID 1070 - The POP3 e-mail could not be delivered The configuration file referenced by the configuration "chicagotech" could not be found Event ID 1076 - Server shutdown unexpected with different Reason Code Event ID 1076 - Reason Code 0x805000f Event ID 1106 – The printer could not be installed Event ID 1111 – Driver Printer_name required for printer_Server Name_Shared nameis unknown. Event ID 1113 and 1115 Event ID 1134 - NTDS KCC Event ID 1164 and 9037 Event ID 1168, 1126, 7003, 1003, 2003, 13528 Event ID 1218 - You do not have access to logon to this Session. Event ID 1219 - Unable to obtain Terminal Server User Configuration Event ID 1311 - There are currently no logon servers available to service the logon request Event ID 1202 - Error code 0x6fc Event ID 1232, 1265, 1925 and 5719 Event ID 1500 - Windows cannot log you on because your profile cannot be loaded. Event ID 1000, 1500, 1517 and 1524 related to Roaming Profile Event ID 1503, 1507 and 1805 Event ID 1507, 1805, 3029, 3030 and 3031 Event ID 1508 - Windows was unable to load the registry. Event ID 1521 - Description: Windows cannot locate the server copy of your roaming profile Event ID 1586 - The destination server is currently rejecting replication requests Event ID 1925 - The attempt to establish a replication link for the following writable directory partition failed - Case Study. Event ID1925 and 5719 Event IDs 1925, 2087, 2088 Event ID: 2011 - Not enough server storage is available to process this command. Event ID 2012 - The server has encountered a network error Event ID 2012 - SMTP could not connect to the DNS server 'xx.xxx.xx.xxx'. Event ID 2019, 2020, 2021 2022 Event ID 2022 - Description: Server was unable to find a free connection... Event IDs 2087 and 2088 Event ID 2102 Case Study Event ID 2103 - Process MAD.EXE (PID=2124). Event ID 2103 Case Study Event ID 2114 and 7024- The Server service is not started. Event ID 2114 - Process INETINFO.EXE (PID=1656). Topology Discovery failed, error 0xffffffff Case Studies Event ID 2114 Event ID: 2236 - Server execution failed Event ID 2504, 2505, 8021 and 8032 - Inability to Browse Event ID 3005 - Unexpected Exchange mailbox Server error: HTTP status code: [503] Event ID 3013 - Description: The redirector has timed out a request to ComputerName Event ID 3019 - The redirector failed to determine the connection type. Event ID 3034 - The redirector was unable to initialize security context or query context attributes. Event ID 3034 - MrxSmb source Event ID: 3095 - This Windows NT computer is configured as a member of a workgroup, not as a member of a domain Event ID 3210 - Failed to authenticate with \\DOMAINDC, a Windows NT domain controller for domain DOMAIN. Event ID 4000 - The DNS server was unable to open Active Directory. Event ID 4004 - The DNS server was unable to complete directory service enumeration of zone %1 Event ID 4015 - The DNS server has encountered a critical error from the Active Directory Event ID 4102 - The connection was aborted by the remote WINS. Remote WINS may not be configured to replicate with the server Event ID 4102, 4121, 4242, 4243, and 4286 Event ID 4111 - EAAS initiated due to thermal reasons Event ID 4119 and 4311 Event ID 4198 or 4199 - The system detected an address conflict Event ID: 4199 - The system detected an address conflict for IP address Event ID 4199 - The system has detected a conflict for IP address Event ID 4102, 4121, 4242, 4243, and 4286 Event ID 4202 - WINS issue Event ID 4226: TCP/IP has reached the security limit imposed Event ID 4292 – The IPSec driver has entered Block mode. Even ID 4294, 7022 and 7023 Event ID 4319 -Duplicate Names on the Network Event ID 4320 - Duplicate name has been detected on the TCP network Event ID: 4321 - could not be registered on the Interface with IP address Event ID 4513 and 4514 - DNS errors Event ID: 5504 - The DNS server encountered an invalid domain name Event ID 5701 - The Netlogon service failed to update the domain trust list Event ID 5513 - The computer doesn't properly know the security identifier (SID) for the domain. Event ID 5719 Event ID 5719 - The system cannot log you on now because the domain "name" is not available." Event ID 5722 - Target Principal Name is Incorrect Event ID – 5723 - The session setup from the computer <computer name> failed Event ID 5737 – The Net Logon service terminated Event ID 5774 and 5775 - Netlogon Event ID: 5782 - Dynamic registration or deregistration of one or more DNS records failed with the following error... Event ID 5783 - The session setup to the Windows NT or Windows 2000 domain controller DCName.domain_name.com for the domain Domain is not responsive Event 5722 - The session setup from the computer %1 failed to authenticate. Event ID 5805 - Net Logon Event ID 6008 - The previous system shutdown at <time> on <date> was unexpected. Event ID 6035 - During a logon attempt, the user's security context accumulated too many security IDs Event ID 6702 - DNS server has updated its own host (A) records Event ID: 6702 - Case Study Group Policy Event IDs between 7000 to 73201 Event ID 7000 - The service cannot be started Event ID 7062: DNS Server encountered a packet addressed to itself Event ID 7200 - Background thread FDoUpdateCatalog halted on database "First Storage Group\Mailbox Store" Event ID 7023 - The IPSEC Services service terminated with the following error: The system cannot find the file specified” Event ID: 7023 - The Remote Access Connection Manager service terminated with the following error: Access is denied. Event ID 7023, 20063, 20151 and 20070 - Can't create VPN on Vista Event ID 7024 - The Net Logon service terminated with service-specific error 3095. Event ID 7024 - cannot start Computer Browser Event ID 7024 - The Computer Browser service terminated with service-specific error 2550 (0x9F6). Event ID 7024, 20103 and 20133 - RRAS Fails to Start Resolution: Event ID 29 and 7024 - TS Licensing Event ID: 7200 - Case study Even ID 4294, 7022 and 7023 Event ID 7062: DNS Server encountered a packet addressed to itself Event ID 7062 - Case Study Even ID 8003 - The master browser has received a server announcement from the computer <computer name> that believes that it is the master browser Event ID 8017 - Scheduled Backup Does Not Run Event id: 8021 - The browser was unable to retrieve a list of servers from the browser master... Event ID: 8026 - Case Study Event id: 8032 - The browser service has failed to retrieve the backup list too many times Event ID 8213 - Case Study Event ID 9037 and 1164 Event ID 9098 - Case Study Event ID: 9098 MSExchangeSA Event ID 9149 and 1005 - Event Source: MSExchangeSA Event ID 9340 and 9360 - Exchange 2007 Event ID 9646 – MSExchangeIS Event ID 10002 - Scheduled Backup Does Not Run Event ID: 10010 - DCOM Event ID 10016 - DCOM Event ID 10010 and 10016 - DCOM Event ID: 11000 - Proxy service and Firewall service do not start Event ID: 11165 - The system failed to register host (A) resource records (RRs) for network adapter with settings Event ID 11166 Logon Failure target account name is incorrec Event id 13508 - The File Replication Service is having trouble enabling replication Event ID: 13550, 13552 and 13555 - The File Replication Service errors Event ID 13562 - NtFrs Event ID 13566, 13552, 13555 Event ID 13568 - The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR Event ID: 14127 -Proxy service and Firewall service do not start Event ID: 20035 - Remote Access Connection Manager failed to start because it could not create buffers. Restart the computer. Access is denied. Event ID 20049 - An invalid request was sent to the admin support thread for Remote Access Service... Event ID 20050 - The user Domain\User connected to port VPNx has been disconnected Event ID 20050 –The user Domain\User connected to port VPNx has been disconnected - Case study Event Log Error 20050 with SBS 2003 Event ID 7023, 20063, 20151 and 20070 - Can't create VPN on Vista Event ID 20073 - There are no authentication protocols available for use Event ID 20078 - The account for user \username connected on port VPN3-127 does not have Remote Access privilege. Event ID 20078 and 20189 Event ID 20103 and 20133 - RRAS Fails to Start Event ID 20159 - The connection to <connection_name> made by user <user_name> using device <com_port> was disconnected. Event ID 20169 - Unable to contact a DHCP server Event ID 20189 - The user \username connected from x.x.x.x but failed Event ID 20097 and 20111 Event id 20106 - Unable to add the interface Internal with the Router Manager for the IP protocol. Event ID 20209 - A connection between the VPN server and the VPN client has been established, but the VPN connection cannot be completed. Event ID 40961 - The Security System could not establish a secured connection with the server ldap/Computername.domain.com. No authentication protocol was available. Event ID 57860 - An error occurred while attempting to logon 
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here! The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.
Resolution:
1. Synchronize the computer with the DC. Event ID 41 - Description: The file system structure on the disk is corrupt and unusable. Causes: 1. The
CPUs in your computer are not all at the same stepping level, and
Windows writes an informational message to the Event log. Event ID 1000 and 1001 - Windows cannot read the history of GPOs from the registry - The computer has rebooted from a bugcheck. - Security policy cannot be propagated. - The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).
If a multihomed domain controller does not have File and Printer Sharing bound to it, the following multiple problems are logged or displayed when you attempt to work with Group Policy objects on the domain controller:
1)UserEnv 1000 The Group Policy client-side
extension Security was passed flags (17) and returned a failure
status code of (3).
2) SceCli 1001 Security policy cannot be propagated. Cannot access the template. Error code = 3. \\domain name\sysvol\domain name\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf. 3) UserEnv 1000 Windows cannot access the registry information at \\domain name\sysvol\domain name\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (51). 4) Attempting to gain access to the Group Policy objects by using the Domain Security policy and the Default Domain Controller Security policy displays a "Group Policy Error" error message. The text of the message states: "Failed to Open Group Policy Object. You may not have appropriate rights. Details: The network path not found." 5) Attempting to access the Group Policy objects by using the Active Directory Users and Computers snap-in or Group Policy Editor displays a "Domain Controller for Domain domain name not found" error message. There are several options, none of which work. 6) Attempting to open the Sysvol share by using \\domain name\sysvol causes a "Remote Computer not available" error message.
RESOLUTION:
|
|
|
|
This web is provided "AS IS" with no warranties.
Copyright © 2002-2008
ChicagoTech.net,
All rights reserved. Unauthorized reproduction forbidden.