AD cannot update object because the disk containing the database is full

AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule (Rule)

Knowledge Base article:

Summary

The Active Directory® directory service could not update an object on the local domain controller with the changes that were received from the source domain controller because the disk volume containing the Active Directory database is full.

Sample Event:

Active Directory could not update the following object on the local domain controller with changes received from the following source domain controller because the disk volume containing the Active Directory database is full.

Object: %1

Object GUID: %2

Source domain controller: %3

Resolutions

Delete unnecessary files, or move them to another volume. If the volume is a redundant array of independent disks (RAID) set, you might be able to add additional hard disks to increase the storage capacity. If the Active Directory® directory service database files and logs are stored in the same volume, you can separate them to create free disk space. Move either the files or the logs by using the Ntdsutil command-line tool.

External

For more information, see:

Element properties:

Target

Microsoft.Windows.Server.2008.AD.DomainControllerRole

Category

EventCollection

Enabled

True

Event_ID

1480

Event Source

NTDS Replication

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

AD cannot update object because the disk containing the database is full

{0}

Event Log

Directory Service

Comment

Mom2005ID='{E1EF172D-C0B4-4F07-AC2E-4CC548F79CE7}';MOM2005GroupID=

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule" Comment="Mom2005ID='{E1EF172D-C0B4-4F07-AC2E-4CC548F79CE7}';MOM2005GroupID=" Enabled="onEssentialMonitoring" Target="AD2008Core!Microsoft.Windows.Server.2008.AD.DomainControllerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Directory Service</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Directory Service</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1480</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>NTDS Replication</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="AD_cannot_update_object_because_the_disk_containing_the_database_is_full_5_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>