Control your eventlogs daily - Last Collect: 2004:06:30 15:40:43
COMPUTER: EVENTLOG: TYPE: ID: SOURCE: TIME: DESCRIPTION:
SERVER1 Application INFORMATION 84 SpntLog 01/07/2004 14:00:03 Latest scan engine is in use.
SERVER1 Application INFORMATION 83 SpntLog 01/07/2004 14:00:03 Latest virus pattern is in use.
SERVER1 Application INFORMATION 302 SpntLog 01/07/2004 14:00:03 Task "DEPLOY" stop.
SERVER1 Application INFORMATION 301 SpntLog 01/07/2004 14:00:03 Task "DEPLOY" start.
SERVER1 Application INFORMATION 315 SpntLog 01/07/2004 08:00:03 Task "STATISTIC" run statistics success.
SERVER1 Application INFORMATION 1704 SceCli 01/07/2004 06:19:36 Security policy in the Group policy objects are applied successfully.
SERVER1 Application INFORMATION 85 SpntLog 01/07/2004 01:14:12 Program update is not needed.
SERVER1 Directory Service WARNING 1083 NTDS Replication 01/07/2004 00:31:28 Replication warning: The directory is busy. It couldn't update object CN=JMalmgren,CN=Users,DC=tryware,DC=dk with changes made by directory 1234567-abcde-1234567-abcde-1234567-abcde._msdcs.tryware.dk. Will try again later.
SERVER1 Application INFORMATION 17177 MSSQL$BKUPEXEC 01/07/2004 00:00:50 This instance of SQL Server has been using a process id of 1004 since 21-06-2004 10:53:41 (local) 21-06-2004 08:53:41 (UTC).
SERVER1 Application INFORMATION 2 SpntLog 30/06/2004 21:18:35 Pattern Update Success. The latest pattern number is 1.923.00.
SERVER2 Application ERROR 104 SJServiceCOMOCRSJP 01/07/2004 14:07:23 The SJServiceCOMOCRSJP agent aborted the mission.
SERVER2 Application INFORMATION 84 SpntLog 01/07/2004 14:00:15 Latest scan engine is in use.
SERVER2 Application INFORMATION 83 SpntLog 01/07/2004 14:00:15 Latest virus pattern is in use.
SERVER2 Application INFORMATION 302 SpntLog 01/07/2004 14:00:14 Task "DEPLOY" stop.
SERVER2 Application INFORMATION 301 SpntLog 01/07/2004 14:00:14 Task "DEPLOY" start.
SERVER2 Application INFORMATION 315 SpntLog 01/07/2004 08:00:14 Task "STATISTIC" run statistics success.
SERVER2 Application INFORMATION 1704 SceCli 01/07/2004 02:43:30 Security policy in the Group policy objects has been applied successfully.
SERVER2 Application INFORMATION 8197 ASMBENotify 01/07/2004 02:00:11 2004-07-01 02:00:10 +0200 [IOM0005] No spares available to test
SERVER2 Application INFORMATION 8224 ASMBENotify 01/07/2004 02:00:10 2004-07-01 02:00:10 +0200 [IOM0032] Test all spares started
SERVER2 Application INFORMATION 85 SpntLog 01/07/2004 01:14:11 Program update is not needed.
SERVER2 Application INFORMATION 2 SpntLog 30/06/2004 21:18:36 Pattern Update Success. The latest pattern number is 1.923.00.
SERVER2 System INFORMATION 6013 EventLog 01/07/2004 12:00:00 The system uptime is 849289 seconds.
SERVER3 Application INFORMATION 85 SpntLog 01/07/2004 13:30:43 Program update is not needed.
SERVER3 Application INFORMATION 84 SpntLog 01/07/2004 13:30:43 Latest scan engine is in use.
SERVER3 Application INFORMATION 83 SpntLog 01/07/2004 13:30:43 Latest virus pattern is in use.
SERVER3 Application INFORMATION 302 SpntLog 01/07/2004 13:30:42 Task "DEPLOY" stop.
SERVER3 Application INFORMATION 301 SpntLog 01/07/2004 13:30:41 Task "DEPLOY" start.
SERVER3 Application INFORMATION 9096 MSExchangeSA 01/07/2004 13:15:57 The MAD Monitoring thread is initialized. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 9095 MSExchangeSA 01/07/2004 13:15:57 The MAD Monitoring thread is initializing. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application WARNING 9551 MSExchangeIS Mailbox Store 01/07/2004 13:12:10 An error occurred while upgrading the ACL on folder [MBX:Jorgen Malmgren]/Opgaver located on database "First Storage Group\Mailbox Store (SERVER3)". The Information Store was unable to convert the security for /O=TRYWARE/OU=DEPARTMENT/CN=RECIPIENTS/CN=ADMINISTRATOR into a Windows 2000 Security Identifier. It is possible that this is caused by latency in the Active Directory Service, if so, wait until the user record is replicated to the Active Directory and attempt to access the folder (it will be upgraded in place). If the specified object does NOT get replicated to the Active Directory, use the Microsoft Exchange System Manager or the Exchange Client to update the ACL on the folder manually. The access rights in the ACE for this DN were 0x47b. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 111 DWMRCS 01/07/2004 11:30:15 Connect: The following user has connected via remote control. Date: 07/01/04 11:30:15 Computer Name: COMPUTER1 User ID: Administrator Logon As ID: Domain: Desktop ID: Administrator OS Product ID: 12345-OEM-1234567-1234r OS Registered Owner: TryWareDk OS Registered Organization: Host Name from Peer: Administrator IP Addresse(s) from Peer: 192.168.01.001 Host: IP Address: 192.168.01.001 Protocol Version - DWRCC.EXE: 3.730000-0.000000 Protocol Version - DWRCS.EXE: 3.730000-0.000000 Product Version - DWRCS.EXE: 4.0.0.1 Product Version - DWRCC.EXE: 4.0.0.1 Authentication Type: NT Challenge/Response Last Error Code: 0 Last Error Code (WSA): 0 Absolute timeout setting: 0 minutes Connect/Logon timeout setting: 90000 milliseconds Access Check: Administrators Registered: Yes
SERVER3 Application INFORMATION 112 DWMRCS 01/07/2004 11:28:26 Disconnect: The following user has disconnected or has been disconnected from remote control. Date: 07/01/04 11:28:26 Computer Name: COMPUTER1 User ID: Administrator Logon As ID: Domain: Desktop ID: Administrator OS Product ID: 12345-OEM-1234567-1234r OS Registered Owner: TryWareDk OS Registered Organization: Host Name from Peer: Administrator IP Addresse(s) from Peer: 192.168.01.001 Host: IP Address: 192.168.01.001 Protocol Version - DWRCC.EXE: 3.730000-0.000000 Protocol Version - DWRCS.EXE: 3.730000-0.000000 Product Version - DWRCS.EXE: 4.0.0.1 Product Version - DWRCC.EXE: 4.0.0.1 Authentication Type: NT Challenge/Response Last Error Code: 0 Last Error Code (WSA): 0 Absolute timeout setting: 0 minutes Connect/Logon timeout setting: 90000 milliseconds Access Check: Administrators Registered: Yes
SERVER3 Application INFORMATION 1704 SceCli 01/07/2004 08:54:12 Security policy in the Group policy objects are applied successfully.
SERVER3 Application INFORMATION 315 SpntLog 01/07/2004 08:00:41 Task "STATISTIC" run statistics success.
SERVER3 Application INFORMATION 1221 MSExchangeIS Mailbox Store 01/07/2004 07:00:00 The database "First Storage Group\Mailbox Store (SERVER3)" has 30 megabytes of free space after online defragmentation has terminated. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 704 ESE 01/07/2004 07:00:00 Information Store (3472) Online defragmentation of database 'E:\Program Files\Exchsrvr\mdbdata\priv1.edb' was interrupted and terminated. The next time online defragmentation is started on this database, it will resume from the point of interruption. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 1221 MSExchangeIS Public Store 01/07/2004 05:17:14 The database "First Storage Group\Public Folder Store (SERVER3)" has 28 megabytes of free space after online defragmentation has terminated. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 701 ESE 01/07/2004 05:17:14 Information Store (3472) Online defragmentation has completed a full pass on database 'e:\Program Files\Exchsrvr\mdbdata\pub1.edb'. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 700 ESE 01/07/2004 05:15:00 Information Store (3472) Online defragmentation is beginning a full pass on database 'e:\Program Files\Exchsrvr\mdbdata\pub1.edb'. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application WARNING 9548 MSExchangeIS 01/07/2004 04:05:38 Disabled user /O=TRYWARE/OU=DEPARTMENT/CN=RECIPIENTS/CN=Support does not have a master account SID. Please use Active Directory MMC to set an active account as this user's master account. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 702 ESE 01/07/2004 02:16:13 Information Store (3472) Online defragmentation is resuming its pass on database 'E:\Program Files\Exchsrvr\mdbdata\priv1.edb'. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 9535 MSExchangeIS Mailbox Store 01/07/2004 02:16:13 Cleanup of deleted mailboxes that are past the retention date is finished on database "First Storage Group\Mailbox Store (SERVER3)". 0 deleted mailboxes (0 KB) have been removed. 10 deleted mailboxes (404862 KB) have been retained. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 9533 MSExchangeIS Mailbox Store 01/07/2004 02:16:13 The user account for 'TestUser' does not exist in the directory or is not enabled for Exchange mail. This mailbox will be removed from mailbox store 'First Storage Group/Mailbox Store (SERVER3)' in 0 days For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 9531 MSExchangeIS Mailbox Store 01/07/2004 02:16:12 Starting cleanup of deleted mailboxes that are past the retention date on database "First Storage Group\Mailbox Store (SERVER3)". For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 1207 MSExchangeIS Mailbox Store 01/07/2004 02:16:12 Cleanup of items past retention date for Item Recovery is complete for database "First Storage Group\Mailbox Store (SERVER3)". Start: 13252 items; 712687 Kbytes End: 13195 items; 712537 Kbytes For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 1206 MSExchangeIS Mailbox Store 01/07/2004 02:16:04 Starting cleanup of items past retention date for Item Recovery on database "First Storage Group\Mailbox Store (SERVER3)". For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 1207 MSExchangeIS Public Store 01/07/2004 02:15:01 Cleanup of items past retention date for Item Recovery is complete for database "First Storage Group\Public Folder Store (SERVER3)". Start: 0 items; 0 Kbytes End: 0 items; 0 Kbytes For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 1206 MSExchangeIS Public Store 01/07/2004 02:15:01 Starting cleanup of items past retention date for Item Recovery on database "First Storage Group\Public Folder Store (SERVER3)". For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 305 SpntLog 01/07/2004 02:04:56 Task "VIRUSSCANNING" scan now success.
SERVER3 Application INFORMATION 18 SpntLog 01/07/2004 02:04:56 Task "VIRUSSCANNING" scan stop: 17309 files scanned successfully, 35 files unable to scanned, 0 infected files.
SERVER3 Application WARNING 220 SpntLog 01/07/2004 02:03:03 The compressed file "C:\WINNT\ServicePackFiles\i386\classes.zip" contains files number that is larger than 500. The file was skipped by manual (task) scan.
SERVER3 Application INFORMATION 16 SpntLog 01/07/2004 02:00:42 Task "VIRUSSCANNING" scan start success.
SERVER3 Application INFORMATION 8274 MSExchangeFBPublish 01/07/2004 02:00:17 Deletion of duplicate free/busy messages for virtual machine SERVER3 has finished successfully. Number of messages scanned=712, number of duplicates=0, number deleted=0, number of messages whose urls were fixed=0. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 8273 MSExchangeFBPublish 01/07/2004 02:00:17 Deletion of duplicate free/busy messages for virtual machine SERVER3 is starting. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 213 ESE 30/06/2004 23:05:52 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: The backup procedure has been successfully completed. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 224 ESE 30/06/2004 23:05:52 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Deleting log files L:\Program Files\Exchsrvr\mdbdata\E0008966.log to L:\Program Files\Exchsrvr\mdbdata\E00089A0.log. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 223 ESE 30/06/2004 23:05:49 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Starting the backup of log files (range L:\Program Files\Exchsrvr\mdbdata\E00089A0.log - L:\Program Files\Exchsrvr\mdbdata\E00089A2.log). For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 221 ESE 30/06/2004 23:05:49 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Ending the backup of the file e:\Program Files\Exchsrvr\mdbdata\pub1.stm. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 220 ESE 30/06/2004 23:05:45 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: Begining the backup of the file e:\Program Files\Exchsrvr\mdbdata\pub1.stm (size 28 Mb). For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 210 ESE 30/06/2004 21:31:41 Information Store (3472) abcd1234-a123-4657-abcd-abcd1234ef56: A full backup is starting. For more information, click http://www.microsoft.com/contentredirect.asp.
SERVER3 Application INFORMATION 2 SpntLog 30/06/2004 21:18:33 Pattern Update Success. The latest pattern number is 1.923.00.
SERVER3 System INFORMATION 420 NNTPSVC 01/07/2004 13:59:02 Pickup Directory Status Report. In the last 60 minutes, the pickup directory for virtual server 1 has successfully received 0 articles.
SERVER3 System INFORMATION 421 NNTPSVC 01/07/2004 13:59:02 Post Status Report. In the last 60 minutes, the virtual server 1 has successfully received 0 posts.
SERVER3 System INFORMATION 0 w32time 01/07/2004 10:59:03 Time set (offset < .5 second)
SERVER3 System INFORMATION 61 w32time 01/07/2004 10:59:03 The Time service synced time from time source \\SERVER1.tryware.dk (192.168.01.01) .
SERVER3 System INFORMATION 55 w32time 01/07/2004 10:59:03 New DomainController time source is \\SERVER1.tryware.dk (192.168.01.01) located in tryware.dk
SERVER3 System WARNING 8021 BROWSER 01/07/2004 10:53:18 The browser was unable to retrieve a list of servers from the browser master \\COMPUTER2 on the network \Device\NetBT_Tcpip_{abcd1234-a123-4657-abcd-abcd1234ef56}. The data is the error code.
SERVER4 Application INFORMATION 85 SpntLog 01/07/2004 13:30:12 Program update is not needed.
SERVER4 Application INFORMATION 84 SpntLog 01/07/2004 13:30:12 Latest scan engine is in use.
SERVER4 Application INFORMATION 83 SpntLog 01/07/2004 13:30:12 Latest virus pattern is in use.
SERVER4 Application INFORMATION 302 SpntLog 01/07/2004 13:30:12 Task "DEPLOY" stop.
SERVER4 Application INFORMATION 301 SpntLog 01/07/2004 13:30:10 Task "DEPLOY" start.
SERVER4 Application INFORMATION 1704 SceCli 01/07/2004 11:36:53 Security policy in the Group policy objects are applied successfully.
SERVER4 Application INFORMATION 315 SpntLog 01/07/2004 08:00:10 Task "STATISTIC" run statistics success.
SERVER4 Application INFORMATION 305 SpntLog 01/07/2004 02:09:38 Task "VIRUSSCANNING" scan now success.
SERVER4 Application INFORMATION 18 SpntLog 01/07/2004 02:09:38 Task "VIRUSSCANNING" scan stop: 19482 files scanned successfully, 36 files unable to scanned, 0 infected files.
SERVER4 Application WARNING 220 SpntLog 01/07/2004 02:06:38 The compressed file "C:\WINNT\ServicePackFiles\i386\classes.zip" contains files number that is larger than 500. The file was skipped by manual (task) scan.
SERVER4 Application INFORMATION 16 SpntLog 01/07/2004 02:00:11 Task "VIRUSSCANNING" scan start success.
SERVER4 Application ERROR 57745 Backup Exec 01/07/2004 00:05:54 Job "DC Srv + div Srv" ended in an error state. Examine recent event log entries and the job log for details.
SERVER4 Application ERROR 57480 Backup Exec 30/06/2004 23:10:30 An attempt to establish a network connection to \\SERVER4\E$ failed. Error: 53
SERVER4 Application INFORMATION 2 SpntLog 30/06/2004 21:18:32 Pattern Update Success. The latest pattern number is 1.923.00.
SERVER4 System ERROR 2012 Srv 01/07/2004 13:57:29 The server has encountered a network error.
SERVER4 System ERROR 8003 MRxSmb 01/07/2004 13:50:50 The master browser has received a server announcement from the computer COMPUTER1 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{123456789abcd-12345-abcd. The master browser is stopping or an election is being forced.
SERVER4 System INFORMATION 420 NNTPSVC 01/07/2004 13:25:44 Pickup Directory Status Report. In the last 60 minutes, the pickup directory for virtual server 1 has successfully received 0 articles.
SERVER4 System INFORMATION 421 NNTPSVC 01/07/2004 13:25:44 Post Status Report. In the last 60 minutes, the virtual server 1 has successfully received 0 posts.
SERVER4 System INFORMATION 47 Print 01/07/2004 13:20:52 The Printer represented by PrintQueue LDAP://CN=JMALMGREN-hp officejet 6100 series,CN=JMALMGREN,CN=Computers,DC=tryware,DC=dk cannot be found: 709.
SERVER4 System ERROR 5719 NETLOGON 01/07/2004 13:10:23 No Windows NT or Windows 2000 Domain Controller is available for domain TRYWARE. The following error occurred: There are currently no logon servers available to service the logon request.
SERVER4 System INFORMATION 0 w32time 01/07/2004 09:09:05 Time set (offset < .5 second)
SERVER4 System INFORMATION 61 w32time 01/07/2004 09:09:05 The Time service synced time from time source (192.168.1.1) .
SERVER4 System INFORMATION 50 Print 01/07/2004 05:20:29 PrintQueue LDAP://CN=ADMIN-Deskjet,CN=ADMIN,CN=Computers,DC=tryware,DC=dk was deleted.
SERVER4 System INFORMATION 1039 DhcpServer 01/07/2004 00:01:25 The DHCP service has cleaned up the database for multicast IP addresses -- 0 leases have expired (been marked for deletion) and 0 records have been removed from the database.
SERVER4 System INFORMATION 1038 DhcpServer 01/07/2004 00:01:25 The DHCP service has cleaned up the database for unicast IP addresses -- 2 leases have been recovered and 1 records have been removed from the database.
SERVER4 System INFORMATION 1037 DhcpServer 01/07/2004 00:01:25 The DHCP service has started to clean up the database.
SERVER4 System ERROR 10006 DCOM 30/06/2004 23:34:09 DCOM got error "%2147746132" from the computer SERVER3 when attempting to activate the server: {123456789abcd-12345-abcd}
SERVER4 System ERROR 36870 Schannel 30/06/2004 15:44:26 A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0xffffffff.


Errors while creating this report:
Error 1261: Unable to access (network) - SERVER5 not responding The error happened when: Making \\SERVER5\c$\Programmer




Top 5 of duplicates (in eventlogs found):
COMPUTER: EVENTLOG: NUMBER OF DUPLICATES: ID: SOURCE:
SERVER1 System 186 10010 DCOM
SERVER2 Application 35 83 SpntLog
SERVER1 System 13 2504 Server
SERVER3 Application 3 111 DWMRCS
SERVER1 System 1 4 b47w2k



Settings used to create this report (C:\TryWareDk\W2kEventLogReport\Setup.ini):
Application=Enable
Security=Disable
DirectoryService=Enable
DnsServer=Enable
FileReplService=Enable
System=Enable

Error=Enable
Warning=Enable
Information=Enable


Time to create this report:
Start: 2004:07:01:14:08:17
End:   2004:07:01:14:24:29
Collected events: 431
Searched events: 11839

___________________________________
Copyright 2000 - 2004: www.TryWare.dk
W2kEventlogReport version 1.1.0