Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4412 Source: DFSR

The DFS Replication service detected that a file was changed on multiple servers. A conflict resolution algorithm was used to determine the winning file. The losing file was moved to the Conflict and Deleted folder.

Additional Information:
Original File Path: <drive letter path to folder>\<subfolder>
New Name in Conflict Folder: <subfolder>-{<guid>}-v<version>
Replicated Folder Root: <drive letter path to folder>
File ID: {<guid2>}-v<version2>
Replicated Folder Name: <folder>
Replicated Folder ID: <guid3>
Replication Group Name: <dfs path to folder>
Replication Group ID: <guid4>
Member ID: <guid5>.
See ME944804 for a hotfix applicable to Microsoft Windows Server 2003.
This is a new Event ID for Windows Server 2003 R2 SP1 found in a new DFS Replication log. In one case, this Event ID appeared on a computer when there were three replicas of a folder. Examining the drive letter path to each replica showed that two were populated and contained the same data, while the third (on which the Event ID appeared) was empty. Time was allowed but the data did not get replicated to the empty folder. Dfs Manager was used to disable Dfs referral for the Dfs Link with the problem the data was copied to it and Dfs referral was then enabled. Replication then worked normally.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.