Trust Monitoring Write Error

Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementTrustMonitoringPolicyStoreWriteErrorMonitor (UnitMonitor)

Knowledge Base article:

Summary

This monitor indicates the AD FS trust monitoring service encountered an error while writing to an object in the AD FS configuration database.

Causes

The following are possible causes for this event:

The AD FS configuration database is not reachable.
The database service was interrupted or taken offline while the Federation Service was accessing the AD FS configuration database

Resolutions

The following are possible resolutions for this event:

Verify that the AD FS configuration database is reachable and that the identity of the AD FS service user account has the necessary permissions to write to the database. For more information, see Verify that the Federation Service can connect to the AD FS configuration database.
Retry write access to the AD FS configuration database after you investigate the status of the database service.

Element properties:

Target

Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement

Parent Monitor

System.Health.ConfigurationState

Category

ConfigurationHealth

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

Trust Monitoring Write Error

The AD FS trust monitoring service encountered an error while writing to an object in the AD FS configuration database. Check the Alert Context tab for event details about this object.

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementTrustMonitoringPolicyStoreWriteErrorMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType" ConfirmDelivery="true">

  <Category>ConfigurationHealth</Category>

  <AlertSettings AlertMessage="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementTrustMonitoringPolicyStoreWriteErrorMonitor_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="RepeatedEventRaised" MonitorTypeStateID="RepeatedEventRaised" HealthState="Warning"/>

    <OperationalState ID="TimerEventRaised" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <RepeatedComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>

    <RepeatedLogName>$Target/Host/Property[Type="Microsoft.ActiveDirectoryFederationServices.2016.FederationServer"]/ADFSEventLog$</RepeatedLogName>

    <RepeatedExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">159</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>MatchesMOM2005RegularExpression</Operator>

            <Pattern>(^AD FS$)</Pattern>

          </RegExExpression>

        </Expression>

      </And>

    </RepeatedExpression>

    <Consolidator>

      <ConsolidationProperties/>

      <TimeControl>

        <WithinTimeSchedule>

          <Interval>432000</Interval>

        </WithinTimeSchedule>

      </TimeControl>

      <CountingCondition>

        <Count>4</Count>

        <CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>

      </CountingCondition>

    </Consolidator>

    <TimerWaitInSeconds>129600</TimerWaitInSeconds>

  </Configuration>

</UnitMonitor>