| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| NPS: Accounting request message discarded | Sec 6274 - http://technet.microsoft.com/en-us/library/cc735351(v=ws.10).aspx | Microsoft.NetworkPolicyServer.NPSAccountingrequestmessagediscarded.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 6274 | Microsoft-Windows-Security-Auditing | True | Warning | Normal | True | Security |
| NPS: A RADIUS message does not meet the RADIUS protocol specification | NPS - 14/21 | Microsoft.NetworkPolicyServer.NPSARADIUSmessagedoesnotmeettheRADIUSprotocolspecification.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS Authentication Clients - Access-Accepts | The number of RADIUS Access-Accept packets sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessAccepts.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Accepts | 900 | 0 | | False | | | True | |
| NPS Authentication Clients - Access-Accepts / sec. | The average number of RADIUS Access-Accept packets per second sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessAcceptssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Accepts / sec. | 900 | 0 | | False | | | True | |
| NPS Authentication Clients - Access-Rejects | The number of RADIUS Access-Reject packets sent to this client. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessRejects.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Rejects | 900 | 0 | | False | | | True | |
| NPS Authentication Clients - Access-Rejects / sec. | The average number of RADIUS Access-Reject packets per second sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessRejectssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Rejects / sec. | 900 | 0 | | False | | | True | |
| NPS Authentication Clients - Access-Requests | The number of packets received on the authentication port. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessRequests.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Requests | 900 | 0 | | False | | | True | |
| NPS Authentication Clients - Access-Requests / sec. | The average number of packets per second received on the authentication port. | Microsoft.NetworkPolicyServer.NPSAuthenticationClientsAccessRequestssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Clients | Access-Requests / sec. | 900 | 0 | | False | | | True | |
| NPS: Authentication failed and the user was denied access | Sec 6273 - http://technet.microsoft.com/en-us/library/cc735399(v=ws.10).aspx
Override NAS Port Type | Microsoft.NetworkPolicyServer.NPSAuthenticationfailedandtheuserwasdeniedaccessFilter.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | | True | Warning | Normal | True | |
| NPS Authentication Server - Access-Accepts | The number of RADIUS Access-Accept packets sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessAccepts.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Accepts | 900 | 0 | | False | | | True | |
| NPS Authentication Server - Access-Accepts / sec. | The average number of RADIUS Access-Accept packets per second sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessAcceptssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Accepts / sec. | 900 | 0 | | False | | | True | |
| NPS Authentication Server - Access-Rejects | The number of RADIUS Access-Reject packets sent to this client. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessRejects.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Rejects | 900 | 0 | | False | | | True | |
| NPS Authentication Server - Access-Rejects / sec. | The average number of RADIUS Access-Reject packets per second sent. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessRejectssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Rejects / sec. | 900 | 0 | | False | | | True | |
| NPS Authentication Server - Access-Requests | The number of packets received on the authentication port. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessRequests.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Requests | 900 | 0 | | False | | | True | |
| NPS Authentication Server - Access-Requests / sec. | The average number of packets per second received on the authentication port. | Microsoft.NetworkPolicyServer.NPSAuthenticationServerAccessRequestssec.PerfRule | Microsoft.NetworkPolicyServer.NPSServers | PerformanceCollection | False | NPS Authentication Server | Access-Requests / sec. | 900 | 0 | | False | | | True | |
| NPS: Authentication successful and the user was granted access | Sec 6272 - http://technet.microsoft.com/en-us/library/cc735388(v=ws.10).aspx
Override NAS Port Type | Microsoft.NetworkPolicyServer.NPSAuthenticationsuccessfulandtheuserwasgrantedaccessFilter.EventRule | Microsoft.NetworkPolicyServer.NPSServers | EventCollection | True | | | 0 | 0 | | False | | | True | |
| NPS: No domain controllers are available. NPS cannot authenticate or authorize connection requests | NPS - 4401/4402 | Microsoft.NetworkPolicyServer.NPSNodomaincontrollersareavailable.NPScannotauthenticateorauthorizeconnectionrequests.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: NPS cannot communicate with a RADIUS client | NPS - 10/11/13 | Microsoft.NetworkPolicyServer.NPSNPScannotcommunicatewithaRADIUSclient.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: NPS configuration is not compliant with the feature set allowed for this version of Windows Server 2008 | NPS - 46 | Microsoft.NetworkPolicyServer.NPSNPSconfigurationisnotcompliantwiththefeaturesetallowedforthisversionofWindowsServer2008.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 46 | NPS | True | Error | Normal | True | System |
| NPS: NPS discarded an accounting request message | Sec 6275 - http://technet.microsoft.com/en-us/library/cc735334(v=ws.10).aspx | Microsoft.NetworkPolicyServer.NPSNPSdiscardedanaccountingrequestmessage.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 6275 | Microsoft-Windows-Security-Auditing | True | Warning | Normal | True | Security |
| NPS: NPS proxy cannot contact a remote RADIUS server | NPS- 24/33 | Microsoft.NetworkPolicyServer.NPSNPSproxycannotcontactaremoteRADIUSserver.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Error | Normal | True | System |
| NPS: NPS proxy received a response from an IP address that is not valid | NPS - 26/30 | Microsoft.NetworkPolicyServer.NPSNPSproxyreceivedaresponsefromanIPaddressthatisnotvalid.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: NPS proxy received a response from a RADIUS server that is not valid | NPS - 27/28/29/31/32 | Microsoft.NetworkPolicyServer.NPSNPSproxyreceivedaresponsefromaRADIUSserverthatisnotvalid.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: NPS received a malformed message from a RADIUS client | NPS - 15/16/17/18/19/20 | Microsoft.NetworkPolicyServer.NPSNPSreceivedamalformedmessagefromaRADIUSclient.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: NPS received an error from Windows Sockets | NPS - 22/23 | Microsoft.NetworkPolicyServer.NPSNPSreceivedanerrorfromWindowsSockets.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: Remote RADIUS server is not available | NPS - 34/36 | Microsoft.NetworkPolicyServer.NPSRemoteRADIUSserverisnotavailable | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Warning | Normal | True | System |
| NPS: The access of a NAP-capable computer has been limited or restricted | Sec 6276/6277 - http://technet.microsoft.com/en-us/library/cc735349(v=ws.10).aspx | Microsoft.NetworkPolicyServer.NPSTheaccessofaNAPcapablecomputerhasbeenlimitedorrestricted.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | Microsoft-Windows-Security-Auditing | True | Warning | Normal | True | Security |
| NPS: The hard disk is full. NPS could not delete the old log file to create free space | NPS - 43/44 | Microsoft.NetworkPolicyServer.NPSTheharddiskisfull.NPScouldnotdeletetheoldlogfiletocreatefreespace.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 0 | NPS | True | Error | Normal | True | System |
| NPS: There is a NPS proxy configuration error | NPS - 25 | Microsoft.NetworkPolicyServer.NPSThereisaNPSproxyconfigurationerror.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 25 | NPS | True | Warning | Normal | True | System |
| NPS: Unknown error conditions exist | NPS - 12 | Microsoft.NetworkPolicyServer.NPSUnknownerrorconditionsexist.Rule | Microsoft.NetworkPolicyServer.NPSServers | Alert | True | | | 0 | 12 | NPS | True | Warning | Normal | True | System |