Microsoft-Windows-NetworkProvider

14 events across 2 channels

Event ID 1000 — Ignoring UNC Hardening Configuration Entry: Unsupported registry value type.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Entry: Unsupported registry value type.

Registry Value Path: %2@%4

Registry Value Type: %5

Guidance:
UNC Hardening configuration only supports registry values of types REG_SZ and REG_MULTI_SZ.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
Registry_Value_Path
Registry_Value_Type
RegistryKeyLength
RegistryKey
RegistryValueNameLength
RegistryValueName
RegistryValueType

Event ID 1001 — Ignoring UNC Hardening Configuration Entry: Unable to parse UNC Path.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Entry: Unable to parse UNC Path.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
The registry value name is not a valid UNC path.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration

Event ID 1002 — Ignoring UNC Hardening Configuration Entry: Unsupported UNC Path.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Entry: Unsupported UNC Path.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
UNC Hardening is only supported at server or share granularity. If only a fraction of the resources available on a share require additional security, consider relocating contents that require additional security to a different share.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration

Event ID 1003 — Ignoring UNC Hardening Configuration Property: Unsupported property name.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Property: Unsupported property name.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: %7

Guidance:
The specified property name does not match a UNC Hardening property supported on the current version of Windows and will be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Property_Name
Property_ValueUNC Hardening Configuration.
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
PropertyNameLength
PropertyName
PropertyValue

Event ID 1004 — Ignoring UNC Hardening Configuration Property: Unsupported property name.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Property: Unsupported property name.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: '%8'

Guidance:
The specified property name does not match a UNC Hardening property supported on the current version of Windows and will be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Property_Name
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
PropertyNameLength
PropertyName
PropertyValueLength
PropertyValue

Event ID 1005 — Ignoring UNC Hardening Configuration Property: Unsupported property value.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Ignoring UNC Hardening Configuration Property: Unsupported property value.

UNC Path: %2

UNC Hardening Configuration: %4

Property Name: %6

Property Value: '%8'

Guidance:
The specified property name expects a boolean value should be assigned a value of 0 (disabled) or 1 (enabled).

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Property_Name
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
PropertyNameLength
PropertyName
PropertyValueLength
PropertyValue

Event ID 1006 — Unable to parse UNC Hardening Configuration Entry: Unknown Error.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Unable to parse UNC Hardening Configuration Entry: Unknown Error.

UNC Path: %2

UNC Hardening Configuration: %4

Guidance:
The UNC Hardening configuration for the path contains invalid syntax and may be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration

Event ID 1007 — Unable to parse UNC Hardening Configuration Entry: Unexpected token.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Unable to parse UNC Hardening Configuration Entry: Unexpected token.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Expected_Token
Found_TokenUNC Hardening Configuration.
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
ExpectedToken
FoundTokenLength
FoundToken

Event ID 1008 — Unable to parse UNC Hardening Configuration Entry: Unable to parse integer.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Unable to parse UNC Hardening Configuration Entry: Unable to parse integer.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored. The value found token was parsed as an integer, but was found to contain illegal digits.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Expected_Token
Found_TokenUNC Hardening Configuration.
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
ExpectedToken
FoundTokenLength
FoundToken

Event ID 1009 — Unable to parse UNC Hardening Configuration Entry: Unable to parse string.

Provider
Microsoft-Windows-NetworkProvider
Channel
Operational

Message

Unable to parse UNC Hardening Configuration Entry: Unable to parse string.

UNC Path: %2

UNC Hardening Configuration: %4

Expected Token: %5

Found Token: %7

Guidance: The UNC Hardening configuration for the path contains invalid syntax and may be ignored. The value found token was parsed as an string, but was not terminated or exceeded the maximum allowable string length.

For details on configuring Windows computers to require additional security when accessing specific UNC paths, visit http://support.microsoft.com/kb/3000483.

Fields

NameDescription
UNC_Path
UNC_Hardening_Configuration
Expected_Token
Found_TokenUNC Hardening Configuration.
UncPathLength
UncPath
UncHardeningConfigurationLength
UncHardeningConfiguration
ExpectedToken
FoundTokenLength
FoundToken

Event ID 1101 — An administrator has enabled remote mailslots, which are off by default.

Provider
Microsoft-Windows-NetworkProvider
Channel
System

Message

An administrator has enabled remote mailslots, which are off by default. Microsoft does not recommend enabling remote mailslots. To disable remote mailslots, please run the command: Set-SmbClientConfiguration -EnableMailslots $FALSE

Event ID 1102 — An administrator has disabled remote mailslots.

Provider
Microsoft-Windows-NetworkProvider
Channel
System

Message

An administrator has disabled remote mailslots.

Event ID 1103 — An administrator has enabled remote mailslots by policy.

Provider
Microsoft-Windows-NetworkProvider
Channel
System

Message

An administrator has enabled remote mailslots by policy. Microsoft does not recommend enabling remote mailslots.

Event ID 1104 — An administrator has disabled remote mailslots by policy.

Provider
Microsoft-Windows-NetworkProvider
Channel
System

Message

An administrator has disabled remote mailslots by policy.