Event log messages

From: David Shorthouse (nospam_at_kungfu.globalnet.co.uk)
Date: 08/25/03

Next message: Herb Martin: "Re: TCP/IP Filtering"
Previous message: Steven Umbach: "Re: Vulnerability exposing user name for the accounts?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 25 Aug 2003 03:59:43 +0100

since the 22 of this month I have been reciveing these messages in the event
log... previous to this date all i got was about service starting & service
stopping

Now after the problem with the virus Im just enquiring to find out what
these messages are???

I couldnt find any info on the microsoft website regarding to the event &
source kept coming back with no results...???

Are these just telling me that my machine is setup this way or are they
telling me someone is reading my active directory?? I am assuming that MSADC
= Microsoft Active directory connection?

Any help or a point in the right Direction would be great

See below for Logs

Dave Shorthouse

Event Type: Warning
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8033
Date: 20/08/2003
Time: 2:13:51 AM
User: N/A
Computer: SERVER
Description:
LDAP search result on directory server.HOME.SERVER for entry '' was
unsuccessful with error:[0x52] Local Error.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8012
Date: 20/08/2003
Time: 2:13:51 AM
User: N/A
Computer: SERVER
Description:
Search of directory server.HOME.SERVER at base '' returned 0 objects.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8018
Date: 20/08/2003
Time: 2:13:51 AM
User: N/A
Computer: SERVER
Description:
Abandoning request '10' on directory server.HOME.SERVER.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8247
Date: 20/08/2003
Time: 2:13:51 AM
User: N/A
Computer: SERVER
Description:
LDAP notification search returned no results. Return code [0x52] Local
Error.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8007
Date: 20/08/2003
Time: 2:13:51 AM
User: N/A
Computer: SERVER
Description:
Closing LDAP session to directory server.HOME.SERVER.

Event Type: Information
Event Source: MSADC
Event Category: Service Controller
Event ID: 8004
Date: 20/08/2003
Time: 2:14:11 AM
User: N/A
Computer: SERVER
Description:
The service is stopping.

Event Type: Information
Event Source: MSDTC
Event Category: SVC
Event ID: 4097
Date: 20/08/2003
Time: 2:18:45 AM
User: N/A
Computer: SERVER
Description:
MS DTC has started.

Event Type: Information
Event Source: MSADC
Event Category: Service Controller
Event ID: 8190
Date: 20/08/2003
Time: 2:19:14 AM
User: N/A
Computer: SERVER
Description:
Active Directory Connector RPC Interface is available on the following RPC
endpoints: [ncacn_np:\\SERVER(\pipe\00000668.000)]
[ncalrpc:SERVER(LRPC00000668.00000001)]
[ncacn_ip_tcp:server.HOME.SERVER(3038)]
[ncadg_ip_udp:server.HOME.SERVER(3039)] [ncacn_nb_tcp:SERVER(106)]
[ncacn_http:server.HOME.SERVER(3045)]

Event Type: Information
Event Source: MSADC
Event Category: Service Controller
Event ID: 8188
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Active Directory Connector RPC Interface started successfully.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8006
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Opening LDAP session to directory server.HOME.SERVER on port 389.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8009
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Binding to directory server.HOME.SERVER as service account.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8011
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Searching directory server.HOME.SERVER at base '' using filter
'(&(objectclass=*)(!(IsDeleted=TRUE)))' and requesting attributes
configurationNamingContext; ReplPropertyMetaData.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8012
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Search of directory server.HOME.SERVER at base 'CN=Exchange
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu
ration,DC=HOME,DC=SERVER' returned 1 objects.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8011
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Searching directory server.HOME.SERVER at base 'CN=Active Directory
Connections,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=HOME,DC=SERVER' using filter
'(objectclass=msExchConnectionAgreement)' and requesting attributes
objectGUID; distinguishedName; msExchHomeSyncService; activationSchedule;
activationStyle; Activation-Schedule; Activation-Style;
msExchSynchronizationDirection; msExchDereferenceAliases;
msExchDoFullReplication; msExchReplicateNow; msExchCASchemaPolicy;
msExchAccessControlMap; msExchAdcOptions; msExchAdditionalDNMap;
msExchCorrelationAttribute; msExchNTAccountOptions; msExchRemoteServerList;
msExchRemotePrivateISList; versionNumber; msExchADCObjectType;
msExchIsConfigCA; msExchMoveToLSA; msExchServer1NetworkAddress;
msExchServer1Port; msExchServer1SSLPort;
msExchServer1AuthenticationCredentials; msExchServer1AuthenticationPassword;
msExchServer1PageSize; msExchServer1AuthenticationType; msExchServer1Type;
msExchServer1SchemaMap; msExchServer1ExportContainers;
msExchServer1ImportContainer; msExchServer1SearchFilter;
msExchServer1LastUpdateTime; msExchServer1HighestUSN;
msExchServer1HighestUSNVector; msExchServer1AlwaysCreateAs;
msExchServer1DeletionOption; msexchServer1NTAccountDomain;
msExchServer1IsBridgehead; msExchServer2NetworkAddress; msExchServer2Port;
msExchServer2SSLPort; msExchServer2AuthenticationCredentials;
msExchServer2AuthenticationPassword; msExchServer2PageSize;
msExchServer2AuthenticationType; msExchServer2Type; msExchServer2SchemaMap;
msExchServer2ExportContainers; msExchServer2ImportContainer;
msExchServer2SearchFilter; msExchServer2LastUpdateTime;
msExchServer2HighestUSN; msExchServer2HighestUSNVector;
msExchServer2AlwaysCreateAs; msExchServer2DeletionOption;
msexchServer2NTAccountDomain; msExchIsBridgeHeadSite; msExchServer1Flags;
msExchServer2Flags; admin-display-name.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8019
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Requesting LDAP notification for base 'CN=Active Directory
Connections,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=HOME,DC=SERVER' on directory
server.HOME.SERVER.

Event Type: Information
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8012
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
Search of directory server.HOME.SERVER at base 'CN=Active Directory
Connections,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=HOME,DC=SERVER' returned 0 objects.

Event Type: Information
Event Source: MSADC
Event Category: Service Controller
Event ID: 8066
Date: 20/08/2003
Time: 2:19:17 AM
User: N/A
Computer: SERVER
Description:
MSADC object 'CN=Active Directory Connector (SERVER),CN=Exchange
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu
ration,DC=HOME,DC=SERVER' on directory server.HOME.SERVER has no Connection
Agreements defined.

Next message: Herb Martin: "Re: TCP/IP Filtering"
Previous message: Steven Umbach: "Re: Vulnerability exposing user name for the accounts?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Exchange 5.5 to 2003 Migration
... Event Type: Error ... Event Source: MSADC ... the directory server 'pmmail.Domain.DomainName.com' in the second attempt. ...
(microsoft.public.exchange.setup)
Re: Mail Just Stops
... SMTP Virtual Server is stopped in Exhange Manager. ... Event Category: LDAP Operations ... Event Source: MSExchangeDSAccess ...
(microsoft.public.windows.server.sbs)
Re: LDAP Bind/Connection Agreement error
... Event Source: MSADC ... Event Category: LDAP Operations ... I am getting this error after upgrading to Server 2003 from 2000. ...
(microsoft.public.windows.server.active_directory)
Trend causing errors in log
... I have installed trend client server messaging suit for smb on sbs2003 and ... Event Source: MSExchangeAL ... Event Category: LDAP Operations ... Computer: SERVER ...
(microsoft.public.windows.server.sbs)
Re: Ongoing DNS Issue? or something worse?
... has an issue with connecting to the SBS server correctly. ... Event Source: W32Time ... see Help and Support Center at ... The dynamic deletion of the DNS record 'WesternValve.local. ...
(microsoft.public.windows.server.sbs)