Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
This machine is not a domain controller. The Password Change Notification Service will stop.
|English: Request a translation of the event description in plain English.|
This can occur if a server with PCNS (Password Change Notification Service) was previously a domain controller but was dcpromo'd down. When the dc is demoted, the PCNS service will not be uninstalled and will still attempt to start automatically. See ME948295 for information on solving this issue.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated