System Events

These events are logged by the Operating System and mostly indicate errors or problems with the system. Please note that even critical messages might just be logged as Information events.

Event Log	ID	Type	Source	Category	Message
System	16	Warning	Automatic Updates	Download	Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
System	6005	Information	EventLog		The Event Log service was started.
System	6006	Information	EventLog		The Event Log service was stopped.
System	6009	Error	EventLog		The previous system shutdown at 6:32:01 AM on 3/1/2004 was unexpected.
System	6009	Information	EventLog		Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor Free.
System	1073	Warning	USER32		The attempt to reboot WORKSTATION73 failed.
System	29223	Information	LSASRV		This server is now a Domain Controller.
System	40960	Warning	LSASRV	SPNEGO (Negotiator)	The Security System detected an authentication error for the server LDAP/myserver1.mydomain.com@mydomain.com. The failure code from authentication protocol Kerberos was "The attempted login is invalid. This is either due to a bad username or authentication information.".
System	40961	Warning	LSASRV	SPNEGO (Negotiator)	The Security System could not establish a secured connection with the server LDAP/myserver1.mydomain.com@mydomain.com. No authentication protocol was available.
System	3034	Warning	MRxSmb		The redirector was unable to initialize security context or query context attributes.
System	3019	Warning	MRxSmb		The redirector failed to determine the connection type.

System	2511	Error	Server	The server service was unable to recreate the share myshare because the directory c:\mydata no longer exists.
System	2506	Error	Server	The value named IRPStackSize in the server's Registry key LanmanServer\Parameters was invalid. The value was ignored, and processing continued.
System	2012	Error	Srv	The server has encountered a network error.
System	16650	Error	SAM	The account-identifier allocator failed to initialize properly. The recod data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creating will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.
System	64	Warning	w32time	Because of repeated network problems, the time service has not been able to find a domain controller to synchronize with for a long time. To reduce network traffic, the time service will wait 960 minutes before trying again. No synchronization will take place during this interval, even if network connectivity is restored. Accumulated time errors may cause certain network operations to fail. To tell the time service that network connectivity has been restored and that it should resynchronize, execute "w32tm /s" from the command line.
System	54	Warning	w32time	The Windows Time Service was not able to find a Domain Controller. A time and date update was not possible.
System	24	Warning	w32time	Time Provider NtpClient: No valid response has been received from domain controller mydc.mydomain.com after 8 attempts to contact it. This domain controller will be discarded as a time source and NtpClient will attempt to discover a new domain controller from which to synchronize.
System	20050	Error	RemoteAccess	The user DOMAIN\Ingmar connected to port VPN2-120 has been disconnected because no network protocols were successfully negotiatated.
System	20189	Warning	RemoteAccess	The user Intruder connected from 12.23.34.55 but failed an authentication attempt due to the following reason: (4112).
System	1001	Information	Save Dump	The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x00000002 0x00000009 0x0000000 0xf1c21934). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP.
System	1003	Warning	Dhcp	Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 00053C08910F. The following error occurred: The operation was canceled by the user.Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.