Gestione account di sicurezza (SAM) ha rilevato un errore imprevisto.
Controllare se il Registro di sistema nel Visualizzatore eventi del computer che ha generato l'avviso contiene un evento con ID 7. Nel testo dell'evento ID 7, individuare il codice dell'errore e adottare le misure necessarie.
Per altre informazioni, vedere:
Target | Microsoft.Windows.Server.2016.AD.DomainControllerRole |
Category | EventCollection |
Enabled | True |
Event_ID | 7 |
Event Source | Microsoft-Windows-Kerberos-Key-Distribution-Center |
Alert Generate | False |
Remotable | True |
Event Log | System |
Comment | Mom2005ID='{85F08321-62BD-45DD-A364-9E7CB16704D5}';MOM2005GroupID= |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
CollectEventData | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
CollectEventDataWarehouse | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Unexpected_SAM_Failure_5_Rule" Comment="Mom2005ID='{85F08321-62BD-45DD-A364-9E7CB16704D5}';MOM2005GroupID=" Enabled="true" Target="AD2016Core!Microsoft.Windows.Server.2016.AD.DomainControllerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>7</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Microsoft-Windows-Kerberos-Key-Distribution-Center</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="CollectEventData" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>