Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4302 Source: DFSR

Source
Level
Description
The DFS Replication service has been repeatedly prevented from replicating a file due to consistent sharing violations encountered on the file. A local sharing violation occurs when the service fails to receive an updated file because the local file is currently in use.

Additional Information:
File Path: <drive letter path to folder\subfolder>
Replicated Folder Root: <drive letter path to folder>
File ID: {<guid>}-v<version>
Replicated Folder Name: <folder>
Replicated Folder ID: <guid2>
Replication Group Name: <dfs path to folder>
Replication Group ID: <guid3>
Member ID: <guid4>.
Comments
 
This is a new Event ID for Windows Server 2003 R2 SP1 found in a new DFS Replication log. Always backup the Dfs replicas before reconfiguring Dfs. Get users to log off first particularly if Folder Redirection or Roaming Profiles are configured to use Dfs. Examine and compare the drive letter path for each Dfs replica using Windows Explorer. Look for any of these paths that are empty or do not match the other paths for the same replica. Also look for odd-looking folders (e.g. folder names ending in "_NTFRS_xxxxxxxx", where "x" is a random hexadecimal number). Rebuild Dfs using Dfs Manager and restore missing files if necessary. Ensure that the right replica is selected as the primary source of the folder content.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...