| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| WDSServer Network Availability: Contact the vendor or analyze network traffic | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.1024.1027.1032 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Network Availability: Contact the vendor of your custom client | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.1031.1033.1034.1035 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Network Availability: Restart the WDSServer service | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.1280.1283 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| PXE Provider Support: Confirm the permissions and registered providers | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.256 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Namespace registration: Specify the correct file path | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.256.257.258 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| PXE Provider Support: Ensure that the ProviderDLL registry key is valid | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.257.259 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| PXE Provider Support: Ensure that the IsCritical registry key is valid | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.258 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| PXE Provider Support: Examine the code of your custom provider or contact the vendor | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.260.263.266 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| PXE Provider Support: Fix other errors | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.261.265.268 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Initialization: Ensure that the registry settings and permissions are correct | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.513 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Provider Availability: Fix other errors | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.513.514.519 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Change multicast IP address | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.514.515 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Provider Availability: Replace the ProviderDll subkey | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.515 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Provider Availability: Replace the InitRoutine subkey | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.516 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Provider Availability: Examine the code or contact the vendor of the provider | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.518.520.522 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Content Provider Support: Ensure that the ProviderDLL registry key points to the correct file | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.592 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Content Provider Support: Contact the provider of the custom content | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.593.594.595.596.597.598.600 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Content Provider Support: Ensure that the content provider configuration settings are correct | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.599.601 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Initialization: Recreate the namespace | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.768.770.771 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Multicast Initialization: Reinstall the custom content provider and ensure that the registry permissions are correct | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.769 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| WDSServer Network Availability: Check the network configuration | Microsoft.Windows.Server.6.3.WDSRole.EventCollection.769.771.1029.1036 | Microsoft.Windows.Server.6.3.WDSRole | EventCollection | True | True |
| Collect WDS Multicast Server\Active Clients | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Active_Clients | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Multicast Server\Active Contents | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Active_Contents | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Multicast Server\Active Namespaces | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Active_Namespaces | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Multicast Server\Incoming Packets/Second (in Bytes) | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Incoming_Packets_Second_in_Bytes | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Multicast Server\Outgoing Packets/Second (in Bytes) | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Outgoing_Packets_Second_in_Bytes | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Multicast Server\Total Master Client Switches | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Multicast_Server.Total_Master_Client_Switches | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Server\Active Requests | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Server.Active_Requests | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Server\Processed/Second | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Server.Processed_Second | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS Server\Requests/Second | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_Server.Requests_Second | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS TFTP Server\Active Requests | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_TFTP_Server.Active_Requests | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| Collect WDS TFTP Server\Transfer Rate/Second (in Bytes) | Microsoft.Windows.Server.6.3.WDSRole.PerformanceCollection.WDS_TFTP_Server.Transfer_Rate_Second_in_Bytes | Microsoft.Windows.Server.6.3.WDSRole | PerformanceCollection | True | False |
| BCD File Access and Creation: Ensure that WDSServer has the correct permissions | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1280.1281.1283 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Verify file and registry permissions | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1284.1285.1295.1296.1297.1299.1300.1301 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Reinitialize the server | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1287.1302.1303.1304 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Add a bootable image to the .wim file | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1288 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Add the .wim file to the correct directory | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1289 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Ensure that the PXE provider can modify the BCD file | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1292.1293 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| BCD File Access and Creation: Associate the correct boot image | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1298 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| PXE Provider Initial Configuration: Contact the referral server | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1536 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| PXE Provider Initial Configuration: Initialize the server | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1794 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| PXE Provider Initial Configuration: Free up memory on the server | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1795 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| PXE Provider Initial Configuration: Check the network configuration | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1797 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| PXE Provider Initial Configuration: Register Wdsmgmt.dll | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.1809 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |
| Image Server Configuration: Examine the code or contact the provider of the custom client | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer.EventCollection.264 | Microsoft.Windows.Server.6.3.WDSRole.Service.DeploymentServer | EventCollection | True | True |