Go to www.sekchek.com

Query Event Log: Sample report from a free utility

Generated by SekChek V1.5.2, 09-Feb-2013 17:38:56
More Information
 
Application Log: 2 most recent Error and Warning events from 04-Feb-2013   [Top]
Event Time - Level07-Feb-2013 20:20:22 - Warning
Source - Event IdMicrosoft-Windows-User Profiles Service - 1530
Event TextWindows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-4279025473-3018771506-1539134433-1105_Classes: Process 1560 (\Device\HarddiskVolume1\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
Event Time - Level07-Feb-2013 20:20:20 - Warning
Source - Event IdMicrosoft-Windows-User Profiles Service - 1530
Event TextWindows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 7 user registry handles leaked from \Registry\User\S-1-5-21-4279025473-3018771506-1539134433-1105: Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105 Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105 Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105 Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105 Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105\Software\Microsoft\SystemCertificates\My Process 1860 (\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105\Software\Microsoft\SystemCertificates\SmartCardRoot Process 1232 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-4279025473-3018771506-1539134433-1105\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  
System Log: 10 most recent Error and Warning events from 04-Feb-2013   [Top]
Event Time - Level09-Feb-2013 09:05:03 - Warning
Source - Event Idmrxsmb - 50
Event Text{Delayed Write Failed} Windows was unable to save all the data for the file \Auditor\20110107\Thumbs.db. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Event Time - Level08-Feb-2013 22:40:14 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1030
Event TextThe processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.
Event Time - Level08-Feb-2013 09:47:45 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 08:49:00 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 08:01:54 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 06:59:55 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 06:07:34 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 05:03:49 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 04:13:14 - Error
Source - Event IdMicrosoft-Windows-GroupPolicy - 1054
Event TextThe processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly.
Event Time - Level08-Feb-2013 04:12:36 - Error
Source - Event IdNETLOGON - 5719
Event TextThis computer was not able to set up a secure session with a domain controller in domain TESTIPS due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
 
Other free security and audit tools from SekChek...    [Top]
»   Tools Library | PC Auditor | Windows Firewall Auditor | List Missing Windows Updates | List Installed Products | Search Event Log | Query Active Directory | Query Access Permissions | Sid Resolver | Find Orphaned Sids | List Open Files | Ping

Copyright© 2008-2013, SekChek IPS. All rights reserved.
SekChek® is a registered trademark of SekChek IPS. All other trademarks are the property of their respective owners.
www.sekchek.com

About SekChek IPS
SekChek® IPS is a leading provider of computer security review, auditing and benchmarking tools and has served many of the world’s largest companies and public institutions in 130 countries since 1996. SekChek’s clients include security and audit professionals in IT departments, audit firms, internal audit functions, regulatory compliance and corporate governance departments. SekChek’s benchmarking features compare security policies and controls against a unique statistics database containing more than 30 million anonymous and real-life security measurements compiled from 70,000 computer systems across all major industry sectors.