Microsoft-Windows-DirectoryServices-Deployment
6 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 100 | Operational | |
| 101 | Operational | |
| 102 | Operational | |
| 103 | Operational | |
| 104 | Operational | |
| 105 | Operational |
Event ID 100 —
#Message #
Fields #
| Name | Description |
|---|---|
Prop_UnicodeString UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectoryServices-Deployment",
"guid": "71B4B0DA-68D5-4925-9F9B-61750F989527",
"event_source_name": "",
"event_id": 100,
"version": 0,
"level": 4,
"task": 2,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2022-04-07T17:10:43.862648+00:00",
"event_record_id": 130,
"correlation": {
"ActivityID": "DD7B0B6A-4A9E-0000-77A9-7BDD9E4AD801"
},
"execution": {
"process_id": 1460,
"thread_id": 4080
},
"channel": "Microsoft-Windows-DirectoryServices-Deployment/Operational",
"computer": "WIN-FPV0DSIC9O6",
"security": {
"user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
}
},
"event_data": {
"Prop_UnicodeString": "Leaving method: PrerequisitesExecutor.RunAllTests"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 102 —
#Message #
Fields #
| Name | Description |
|---|---|
Prop_UnicodeString UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectoryServices-Deployment",
"guid": "71B4B0DA-68D5-4925-9F9B-61750F989527",
"event_source_name": "",
"event_id": 102,
"version": 0,
"level": 2,
"task": 2,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2022-04-07T17:09:55.286862+00:00",
"event_record_id": 27,
"correlation": {
"ActivityID": "DD7B0B6A-4A9E-0000-98A1-7BDD9E4AD801"
},
"execution": {
"process_id": 1460,
"thread_id": 1000
},
"channel": "Microsoft-Windows-DirectoryServices-Deployment/Operational",
"computer": "WIN-FPV0DSIC9O6",
"security": {
"user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
}
},
"event_data": {
"Prop_UnicodeString": "SelectDeploymentOperationViewModel.ValidateDomainName: Invalid Domain Name"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 103 —
#Message #
Fields #
| Name | Description |
|---|---|
Prop_UnicodeString UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectoryServices-Deployment",
"guid": "71B4B0DA-68D5-4925-9F9B-61750F989527",
"event_source_name": "",
"event_id": 103,
"version": 0,
"level": 4,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2022-04-07T17:10:43.775672+00:00",
"event_record_id": 127,
"correlation": {
"ActivityID": "DD7B0B6A-4A9E-0001-F797-7BDD9E4AD801"
},
"execution": {
"process_id": 5272,
"thread_id": 1872
},
"channel": "Microsoft-Windows-DirectoryServices-Deployment/Operational",
"computer": "WIN-FPV0DSIC9O6",
"security": {
"user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
}
},
"event_data": {
"Prop_UnicodeString": "Leaving method: Prerequisites.VerifyLegacyDcPromoCore Return value: Microsoft.DirectoryServices.Deployment.Types.Result{Context=DCPromo.General.22,Message=The TCP/IP networking protocol must be properly configured. Complete the configuration before you proceed.\r\n}"
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 104 —
#Message #
Fields #
| Name | Description |
|---|---|
Prop_UnicodeString UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectoryServices-Deployment",
"guid": "71B4B0DA-68D5-4925-9F9B-61750F989527",
"event_source_name": "",
"event_id": 104,
"version": 0,
"level": 3,
"task": 1,
"opcode": 0,
"keywords": 4611686018427387904,
"time_created": "2022-04-07T17:10:43.778531+00:00",
"event_record_id": 128,
"correlation": {
"ActivityID": "DD7B0B6A-4A9E-0001-F797-7BDD9E4AD801"
},
"execution": {
"process_id": 5272,
"thread_id": 1872
},
"channel": "Microsoft-Windows-DirectoryServices-Deployment/Operational",
"computer": "WIN-FPV0DSIC9O6",
"security": {
"user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
}
},
"event_data": {
"Prop_UnicodeString": "Windows Server 2022 domain controllers have a default for the security setting named \"Allow cryptography algorithms compatible with Windows NT 4.0\" that prevents weaker cryptography algorithms when establishing security channel sessions.\r\n\r\nFor more information about this setting, see Knowledge Base article 942564 (http://go.microsoft.com/fwlink/?LinkId=104751)."
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline