Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: NTDS General|
Attempts to update the Directory Service database are failing with error 112. Since Windows will be unable to log on users while this condition persists, the NetLogon service is being paused. Check to make sure that adequate free disk space is available on the drives where the directory database and log files reside.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is NTDS and what are the roles of its components?
What is the role of the Netlogon share?
What is a directory service?
As per Microsoft: "Active Directory cannot start if it runs out of disk space. Windows 2000 attempts to avoid this situation, but it can occur if you ignore warnings about low disk space in the System log or if you run large scripts against Active Directory for mass directory imports". See ME259278 for more details.
You are running low on disk space or you have performed mass directory imports.
Make sure that you don't have old EDBxxxxx.log. files left over from NTBackup.
NOTE: Upgrading to Service Pack 2 will prevent NTBackup from leaving EDBxxxxx.log files.
To workaround this issue:
1. Press OK so that the computer will restart.
2. Press F8 when the Boot menu appears.
3. Boot to Directory Services Restore mode and log on with the Directory Services Restore mode administrator account and password (assigned during DCPromo).
4. Locate the drive containing the directory and log files, generally the NTDS folder of %SystemRoot%.
5. Delete any old EDBxxxxx.log files.
6. Free any other space on the drive that you can.
7. Restart the computer.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated