Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1112 Source: TermServDevices

Level
Description
Failed to register for user printing preferences change notification.
Comments
 
In my case, I had to delete user account in the Active Directory, and create it anew.
In my case, this error was logged on my Terminal Server. This error also caused the user not to have a "default" printer when he logged in. I found the problem to be caused by copying a profile from another user (so I would not have to configure the entire profile manually). I deleted the profile, let Windows create a new one and the problem was resolved.
This event was logged when users logged in remotely with the printers checkbox on the RDP local resources tab checked. This would reset the default printer to another printer with the same name. I reset the default printer to its proper source and renamed printers with default names to something unique.
For me this event showed up when trying to remotely connect to a Win XP box using Remote Assistance. After running "filemon.exe" on the computer that I was trying to remotely connect to, it showed "access denied" to a file located in "c:\windows\registration". Only Administrator and System accounts had full rights to files located in that directory. After giving everyone "read" rights only, I was able to successfully remote control the Win XP box and the event no longer showed up in the event log.
From a newsgroup post: "Im having the same problem in my TS and the solution that Ive found in Technet is to uninstall and reinstall terminal services (thats what Microsoft says about the resolution). Ive done this, but doesnt work. Im trying all the stuff, with no results."


Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...