Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 1000 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 1000
Event Source: VS Setup Watson Report
Event Type: Error
Event Description: The description for Event ID (1000) in Source (VS Setup Watson Report) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: setup.exe 9.0.30729.1 488f1f5c msi.dll 3.1.4000.4042 45fbcc1b 0 00027f47.
Comment: The error popup in eventlog after windowsupdate. Cause is an install but setup.exe could be any update so no solution for now.
Event ID: 1000
Event Source: Userenv
Event Type: Error
Event Description: Attempt to determine whether user and machine accounts are in the same forest failed (0x6b5).
Comment: operating system: windows 2000 advanced server
user: NT AUTHORITY\SYSTEM
error found on: domain controller
time frame: repeatedly at random intervals once or twice an hour with a break of an hour or two in between.
other info: coincides with remote users logging in to a remote desktop session with the server.
Event ID: 1000
Event Source: Operations Manager
Event Type: Error
Event Description: AD Lost And Found Object Count : The script ''AD Lost And Found Object Count'' failed to create object ''McActiveDir.ActiveDirectory''. This is an unexpected error. The error returned was ''ActiveX component can''t create object'' (0x1AD)
Comment: Microsoft SCOM 2007 R2 agent on Domain Controller
Event ID: 1000
Event Source: BugCheck
Event Type: Error
Event Description: - System

  - Provider

   [ Name]  Microsoft-Windows-WER-SystemErrorReporting
   [ Guid]  {ABCE23E7-DE45-4366-8631-84FA6C525952}
   [ EventSourceName]  BugCheck

  - EventID 1000

   [ Qualifiers]  16384

   Version 0

   Level 2

   Task 0

   Opcode 0

   Keywords 0x80000000000000

  - TimeCreated

   [ SystemTime]  2012-01-08T20:36:53.000000000Z

   EventRecordID 160934

   Correlation

  - Execution

   [ ProcessID]  0
   [ ThreadID]  0

   Channel System

   Computer Gorthouar-PC

   Security


- EventData

  param1 0x0328007e (0xffffffffc0000005 0xfffff88000009ffb 0xfffff880027b9658 0xfffff88005588eb0)

Comment:
Event ID: 1000
Event Source: Microsoft Office 12 Sessions
Event Type: Error
Event Description:
Event Type:        Error


Event Source:    Microsoft Office 12 Sessions

Event Category:                None

Event ID:              7001

Date:                     1/20/2012

Time:                     1:35:29 AM

User:                     N/A

Computer:          Server1-DEV

Description:

The description for Event ID ( 7001 ) in Source ( Microsoft Office 12 Sessions ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: 1 Microsoft Office Excel 12.0.6214.1000 12.0.6215.1000 801 0.


Comment: Getting event ID 1000 and 7001 with the same Source and Description. Occurs when streaming Excel to Citrix Presentation Server 4.5. Excel profile contains an Oracle add-in. Excel profile works fine in production environment but when attempting to launch in dev environment you have to opt to not load add-in or Excel will close.
Event ID: 1000
Event Source: Windows Share Point Service 2.0
Event Type: Error
Event Description: #50070: Unable to connect to the database STS_SUPPORTCENTAR_1 on SUPPORTCENTAR\SharePoint.  Check the database connection information and make sure that the database server is running.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Comment:
Event ID: 1000
Event Source: Windows Live Mail
Event Type: Error
Event Description: The description for Event ID ( 1000 ) in Source ( Windows Live Mail ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: wlmail.exe 14.0.8117.416 4bc9368e msmail.dll 14.0.8117.416 4bc9370c 0 0010f380.
Comment:

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...