Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1217 Source: Winlogon

Source
Level
Description
Execution of GPO scripts has timed out and have been terminated.
Comments
 
This problem can also occur if the computer account is not created correctly. Move the computer to a workgroup and back to the domain again. Be sure the computer account is in the right OU. This allows the computer (when authenticated) to be added to the authenticated users group.
A logon script assigned through a GPO tried to connect to a network share, but the user did not have the permission to access the resource. Therefore, the script requested authentication from that user. However, the user was unable to see the request because it happened before the desktop was loaded. In this case, the logon process waits until the script times out.
A newsgroup post suggests installing MS hotfix ME329457.
A script that was assigned to a Group Policy Object did not run within the timeout period and was terminated.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...