System Events

<< Click to Display Table of Contents >>

Navigation:  Additional Tips and Resources > Event Log Reference > Common Events >

System Events

These events are logged by the Operating System and mostly indicate errors or problems with the system. Please note that even critical messages might just be logged as Information events.

 

Event Log

ID

Type

Source

Category

Message

System

16

Warning

Automatic Updates

Download

Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

System

6005

Information

EventLog


The Event Log service was started.

System

6006

Information

EventLog


The Event Log service was stopped.

System

6009

Error

EventLog


The previous system shutdown at 6:32:01 AM on 3/1/2004 was unexpected.

System

6009

Information

EventLog


Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor Free.

System

1073

Warning

USER32


The attempt to reboot WORKSTATION73 failed.

System

29223

Information

LSASRV


This server is now a Domain Controller.

System

40960

Warning

LSASRV

SPNEGO (Negotiator)

The Security System detected an authentication error for the server LDAP/myserver1.mydomain.com@mydomain.com. The failure code from authentication protocol Kerberos was "The attempted login is invalid. This is either due to a bad username or authentication information.".

System

40961

Warning

LSASRV

SPNEGO (Negotiator)

The Security System could not establish a secured connection with the server LDAP/myserver1.mydomain.com@mydomain.com. No authentication protocol was available.

System

3034

Warning

MRxSmb


The redirector was unable to initialize security context or query context attributes.

System

3019

Warning

MRxSmb


The redirector failed to determine the connection type.

 

System

2511

Error

Server

The server service was unable to recreate the share myshare because the directory c:\mydata no longer exists.

System

2506

Error

Server

The value named IRPStackSize in the server's Registry key LanmanServer\Parameters was invalid. The value was ignored, and processing continued.

System

2012

Error

Srv

The server has encountered a network error.

System

16650

Error

SAM

The account-identifier allocator failed to initialize properly. The recod data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creating will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.

System

64

Warning

w32time

Because of repeated network problems, the time service has not been able to find a domain controller to synchronize with for a long time. To reduce network traffic, the time service will wait 960 minutes before trying again. No synchronization will take place during this interval, even if network connectivity is restored. Accumulated time errors may cause certain network operations to fail. To tell the time service that network connectivity has been restored and that it should resynchronize, execute "w32tm /s" from the command line.

System

54

Warning

w32time

The Windows Time Service was not able to find a Domain Controller. A time and date update was not possible.

System

24

Warning

w32time

Time Provider NtpClient: No valid response has been received from domain controller mydc.mydomain.com after 8 attempts to contact it. This domain controller will be discarded as a time source and NtpClient will attempt to discover a new domain controller from which to synchronize.

System

20050

Error

RemoteAccess

The user DOMAIN\Ingmar connected to port VPN2-120 has been disconnected because no network protocols were successfully negotiatated.

System

20189

Warning

RemoteAccess

The user Intruder connected from 12.23.34.55 but failed an authentication attempt due to the following reason: (4112).

System

1001

Information

Save Dump

The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x00000002 0x00000009 0x0000000 0xf1c21934). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP.

System

1003

Warning

Dhcp

Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 00053C08910F. The following error occurred: The operation was canceled by the user.Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

 

Strings in italic may vary depending on what triggered the event