| COMPUTER: |
EVENTLOG: |
TYPE: |
ID: |
SOURCE: |
TIME: |
DESCRIPTION: |
| SERVER1 |
Application |
INFORMATION |
84 |
SpntLog |
01/07/2004 14:00:03 |
Latest scan engine is in use. |
| SERVER1 |
Application |
INFORMATION |
83 |
SpntLog |
01/07/2004 14:00:03 |
Latest virus pattern is in use. |
| SERVER1 |
Application |
INFORMATION |
302 |
SpntLog |
01/07/2004 14:00:03 |
Task "DEPLOY" stop. |
| SERVER1 |
Application |
INFORMATION |
301 |
SpntLog |
01/07/2004 14:00:03 |
Task "DEPLOY" start. |
| SERVER1 |
Application |
INFORMATION |
315 |
SpntLog |
01/07/2004 08:00:03 |
Task "STATISTIC" run statistics success. |
| SERVER1 |
Application |
INFORMATION |
1704 |
SceCli |
01/07/2004 06:19:36 |
Security policy in the Group policy objects are applied successfully. |
| SERVER1 |
Application |
INFORMATION |
85 |
SpntLog |
01/07/2004 01:14:12 |
Program update is not needed. |
| SERVER1 |
Directory Service |
WARNING |
1083 |
NTDS Replication |
01/07/2004 00:31:28 |
Replication warning: The directory is busy. It couldn't update object CN=JMalmgren,CN=Users,DC=tryware,DC=dk with changes made by directory 1234567-abcde-1234567-abcde-1234567-abcde._msdcs.tryware.dk. Will try again later. |
| SERVER1 |
Application |
INFORMATION |
17177 |
MSSQL$BKUPEXEC |
01/07/2004 00:00:50 |
This instance of SQL Server has been using a process id of 1004 since 21-06-2004 10:53:41 (local) 21-06-2004 08:53:41 (UTC). |
| SERVER1 |
Application |
INFORMATION |
2 |
SpntLog |
30/06/2004 21:18:35 |
Pattern Update Success.
The latest pattern number is 1.923.00. |
| SERVER2 |
Application |
ERROR |
104 |
SJServiceCOMOCRSJP |
01/07/2004 14:07:23 |
The SJServiceCOMOCRSJP agent aborted the mission. |
| SERVER2 |
Application |
INFORMATION |
84 |
SpntLog |
01/07/2004 14:00:15 |
Latest scan engine is in use. |
| SERVER2 |
Application |
INFORMATION |
83 |
SpntLog |
01/07/2004 14:00:15 |
Latest virus pattern is in use. |
| SERVER2 |
Application |
INFORMATION |
302 |
SpntLog |
01/07/2004 14:00:14 |
Task "DEPLOY" stop. |
| SERVER2 |
Application |
INFORMATION |
301 |
SpntLog |
01/07/2004 14:00:14 |
Task "DEPLOY" start. |
| SERVER2 |
Application |
INFORMATION |
315 |
SpntLog |
01/07/2004 08:00:14 |
Task "STATISTIC" run statistics success. |
| SERVER2 |
Application |
INFORMATION |
1704 |
SceCli |
01/07/2004 02:43:30 |
Security policy in the Group policy objects has been applied successfully. |
| SERVER2 |
Application |
INFORMATION |
8197 |
ASMBENotify |
01/07/2004 02:00:11 |
2004-07-01 02:00:10 +0200 [IOM0005] No spares available to test |
| SERVER2 |
Application |
INFORMATION |
8224 |
ASMBENotify |
01/07/2004 02:00:10 |
2004-07-01 02:00:10 +0200 [IOM0032] Test all spares started |
| SERVER2 |
Application |
INFORMATION |
85 |
SpntLog |
01/07/2004 01:14:11 |
Program update is not needed. |
| SERVER2 |
Application |
INFORMATION |
2 |
SpntLog |
30/06/2004 21:18:36 |
Pattern Update Success.
The latest pattern number is 1.923.00. |
| SERVER2 |
System |
INFORMATION |
6013 |
EventLog |
01/07/2004 12:00:00 |
The system uptime is 849289 seconds. |
| SERVER3 |
Application |
INFORMATION |
85 |
SpntLog |
01/07/2004 13:30:43 |
Program update is not needed. |
| SERVER3 |
Application |
INFORMATION |
84 |
SpntLog |
01/07/2004 13:30:43 |
Latest scan engine is in use. |
| SERVER3 |
Application |
INFORMATION |
83 |
SpntLog |
01/07/2004 13:30:43 |
Latest virus pattern is in use. |
| SERVER3 |
Application |
INFORMATION |
302 |
SpntLog |
01/07/2004 13:30:42 |
Task "DEPLOY" stop. |
| SERVER3 |
Application |
INFORMATION |
301 |
SpntLog |
01/07/2004 13:30:41 |
Task "DEPLOY" start. |
| SERVER3 |
Application |
INFORMATION |
9096 |
MSExchangeSA |
01/07/2004 13:15:57 |
The MAD Monitoring thread is initialized.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
9095 |
MSExchangeSA |
01/07/2004 13:15:57 |
The MAD Monitoring thread is initializing.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
WARNING |
9551 |
MSExchangeIS Mailbox Store |
01/07/2004 13:12:10 |
An error occurred while upgrading the ACL on folder [MBX:Jorgen Malmgren]/Opgaver located on database "First Storage Group\Mailbox Store (SERVER3)".
The Information Store was unable to convert the security for /O=TRYWARE/OU=DEPARTMENT/CN=RECIPIENTS/CN=ADMINISTRATOR into a Windows 2000 Security Identifier.
It is possible that this is caused by latency in the Active Directory Service, if so, wait until the user
record is replicated to the Active Directory and attempt to access the folder (it will be upgraded in place).
If the specified object does NOT get replicated to the Active Directory, use the Microsoft Exchange System Manager
or the Exchange Client to update the ACL on the folder manually.
The access rights in the ACE for this DN were 0x47b.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
111 |
DWMRCS |
01/07/2004 11:30:15 |
Connect: The following user has connected via remote control.
Date: 07/01/04 11:30:15
Computer Name: COMPUTER1
User ID: Administrator
Logon As ID:
Domain:
Desktop ID: Administrator
OS Product ID: 12345-OEM-1234567-1234r
OS Registered Owner: TryWareDk
OS Registered Organization:
Host Name from Peer: Administrator
IP Addresse(s) from Peer: 192.168.01.001
Host:
IP Address: 192.168.01.001
Protocol Version - DWRCC.EXE: 3.730000-0.000000
Protocol Version - DWRCS.EXE: 3.730000-0.000000
Product Version - DWRCS.EXE: 4.0.0.1
Product Version - DWRCC.EXE: 4.0.0.1
Authentication Type: NT Challenge/Response
Last Error Code: 0
Last Error Code (WSA): 0
Absolute timeout setting: 0 minutes
Connect/Logon timeout setting: 90000 milliseconds
Access Check: Administrators
Registered: Yes
|
|
| SERVER3 |
Application |
INFORMATION |
112 |
DWMRCS |
01/07/2004 11:28:26 |
Disconnect: The following user has disconnected or has been disconnected from remote control.
Date: 07/01/04 11:28:26
Computer Name: COMPUTER1
User ID: Administrator
Logon As ID:
Domain:
Desktop ID: Administrator
OS Product ID: 12345-OEM-1234567-1234r
OS Registered Owner: TryWareDk
OS Registered Organization:
Host Name from Peer: Administrator
IP Addresse(s) from Peer: 192.168.01.001
Host:
IP Address: 192.168.01.001
Protocol Version - DWRCC.EXE: 3.730000-0.000000
Protocol Version - DWRCS.EXE: 3.730000-0.000000
Product Version - DWRCS.EXE: 4.0.0.1
Product Version - DWRCC.EXE: 4.0.0.1
Authentication Type: NT Challenge/Response
Last Error Code: 0
Last Error Code (WSA): 0
Absolute timeout setting: 0 minutes
Connect/Logon timeout setting: 90000 milliseconds
Access Check: Administrators
Registered: Yes |
| SERVER3 |
Application |
INFORMATION |
1704 |
SceCli |
01/07/2004 08:54:12 |
Security policy in the Group policy objects are applied successfully. |
| SERVER3 |
Application |
INFORMATION |
315 |
SpntLog |
01/07/2004 08:00:41 |
Task "STATISTIC" run statistics success. |
| SERVER3 |
Application |
INFORMATION |
1221 |
MSExchangeIS Mailbox Store |
01/07/2004 07:00:00 |
The database "First Storage Group\Mailbox Store (SERVER3)" has 30 megabytes of free space after online defragmentation has terminated.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
704 |
ESE |
01/07/2004 07:00:00 |
Information Store (3472) Online defragmentation of database 'E:\Program Files\Exchsrvr\mdbdata\priv1.edb' was interrupted and terminated. The next time online defragmentation is started on this database, it will resume from the point of interruption.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
1221 |
MSExchangeIS Public Store |
01/07/2004 05:17:14 |
The database "First Storage Group\Public Folder Store (SERVER3)" has 28 megabytes of free space after online defragmentation has terminated.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
701 |
ESE |
01/07/2004 05:17:14 |
Information Store (3472) Online defragmentation has completed a full pass on database 'e:\Program Files\Exchsrvr\mdbdata\pub1.edb'.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
700 |
ESE |
01/07/2004 05:15:00 |
Information Store (3472) Online defragmentation is beginning a full pass on database 'e:\Program Files\Exchsrvr\mdbdata\pub1.edb'.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
WARNING |
9548 |
MSExchangeIS |
01/07/2004 04:05:38 |
Disabled user /O=TRYWARE/OU=DEPARTMENT/CN=RECIPIENTS/CN=Support does not have a master account SID. Please use Active Directory MMC to set an active account as this user's master account.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
702 |
ESE |
01/07/2004 02:16:13 |
Information Store (3472) Online defragmentation is resuming its pass on database 'E:\Program Files\Exchsrvr\mdbdata\priv1.edb'.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
9535 |
MSExchangeIS Mailbox Store |
01/07/2004 02:16:13 |
Cleanup of deleted mailboxes that are past the retention date is finished on database "First Storage Group\Mailbox Store (SERVER3)".
0 deleted mailboxes (0 KB) have been removed.
10 deleted mailboxes (404862 KB) have been retained.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
9533 |
MSExchangeIS Mailbox Store |
01/07/2004 02:16:13 |
The user account for 'TestUser' does not exist in the directory or is not enabled for Exchange mail. This mailbox will be removed from mailbox store 'First Storage Group/Mailbox Store (SERVER3)' in 0 days
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
9531 |
MSExchangeIS Mailbox Store |
01/07/2004 02:16:12 |
Starting cleanup of deleted mailboxes that are past the retention date on database "First Storage Group\Mailbox Store (SERVER3)".
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
1207 |
MSExchangeIS Mailbox Store |
01/07/2004 02:16:12 |
Cleanup of items past retention date for Item Recovery is complete for database "First Storage Group\Mailbox Store (SERVER3)".
Start: 13252 items; 712687 Kbytes
End: 13195 items; 712537 Kbytes
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
1206 |
MSExchangeIS Mailbox Store |
01/07/2004 02:16:04 |
Starting cleanup of items past retention date for Item Recovery on database "First Storage Group\Mailbox Store (SERVER3)".
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
1207 |
MSExchangeIS Public Store |
01/07/2004 02:15:01 |
Cleanup of items past retention date for Item Recovery is complete for database "First Storage Group\Public Folder Store (SERVER3)".
Start: 0 items; 0 Kbytes
End: 0 items; 0 Kbytes
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
1206 |
MSExchangeIS Public Store |
01/07/2004 02:15:01 |
Starting cleanup of items past retention date for Item Recovery on database "First Storage Group\Public Folder Store (SERVER3)".
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
305 |
SpntLog |
01/07/2004 02:04:56 |
Task "VIRUSSCANNING" scan now success. |
| SERVER3 |
Application |
INFORMATION |
18 |
SpntLog |
01/07/2004 02:04:56 |
Task "VIRUSSCANNING" scan stop:
17309 files scanned successfully,
35 files unable to scanned,
0 infected files. |
| SERVER3 |
Application |
WARNING |
220 |
SpntLog |
01/07/2004 02:03:03 |
The compressed file "C:\WINNT\ServicePackFiles\i386\classes.zip" contains files number that is larger than 500.
The file was skipped by manual (task) scan. |
| SERVER3 |
Application |
INFORMATION |
16 |
SpntLog |
01/07/2004 02:00:42 |
Task "VIRUSSCANNING" scan start success. |
| SERVER3 |
Application |
INFORMATION |
8274 |
MSExchangeFBPublish |
01/07/2004 02:00:17 |
Deletion of duplicate free/busy messages for virtual machine SERVER3 has finished successfully. Number of messages scanned=712, number of duplicates=0, number deleted=0, number of messages whose urls were fixed=0.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
8273 |
MSExchangeFBPublish |
01/07/2004 02:00:17 |
Deletion of duplicate free/busy messages for virtual machine SERVER3 is starting.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
213 |
ESE |
30/06/2004 23:05:52 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: The backup procedure has been successfully completed.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
224 |
ESE |
30/06/2004 23:05:52 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Deleting log files L:\Program Files\Exchsrvr\mdbdata\E0008966.log to L:\Program Files\Exchsrvr\mdbdata\E00089A0.log.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
223 |
ESE |
30/06/2004 23:05:49 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Starting the backup of log files (range L:\Program Files\Exchsrvr\mdbdata\E00089A0.log - L:\Program Files\Exchsrvr\mdbdata\E00089A2.log).
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
221 |
ESE |
30/06/2004 23:05:49 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Ending the backup of the file e:\Program Files\Exchsrvr\mdbdata\pub1.stm.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
220 |
ESE |
30/06/2004 23:05:45 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Begining the backup of the file e:\Program Files\Exchsrvr\mdbdata\pub1.stm (size 28 Mb).
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
210 |
ESE |
30/06/2004 21:31:41 |
Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: A full backup is starting.
For more information, click http://www.microsoft.com/contentredirect.asp. |
| SERVER3 |
Application |
INFORMATION |
2 |
SpntLog |
30/06/2004 21:18:33 |
Pattern Update Success.
The latest pattern number is 1.923.00. |
| SERVER3 |
System |
INFORMATION |
420 |
NNTPSVC |
01/07/2004 13:59:02 |
Pickup Directory Status Report. In the last 60 minutes, the pickup directory for
virtual server 1 has successfully received 0 articles. |
| SERVER3 |
System |
INFORMATION |
421 |
NNTPSVC |
01/07/2004 13:59:02 |
Post Status Report. In the last 60 minutes, the virtual server 1
has successfully received 0 posts. |
| SERVER3 |
System |
INFORMATION |
0 |
w32time |
01/07/2004 10:59:03 |
Time set (offset < .5 second) |
| SERVER3 |
System |
INFORMATION |
61 |
w32time |
01/07/2004 10:59:03 |
The Time service synced time from time source \\SERVER1.tryware.dk (192.168.01.01) . |
| SERVER3 |
System |
INFORMATION |
55 |
w32time |
01/07/2004 10:59:03 |
New DomainController time source is \\SERVER1.tryware.dk (192.168.01.01) located in tryware.dk |
| SERVER3 |
System |
WARNING |
8021 |
BROWSER |
01/07/2004 10:53:18 |
The browser was unable to retrieve a list of servers from the browser master \\COMPUTER2 on the network \Device\NetBT_Tcpip_{abcd1234-a123-4657-abcd-abcd1234ef56}.
The data is the error code. |
| SERVER4 |
Application |
INFORMATION |
85 |
SpntLog |
01/07/2004 13:30:12 |
Program update is not needed. |
| SERVER4 |
Application |
INFORMATION |
84 |
SpntLog |
01/07/2004 13:30:12 |
Latest scan engine is in use. |
| SERVER4 |
Application |
INFORMATION |
83 |
SpntLog |
01/07/2004 13:30:12 |
Latest virus pattern is in use. |
| SERVER4 |
Application |
INFORMATION |
302 |
SpntLog |
01/07/2004 13:30:12 |
Task "DEPLOY" stop. |
| SERVER4 |
Application |
INFORMATION |
301 |
SpntLog |
01/07/2004 13:30:10 |
Task "DEPLOY" start. |
| SERVER4 |
Application |
INFORMATION |
1704 |
SceCli |
01/07/2004 11:36:53 |
Security policy in the Group policy objects are applied successfully. |
| SERVER4 |
Application |
INFORMATION |
315 |
SpntLog |
01/07/2004 08:00:10 |
Task "STATISTIC" run statistics success. |
| SERVER4 |
Application |
INFORMATION |
305 |
SpntLog |
01/07/2004 02:09:38 |
Task "VIRUSSCANNING" scan now success. |
| SERVER4 |
Application |
INFORMATION |
18 |
SpntLog |
01/07/2004 02:09:38 |
Task "VIRUSSCANNING" scan stop:
19482 files scanned successfully,
36 files unable to scanned,
0 infected files. |
| SERVER4 |
Application |
WARNING |
220 |
SpntLog |
01/07/2004 02:06:38 |
The compressed file "C:\WINNT\ServicePackFiles\i386\classes.zip" contains files number that is larger than 500.
The file was skipped by manual (task) scan. |
| SERVER4 |
Application |
INFORMATION |
16 |
SpntLog |
01/07/2004 02:00:11 |
Task "VIRUSSCANNING" scan start success. |
| SERVER4 |
Application |
ERROR |
57745 |
Backup Exec |
01/07/2004 00:05:54 |
Job "DC Srv + div Srv" ended in an error state. Examine recent event log entries and the job log for details. |
| SERVER4 |
Application |
ERROR |
57480 |
Backup Exec |
30/06/2004 23:10:30 |
An attempt to establish a network connection to \\SERVER4\E$ failed.
Error: 53 |
| SERVER4 |
Application |
INFORMATION |
2 |
SpntLog |
30/06/2004 21:18:32 |
Pattern Update Success.
The latest pattern number is 1.923.00. |
| SERVER4 |
System |
ERROR |
2012 |
Srv |
01/07/2004 13:57:29 |
The server has encountered a network error. |
| SERVER4 |
System |
ERROR |
8003 |
MRxSmb |
01/07/2004 13:50:50 |
The master browser has received a server announcement from the computer COMPUTER1
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{123456789abcd-12345-abcd.
The master browser is stopping or an election is being forced. |
| SERVER4 |
System |
INFORMATION |
420 |
NNTPSVC |
01/07/2004 13:25:44 |
Pickup Directory Status Report. In the last 60 minutes, the pickup directory for
virtual server 1 has successfully received 0 articles. |
| SERVER4 |
System |
INFORMATION |
421 |
NNTPSVC |
01/07/2004 13:25:44 |
Post Status Report. In the last 60 minutes, the virtual server 1
has successfully received 0 posts. |
| SERVER4 |
System |
INFORMATION |
47 |
Print |
01/07/2004 13:20:52 |
The Printer represented by PrintQueue LDAP://CN=JMALMGREN-hp officejet 6100 series,CN=JMALMGREN,CN=Computers,DC=tryware,DC=dk cannot be found: 709. |
| SERVER4 |
System |
ERROR |
5719 |
NETLOGON |
01/07/2004 13:10:23 |
No Windows NT or Windows 2000 Domain Controller is available for domain TRYWARE.
The following error occurred:
There are currently no logon servers available to service the logon request. |
| SERVER4 |
System |
INFORMATION |
0 |
w32time |
01/07/2004 09:09:05 |
Time set (offset < .5 second) |
| SERVER4 |
System |
INFORMATION |
61 |
w32time |
01/07/2004 09:09:05 |
The Time service synced time from time source (192.168.1.1) . |
| SERVER4 |
System |
INFORMATION |
50 |
Print |
01/07/2004 05:20:29 |
PrintQueue LDAP://CN=ADMIN-Deskjet,CN=ADMIN,CN=Computers,DC=tryware,DC=dk was deleted. |
| SERVER4 |
System |
INFORMATION |
1039 |
DhcpServer |
01/07/2004 00:01:25 |
The DHCP service has cleaned up the database for multicast
IP addresses -- 0 leases have expired (been marked for deletion)
and 0 records have been removed from the database. |
| SERVER4 |
System |
INFORMATION |
1038 |
DhcpServer |
01/07/2004 00:01:25 |
The DHCP service has cleaned up the database for unicast
IP addresses -- 2 leases have been recovered and 1 records
have been removed from the database. |
| SERVER4 |
System |
INFORMATION |
1037 |
DhcpServer |
01/07/2004 00:01:25 |
The DHCP service has started to clean up the database. |
| SERVER4 |
System |
ERROR |
10006 |
DCOM |
30/06/2004 23:34:09 |
DCOM got error "%2147746132" from the computer SERVER3 when attempting to
activate the server:
{123456789abcd-12345-abcd} |
| SERVER4 |
System |
ERROR |
36870 |
Schannel |
30/06/2004 15:44:26 |
A fatal error occurred when attempting to access the SSL server credential private key.
The error code returned from the cryptographic module is 0xffffffff. |
