Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2123 Source: MSExchangeDSAccess

Level
Description
Process INETINFO.EXE (PID=200). DSAccess is unable to connect to the Domain Controller domain although its service location (SRV) resource record was found in the DNS
The query was for the SRV record for _ldap._tcp.dc._msdcs.domain

The following domain controllers were identified by the query:
"servers"

Common causes of this error include:
- Host (A) records that map the name of the domain controller to its IP addresses are missing  or contain incorrect addresses.
- Domain controllers registered in DNS are not connected to the network or are not running.
For information about correcting this problem type in the command line:
hh tcpip.chm::/sag_DNS_tro_dcLocator_messageHa.htm
Comments
 
As per Microsoft: "This event may be logged if the required A (Address) resource records that map the names of the domain controllers to their respective IP addresses do not exist in DNS". See MSEX2K3DB for additional information about this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...