| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Active Directory Lightweight Directory Service cannot allocate a new domain controller GUID | Active_Directory_cannot_allocate_a_new_domain_controller_GUID_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot be initialized | Active_Directory_cannot_be_initialized_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot boot normally because the database was in an incorrect state | Active_Directory_cannot_boot_normally_because_the_database_was_in_an_incorrect_state_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot change the state of the database during a backup operation | Active_Directory_cannot_change_the_state_of_the_database_during_a_backup_operation_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot construct a mutual authentication Service Principal Name | Active_Directory_cannot_construct_a_mutual_authentication_Service_Principal_Name_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot create a new security descriptor | Active_Directory_cannot_create_a_new_security_descriptor_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot create the default security descriptor for an application directory partition | Active_Directory_cannot_create_the_default_security_descriptor_for_an_application_directory_partition_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot delete the access control entry (ACE) for the domain Domain Controllers security group on a newly created application directory partition | Active_Directory_cannot_delete_the_access_control_entry__ACE__for_the_domain_Domain_Controllers_security_group_on_a_newly_created_application_directory_partition_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot delete the key "New Database GUID" during the restore recovery process | Active_Directory_cannot_delete_the_key_New_Database_GUID_during_the_restore_recovery_process_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot find any RPC protocol sequences installed | Active_Directory_cannot_find_any_RPC_protocol_sequences_installed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot function normally | Active_Directory_cannot_function_normally_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot perform an authenticated RPC call to another DC because the SPN for the destination DC is not registered on the KDC | Active_Directory_cannot_perform_an_authenticated_RPC_call_to_another_DC_because_the_SPN_for_the_destination_DC_is_not_registered_on_the_KDC_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot rebuild the following number of indices and has failed | Active_Directory_cannot_rebuild_the_following_number_of_indices_and_has_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot replicate configuration and schema information | Active_Directory_cannot_replicate_configuration_and_schema_information_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot set the replication consistency registry key | Active_Directory_cannot_set_the_replication_consistency_registry_key_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot update object due to insufficient memory | Active_Directory_cannot_update_object_due_to_insufficient_memory_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot update the functional level on the NTDS Settings object for the local domain controller | Active_Directory_cannot_update_the_functional_level_on_the_NTDS_Settings_object_for_the_local_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot validate the functional level of the domain controller | Active_Directory_cannot_validate_the_functional_level_of_the_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot write a new security descriptor for object | Active_Directory_cannot_write_a_new_security_descriptor_for_object_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service encountered a replication error and replication will be delayed. | Active_Directory_encountered_a_replication_error.__Replication_will_be_delayed._5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service has failed to upgrade a critical index as part of initialization | Active_Directory_has_failed_to_upgrade_a_critical_index_as_part_of_initialization_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service shadow copy restore was unsuccessful. The contents of Active Directory Lightweight Directory Service are unpredictable. | Active_Directory_shadow_copy_restore_was_unsuccessful.__The_contents_of_Active_Directory_are_unpredictable._5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot allocate memory | AD_cannot_allocate_memory_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot find the NTDS object for this domain controller | AD_cannot_find_the_NTDS_object_for_this_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot find the partition container | AD_cannot_find_the_partition_container_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot release memory | AD_cannot_release_memory_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot update object because the disk containing the database is full | AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD cannot update the object | AD_cannot_update_the_object_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD configuration information is missing from the registry | AD_configuration_information_is_missing_from_the_registry_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD database is corrupt | AD_database_is_corrupt_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD internal error: reinstall server | AD_internal_error__reinstall_server_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| An error occurred while granting rights to the Domain Administrators group | An_error_occurred_while_granting_rights_to_the_Domain_Administrators_group_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| An internal AD error occurred | An_internal_AD_error_occurred_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| An Intersite Messaging Service request to modify an LDAP object failed | An_Intersite_Messaging_Service_request_to_modify_an_LDAP_object_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| An object cannot inherit a security identifier (SID) from another object | An_object_cannot_inherit_a_security_identifier__SID__from_another_object_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| An object has been duplicated during a cross domain move | An_object_has_been_duplicated_during_a_cross_domain_move_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Attempts to backup or restore Active Directory Lightweight Directory Service have failed or will fail | Attempts_to_backup_or_restore_Active_Directory_have_failed_or_will_fail_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Attempts to update Active Directory Lightweight Directory Service are failing | Attempts_to_update_Active_Directory_are_failing_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| A certificate was not authenticated because the computer it came from is not a domain controller | A_certificate_was_not_authenticated_because_the_computer_it_came_from_is_not_a_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| A domain controller made a replication request for a writable directory partition that has been denied by the local domain controller | A_domain_controller_made_a_replication_request_for_a_writable_directory_partition_that_has_been_denied_by_the_local_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| A lingering object has been detected and replication has been blocked | A_lingering_object_has_been_detected.__Replication_has_been_blocked._5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| A schema collision occurred while replicating attribute definitions | A_schema_collision_occurred_while_replicating_attribute_definitions_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| A schema collision occurred while replicating a class definition | A_schema_collision_occurred_while_replicating_a_class_definition_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Certificate for intersite replication was rejected | Certificate_for_intersite_replication_was_rejected_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Classes from COM.DLL not registered | Classes_from_COM.DLL_not_registered_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Collection rule for the Replication Collisions Report | Collection_rule_for_the_Replication_Collisions_Report_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | False |
| Collection rule for the Replication Failures Report | Collection_rule_for_the_Replication_Failures_Report_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | False |
| DC is both a Global Catalog and the Infrastructure Update master | DC_is_both_a_Global_Catalog_and_the_Infrastructure_Update_master_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Direct replication cannot occur as configured | Direct_replication_cannot_occur_as_configured_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Duplicate moved object detected | Duplicate_moved_object_detected_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Format of schedule object attribute unrecognized | Format_of_schedule_object_attribute_unrecognized_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Group Cache Refresh cannot obtain a connection schedule to it's preferred site | Group_Cache_Refresh_cannot_obtain_a_connection_schedule_to_it_s_preferred_site_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Group Cache Refresh cannot schedule an update | Group_Cache_Refresh_cannot_schedule_an_update_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Group Cache Refresh found a GC in a non-optimal site | Group_Cache_Refresh_found_a_GC_in_a_non_optimal_site_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Group Cache Refresh has reached the user limit for this domain controller | Group_Cache_Refresh_has_reached_the_user_limit_for_this_domain_controller_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Group Refresh updates are falling behind | Group_Refresh_updates_are_falling_behind_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Internal async schema cache update failed | Internal_async_schema_cache_update_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Intersite Messaging Service SMTP Transport received a delivery failure | Intersite_Messaging_Service_SMTP_Transport_received_a_delivery_failure_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging Service SMTP Transport plug-in failed to add SMTP routing domain | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_add_SMTP_routing_domain_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging Service SMTP Transport plug-in failed to bind the event sink ismsink.dll to the SMTP Service | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_bind_the_event_sink_ismsink.dll_to_the_SMTP_Service_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging Service SMTP Transport plug-in failed to read the SMTP mail message | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_read_the_SMTP_mail_message_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging Service SMTP Transport plug-in failed to register the event sink ismsink.dll | Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_register_the_event_sink_ismsink.dll_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging (ISM) Service SMTP Transport plug-in has determined that one or more classes from CDO library are not registered as expected | Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_determined_that_one_or_more_classes_from_CDO_library_are_not_registered_as_expected_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Inter-Site Messaging (ISM) Service SMTP Transport plug-in has encountered an unexpected error from CDO library | Inter_Site_Messaging__ISM__Service_SMTP_Transport_plug_in_has_encountered_an_unexpected_error_from_CDO_library_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Invalid object class | Invalid_object_class_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Invalid site link definition will be ignored | Invalid_site_link_definition_will_be_ignored_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| ISM cannot receive messages | ISM_cannot_receive_messages_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| ISM Request Failure | ISM_Request_Failure_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| ISM transport has been shut down | ISM_transport_has_been_shut_down_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC cannot compute a replication path | KCC_cannot_compute_a_replication_path_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC cannot configure replication topology due to ISM failure | KCC_cannot_configure_replication_topology_due_to_ISM_failure_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC failed to initialize | KCC_failed_to_initialize_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC failed to stop | KCC_failed_to_stop_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC failed to update replication topology | KCC_failed_to_update_replication_topology_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| KCC is ignoring a replication path because non-intersecting schedules are preventing replication along that path | KCC_is_ignoring_a_replication_path_because_non_intersecting_schedules_are_preventing_replication_along_that_path_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| LDAP agent cannot open security provider | LDAP_agent_cannot_open_security_provider_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Local cleanup failed on cross domain move | Local_cleanup_failed_on_cross_domain_move_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| AD Web Services not running | Microsoft.Windows.Server.LDS.InstanceRoleSeed.ADWSNotRunning | Microsoft.Windows.Server.LDS.InstanceRoleSeed | Custom | True | True |
| Disk I/O performance collection | Microsoft.Windows.Server.LDS.InstanceRoleSeed.DiskIO.PerformanceCollection | Microsoft.Windows.Server.LDS.InstanceRoleSeed | PerformanceCollection | True | False |
| Disk I/O threshold has been exceeded | Microsoft.Windows.Server.LDS.InstanceRoleSeed.DiskIO.ThresholdExceeded | Microsoft.Windows.Server.LDS.InstanceRoleSeed | PerformanceCollection | True | True |
| Replication Change Injection Rule | Microsoft.Windows.Server.LDS.Replication.ChangeInjection.Rule | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | Custom | True | False |
| Replication Latency Performance Collection | Microsoft.Windows.Server.LDS.Replication.Monitoring.Latency.PerformanceCollection | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | PerformanceCollection | True | False |
| Replication Monitoring (Latency) | Microsoft.Windows.Server.LDS.Replication.Monitoring.Latency.Rule | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | Custom | True | False |
| Replication Change Delay Performance Collection | Microsoft.Windows.Server.LDS.Replication.Monitoring.Update.PerformanceCollection | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | PerformanceCollection | False | False |
| Replication Monitoring (Update) | Microsoft.Windows.Server.LDS.Replication.Monitoring.Update.Rule | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | Custom | True | False |
| Replication Performance Collection Helper (Source) | Microsoft.Windows.Server.LDS.Replication.PerfCollectionSource.Helper | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | Custom | False | False |
| Replication Performance Collection Helper (Target) | Microsoft.Windows.Server.LDS.Replication.PerfCollectionTarget.Helper | Microsoft.Windows.Server.LDS.ApplicationPartitionInstance | Custom | False | False |
| Drive Hosting Database Available Disk Space Data Collection | Microsoft.Windows.Server.LDS.Service.DatabaseAndLogSize.DatabaseFreeSpacePerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| Database Size Data Collection | Microsoft.Windows.Server.LDS.Service.DatabaseAndLogSize.DatabaseSizePerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| Drive Hosting Log Files Available Disk Space Data Collection | Microsoft.Windows.Server.LDS.Service.DatabaseAndLogSize.LogFreeSpacePerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| Log Files Data Collection | Microsoft.Windows.Server.LDS.Service.DatabaseAndLogSize.LogSizePerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| Host Name/Port Update Failed (Local) | Microsoft.Windows.Server.LDS.Service.DnsPortLocalUpdateFailure | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Host Name/Port Update Failed (Remote) | Microsoft.Windows.Server.LDS.Service.DnsPortRemoteUpdateFailure | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| LDAP Bind Performance Data Collection | Microsoft.Windows.Server.LDS.Service.LDAPBind.NonSSL.PerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| LDAP Bind Performance Data Collection | Microsoft.Windows.Server.LDS.Service.LDAPBind.SSL.PerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | False | False |
| Memory Usage Performance Data Collection | Microsoft.Windows.Server.LDS.Service.MemoryUsage.PerformanceCollection | Microsoft.Windows.Server.LDS.Service | PerformanceCollection | True | False |
| Service Information Update Failed | Microsoft.Windows.Server.LDS.Service.ServerInfoUpdateFailed | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Missing X.509 Domain Controller certificate | Missing_X.509_Domain_Controller_certificate_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Name conflict detected while replicating partition | Name_conflict_detected_while_replicating_partition_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| None of the preferred bridgehead servers can replicate the directory partition | None_of_the_preferred_bridgehead_servers_can_replicate_the_directory_partition_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Replication error | Replication_error_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Replication has been aborted | Replication_has_been_aborted_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Replication has been stopped with a source | Replication_has_been_stopped_with_a_source__5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Schedule attribute of siteLink object is invalid | Schedule_attribute_of_siteLink_object_is_invalid_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Schema cache load failed to convert the string default SD on class-schema object | Schema_cache_load_failed_to_convert_the_string_default_SD_on_class_schema_object_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Schema cache load failed to inherit all attributes for the class | Schema_cache_load_failed_to_inherit_all_attributes_for_the_class_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Security Descriptor Propagator has been terminated with error | Security_Descriptor_Propagator_has_been_terminated_with_error_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Site has no NTDS Site Settings object | Site_has_no_NTDS_Site_Settings_object_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Site link was not found | Site_link_was_not_found_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Active Directory Lightweight Directory Service database is corrupt | The_Active_Directory_database_is_corrupt_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The AD replication process is unable to continue | The_AD_replication_process_is_unable_to_continue_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The attempt to change the directory partition name to a name that is not conflicting failed | The_attempt_to_change_the_directory_partition_name_to_a_name_that_is_not_conflicting_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The attempt to discover the tombstone lifetime from the domain failed | The_attempt_to_discover_the_tombstone_lifetime_from_the_domain_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The attempt to move a child object to a container failed | The_attempt_to_move_a_child_object_to_a_container_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The behavior version of the dsa object is higher than the behavior version of this OS | The_behavior_version_of_the_dsa_object_is_higher_than_the_behavior_version_of_this_OS_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The connection object translation task in the consistency checker is disabled | The_connection_object_translation_task_in_the_consistency_checker_is__disabled_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The default NTFS security settings have not been applied to Active Directory Lightweight Directory Service folders | The_default_NTFS_security_settings_have_not_been_applied_to_Active_Directory_folders_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The directory forest behavior version and/or domain behavior version are changed to values incompatible with this version of Windows | The_directory_forest_behavior_version_and_or_domain_behavior_version_are_changed_to_values_incompatible_with_this_version_of_Windows_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The directory partition cannot be replicated over a specified transport because none of the domain controllers support the transport | The_directory_partition_cannot_be_replicated_over_a_specified_transport_because_none_of_the_domain_controllers_support_the_transport_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The domain behavior version or the forest behavior version is incompatible with this version of Windows | The_domain_behavior_version_or_the_forest_behavior_version_is_incompatible_with_this_version_of_Windows_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The DS Service Configuration object is not found. You will not be able to set service parameters. | The_DS_Service_Configuration_object_is_not_found.__You_will_not_be_able_to_set_service_parameters._5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Intersite Messaging service failed to start the RPC server because it was unable to register authentication information. | The_Intersite_Messaging_service_failed_to_start_the_RPC_server_because_it_was_unable_to_register_authentication_information._5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service cannot allocate memory | The_Inter_Site_Messaging_Service_cannot_allocate__memory_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service cannot perform a requested LDAP bind operation | The_Inter_Site_Messaging_Service_cannot_perform_a_requested_LDAP_bind_operation_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service encountered an error while attempting to start the Service Control Dispatcher | The_Inter_Site_Messaging_Service_encountered_an_error_while__attempting_to_start_the_Service_Control_Dispatcher_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service encountered a malformed transport distinguished name | The_Inter_Site_Messaging_Service_encountered_a_malformed__transport_distinguished_name_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service failed to create an event | The_Inter_Site_Messaging_Service_failed_to_create_an_event_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service failed to initialize | The_Inter_Site_Messaging_Service_failed_to_initialize_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service failed to start | The_Inter_Site_Messaging_Service_failed_to_start_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service failed to start the RPC server | The_Inter_Site_Messaging_Service_failed_to_start_the_RPC_server_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service failed to wait for a message | The_Inter_Site_Messaging_Service_failed_to_wait_for_a_message_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service requested to abandon an LDAP notification message | The_Inter_Site_Messaging_Service_requested_to_abandon_an_LDAP_notification_message_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Inter-Site Messaging Service SMTP Transport plug-in failed to remove SMTP routing domain | The_Inter_Site_Messaging_Service_SMTP_Transport_plug_in_failed_to_remove__SMTP_routing_domain_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Knowledge Consistency Checker (KCC) cannot run successfully. Replication may be affected | The_Knowledge_Consistency_Checker__KCC__cannot_run_successfully.__Replication_may_be_affected_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Knowledge Consistency Checker (KCC) detected an incompatible up-to-dateness vector format | The_Knowledge_Consistency_Checker__KCC__detected_an_incompatible_up_to_dateness_vector_format_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The local domain controller has attempted to replicate an object which is not present because it may have been deleted and already garbage collected | The_local_domain_controller_has_attempted_to_replicate_an_object_which_is_not_present_because_it_may_have_been_deleted_and_already_garbage_collected_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The local domain controller has denied a replication attempt on a directory partition. This may pose a security risk | The_local_domain_controller_has_denied_a_replication_attempt_on_a_directory_partition.__This_may_pose_a_security_risk_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The non-domain naming context has no security descriptor reference domain | The_non_domain_naming_context_has_no_security_descriptor_reference_domain_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The search for objects in the schema directory partition failed | The_search_for_objects_in_the_schema_directory_partition_failed_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The security descriptor propagation task encountered an error | The_security_descriptor_propagation_task_encountered_an_error_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The Services container has more than one object of class msExchConfigurationContainer as an immediate child | The_Services_container_has_more_than_one_object_of_class_msExchConfigurationContainer_as_an_immediate_child_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The site cannot be found | The_site_cannot_be_found_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The site contains one or more domain controllers, but is not connected by any site links | The_site_contains_one_or_more_domain_controllers_but_is_not_connected_by_any_site_links_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The SMTP domain administrative namespace is not available at this time | The_SMTP_domain_administrative_namespace_is_not_available_at_this_time_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The system failed to promote this server into a Global Catalog | The_system_failed_to_promote_this_server_into_a_Global_Catalog_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| The task that monitors Active Directory Lightweight Directory Service for changes in the Inter-Site Transport objects failed to start | The_task_that_monitors_Active_Directory_for_changes_in_the_Inter_Site_Transport_objects_failed_to_start_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| This domain controller failed to register as (and will not advertise as) a global catalog | This_domain_controller_failed_to_register_as__and_will_not_advertise_as__a_global_catalog_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| This server cannot process the replication request | This_server_cannot_process_the_replication_request_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| This source server failed to add schema information for the mail replication request | This_source_server_failed_to_add_schema_information_for_the_mail_replication_request_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| This source server failed to generate the changes | This_source_server_failed_to_generate_the_changes_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Thread in directory is waiting for remote procedure call | Thread_in_directory_is_waiting_for_remote_procedure_call_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Transport initialization failure | Transport_initialization_failure_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Unable to establish connection with any Global Catalog(s) | Unable_to_establish_connection_with_any_Global_Catalog_s__5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Unable to establish connection with server | Unable_to_establish_connection_with_server_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Unable to open performance counters | Unable_to_open_performance_counters_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Unable to set privileges necessary for security checks | Unable_to_set_privileges_necessary_for_security_checks_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service cannot be initialized | Windows_Directory_Service__Active_Directory__cannot_be_initialized_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |
| Active Directory Lightweight Directory Service exception | Windows_Directory_Service__Active_Directory__exception_5_Rule | Microsoft.Windows.Server.LDS.Service | EventCollection | True | True |