| DisplayName | ID | Target | Category | Enabled | Alert Generate |
![Accounts_with_the_same_SID_have_been_detected___one_has_been_deleted_5_Rule](/images/Rule.png) | 检测到具有相同 SID 的帐户 - 已删除一个帐户 | Accounts_with_the_same_SID_have_been_detected___one_has_been_deleted_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Account_Changes_Report_Available_5_Rule](/images/Rule.png) | 创建帐户更改报告和警报 | Account_Changes_Report_Available_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Account_Changes_Report_Creation_Only_Rule](/images/Rule.png) | 创建帐户更改报告 | Account_Changes_Report_Creation_Only_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![Account_creation_will_fail_on_this_domain_controller_until_the_account_identifier_pool_is_obtained_5_Rule](/images/Rule.png) | 获得帐户标识符池之前,在此域控制器上创建帐户将失败 | Account_creation_will_fail_on_this_domain_controller_until_the_account_identifier_pool_is_obtained_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Account_Name_Not_Unique_5_Rule](/images/Rule.png) | 帐户名不是唯一的 | Account_Name_Not_Unique_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Active_Directory_cannot_allocate_a_new_domain_controller_GUID_5_Rule](/images/Rule.png) | Active Directory 无法分配新的域控制器 GUID | Active_Directory_cannot_allocate_a_new_domain_controller_GUID_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_be_initialized_5_Rule](/images/Rule.png) | Active Directory 无法初始化 | Active_Directory_cannot_be_initialized_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_boot_normally_because_the_database_was_in_an_incorrect_state_5_Rule](/images/Rule.png) | 由于数据库状态不正确,Active Directory 无法正常启动 | Active_Directory_cannot_boot_normally_because_the_database_was_in_an_incorrect_state_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_change_the_state_of_the_database_during_a_backup_operation_5_Rule](/images/Rule.png) | 备份操作期间,Active Directory 无法更改数据库的状态 | Active_Directory_cannot_change_the_state_of_the_database_during_a_backup_operation_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_construct_a_mutual_authentication_Service_Principal_Name_5_Rule](/images/Rule.png) | Active Directory 无法构造相互身份验证服务主体名称 | Active_Directory_cannot_construct_a_mutual_authentication_Service_Principal_Name_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_create_a_new_security_descriptor_5_Rule](/images/Rule.png) | Active Directory 无法新建安全描述符 | Active_Directory_cannot_create_a_new_security_descriptor_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_create_the_default_security_descriptor_for_an_application_directory_partition_5_Rule](/images/Rule.png) | Active Directory 无法为应用程序目录分区创建默认安全描述符 | Active_Directory_cannot_create_the_default_security_descriptor_for_an_application_directory_partition_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_delete_the_access_control_entry__ACE__for_the_domain_Domain_Controllers_security_group_on_a_newly_created_application_directory_partition_5_Rule](/images/Rule.png) | Active Directory 无法删除新建的应用程序目录分区上域的域控制器安全组的访问控制项 | Active_Directory_cannot_delete_the_access_control_entry__ACE__for_the_domain_Domain_Controllers_security_group_on_a_newly_created_application_directory_partition_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_delete_the_key_New_Database_GUID_during_the_restore_recovery_process_5_Rule](/images/Rule.png) | 在还原恢复过程中,Active Directory 无法删除注册表项“New Database GUID” | Active_Directory_cannot_delete_the_key_New_Database_GUID_during_the_restore_recovery_process_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_find_any_RPC_protocol_sequences_installed_5_Rule](/images/Rule.png) | Active Directory 无法找到安装的任何 RPC 协议序列 | Active_Directory_cannot_find_any_RPC_protocol_sequences_installed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_function_normally_5_Rule](/images/Rule.png) | Active Directory 无法正常工作 | Active_Directory_cannot_function_normally_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_perform_an_authenticated_RPC_call_to_another_DC_because_the_SPN_for_the_destination_DC_is_not_registered_on_the_KDC_5_Rule](/images/Rule.png) | Active Directory 无法对另一个 DC 执行通过身份验证的 RPC 调用,因为目标 DC 的 SPN 不是在 KDC 上注册的 | Active_Directory_cannot_perform_an_authenticated_RPC_call_to_another_DC_because_the_SPN_for_the_destination_DC_is_not_registered_on_the_KDC_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_rebuild_the_following_number_of_indices_and_has_failed_5_Rule](/images/Rule.png) | Active Directory 无法重新建立下列数量的索引,已失败 | Active_Directory_cannot_rebuild_the_following_number_of_indices_and_has_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_replicate_configuration_and_schema_information_5_Rule](/images/Rule.png) | [弃用] Active Directory 无法复制配置和架构信息 | Active_Directory_cannot_replicate_configuration_and_schema_information_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Active_Directory_cannot_set_the_replication_consistency_registry_key_5_Rule](/images/Rule.png) | Active Directory 无法设置复制一致性注册表项 | Active_Directory_cannot_set_the_replication_consistency_registry_key_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_update_object_due_to_insufficient_memory_5_Rule](/images/Rule.png) | 由于内存不足,Active Directory 无法更新对象 | Active_Directory_cannot_update_object_due_to_insufficient_memory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_update_the_functional_level_on_the_NTDS_Settings_object_for_the_local_domain_controller_5_Rule](/images/Rule.png) | Active Directory 无法更新本地域控制器的“NTDS 设置”对象上的功能级别 | Active_Directory_cannot_update_the_functional_level_on_the_NTDS_Settings_object_for_the_local_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_validate_the_functional_level_of_the_domain_controller_5_Rule](/images/Rule.png) | Active Directory 无法验证域控制器的功能级别 | Active_Directory_cannot_validate_the_functional_level_of_the_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_cannot_write_a_new_security_descriptor_for_object_5_Rule](/images/Rule.png) | Active Directory 无法写入对象的新安全描述符 | Active_Directory_cannot_write_a_new_security_descriptor_for_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_encountered_a_replication_error.__Replication_will_be_delayed._5_Rule](/images/Rule.png) | Active Directory 遇到复制错误。 复制将被延迟。 | Active_Directory_encountered_a_replication_error.__Replication_will_be_delayed._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_has_failed_to_upgrade_a_critical_index_as_part_of_initialization_5_Rule](/images/Rule.png) | 作为初始化的一部分,Active Directory 未能升级重要索引 | Active_Directory_has_failed_to_upgrade_a_critical_index_as_part_of_initialization_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Active_Directory_Latency_Alert_Rule_For_Windows2000](/images/Rule.png) | AD 复制太慢 | Active_Directory_Latency_Alert_Rule_For_Windows2000 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![Active_Directory_Latency_Alert_Rule_For_Windows2003](/images/Rule.png) | AD 复制太慢 | Active_Directory_Latency_Alert_Rule_For_Windows2003 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![Active_Directory_Latency_Alert_Rule_For_Windows2008](/images/Rule.png) | AD 复制太慢 | Active_Directory_Latency_Alert_Rule_For_Windows2008 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![Active_Directory_shadow_copy_restore_was_unsuccessful.__The_contents_of_Active_Directory_are_unpredictable._5_Rule](/images/Rule.png) | Active Directory 卷影副本还原失败。 Active Directory 的内容不可预测。 | Active_Directory_shadow_copy_restore_was_unsuccessful.__The_contents_of_Active_Directory_are_unpredictable._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_ADWS_Service_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | AD ADWS 服务检查 - 基于脚本的测试未能完成 | AD_ADWS_Service_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_allocate_memory_5_Rule](/images/Rule.png) | AD 无法分配内存 | AD_cannot_allocate_memory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_find_the_NTDS_object_for_this_domain_controller_5_Rule](/images/Rule.png) | AD 无法找到此域控制器的 NTDS 对象 | AD_cannot_find_the_NTDS_object_for_this_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_find_the_partition_container_5_Rule](/images/Rule.png) | AD 找不到分区容器 | AD_cannot_find_the_partition_container_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_release_memory_5_Rule](/images/Rule.png) | AD 无法释放内存 | AD_cannot_release_memory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule](/images/Rule.png) | 由于包含数据库的磁盘已满,AD 无法更新对象 | AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_cannot_update_the_object_5_Rule](/images/Rule.png) | AD 无法更新对象 | AD_cannot_update_the_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_configuration_information_is_missing_from_the_registry_5_Rule](/images/Rule.png) | 注册表中缺少 AD 配置信息 | AD_configuration_information_is_missing_from_the_registry_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_CPU_Overload.PerformanceCollection](/images/Rule.png) | LSASS CPU 使用性能收集 [弃用] | AD_CPU_Overload.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | False | False |
![AD_CPU_Overload_Pass_through_1](/images/Rule.png) | AD CPU 重载事件 1 | AD_CPU_Overload_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_CPU_Overload_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD CPU 重载脚本的测试未能完成 | AD_CPU_Overload_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_CPU_Overload_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD CPU 重载脚本参数配置不正确 | AD_CPU_Overload_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Database_and_Log_Pass_through_1](/images/Rule.png) | AD 数据库和日志事件 1 | AD_Database_and_Log_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Database_and_Log_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 数据库和日志脚本的测试未能完成 | AD_Database_and_Log_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Database_and_Log_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 数据库和日志 - AD 管理包不支持无代理管理模式 | AD_Database_and_Log_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_database_is_corrupt_5_Rule](/images/Rule.png) | AD 数据库已损坏 | AD_database_is_corrupt_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_DC_Demoted](/images/Rule.png) | 已降级的 AD DC | AD_DC_Demoted | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Maintenance | True | False |
![AD_DC_Demoted_Pass_through_1](/images/Rule.png) | 已降级的 AD DC 事件 1 | AD_DC_Demoted_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_DC_Demoted_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于已降级的 AD DC 脚本的测试未能完成 | AD_DC_Demoted_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_DNS_Verification_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD DNS 验证脚本的测试未能完成 | AD_DNS_Verification_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_DNS_Verification_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD DNS 验证 - AD 管理包不支持无代理管理模式 | AD_DNS_Verification_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_General_Response.PerformanceCollection](/images/Rule.png) | AD 常规响应上一次绑定性能收集 | AD_General_Response.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_General_Response_Pass_through](/images/Rule.png) | AD 常规响应事件 | AD_General_Response_Pass_through | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_General_Response_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 常规响应脚本的测试未能完成 | AD_General_Response_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_General_Response_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD 常规响应脚本的参数配置不正确 | AD_General_Response_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_General_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 常规响应:AD 管理包不支持无代理管理模式 | AD_General_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Global_Catalog_Search_Response.PerformanceCollection](/images/Rule.png) | AD 全局编录搜索时间响应性能收集 | AD_Global_Catalog_Search_Response.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Global_Catalog_Search_Response_Pass_through_1](/images/Rule.png) | AD 全局编录搜索响应事件 1 | AD_Global_Catalog_Search_Response_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Global_Catalog_Search_Response_Pass_through_2](/images/Rule.png) | AD 全局编录搜索响应事件 2 | AD_Global_Catalog_Search_Response_Pass_through_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Global_Catalog_Search_Response_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD 全局编录搜索响应脚本的参数配置不正确 | AD_Global_Catalog_Search_Response_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Global_Catalog_Search_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 全局编录搜索响应 - AD 管理包不支持无代理管理模式 | AD_Global_Catalog_Search_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_internal_error__reinstall_server_5_Rule](/images/Rule.png) | AD 内部错误:重新安装服务器 | AD_internal_error__reinstall_server_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Lost_And_Found_Object_Count_Pass_through_1](/images/Rule.png) | 丢失和找到的对象计数事件 1 | AD_Lost_And_Found_Object_Count_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Lost_And_Found_Object_Count_Pass_through_2](/images/Rule.png) | 丢失和找到的对象计数事件 2 | AD_Lost_And_Found_Object_Count_Pass_through_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Lost_And_Found_Object_Count_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 丢失和找到的对象计数脚本的测试未能完成 | AD_Lost_And_Found_Object_Count_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Lost_And_Found_Object_Count_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 丢失和找到的对象计数 - AD 管理包不支持无代理管理模式 | AD_Lost_And_Found_Object_Count_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_MOM_Agent_Proxy_is_not_enabled](/images/Rule.png) | 代理程序未启用 | AD_MOM_Agent_Proxy_is_not_enabled | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Monitor_Trusts_AD_Client_Side_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | AD 监视器信任 - 基于 AD 客户端脚本的测试未能完成 | AD_Monitor_Trusts_AD_Client_Side_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Monitor_Trusts_Pass_through_1](/images/Rule.png) | AD 监视器信任事件 1 | AD_Monitor_Trusts_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Monitor_Trusts_Pass_through_2](/images/Rule.png) | AD 监视器信任事件 2 | AD_Monitor_Trusts_Pass_through_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Monitor_Trusts_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 监视器信任 - AD 管理包不支持无代理管理模式 | AD_Monitor_Trusts_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Op_Master_Response_1.PerformanceCollection](/images/Rule.png) | AD 操作主机 PDC 上一次 Ping 性能收集 | AD_Op_Master_Response_1.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_10.PerformanceCollection](/images/Rule.png) | AD 操作主机架构上一次绑定性能收集 | AD_Op_Master_Response_10.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_2.PerformanceCollection](/images/Rule.png) | AD 操作主机 PDC 上一次绑定性能收集 | AD_Op_Master_Response_2.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_3.PerformanceCollection](/images/Rule.png) | AD 操作主机域命名上一次 Ping 性能收集 | AD_Op_Master_Response_3.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_4.PerformanceCollection](/images/Rule.png) | AD 操作主机域命名上一次绑定性能收集 | AD_Op_Master_Response_4.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_5.PerformanceCollection](/images/Rule.png) | AD 操作主机结构上一次 Ping 性能收集 | AD_Op_Master_Response_5.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_6.PerformanceCollection](/images/Rule.png) | AD 操作主机结构上一次绑定性能收集 | AD_Op_Master_Response_6.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_7.PerformanceCollection](/images/Rule.png) | AD 操作主机 RID 上一次 Ping 性能收集 | AD_Op_Master_Response_7.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_8.PerformanceCollection](/images/Rule.png) | AD 操作主机 RID 上一次绑定性能收集 | AD_Op_Master_Response_8.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_9.PerformanceCollection](/images/Rule.png) | AD 操作主机架构上一次 Ping 性能收集 | AD_Op_Master_Response_9.PerformanceCollection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Op_Master_Response_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD 操作主机响应脚本的参数配置不正确 | AD_Op_Master_Response_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Op_Master_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 操作主机响应 - AD 管理包不支持无代理管理模式 | AD_Op_Master_Response_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Monitoring.Helper1](/images/Rule.png) | AD 复制监视性能收集(源) | AD_Replication_Monitoring.Helper1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![AD_Replication_Monitoring.Helper2](/images/Rule.png) | AD 复制监视性能收集(目标) | AD_Replication_Monitoring.Helper2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![AD_Replication_Monitoring.PerformanceCollection_1](/images/Rule.png) | AD 复制性能收集 -“复制延迟”指标 | AD_Replication_Monitoring.PerformanceCollection_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Replication_Monitoring.PerformanceCollection_2](/images/Rule.png) | AD 复制性能收集 -“复制延迟:最小值”指标 | AD_Replication_Monitoring.PerformanceCollection_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Replication_Monitoring.PerformanceCollection_3](/images/Rule.png) | AD 复制性能收集 -“复制延迟:最大值”指标 | AD_Replication_Monitoring.PerformanceCollection_3 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Replication_Monitoring.PerformanceCollection_4](/images/Rule.png) | AD 复制性能收集 -“复制延迟:平均值”指标 | AD_Replication_Monitoring.PerformanceCollection_4 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![AD_Replication_Monitoring_Access_Denied](/images/Rule.png) | AD 复制监视 - 访问被拒绝 | AD_Replication_Monitoring_Access_Denied | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Monitoring_A_problem_has_been_detected_with_the_trust_relationship_between_two_domains](/images/Rule.png) | [弃用] 已清理无效命名上下文的 SCOM 延迟监视器 | AD_Replication_Monitoring_A_problem_has_been_detected_with_the_trust_relationship_between_two_domains | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![AD_Replication_Monitoring_Pass_through](/images/Rule.png) | AD 复制监视事件 | AD_Replication_Monitoring_Pass_through | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Replication_Monitoring_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 复制监视脚本的测试未能完成 | AD_Replication_Monitoring_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Monitoring_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD 复制监视脚本的参数配置不正确 | AD_Replication_Monitoring_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Monitoring_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 复制监视 - AD 管理包不支持无代理管理模式 | AD_Replication_Monitoring_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Monitoring_Time_skew_detected](/images/Rule.png) | AD 复制监视 - 检测到时间偏差 | AD_Replication_Monitoring_Time_skew_detected | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Partner_Count_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 复制伙伴计数脚本的测试未能完成 | AD_Replication_Partner_Count_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Partner_Count_Script_Parameters_are_configured_incorrectly](/images/Rule.png) | AD 复制伙伴计数脚本的参数配置不正确 | AD_Replication_Partner_Count_Script_Parameters_are_configured_incorrectly | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Partner_Count_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 复制伙伴计数 - AD 管理包不支持无代理管理模式 | AD_Replication_Partner_Count_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Replication_Partner_Op_Master_Consistency_AD_Client_Side_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | [弃用] AD 复制伙伴操作主机一致性,基于 AD 客户端脚本的测试未能完成 | AD_Replication_Partner_Op_Master_Consistency_AD_Client_Side_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![AD_Replication_Partner_Op_Master_Consistency_Pass_through_1](/images/Rule.png) | [弃用] AD 复制伙伴操作主机一致性事件 1 | AD_Replication_Partner_Op_Master_Consistency_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![AD_Replication_Partner_Op_Master_Consistency_Pass_through_2](/images/Rule.png) | [弃用] AD 复制伙伴操作主机一致性事件 2 | AD_Replication_Partner_Op_Master_Consistency_Pass_through_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![AD_Replication_Partner_Op_Master_Consistency_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | [弃用] AD 复制伙伴操作主机一致性,AD 管理包不支持无代理管理模式 | AD_Replication_Partner_Op_Master_Consistency_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![AD_Server_Moved_Site](/images/Rule.png) | AD 服务器移动的站点规则 | AD_Server_Moved_Site | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Maintenance | True | False |
![AD_Server_Moved_Site_AD_Client_Side_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | AD 服务器移动的站点,基于 AD 客户端脚本的测试未能完成 | AD_Server_Moved_Site_AD_Client_Side_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Server_Moved_Site_Pass_through_1](/images/Rule.png) | AD 服务器移动的站点,事件 1 | AD_Server_Moved_Site_Pass_through_1 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Server_Moved_Site_Pass_through_2](/images/Rule.png) | AD 服务器移动的站点,事件 2 | AD_Server_Moved_Site_Pass_through_2 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![AD_Server_Moved_Site_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 服务器移动的站点,AD 管理包不支持无代理管理模式 | AD_Server_Moved_Site_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Validate_Server_Trust_Event_Script_Based_Test_Failed_to_Complete](/images/Rule.png) | 基于 AD 验证服务器信任事件脚本的测试未能完成 | AD_Validate_Server_Trust_Event_Script_Based_Test_Failed_to_Complete | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![AD_Validate_Server_Trust_Event_The_AD_Management_Pack_does_not_support_the_agentless_management_mode](/images/Rule.png) | AD 验证服务器信任事件,AD 管理包不支持无代理管理模式 | AD_Validate_Server_Trust_Event_The_AD_Management_Pack_does_not_support_the_agentless_management_mode | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![All_replication_partners_failed_to_synchronize](/images/Rule.png) | 所有的复制伙伴复制失败。 | All_replication_partners_failed_to_synchronize | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | True |
![An_account_cannot_be_added_to_the_group_5_Rule](/images/Rule.png) | 无法将帐户添加到组 | An_account_cannot_be_added_to_the_group_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![An_account_name_collision_occurred___this_may_result_in_authentication_failures_5_Rule](/images/Rule.png) | 帐户名发生冲突 - 这可能会导致身份验证失败 | An_account_name_collision_occurred___this_may_result_in_authentication_failures_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_attempt_to_check_whether_group_caching_is_enabled_has_failed_5_Rule](/images/Rule.png) | 尝试检查是否启用了组缓存已失败 | An_attempt_to_check_whether_group_caching_is_enabled_has_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_attempt_to_set_the_time_was_aborted_due_to_the_offset_being_too_large_5_Rule](/images/Rule.png) | 由于偏移太大,尝试设置时间已中止 | An_attempt_to_set_the_time_was_aborted_due_to_the_offset_being_too_large_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_attempt_to_update_user_credentials_failed_5_Rule](/images/Rule.png) | 尝试更新用户凭据失败 | An_attempt_to_update_user_credentials_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_error_occurred_while_granting_rights_to_the_Domain_Administrators_group_5_Rule](/images/Rule.png) | 授予 Domain Administrators 组权限时发生错误 | An_error_occurred_while_granting_rights_to_the_Domain_Administrators_group_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_internal_AD_error_occurred_5_Rule](/images/Rule.png) | 出现内部 AD 错误 | An_internal_AD_error_occurred_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_Intersite_Messaging_Service_request_to_modify_an_LDAP_object_failed_5_Rule](/images/Rule.png) | InterSite Messaging 服务请求修改 LDAP 对象失败 | An_Intersite_Messaging_Service_request_to_modify_an_LDAP_object_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_object_cannot_inherit_a_security_identifier__SID__from_another_object_5_Rule](/images/Rule.png) | 对象无法继承另一个对象的安全标识符 (SID) | An_object_cannot_inherit_a_security_identifier__SID__from_another_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![An_object_has_been_duplicated_during_a_cross_domain_move_5_Rule](/images/Rule.png) | 跨域移动期间复制了一个对象 | An_object_has_been_duplicated_during_a_cross_domain_move_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Attempts_to_backup_or_restore_Active_Directory_have_failed_or_will_fail_5_Rule](/images/Rule.png) | 尝试备份或还原 Active Directory 已失败或者将失败 | Attempts_to_backup_or_restore_Active_Directory_have_failed_or_will_fail_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Attempts_to_update_Active_Directory_are_failing_5_Rule](/images/Rule.png) | 尝试更新 Active Directory 失败 | Attempts_to_update_Active_Directory_are_failing_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_certificate_was_not_authenticated_because_the_computer_it_came_from_is_not_a_domain_controller_5_Rule](/images/Rule.png) | 证书未通过身份验证,因为产生该证书的计算机不是域控制器 | A_certificate_was_not_authenticated_because_the_computer_it_came_from_is_not_a_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_dll_cannot_be_loaded_because_the_software_was_incorrectly_installed_5_Rule](/images/Rule.png) | 由于软件安装不正确,无法加载 dll | A_dll_cannot_be_loaded_because_the_software_was_incorrectly_installed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_DNS_server_used_by_this_server_for_name_resolution_did_not_respond_1_Rule](/images/Rule.png) | 该服务器用于名称解析的 DNS 服务器在时间隔内没有响应 | A_DNS_server_used_by_this_server_for_name_resolution_did_not_respond_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_domain_controller_has_an_extremely_high_number_of_replication_partners](/images/Rule.png) | 域控制器有非常多的复制伙伴 | A_domain_controller_has_an_extremely_high_number_of_replication_partners | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_domain_controller_has_an_unusually_high_number_of_replication_partners](/images/Rule.png) | 域控制器的复制伙伴异常繁多 | A_domain_controller_has_an_unusually_high_number_of_replication_partners | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_domain_controller_made_a_replication_request_for_a_writable_directory_partition_that_has_been_denied_by_the_local_domain_controller_5_Rule](/images/Rule.png) | 域控制器请求复制可写目录分区,但被本地域控制器拒绝 | A_domain_controller_made_a_replication_request_for_a_writable_directory_partition_that_has_been_denied_by_the_local_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_GPO_extension_was_not_applied_because_the_registry_extension_failed_5_Rule](/images/Rule.png) | 由于注册扩展失败,未应用 GPO 扩展 | A_GPO_extension_was_not_applied_because_the_registry_extension_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_Group_Policy_object_cannot_be_found_in_Active_Directory_5_Rule](/images/Rule.png) | 在 Active Directory 中找不到组策略对象 | A_Group_Policy_object_cannot_be_found_in_Active_Directory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_Group_Policy_Object_has_not_been_processed_because_the_filter_check_could_not_be_performed_5_Rule](/images/Rule.png) | 由于无法执行筛选器检查,尚未处理组策略对象 | A_Group_Policy_Object_has_not_been_processed_because_the_filter_check_could_not_be_performed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_Group_Policy_Object_is_corrupt._5_Rule](/images/Rule.png) | 组策略对象已损坏。 | A_Group_Policy_Object_is_corrupt._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_journal_wrap_error_has_occurred_on_the_Sysvol_5_Rule](/images/Rule.png) | 在 Sysvol 上覆盖日记数据时出错 | A_journal_wrap_error_has_occurred_on_the_Sysvol_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![A_lingering_object_has_been_detected.__Replication_has_been_blocked._5_Rule](/images/Rule.png) | 检测到延迟对象。 复制已被阻止。 | A_lingering_object_has_been_detected.__Replication_has_been_blocked._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_problem_has_been_detected_with_the_trust_relationship_between_two_domains](/images/Rule.png) | [弃用] 检测到两个域之间的信任关系存在问题 | A_problem_has_been_detected_with_the_trust_relationship_between_two_domains | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![A_replication_island_has_been_detected_Replication_will_not_occur_across_the_enterprise](/images/Rule.png) | 检测到复制岛,将不会在整个企业内进行复制 | A_replication_island_has_been_detected_Replication_will_not_occur_across_the_enterprise | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_resource_record_for_the_computer_name_of_the_DC_is_not_registered_1_Rule](/images/Rule.png) | 未在 DNS 数据库内注册 DC 的计算机名的资源记录 | A_resource_record_for_the_computer_name_of_the_DC_is_not_registered_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_RSoP__Resultant_Set_of_Policies__error_occurred_5_Rule](/images/Rule.png) | 发生 RSoP(策略的结果集)错误 | A_RSoP__Resultant_Set_of_Policies__error_occurred_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_schema_collision_occurred_while_replicating_attribute_definitions_5_Rule](/images/Rule.png) | 复制属性定义期间发生架构冲突 | A_schema_collision_occurred_while_replicating_attribute_definitions_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_schema_collision_occurred_while_replicating_a_class_definition_5_Rule](/images/Rule.png) | 复制类定义时发生架构冲突 | A_schema_collision_occurred_while_replicating_a_class_definition_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_user_from_a_different_forest_logged_onto_this_machine._Group_policy_processing_has_been_effected._5_Rule](/images/Rule.png) | 其他林中的用户已登录此计算机。组策略处理已受到影响。 | A_user_from_a_different_forest_logged_onto_this_machine._Group_policy_processing_has_been_effected._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![A_well_known_account_has_been_recreated_because_it_did_not_exist_5_Rule](/images/Rule.png) | 已经重新创建了一个众所周知的帐户,因为它不存在 | A_well_known_account_has_been_recreated_because_it_did_not_exist_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![A_well_known_group_has_been_recreated_because_it_did_not_exist_5_Rule](/images/Rule.png) | 已经重新创建了一个众所周知的组,因为它不存在 | A_well_known_group_has_been_recreated_because_it_did_not_exist_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Cannot_access_the_registry_policy_file_5_Rule](/images/Rule.png) | 无法访问注册表策略文件 | Cannot_access_the_registry_policy_file_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Cannot_delete_a_registry_value_5_Rule](/images/Rule.png) | 无法删除注册表值 | Cannot_delete_a_registry_value_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Cannot_process_client_side_group_policy_extension_5_Rule](/images/Rule.png) | 无法处理客户端组策略扩展 | Cannot_process_client_side_group_policy_extension_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Cannot_read_the_GPO_history_5_Rule](/images/Rule.png) | 无法读取 GPO 历史记录 | Cannot_read_the_GPO_history_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Certificate_for_intersite_replication_was_rejected_5_Rule](/images/Rule.png) | 站点间复制证书已被拒绝 | Certificate_for_intersite_replication_was_rejected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Change_Password_on_KRBTGT_Account_Failed_5_Rule](/images/Rule.png) | 更改 KRBTGT 帐户的密码失败 | Change_Password_on_KRBTGT_Account_Failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Classes_from_COM.DLL_not_registered_5_Rule](/images/Rule.png) | 来自 COM.DLL 的类没有注册 | Classes_from_COM.DLL_not_registered_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Collection_Rule_for_No_DC_GC_in_Site_events_5_Rule](/images/Rule.png) | “站点中无 DC/GC”事件的收集规则 | Collection_Rule_for_No_DC_GC_in_Site_events_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Collection_rule_for_the_Replication_Collisions_Report_5_Rule](/images/Rule.png) | 复制冲突报告的收集规则 | Collection_rule_for_the_Replication_Collisions_Report_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Collection_rule_for_the_Replication_Failures_Report_5_Rule](/images/Rule.png) | 复制失败报告的收集规则 | Collection_rule_for_the_Replication_Failures_Report_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Contacting_the_Domain_Naming_FSMO_Role_Holder_has_completed_successfully](/images/Rule.png) | 与域命名 FSMO 角色持有者联系已成功完成 | Contacting_the_Domain_Naming_FSMO_Role_Holder_has_completed_successfully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Contacting_the_Infrastructure_FSMO_Role_Holder_has_completed_successfully](/images/Rule.png) | 与结构 FSMO 角色持有者联系已成功完成 | Contacting_the_Infrastructure_FSMO_Role_Holder_has_completed_successfully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Contacting_the_PDC_FSMO_Role_Holder_has_completed_successfully](/images/Rule.png) | 与 PDC FSMO 角色持有者联系已成功完成 | Contacting_the_PDC_FSMO_Role_Holder_has_completed_successfully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Contacting_the_RID_Master_FSMO_Role_Holder_has_completed_successfully](/images/Rule.png) | 与 RID 主机 FSMO 角色持有者联系已成功完成 | Contacting_the_RID_Master_FSMO_Role_Holder_has_completed_successfully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Contacting_the_Schema_Master_FSMO_Role_Holder_has_completed_successfully](/images/Rule.png) | 与架构主机 FSMO 角色持有者联系已成功完成 | Contacting_the_Schema_Master_FSMO_Role_Holder_has_completed_successfully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Corrupt_Credentials_5_Rule](/images/Rule.png) | 凭据已损坏 | Corrupt_Credentials_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Could_not_determine_the_FSMO_role_holder](/images/Rule.png) | 无法确定 FSMO 角色持有者 | Could_not_determine_the_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Cross_domain_Group_Policy_processing_has_been_aborted_because_the_other_domain_cannot_be_reached_5_Rule](/images/Rule.png) | 由于无法到达其他域,跨域组策略处理已中止 | Cross_domain_Group_Policy_processing_has_been_aborted_because_the_other_domain_cannot_be_reached_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![DC_2000_has_failed_to_synchronize_with_its_replication_partner](/images/Rule.png) | DC 无法对命名上下文与其复制伙伴进行同步 | DC_2000_has_failed_to_synchronize_with_its_replication_partner | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![DC_2003_has_failed_to_synchronize_with_its_replication_partner](/images/Rule.png) | DC 无法对命名上下文与其复制伙伴进行同步 | DC_2003_has_failed_to_synchronize_with_its_replication_partner | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![DC_2008_has_failed_to_synchronize_with_its_replication_partner](/images/Rule.png) | DC 无法对命名上下文与其复制伙伴进行同步 | DC_2008_has_failed_to_synchronize_with_its_replication_partner | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![DC_is_both_a_Global_Catalog_and_the_Infrastructure_Update_master_5_Rule](/images/Rule.png) | DC 既是全局编录,又是结构更新主机 | DC_is_both_a_Global_Catalog_and_the_Infrastructure_Update_master_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Direct_replication_cannot_occur_as_configured_5_Rule](/images/Rule.png) | 无法如配置的那样进行直接复制 | Direct_replication_cannot_occur_as_configured_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![DNS_registrations_of_essential_Domain_controller_records_is_failing_1_Rule](/images/Rule.png) | 重要的域控制器记录的 DNS 注册失败 | DNS_registrations_of_essential_Domain_controller_records_is_failing_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Domain_Operation_Mode_has_been_changed_to_Native_Mode_5_Rule](/images/Rule.png) | 域操作模式已更改为纯模式 | Domain_Operation_Mode_has_been_changed_to_Native_Mode_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Duplicate_account_names_were_detected___one_account_has_been_renamed_5_Rule](/images/Rule.png) | 检测到重复的帐户名 - 已对某一帐户重命名 | Duplicate_account_names_were_detected___one_account_has_been_renamed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Duplicate_moved_object_detected_5_Rule](/images/Rule.png) | 检测到重复移动的对象 | Duplicate_moved_object_detected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Duplicate_User_Principal_Names_have_been_detected_5_Rule](/images/Rule.png) | 检测到重复的用户主要名称 | Duplicate_User_Principal_Names_have_been_detected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Failed_to_ping_or_bind_to_the_Domain_Naming_Master_FSMO_role_holder](/images/Rule.png) | 无法 ping 或绑定到域命名主机 FSMO 角色持有者 | Failed_to_ping_or_bind_to_the_Domain_Naming_Master_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Failed_to_ping_or_bind_to_the_Infrastructure_Master_FSMO_role_holder](/images/Rule.png) | 无法 ping 或绑定到结构主机 FSMO 角色持有者 | Failed_to_ping_or_bind_to_the_Infrastructure_Master_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Failed_to_ping_or_bind_to_the_PDC_FSMO_role_holder](/images/Rule.png) | 无法 ping 或绑定到 PDC FSMO 角色持有者 | Failed_to_ping_or_bind_to_the_PDC_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Failed_to_ping_or_bind_to_the_RID_Master_FSMO_role_holder](/images/Rule.png) | 无法 ping 或绑定到 RID 主机 FSMO 角色持有者 | Failed_to_ping_or_bind_to_the_RID_Master_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Failed_to_ping_or_bind_to_the_Schema_Master_FSMO_role_holder](/images/Rule.png) | 无法 ping 或绑定到架构主机 FSMO 角色持有者 | Failed_to_ping_or_bind_to_the_Schema_Master_FSMO_role_holder | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Format_of_schedule_object_attribute_unrecognized_5_Rule](/images/Rule.png) | 无法识别计划对象属性的格式 | Format_of_schedule_object_attribute_unrecognized_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![FRS_has_not_replicated_one_or_more_files_in_the_Sysvol_to_other_domain_controllers_5_Rule](/images/Rule.png) | FRS 尚未将 Sysvol 中的一个或多个文件复制至其他域控制器 | FRS_has_not_replicated_one_or_more_files_in_the_Sysvol_to_other_domain_controllers_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![FRS_is_scanning_the_system_volume_before_sharing_it_5_Rule](/images/Rule.png) | FRS 在共享系统卷之前正在扫描它 | FRS_is_scanning_the_system_volume_before_sharing_it_5_Rule | Microsoft.Windows.Server.2008.AD.EssentialService.NTFRS | EventCollection | False | True |
![Group_Cache_Refresh_cannot_obtain_a_connection_schedule_to_it_s_preferred_site_5_Rule](/images/Rule.png) | 组缓存刷新无法获得至其首选站点的连接计划 | Group_Cache_Refresh_cannot_obtain_a_connection_schedule_to_it_s_preferred_site_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Cache_Refresh_cannot_schedule_an_update_5_Rule](/images/Rule.png) | 组缓存刷新无法计划更新 | Group_Cache_Refresh_cannot_schedule_an_update_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Cache_Refresh_found_a_GC_in_a_non_optimal_site_5_Rule](/images/Rule.png) | 组缓存刷新在非最佳站点中找到 GC | Group_Cache_Refresh_found_a_GC_in_a_non_optimal_site_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Cache_Refresh_has_reached_the_user_limit_for_this_domain_controller_5_Rule](/images/Rule.png) | 组缓存刷新已达到此域控制器的用户限制 | Group_Cache_Refresh_has_reached_the_user_limit_for_this_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_aborted_because_a_filter_check_for_the_GPO_failed_5_Rule](/images/Rule.png) | 由于 GPO 的筛选器检查失败,组策略处理已中止 | Group_Policy_processing_aborted_because_a_filter_check_for_the_GPO_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_aborted_because_the_common_name_for_the_GPO_cannot_be_accessed_5_Rule](/images/Rule.png) | 由于无法访问 GPO 的公用名,组策略处理已中止 | Group_Policy_processing_aborted_because_the_common_name_for_the_GPO_cannot_be_accessed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_policy_processing_aborted_because_the_GPO_does_not_have_a_version_number_5_Rule](/images/Rule.png) | 由于 GPO 没有版本号,组策略处理已中止 | Group_policy_processing_aborted_because_the_GPO_does_not_have_a_version_number_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_policy_processing_aborted___cannot_connect_to_the_Directory_Service_5_Rule](/images/Rule.png) | 组策略处理已中止 - 无法连接到目录服务 | Group_policy_processing_aborted___cannot_connect_to_the_Directory_Service_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_policy_processing_aborted___cannot_determine_site_5_Rule](/images/Rule.png) | 组策略处理已中止 - 无法确定站点 | Group_policy_processing_aborted___cannot_determine_site_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_policy_processing_aborted___reboot_this_machine_5_Rule](/images/Rule.png) | 组策略处理已中止 - 重新启动此计算机 | Group_policy_processing_aborted___reboot_this_machine_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_policy_processing_aborted___the_search_for_the_root_AD_object_failed_5_Rule](/images/Rule.png) | 组策略处理已中止 - 搜索根 AD 对象失败 | Group_policy_processing_aborted___the_search_for_the_root_AD_object_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_an_invalid_class_of_object_was_discovered_5_Rule](/images/Rule.png) | 由于发现了无效的对象类,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_an_invalid_class_of_object_was_discovered_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_GPO_lists_cannot_be_set_up_5_Rule](/images/Rule.png) | 由于无法设置 GPO 列表,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_GPO_lists_cannot_be_set_up_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_of_an_invalid_access_configuration_5_Rule](/images/Rule.png) | 由于访问配置无效,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_of_an_invalid_access_configuration_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_the_extensions_from_the_registry_cannot_be_read_5_Rule](/images/Rule.png) | 由于无法从注册表中读取扩展,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_the_extensions_from_the_registry_cannot_be_read_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_the_file_gpt.ini_cannot_be_accessed_5_Rule](/images/Rule.png) | 由于无法访问文件 gpt.ini,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_the_file_gpt.ini_cannot_be_accessed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_the_GPLink_property_of_an_object_cannot_be_accessed_5_Rule](/images/Rule.png) | 由于无法访问对象的 GPLink 属性,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_the_GPLink_property_of_an_object_cannot_be_accessed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_the_GPO_does_not_have_a_functionality_version_number_5_Rule](/images/Rule.png) | 由于 GPO 没有功能版本号,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_the_GPO_does_not_have_a_functionality_version_number_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted_because_the_user_does_not_have_access_to_an_object_5_Rule](/images/Rule.png) | 由于用户无权访问对象,组策略处理已中止 | Group_Policy_processing_has_been_aborted_because_the_user_does_not_have_access_to_an_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_has_been_aborted__in_planning_mode__because_the_user_computer_does_not_have_access_to_a_required_object_5_Rule](/images/Rule.png) | 由于用户/计算机无权访问所需的对象,组策略处理已中止(以计划模式) | Group_Policy_processing_has_been_aborted__in_planning_mode__because_the_user_computer_does_not_have_access_to_a_required_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_a_security_check_failed_5_Rule](/images/Rule.png) | 由于安全性检查失败,组策略处理已中止 | Group_Policy_processing_was_aborted_because_a_security_check_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_historical_data_cannot_be_moved_from_the_users_old_SID_to_their_new_one_5_Rule](/images/Rule.png) | 由于无法将历史数据从用户的旧 SID 移动到新 SID,组策略处理已中止 | Group_Policy_processing_was_aborted_because_historical_data_cannot_be_moved_from_the_users_old_SID_to_their_new_one_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_security_cannot_be_set_on_Group_Policy_events_5_Rule](/images/Rule.png) | 由于无法在组策略事件上设置安全性,组策略处理已中止 | Group_Policy_processing_was_aborted_because_security_cannot_be_set_on_Group_Policy_events_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_the_refresh_timer_cannot_be_set_5_Rule](/images/Rule.png) | 由于无法设置刷新计时器,组策略处理已中止 | Group_Policy_processing_was_aborted_because_the_refresh_timer_cannot_be_set_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_the_search_for_objects_cannot_be_completed_5_Rule](/images/Rule.png) | 由于无法完成搜索对象,组策略处理已中止 | Group_Policy_processing_was_aborted_because_the_search_for_objects_cannot_be_completed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_the_security_ID_of_the_user_cannot_be_obtained_5_Rule](/images/Rule.png) | 由于无法获取用户的安全 ID,组策略处理已中止 | Group_Policy_processing_was_aborted_because_the_security_ID_of_the_user_cannot_be_obtained_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Policy_processing_was_aborted_because_the_users_security_ID_cannot_be_written_to_the_registry_5_Rule](/images/Rule.png) | 由于无法将用户安全 ID 写入注册表,组策略处理已中止 | Group_Policy_processing_was_aborted_because_the_users_security_ID_cannot_be_written_to_the_registry_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Group_Refresh_updates_are_falling_behind_5_Rule](/images/Rule.png) | 组刷新更新正落在后面 | Group_Refresh_updates_are_falling_behind_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Initial_replication_after_domain_controller_promotion_has_not_completed](/images/Rule.png) | 域控制器提升之后的初始复制尚未完成 | Initial_replication_after_domain_controller_promotion_has_not_completed | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Internal_async_schema_cache_update_failed_5_Rule](/images/Rule.png) | 内部异步架构缓存更新失败 | Internal_async_schema_cache_update_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Intersite_Messaging_Service_SMTP_Transport_received_a_delivery_failure_5_Rule](/images/Rule.png) | InterSite Messaging 服务 SMTP 传输接收到传送失败 | Intersite_Messaging_Service_SMTP_Transport_received_a_delivery_failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_add_SMTP_routing_domain_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务 SMTP 传输插件添加 SMTP 路由域失败 | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_add_SMTP_routing_domain_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_bind_the_event_sink_ismsink.dll_to_the_SMTP_Service_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务 SMTP 传输插件未能将事件接收器 ismsink.dll 绑定至 SMTP 服务 | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_bind_the_event_sink_ismsink.dll_to_the_SMTP_Service_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_read_the_SMTP_mail_message_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务 SMTP 传输插件读取 SMTP 邮件消息失败 | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_read_the_SMTP_mail_message_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_register_the_event_sink_ismsink.dll_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务 SMTP 传输插件无法注册事件接收器 ismsink.dll | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_register_the_event_sink_ismsink.dll_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_determined_that_one_or_more_classes_from_CDO_library_are_not_registered_as_expected_5_Rule](/images/Rule.png) | Inter-Site Messaging (ISM) 服务 SMTP 传输插件已经确定来自 CDO 库的一个或多个类没有按预期注册 | Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_determined_that_one_or_more_classes_from_CDO_library_are_not_registered_as_expected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_encountered_an_unexpected_error_from_CDO_library_5_Rule](/images/Rule.png) | Inter-Site Messaging (ISM) 服务 SMTP 传输插件遇到了来自 CDO 库的意外错误 | Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_encountered_an_unexpected_error_from_CDO_library_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Invalid_Forwarded_AS_Request_5_Rule](/images/Rule.png) | 已转发的 AS 请求无效 | Invalid_Forwarded_AS_Request_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Invalid_object_class_5_Rule](/images/Rule.png) | 无效的对象类 | Invalid_object_class_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Invalid_Policy_Data_5_Rule](/images/Rule.png) | 策略数据无效 | Invalid_Policy_Data_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Invalid_Script_Parameter_Configuration](/images/Rule.png) | 脚本参数配置无效 | Invalid_Script_Parameter_Configuration | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Invalid_site_link_definition_will_be_ignored_5_Rule](/images/Rule.png) | 将忽略无效的站点链接定义 | Invalid_site_link_definition_will_be_ignored_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![ISM_cannot_receive_messages_5_Rule](/images/Rule.png) | ISM 无法接收消息 | ISM_cannot_receive_messages_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![ISM_Request_Failure_5_Rule](/images/Rule.png) | ISM 请求失败 | ISM_Request_Failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![ISM_transport_has_been_shut_down_5_Rule](/images/Rule.png) | ISM 传输已关闭 | ISM_transport_has_been_shut_down_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_cannot_compute_a_replication_path_5_Rule](/images/Rule.png) | KCC 无法计算复制路径 | KCC_cannot_compute_a_replication_path_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_cannot_configure_replication_topology_due_to_ISM_failure_5_Rule](/images/Rule.png) | 由于 ISM 失败,KCC 无法配置复制拓扑 | KCC_cannot_configure_replication_topology_due_to_ISM_failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_failed_to_initialize_5_Rule](/images/Rule.png) | KCC 初始化失败 | KCC_failed_to_initialize_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_failed_to_stop_5_Rule](/images/Rule.png) | KCC 无法停止 | KCC_failed_to_stop_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_failed_to_update_replication_topology_5_Rule](/images/Rule.png) | KCC 更新复制拓扑失败 | KCC_failed_to_update_replication_topology_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![KCC_is_ignoring_a_replication_path_because_non_intersecting_schedules_are_preventing_replication_along_that_path_5_Rule](/images/Rule.png) | KCC 正在忽略复制路径,因为非交叉计划正阻碍沿该路径复制 | KCC_is_ignoring_a_replication_path_because_non_intersecting_schedules_are_preventing_replication_along_that_path_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![LDAP_agent_cannot_open_security_provider_5_Rule](/images/Rule.png) | LDAP 代理程序无法打开安全提供程序 | LDAP_agent_cannot_open_security_provider_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Local_cleanup_failed_on_cross_domain_move_5_Rule](/images/Rule.png) | 跨域移动时本地清理失败 | Local_cleanup_failed_on_cross_domain_move_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Local_group_policy_is_disabled_5_Rule](/images/Rule.png) | 本地组策略被禁用 | Local_group_policy_is_disabled_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Loopback_processing_has_been_disabled_5_Rule](/images/Rule.png) | 环回处理已被禁用 | Loopback_processing_has_been_disabled_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Machine_Account_Authentication_Failure_1_Rule](/images/Rule.png) | [弃用] AD 计算机帐户身份验证失败报告具有可用数据 | Machine_Account_Authentication_Failure_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Machine_account_policy_failure___Active_Directory_GPO_lookup_failure_5_Rule](/images/Rule.png) | 计算机帐户策略失败 - Active Directory GPO 查询失败 | Machine_account_policy_failure___Active_Directory_GPO_lookup_failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Machine_account_policy_failure___Security_Configuration_Engine_error_occurred_5_Rule](/images/Rule.png) | 计算机帐户策略失败 - 发生安全配置引擎错误 | Machine_account_policy_failure___Security_Configuration_Engine_error_occurred_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Manual_deregistration_of_some_DNS_records_is_required_5_Rule](/images/Rule.png) | 需要手动注销一些 DNS 记录 | Manual_deregistration_of_some_DNS_records_is_required_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Memory_Allocation_Error___the_system_may_be_overloaded_5_Rule](/images/Rule.png) | 内存分配错误 - 系统可能重载 | Memory_Allocation_Error___the_system_may_be_overloaded_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Memory_cannot_be_allocated_5_Rule](/images/Rule.png) | 无法分配内存 | Memory_cannot_be_allocated_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Microsoft.Windows.Server.2008.AD.DomainController.AvailableBytes.Collection](/images/Rule.png) | AD DC 性能收集 -“内存可用字节数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.AvailableBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.CommittedBytes.Collection](/images/Rule.png) | AD DC 性能收集 -“内存提交字节数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.CommittedBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytes.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 压缩的入站字节数(站点间,压缩前)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesComp.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 压缩的入站字节数(站点间,压缩后)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesComp.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesNotComp.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 未压缩的入站字节数(站点内)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesNotComp.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesTotal.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 入站字节总数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAInboundBytesTotal.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAIntersiteInBytes.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 压缩的入站字节数(站点间,压缩后)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAIntersiteInBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAIntersiteOutBytes.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 压缩的出站字节数(站点间,压缩后)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAIntersiteOutBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesComp.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 压缩的出站字节数(站点间,压缩前)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesComp.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesNotComp.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 未压缩的出站字节数(站点内)/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesNotComp.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesTotal.Collection](/images/Rule.png) | AD 2008 DC 性能收集 -“NTDS DRA 出站字节总数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DRAOutboundBytesTotal.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.DSSubSearch.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS DS 搜索子操作数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.DSSubSearch.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.KDCASRequests.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS KDC AS 请求数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.KDCASRequests.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.KDCTGRequests.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS KDC TGS 请求数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.KDCTGRequests.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.KerberosAuth.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS Kerberos 身份验证数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.KerberosAuth.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LDAPClientSessions.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS LDAP 客户端会话数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LDAPClientSessions.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LDAPSearches.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS LDAP 搜索数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LDAPSearches.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LDAPUDPOperations.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS LDAP UDP 操作数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LDAPUDPOperations.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LDAPWrites.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS LDAP 写入数/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LDAPWrites.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LSASSHandleCount.Collection](/images/Rule.png) | AD DC 性能收集 -“LSASS 的进程处理计数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LSASSHandleCount.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LSASSPrivateBytes.Collection](/images/Rule.png) | AD DC 性能收集 -“LSASS 的 进程专用字节数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LSASSPrivateBytes.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.LSASSTotalCPU.Collection](/images/Rule.png) | AD DC 性能收集 -“LSASS 的进程百分比处理器时间”指标 | Microsoft.Windows.Server.2008.AD.DomainController.LSASSTotalCPU.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.NTLMAuthentications.Collection](/images/Rule.png) | AD DC 性能收集 -“NTDS NTLM 身份验证数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.NTLMAuthentications.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.Paging.Collection](/images/Rule.png) | AD DC 性能收集 -“内存页/秒”指标 | Microsoft.Windows.Server.2008.AD.DomainController.Paging.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.ProcessorTime.Collection](/images/Rule.png) | AD DC 性能收集 -“进程处理器百分数总计”指标 | Microsoft.Windows.Server.2008.AD.DomainController.ProcessorTime.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.ServerSessions.Collection](/images/Rule.png) | AD DC 性能收集 -“服务器 - 服务器会话数”指标 | Microsoft.Windows.Server.2008.AD.DomainController.ServerSessions.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.SystemUpTime.Collection](/images/Rule.png) | AD DC 性能收集 -“系统 - 系统正常运行时间”指标 | Microsoft.Windows.Server.2008.AD.DomainController.SystemUpTime.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.TCPv4Connections.Collection](/images/Rule.png) | AD DC 性能收集 - TCPv4 - 已建立的连接 | Microsoft.Windows.Server.2008.AD.DomainController.TCPv4Connections.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.2008.AD.DomainController.TCPv6Connections.Collection](/images/Rule.png) | AD DC 性能收集 - TCPv6 - 已建立的连接 | Microsoft.Windows.Server.2008.AD.DomainController.TCPv6Connections.Collection | Microsoft.Windows.Server.2008.AD.DomainControllerRole | PerformanceCollection | True | False |
![Miscellaneous_KDC_Errors_5_Rule](/images/Rule.png) | [弃用] 其他 KDC 错误 | Miscellaneous_KDC_Errors_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Miscellaneous_NetLogon_Errors_1_Rule](/images/Rule.png) | [弃用] 其他 NetLogon 错误 | Miscellaneous_NetLogon_Errors_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Miscellaneous_SAM_Errors_5_Rule](/images/Rule.png) | [弃用] 其他 SAM 错误 | Miscellaneous_SAM_Errors_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Miscellaneous_UserEnv_Errors_5_Rule](/images/Rule.png) | [弃用] 其他组策略错误 | Miscellaneous_UserEnv_Errors_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Missing_X.509_Domain_Controller_certificate_5_Rule](/images/Rule.png) | 缺少 X.509 域控制器证书 | Missing_X.509_Domain_Controller_certificate_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Name_conflict_detected_while_replicating_partition_5_Rule](/images/Rule.png) | 复制分区期间检测到名称冲突 | Name_conflict_detected_while_replicating_partition_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![None_of_the_preferred_bridgehead_servers_can_replicate_the_directory_partition_5_Rule](/images/Rule.png) | 所有首选桥头服务器均无法复制目录分区 | None_of_the_preferred_bridgehead_servers_can_replicate_the_directory_partition_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![No_changes_detected_in_the_list_of_GPOs_5_Rule](/images/Rule.png) | 在 GPO 列表中未检测到任何更改 | No_changes_detected_in_the_list_of_GPOs_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![No_input_provider_to_sync_time_5_Rule](/images/Rule.png) | 没有同步时间的输入提供程序 | No_input_provider_to_sync_time_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![No_Key_to_Generate_Kerberos_Ticket_5_Rule](/images/Rule.png) | 没有生成 Kerberos 票证的密钥 | No_Key_to_Generate_Kerberos_Ticket_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![No_suitable_domain_controller_is_available_for_authentication_in_this_domain_5_Rule](/images/Rule.png) | 此域中没有合适的域控制器用于身份验证 | No_suitable_domain_controller_is_available_for_authentication_in_this_domain_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![One_or_more_domain_controllers_may_not_be_replicating_For_2000](/images/Rule.png) | 一个或多个域控制器可能没有正在复制 | One_or_more_domain_controllers_may_not_be_replicating_For_2000 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![One_or_more_domain_controllers_may_not_be_replicating_For_2003](/images/Rule.png) | 一个或多个域控制器可能没有正在复制 | One_or_more_domain_controllers_may_not_be_replicating_For_2003 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![One_or_more_domain_controllers_may_not_be_replicating_For_2008](/images/Rule.png) | 一个或多个域控制器可能没有正在复制 | One_or_more_domain_controllers_may_not_be_replicating_For_2008 | Microsoft.Windows.Server.2008.AD.DomainControllerRole | Custom | True | False |
![One_or_more_of_the_DC_Locator_DNS_records_are_not_registered_1_Rule](/images/Rule.png) | 未在 DNS 数据库中注册一个或多个 DC 定位程序 DNS 记录,因为主 DNS 服务器不支持 DNS 记录的自动更新 | One_or_more_of_the_DC_Locator_DNS_records_are_not_registered_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![PAC_Verification_Failure_5_Rule](/images/Rule.png) | PAC 验证失败 | PAC_Verification_Failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Policy_Update_Failure_5_Rule](/images/Rule.png) | 策略更新失败 | Policy_Update_Failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Replication_error_5_Rule](/images/Rule.png) | 复制错误 | Replication_error_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Replication_has_been_aborted_5_Rule](/images/Rule.png) | 复制已中止 | Replication_has_been_aborted_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Replication_has_been_stopped_with_a_source__5_Rule](/images/Rule.png) | 复制已停止,带有来源 | Replication_has_been_stopped_with_a_source__5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Report_Collection___Machine_Account_Authentication_Failures_5_Rule](/images/Rule.png) | 报告收集 - 计算机帐户身份验证失败 | Report_Collection___Machine_Account_Authentication_Failures_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Schedule_attribute_of_siteLink_object_is_invalid_5_Rule](/images/Rule.png) | siteLink 对象的计划属性无效 | Schedule_attribute_of_siteLink_object_is_invalid_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Schema_cache_load_failed_to_convert_the_string_default_SD_on_class_schema_object_5_Rule](/images/Rule.png) | 架构缓存加载无法转换类架构对象上的字符串默认 SD | Schema_cache_load_failed_to_convert_the_string_default_SD_on_class_schema_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Schema_cache_load_failed_to_inherit_all_attributes_for_the_class_5_Rule](/images/Rule.png) | 架构缓存加载无法继承类的全部属性 | Schema_cache_load_failed_to_inherit_all_attributes_for_the_class_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Security_Descriptor_Propagator_has_been_terminated_with_error_5_Rule](/images/Rule.png) | 安全描述符传播程序已中止,出现错误 | Security_Descriptor_Propagator_has_been_terminated_with_error_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Session_setup_failed_because_no_trust_account_exists___Script___AD_Validate_Server_Trust_Event_5_Rule](/images/Rule.png) | [弃用] 由于不存在信任帐户,会话设置失败:脚本 - AD 验证服务器信任事件 | Session_setup_failed_because_no_trust_account_exists___Script___AD_Validate_Server_Trust_Event_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Setting_the_administrators_password_failed.__It_has_been_reset_to_blank._5_Rule](/images/Rule.png) | 设置管理员密码失败。 它已被重新设置为空白。 | Setting_the_administrators_password_failed.__It_has_been_reset_to_blank._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![Site_has_no_NTDS_Site_Settings_object_5_Rule](/images/Rule.png) | 站点没有 NTDS 站点设置对象 | Site_has_no_NTDS_Site_Settings_object_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Site_link_was_not_found_5_Rule](/images/Rule.png) | 找不到站点链接 | Site_link_was_not_found_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![There_are_no_domain_based_Group_Policy_objects_for_this_user_computer._5_Rule](/images/Rule.png) | 此用户/计算机没有基于域的组策略对象。 | There_are_no_domain_based_Group_Policy_objects_for_this_user_computer._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_account_identifier_pool_for_this_domain_controller_cannot_be_updated_5_Rule](/images/Rule.png) | 无法更新此域控制器的帐户标识符池 | The_account_identifier_pool_for_this_domain_controller_cannot_be_updated_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Active_Directory_database_is_corrupt_5_Rule](/images/Rule.png) | Active Directory 数据库已损坏 | The_Active_Directory_database_is_corrupt_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_AD_replication_process_is_unable_to_continue_5_Rule](/images/Rule.png) | AD 复制过程无法继续 | The_AD_replication_process_is_unable_to_continue_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_attempt_to_change_the_directory_partition_name_to_a_name_that_is_not_conflicting_failed_5_Rule](/images/Rule.png) | 尝试将目录分区名更改为一个不相冲突的名称失败 | The_attempt_to_change_the_directory_partition_name_to_a_name_that_is_not_conflicting_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_attempt_to_discover_the_tombstone_lifetime_from_the_domain_failed_5_Rule](/images/Rule.png) | 尝试从域中发现 tombstone 生存时间失败 | The_attempt_to_discover_the_tombstone_lifetime_from_the_domain_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_attempt_to_move_a_child_object_to_a_container_failed_5_Rule](/images/Rule.png) | 尝试将子对象移动到容器失败 | The_attempt_to_move_a_child_object_to_a_container_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_behavior_version_of_the_dsa_object_is_higher_than_the_behavior_version_of_this_OS_5_Rule](/images/Rule.png) | dsa 对象的版本高于此 OS 的版本 | The_behavior_version_of_the_dsa_object_is_higher_than_the_behavior_version_of_this_OS_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_computer_cannot_function_properly_for_authentication_purposes_5_Rule](/images/Rule.png) | 计算机无法正常进行身份验证 | The_computer_cannot_function_properly_for_authentication_purposes_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_computer_didnt_have_sufficient_rights_to_perform_the_secure_dynamic_update_1_Rule](/images/Rule.png) | 该计算机没有足够的权限执行安全自动更新 | The_computer_didnt_have_sufficient_rights_to_perform_the_secure_dynamic_update_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_computer_name_cannot_be_mapped_to_an_object_in_Active_Directory___this_may_result_in_authentication_failures_5_Rule](/images/Rule.png) | 计算机名无法映射到 Active Directory 中的对象 - 这可能会导致身份验证失败 | The_computer_name_cannot_be_mapped_to_an_object_in_Active_Directory___this_may_result_in_authentication_failures_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_computer_s_domain__1_is_unavailable.___2_.__5_Rule](/images/Rule.png) | 计算机的域 \%1 不可用。(\%2). | The_computer_s_domain__1_is_unavailable.___2_.__5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_connection_object_translation_task_in_the_consistency_checker_is__disabled_5_Rule](/images/Rule.png) | 一致性检查器中的连接对象转换任务被禁用 | The_connection_object_translation_task_in_the_consistency_checker_is__disabled_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_DC_was_unable_to_obtain_the_next_account_identifier_5_Rule](/images/Rule.png) | DC 无法获得下一个帐户标识符 | The_DC_was_unable_to_obtain_the_next_account_identifier_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_default_NTFS_security_settings_have_not_been_applied_to_Active_Directory_folders_5_Rule](/images/Rule.png) | [弃用] 默认 NTFS 安全设置尚未应用于 Active Directory 文件夹 | The_default_NTFS_security_settings_have_not_been_applied_to_Active_Directory_folders_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![The_deleted_list_for_an_extension_cannot_be_obtained_5_Rule](/images/Rule.png) | 无法获取已删除的扩展列表 | The_deleted_list_for_an_extension_cannot_be_obtained_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_directory_forest_behavior_version_and_or_domain_behavior_version_are_changed_to_values_incompatible_with_this_version_of_Windows_5_Rule](/images/Rule.png) | 目录林版本和/或域版本已更改为与 Windows 的这个版本不兼容的值 | The_directory_forest_behavior_version_and_or_domain_behavior_version_are_changed_to_values_incompatible_with_this_version_of_Windows_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_directory_partition_cannot_be_replicated_over_a_specified_transport_because_none_of_the_domain_controllers_support_the_transport_5_Rule](/images/Rule.png) | 无法通过指定的传输复制目录分区,因为任何域控制器都不支持该传输 | The_directory_partition_cannot_be_replicated_over_a_specified_transport_because_none_of_the_domain_controllers_support_the_transport_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_DNS_server_with_which_this_DC_will_register_does_not_support_1_Rule](/images/Rule.png) | DC 将要注册的 DNS 服务器不支持自动更新协议或未将授权区域配置为允许自动更新 | The_DNS_server_with_which_this_DC_will_register_does_not_support_1_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_domain_behavior_version_or_the_forest_behavior_version_is_incompatible_with_this_version_of_Windows_5_Rule](/images/Rule.png) | 域版本或林版本与 Windows 的这个版本不兼容 | The_domain_behavior_version_or_the_forest_behavior_version_is_incompatible_with_this_version_of_Windows_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Domain_Changes_report_Create_Only_Rule](/images/Rule.png) | 创建域更改报告 | The_Domain_Changes_report_Create_Only_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | False |
![The_Domain_Changes_report_has_data_available_5_Rule](/images/Rule.png) | 创建域更改报告和警报 | The_Domain_Changes_report_has_data_available_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_domain_controller_failed_to_obtain_a_new_account_identifier_pool_5_Rule](/images/Rule.png) | 域控制器无法获取新的帐户标识符池 | The_domain_controller_failed_to_obtain_a_new_account_identifier_pool_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Domain_Controller_has_been_started_5_Rule](/images/Rule.png) | 域控制器已启动 | The_Domain_Controller_has_been_started_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Domain_Controller_has_been_stopped_5_Rule](/images/Rule.png) | 域控制器已停止 | The_Domain_Controller_has_been_stopped_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Domain_Controller_has_shutdown_unexpectedly_5_Rule](/images/Rule.png) | 域控制器意外关闭 | The_Domain_Controller_has_shutdown_unexpectedly_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_domain_controller_is_booting_to_directory_services_restore_mode_5_Rule](/images/Rule.png) | 域控制器正在启动到目录服务还原模式 | The_domain_controller_is_booting_to_directory_services_restore_mode_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_DS_Service_Configuration_object_is_not_found.__You_will_not_be_able_to_set_service_parameters._5_Rule](/images/Rule.png) | 未找到“DS 服务配置”对象。 无法设置服务参数。 | The_DS_Service_Configuration_object_is_not_found.__You_will_not_be_able_to_set_service_parameters._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_GPO_cannot_be_processed_because_it_was_created_by_an_old_version_of_the_GPO_editor_5_Rule](/images/Rule.png) | 无法处理 GPO,因为它是由旧版本的 GPO 编辑器创建的 | The_GPO_cannot_be_processed_because_it_was_created_by_an_old_version_of_the_GPO_editor_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_group_caching_option_has_now_been_properly_updated_5_Rule](/images/Rule.png) | 当前已正确更新组缓存选项 | The_group_caching_option_has_now_been_properly_updated_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Group_Policy_client_side_extension_failed_to_execute_5_Rule](/images/Rule.png) | 组策略客户端扩展无法执行 | The_Group_Policy_client_side_extension_failed_to_execute_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Intersite_Messaging_service_failed_to_start_the_RPC_server_because_it_was_unable_to_register_authentication_information._5_Rule](/images/Rule.png) | InterSite Messaging 服务无法启动 RPC 服务器,因为它无法注册身份验证信息。 | The_Intersite_Messaging_service_failed_to_start_the_RPC_server_because_it_was_unable_to_register_authentication_information._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_cannot_allocate__memory_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务无法分配内存 | The_Inter_Site_Messaging_Service_cannot_allocate__memory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_cannot_perform_a_requested_LDAP_bind_operation_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务无法执行请求的 LDAP 绑定操作 | The_Inter_Site_Messaging_Service_cannot_perform_a_requested_LDAP_bind_operation_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_encountered_an_error_while__attempting_to_start_the_Service_Control_Dispatcher_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务在尝试启动服务控制调度程序时遇到错误 | The_Inter_Site_Messaging_Service_encountered_an_error_while__attempting_to_start_the_Service_Control_Dispatcher_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_encountered_a_malformed__transport_distinguished_name_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务遇到一个错误的传输可分辨名称 | The_Inter_Site_Messaging_Service_encountered_a_malformed__transport_distinguished_name_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_failed_to_create_an_event_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务无法创建事件 | The_Inter_Site_Messaging_Service_failed_to_create_an_event_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_failed_to_initialize_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务初始化失败 | The_Inter_Site_Messaging_Service_failed_to_initialize_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_failed_to_start_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务启动失败 | The_Inter_Site_Messaging_Service_failed_to_start_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_failed_to_start_the_RPC_server_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务无法启动 RPC 服务器 | The_Inter_Site_Messaging_Service_failed_to_start_the_RPC_server_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_failed_to_wait_for_a_message_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务无法等待消息 | The_Inter_Site_Messaging_Service_failed_to_wait_for_a_message_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_requested_to_abandon_an_LDAP_notification_message_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务已请求放弃 LDAP 通知消息 | The_Inter_Site_Messaging_Service_requested_to_abandon_an_LDAP_notification_message_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_remove__SMTP_routing_domain_5_Rule](/images/Rule.png) | Inter-Site Messaging 服务 SMTP 传输插件删除 SMTP 路由域失败 | The_Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_remove__SMTP_routing_domain_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Knowledge_Consistency_Checker__KCC__cannot_run_successfully.__Replication_may_be_affected_5_Rule](/images/Rule.png) | 知识一致性检查器 (KCC) 无法成功运行。 复制可能会受到影响 | The_Knowledge_Consistency_Checker__KCC__cannot_run_successfully.__Replication_may_be_affected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_Knowledge_Consistency_Checker__KCC__detected_an_incompatible_up_to_dateness_vector_format_5_Rule](/images/Rule.png) | 知识一致性检查器 (KCC) 检测到一种不兼容的最新矢量格式 | The_Knowledge_Consistency_Checker__KCC__detected_an_incompatible_up_to_dateness_vector_format_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_list_of_GPOs_for_this_user_or_computer_has_changed_5_Rule](/images/Rule.png) | 此用户或计算机的 GPO 列表已更改 | The_list_of_GPOs_for_this_user_or_computer_has_changed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_local_domain_controller_has_attempted_to_replicate_an_object_which_is_not_present_because_it_may_have_been_deleted_and_already_garbage_collected_5_Rule](/images/Rule.png) | 本地域控制器已经尝试复制一个不存在的对象,因为该对象可能已被删除并进行垃圾收集 | The_local_domain_controller_has_attempted_to_replicate_an_object_which_is_not_present_because_it_may_have_been_deleted_and_already_garbage_collected_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_local_domain_controller_has_denied_a_replication_attempt_on_a_directory_partition.__This_may_pose_a_security_risk_5_Rule](/images/Rule.png) | 本地域控制器已经拒绝在目录分区上的复制尝试。 这可能造成安全风险 | The_local_domain_controller_has_denied_a_replication_attempt_on_a_directory_partition.__This_may_pose_a_security_risk_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_machine_account_cannot_be_found_5_Rule](/images/Rule.png) | 找不到计算机帐户 | The_machine_account_cannot_be_found_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_NetLogon_service_on_remote_machines_will_not_be_able_to_connect_to_this_DC_over_TCP_IP_resulting_in_authentication_failure_5_Rule](/images/Rule.png) | 远程计算机上的 NetLogon 服务将无法通过 TCP/IP 连接至此 DC,从而导致身份验证失败 | The_NetLogon_service_on_remote_machines_will_not_be_able_to_connect_to_this_DC_over_TCP_IP_resulting_in_authentication_failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_non_domain_naming_context_has_no_security_descriptor_reference_domain_5_Rule](/images/Rule.png) | 非域命名上下文没有安全描述符引用域 | The_non_domain_naming_context_has_no_security_descriptor_reference_domain_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_number_of_Group_Policies_has_exceeded_the_maximum_limit_5_Rule](/images/Rule.png) | 组策略的数目超过了最大限制。 | The_number_of_Group_Policies_has_exceeded_the_maximum_limit_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_object_does_not_exist_in_Active_Directory_5_Rule](/images/Rule.png) | 对象并不存在于 Active Directory 中 | The_object_does_not_exist_in_Active_Directory_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_registry_key_cannot_be_created_5_Rule](/images/Rule.png) | 无法创建注册表项 | The_registry_key_cannot_be_created_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_registry_policy_file_could_not_be_accessed_during_application_of_machine_policy_5_Rule](/images/Rule.png) | 应用计算机策略期间无法访问注册表策略文件 | The_registry_policy_file_could_not_be_accessed_during_application_of_machine_policy_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_registry_value_cannot_be_set_5_Rule](/images/Rule.png) | 无法设置注册表值 | The_registry_value_cannot_be_set_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_script_cannot_locate_the_server_or_its_site_in_Active_Directory](/images/Rule.png) | 脚本无法定位服务器或其在 Active Directory 中的站点 | The_script_cannot_locate_the_server_or_its_site_in_Active_Directory | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_search_for_objects_in_the_schema_directory_partition_failed_5_Rule](/images/Rule.png) | 在架构目录分区中搜索对象失败 | The_search_for_objects_in_the_schema_directory_partition_failed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_security_descriptor_propagation_task_encountered_an_error_5_Rule](/images/Rule.png) | 安全描述符传播任务遇到错误 | The_security_descriptor_propagation_task_encountered_an_error_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_server_has_moved_between_sites](/images/Rule.png) | 服务器已在各站点之间移动 | The_server_has_moved_between_sites | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | False |
![The_Services_container_has_more_than_one_object_of_class_msExchConfigurationContainer_as_an_immediate_child_5_Rule](/images/Rule.png) | 服务容器有多个类 msExchConfigurationContainer 的对象作为直接子对象 | The_Services_container_has_more_than_one_object_of_class_msExchConfigurationContainer_as_an_immediate_child_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_site_cannot_be_found_5_Rule](/images/Rule.png) | 找不到站点 | The_site_cannot_be_found_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_site_contains_one_or_more_domain_controllers_but_is_not_connected_by_any_site_links_5_Rule](/images/Rule.png) | 站点包含一个或多个域控制器,但是没有被任何站点链接所连接 | The_site_contains_one_or_more_domain_controllers_but_is_not_connected_by_any_site_links_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_site_name_cannot_be_queried_for_5_Rule](/images/Rule.png) | 无法查询站点名 | The_site_name_cannot_be_queried_for_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_SMTP_domain_administrative_namespace_is_not_available_at_this_time_5_Rule](/images/Rule.png) | SMTP 域管理命名空间此时不可用 | The_SMTP_domain_administrative_namespace_is_not_available_at_this_time_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_system_clock_has_not_been_synchronized_for_some_time_5_Rule](/images/Rule.png) | 系统时钟在一段时间内未同步 | The_system_clock_has_not_been_synchronized_for_some_time_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_system_failed_to_promote_this_server_into_a_Global_Catalog_5_Rule](/images/Rule.png) | 系统将此服务器提升到全局编录失败 | The_system_failed_to_promote_this_server_into_a_Global_Catalog_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_task_that_monitors_Active_Directory_for_changes_in_the_Inter_Site_Transport_objects_failed_to_start_5_Rule](/images/Rule.png) | 为站点间传输对象的更改监视 Active Directory 的任务启动失败 | The_task_that_monitors_Active_Directory_for_changes_in_the_Inter_Site_Transport_objects_failed_to_start_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_user_or_computer_does_not_have_access_to_a_GPO_5_Rule](/images/Rule.png) | 用户或计算机没有权限访问 GPO | The_user_or_computer_does_not_have_access_to_a_GPO_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_user_or_computer_does_not_pass_the_filter_check_to_the_GPO_5_Rule](/images/Rule.png) | 用户或计算机未通过对 GPO 的筛选器检查 | The_user_or_computer_does_not_pass_the_filter_check_to_the_GPO_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![The_WMI_service_is_disabled.__A_Group_Policy_object_has_not_been_processed_5_Rule](/images/Rule.png) | WMI 服务被禁用。 尚未处理组策略对象 | The_WMI_service_is_disabled.__A_Group_Policy_object_has_not_been_processed_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_domain_controller_failed_to_register_as__and_will_not_advertise_as__a_global_catalog_5_Rule](/images/Rule.png) | 此域控制器未能注册为(并且将不会公布为)全局编录 | This_domain_controller_failed_to_register_as__and_will_not_advertise_as__a_global_catalog_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_domain_controller_has_been_promoted_to_PDC_5_Rule](/images/Rule.png) | 此域控制器已提升到 PDC | This_domain_controller_has_been_promoted_to_PDC_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_domain_controller_will_not_start_up_because_its_machine_account_has_been_deleted_5_Rule](/images/Rule.png) | 此域控制器将不会启动,因为它的计算机帐户已被删除 | This_domain_controller_will_not_start_up_because_its_machine_account_has_been_deleted_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_server_cannot_process_the_replication_request_5_Rule](/images/Rule.png) | 此服务器无法处理复制请求 | This_server_cannot_process_the_replication_request_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_server_is_no_longer_a_domain_controller_5_Rule](/images/Rule.png) | 此服务器不再是域控制器 | This_server_is_no_longer_a_domain_controller_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_source_server_failed_to_add_schema_information_for_the_mail_replication_request_5_Rule](/images/Rule.png) | 此源服务器无法为邮件复制请求添加架构信息 | This_source_server_failed_to_add_schema_information_for_the_mail_replication_request_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![This_source_server_failed_to_generate_the_changes_5_Rule](/images/Rule.png) | 此源服务器无法生成更改 | This_source_server_failed_to_generate_the_changes_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Thread_in_directory_is_waiting_for_remote_procedure_call_5_Rule](/images/Rule.png) | [弃用] 目录中的线程正在等待远程过程调用 | Thread_in_directory_is_waiting_for_remote_procedure_call_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Transport_initialization_failure_5_Rule](/images/Rule.png) | 传输初始化失败 | Transport_initialization_failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Trusted_Domain_List_Update_Failure_5_Rule](/images/Rule.png) | 可信域列表更新失败 | Trusted_Domain_List_Update_Failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Two_replication_partners_have_an_inconsistent_view_of_the_FSMO_role_holders](/images/Rule.png) | [弃用] 两个复制伙伴对 FSMO 角色持有者的观点不一致 | Two_replication_partners_have_an_inconsistent_view_of_the_FSMO_role_holders | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | False | True |
![Unable_to_establish_connection_with_any_Global_Catalog_s__5_Rule](/images/Rule.png) | 无法与任何全局编录建立连接 | Unable_to_establish_connection_with_any_Global_Catalog_s__5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Unable_to_establish_connection_with_server_5_Rule](/images/Rule.png) | 无法与服务器建立连接 | Unable_to_establish_connection_with_server_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Unable_to_open_performance_counters_5_Rule](/images/Rule.png) | 无法打开性能计数器 | Unable_to_open_performance_counters_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Unable_to_set_privileges_necessary_for_security_checks_5_Rule](/images/Rule.png) | 无法设置进行安全性检查所需的特权 | Unable_to_set_privileges_necessary_for_security_checks_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Unexpected_Error_applying_group_policy_to_machine_account_5_Rule](/images/Rule.png) | 将组策略应用于计算机帐户时发生意外错误 | Unexpected_Error_applying_group_policy_to_machine_account_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Unexpected_SAM_Failure_5_Rule](/images/Rule.png) | 意外 SAM 失败 | Unexpected_SAM_Failure_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_access_information_in_the_registry_5_Rule](/images/Rule.png) | Windows 无法访问注册表中的信息 | Windows_cannot_access_information_in_the_registry_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_determine_the_role_of_this_computer._5_Rule](/images/Rule.png) | Windows 无法确定此计算机的角色。 | Windows_cannot_determine_the_role_of_this_computer._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_determine_the_user_or_computer_name._5_Rule](/images/Rule.png) | Windows 无法确定用户或计算机名。 | Windows_cannot_determine_the_user_or_computer_name._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_load_extension_5_Rule](/images/Rule.png) | Windows 无法加载扩展 | Windows_cannot_load_extension_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_obtain_the_domain_controller_name_for_your_computer_network._5_Rule](/images/Rule.png) | Windows 无法获取您的计算机网络的域控制器名称。 | Windows_cannot_obtain_the_domain_controller_name_for_your_computer_network._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_cannot_read_the_history_of_GPOs_from_the_registry._5_Rule](/images/Rule.png) | Windows 无法读取注册表中 GPO 的历史记录。 | Windows_cannot_read_the_history_of_GPOs_from_the_registry._5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_Directory_Service__Active_Directory__cannot_be_initialized_5_Rule](/images/Rule.png) | Windows 目录服务 (Active Directory) 无法初始化 | Windows_Directory_Service__Active_Directory__cannot_be_initialized_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_Directory_Service__Active_Directory__exception_5_Rule](/images/Rule.png) | Windows 目录服务 (Active Directory) 异常 | Windows_Directory_Service__Active_Directory__exception_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![Windows_is_setting_a_registry_value_5_Rule](/images/Rule.png) | Windows 正在设置注册表值 | Windows_is_setting_a_registry_value_5_Rule | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |
![WMI_Replication_Provider_is_not_installed_Replication_cannot_be_monitored_fully](/images/Rule.png) | 没有安装 WMI 复制提供程序,无法完全监视复制 | WMI_Replication_Provider_is_not_installed_Replication_cannot_be_monitored_fully | Microsoft.Windows.Server.2008.AD.DomainControllerRole | EventCollection | True | True |