Güvenlik Hesapları Yöneticisi (SAM) beklenmedik bir hata algıladı.
Bu uyarıyı oluşturan bilgisayarda, Olay Görüntüleyicisi'ndeki Sistem günlüğünde Olay Kimliği 7'nin olup olmadığını denetleyin. Olay Kimliği 7'nin olay metninde, hata kodunu bulun ve gerektiği şekilde düzeltin.
Daha fazla bilgi için, bkz.
Target | Microsoft.Windows.Server.2016.AD.DomainControllerRole |
Category | EventCollection |
Enabled | True |
Event_ID | 7 |
Event Source | Microsoft-Windows-Kerberos-Key-Distribution-Center |
Alert Generate | False |
Remotable | True |
Event Log | System |
Comment | Mom2005ID='{85F08321-62BD-45DD-A364-9E7CB16704D5}';MOM2005GroupID= |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
CollectEventData | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
CollectEventDataWarehouse | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Unexpected_SAM_Failure_5_Rule" Comment="Mom2005ID='{85F08321-62BD-45DD-A364-9E7CB16704D5}';MOM2005GroupID=" Enabled="true" Target="AD2016Core!Microsoft.Windows.Server.2016.AD.DomainControllerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>7</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Microsoft-Windows-Kerberos-Key-Distribution-Center</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="CollectEventData" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>