Event ID/Source search
Keyword search
Example: Windows cannot unload your registry file
EventID.Net Splunk Add-on
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
read more...
Event ID: 1129 Source: NTDS KCC
| Source: NTDS KCC |
| Type: Warning |
| Description: The replication connection from CN=NTDS Settings,CN=MMACCT-DC-24,CN=Servers,CN=BocaFl-RSO01-Site,CN=Sites,CN=Configuration,DC=root, DC=mds to CN=NTDS Settings,CN=MMACCT-DC-04,CN=Servers,CN=WAN-01,CN=Sites,CN=Configuration,DC=root, DC=mds was deleted to improve the replication load of the system |
| English: Request a translation of the event description in plain English. |
| Concepts to understand: What is NTDS and what are the roles of its components? What is KCC? |
| Comments: EventID.Net As per Microsoft: "This problem occurs because the Knowledge Consistency Checker (KCC) detects that a connection in a site is incorrect, and then it generates a new connection (a duplicate). But soon after, the KCC deletes the new connection because it does not permit duplicates". See ME830057 to fix this problem. This problem is scheduled to be fixed in Windows 2000 Service Pack 5.  x
1
|
| Private comment: Subscribers only. See example of private comment |
| Links: ME830057 |
| Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links... |
| Feedback:
Send comments or solutions
- Notify me when updated
|
| Printer friendly |
Subscribe to EventID.Net now!