Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 14344 Source: WMPNetworkSvc

A new media server was not initialized because WMCreateDeviceRegistration() encountered error "<error code>". The Windows Media DRM components on your computer might be corrupted. Verify that protected files play correctly in Windows Media Player, and then restart the WMPNetworkSvc service.
This started to appear in my Vista x64 event log after changing the CPU. Side effects visible elsewhere included inability of Windows Movie Maker to split Media Center recordings and crash of Windows Media Player 11 when playing Media Center recordings.
Error 0xC00D278F refers to NS_E_DRM_HARDWAREID_MISMATCH, which is described at “Windows Media Format 11 SDK Error Codes”. Judging from the description, this error would mean that any hardware change could provoke it. Even as innocent as CPU change or upgrade of graphics card (Google found at least one report of upgrade from NVIDIA 6800 to 8600 causing exactly the same symptoms). The solution is available in ME891664. In short, all files have to be removed from the folder "%SYSTEMDRIVE%\ProgramData\Microsoft\Windows\DRM". After that, you can re-individualize DRM system by going to “Security component upgrade“, and clicking on upgrade button.
This would mean that DRM licenses must be backed-up before any hardware change on Windows Vista systems. After any upgrade of hardware, the link “Security component upgrade” should be checked as well, as a JavaScript error on the page means that DRM data files have become invalid and have to be deleted. Because I do not have any Windows DRM licenses, I did not try to find how to back them up in Vista, but Windows Media Player menus referenced in KB did not exist at this time.
Unfortunately, there is no simple and visible warning for less experienced users that their DRM files became unsynchronized with their hardware.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.