These events are logged by the Operating System and mostly indicate errors or problems with the system. Please note that even critical messages might just be logged as Information events.
Event Log |
ID |
Type |
Source |
Category |
Message |
System |
16 |
Warning |
Automatic Updates |
Download |
Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection. |
System |
6005 |
Information |
EventLog |
The Event Log service was started. |
|
System |
6006 |
Information |
EventLog |
The Event Log service was stopped. |
|
System |
6009 |
Error |
EventLog |
The previous system shutdown at 6:32:01 AM on 3/1/2004 was unexpected. |
|
System |
6009 |
Information |
EventLog |
Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor Free. |
|
System |
1073 |
Warning |
USER32 |
The attempt to reboot WORKSTATION73 failed. |
|
System |
29223 |
Information |
LSASRV |
This server is now a Domain Controller. |
|
System |
40960 |
Warning |
LSASRV |
SPNEGO (Negotiator) |
The Security System detected an authentication error for the server LDAP/myserver1.mydomain.com@mydomain.com. The failure code from authentication protocol Kerberos was "The attempted login is invalid. This is either due to a bad username or authentication information.". |
System |
40961 |
Warning |
LSASRV |
SPNEGO (Negotiator) |
The Security System could not establish a secured connection with the server LDAP/myserver1.mydomain.com@mydomain.com. No authentication protocol was available. |
System |
3034 |
Warning |
MRxSmb |
The redirector was unable to initialize security context or query context attributes. |
|
System |
3019 |
Warning |
MRxSmb |
The redirector failed to determine the connection type. |
System |
2511 |
Error |
Server |
The server service was unable to recreate the share myshare because the directory c:\mydata no longer exists. |
System |
2506 |
Error |
Server |
The value named IRPStackSize in the server's Registry key LanmanServer\Parameters was invalid. The value was ignored, and processing continued. |
System |
2012 |
Error |
Srv |
The server has encountered a network error. |
System |
16650 |
Error |
SAM |
The account-identifier allocator failed to initialize properly. The recod data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creating will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure. |
System |
64 |
Warning |
w32time |
Because of repeated network problems, the time service has not been able to find a domain controller to synchronize with for a long time. To reduce network traffic, the time service will wait 960 minutes before trying again. No synchronization will take place during this interval, even if network connectivity is restored. Accumulated time errors may cause certain network operations to fail. To tell the time service that network connectivity has been restored and that it should resynchronize, execute "w32tm /s" from the command line. |
System |
54 |
Warning |
w32time |
The Windows Time Service was not able to find a Domain Controller. A time and date update was not possible. |
System |
24 |
Warning |
w32time |
Time Provider NtpClient: No valid response has been received from domain controller mydc.mydomain.com after 8 attempts to contact it. This domain controller will be discarded as a time source and NtpClient will attempt to discover a new domain controller from which to synchronize. |
System |
20050 |
Error |
RemoteAccess |
The user DOMAIN\Ingmar connected to port VPN2-120 has been disconnected because no network protocols were successfully negotiatated. |
System |
20189 |
Warning |
RemoteAccess |
The user Intruder connected from 12.23.34.55 but failed an authentication attempt due to the following reason: (4112). |
System |
1001 |
Information |
Save Dump |
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x00000002 0x00000009 0x0000000 0xf1c21934). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP. |
System |
1003 |
Warning |
Dhcp |
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 00053C08910F. The following error occurred: The operation was canceled by the user.Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. |
Strings in italic may vary depending on what triggered the event
