Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 4105 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 4105
Event Source: Microsoft-Windows-TerminalServices-Licensing
Event Type: -
Event Description: -
Comment: TS Licensing with 2008 R2 SP1 Terminal Server, TS Licensing running on 2008 R2 SP1 DCs.
Similar error, different error code:

Severity:  Warning
Status:  New
Source:  TermServLicensing
Name:  SystemEventLog Warning
Description:  The Remote Desktop license server cannot update the license attributes for user "XXXXXX" in the Active Directory Domain "YYYYYY". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "YYYYYY".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Remote Desktop Licensing service to track or report the usage of RDS Per User CALs.

Win32 error code: 0x80005000 (!!!)

Problem was a forward slash "/" in the distinguishedName of the users.
After renaming the users the error vanished and the msTS-fields were written. Index: 10491

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.