Hello,
I enabled Audit Policy through the following method:
Open the Local Group Policy Editor (gpedit.msc).
Navigate to Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> Object Access.
Open the Audit File System policy and check "Success".
Update Group Policy...
audit policy
command prompt
configuration management
eventidevent viewer
file system
folder audit
group policy
local group policy
object access
permissions
policy configuration
security settings
success audit
system logs
troubleshooting
windows 10
windows administration
windows settings
It seems to coincide with a warning on the Windows 2022 member server event ID 40970 LSA (LSASrv) The security System has detected a downgrade attempt when contacting the 3-part SPN LDAP/Domain Controller FQDN/Domain@Domain with error code "The encryption type is not supported by the KDC...
Hello,
I want to know which file or folder was deleted by whom.
The problem is that there is no file or folder name in ID 4660 and I need to extract the file or folder name from ID 4663, but how do I link these together? How do I know which ID 4660 is related to which ID 4663? What field is...
audit log
data recovery
error resolution
event correlation
eventid
file deletion
file management
file system
file tracking
folder deletion
folder tracking
id 4660
id 4663
james
jason
security audit
user activity
user permissions
windows logs
windows security
I see in Widows fault reports numerous (hundreds of) error messages a day! The error message is :
1-1-2025 14:08 Windows Error Reporting Foutbucket , type 0
Naam van gebeurtenis: StoreAgentScanForUpdatesFailure0
Antwoord: Niet beschikbaar
Id van...
analysis symbol
cab file
error messages
error reporting
eventid
fault reports
non-critical updates
problem signature
storeagent
technical issue
troubleshooting
update failure
user reports
windows
windows 10
windows 11
windows support
I see a lot of talk online with this particular event id relating to Exchange. This is not an Exchange server. It's an IIS server running a web page for an inhouse application.
I don't really know how to debug it. It only happens very randomly and I'm unsure of the catalyst so far. One...
asp.net
authentication
authorization
communication
debugging
domain controller
error handling
eventid
exchange
iis
in-house application
process information
request information
stack trace
system exception
trust relationship
unhandled exception
user authentication
virtual path
web application
Hello dear friends.
I wanted to ask you about some logs that from my exchange server which i catch with qradar. They are all with qid: 5000830 or eventid:4624 which is a successful login to a server or anything.
I use a rule which tells me if someone logs in to the exchange server from an...
cybersecurity
data protection
eventid
exchange server
external access
false positives
firewalls
fraudulent ip
ip logs
ip quality score
isp tracking
login events
microsoft corporation
network security
password management
qradar
security audits
security rules
user management
Since the upgrade from 21H2 to 22H2 , in Windows11, Im getting 20 times , ID=1108 in the eventviewer .
After each reboot they appear again , 10 times ; id=1108 , errorcode 15005 , eventid=0
and ;10 times ; id=1108 , errorcode 15003 ...
22h2
clean event viewer
community support
error code 15003
error code 15005
error codes
eventideventid 1108
event management
event viewer
logs
reboot issues
system errors
system upgrade
technical support
troubleshooting
upgrade
user experience
windows 11
windows errors
Hello Windows Insiders, today we’re releasing Windows 11 Build 22000.588 (KB5011563) to Windows Insiders in the Beta and Release Preview Channels. This update includes the following improvements:
New! We displayed up to three high priority toast notifications simultaneously. This feature is for...
The Event Viewer details state:
"Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Please visit Link Removed for more information."\
and the XML states:
<Event...
Hello I have 3rd party monitoring App tool that has it's own particular sservice running within Services panel and needs to continue to run.
For some strange reason it sometimes gets stopped (maybe bug).
I recently successfully configured Task Schedule in regards for Event ID = 7036 & Source =...
alerts management
app integration
automation
bug fixes
configuration
email alerts
eventid
filtering
notifications
service control manager
service monitoring
stopped state
system services
task scheduler
third party
windows server
Discusses event ID 5719 or Group Policy event 1129, which are logged if you have a Gigabit network adapter installed on a Windows-based compute. Provides a resolution.
Continue reading...
Hi Guys,
i'm using Windows 2012 Server 64 bit.
Today my Server get trouble, check even viewer status : Even ID 41 task Category 63. my server always restart every 30 minutes, can anybody help me ?
im stuck.
OK so a few weeks ago my PC screen would go off and the oc would reboot. There is no rhyme or reason to it. I am not watching videos or doing anything that would cause it to crash. I am getting an event error 10016
The application-specific permission settings do not grant Local Activation...
chrome
com server
computer crash
dcom
error 10016
eventidevent log
local activation
microsoft windows
permission settings
random restarts
system reset
troubleshooting
windows 10
When I start occasionally .NET programs the close immediately after start. Just a simple error box appears informing me that "xxxxxxprogram has stopped working".
I installed .NET 2.0 3.0 3.5 and 4.6.2 here on 64bit Win 7.
Not all .NET programs are affected.
As an example one of the...