Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: NTDS ISAM|
NTDS (<PID>) Unexpected Win32 Error :<error code>.
|English: Request a translation of the event description in plain English.|
Check for antivirus software installed on your machine and exclude the NTDS folder from it. All the extra log files will be deleted. Also you may want to check the permissions on the NTDS folder and see if admins have full control. You can also run an integrity check through the DS restore mode and see if the database is intact.
From a newsgroup post: "Apparently I rebooted the DC and the problem no longer appeared".
From a newsgroup post: "My problem is that the log files in the NTDS folder are not deleting and now that folder is around 6GB which not normal. I have log files that are from 3 months ago. I have Event ID 0 NTDS ISAM. NTDS (300) Unexpected Win32 error: 0x20. This error started the same time the log files started building up. To solve this problem, i followed article ME240145 which describes how to remove Exchange Server transaction log files".
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated