All Rules in Microsoft.Windows.Server.2000 Management Pack

	DisplayName	Description	ID	Target	Category	Enabled	Instance Name	Counter Name	Frequency	Event_ID	Event Source	Alert Generate	Alert Severity	Alert Priority	Remotable	Event Log
	Run WMIAdap	Rule that executes the WMIAdap executable daily to repair the WMI repository if it becomes corrupt	Microsoft.Windows.Server.2000.Computer.RunWMIAdap	Microsoft.Windows.Server.2000.Computer	Maintenance	True			0	0		False			True
	Collection Rule for the Average Disk Queue Length 2000	Collects the performance counter LogicalDisk\Avg Disk Queue Length	Microsoft.Windows.Server.2000.LogicalDisk.AvgDiskQueueLength.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Avg. Disk Queue Length	300	0		False			True
	Collection Rule for Average Disk Seconds Per Read 2000	Collects the performance counter LogicalDisk\Avg Disk Sec Per Read	Microsoft.Windows.Server.2000.LogicalDisk.AvgDiskSecPerRead.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Avg. Disk sec/Read	300	0		False			True
	Collection Rule for Average Disk Seconds Per Transfer 2000	Collects the performance counter LogicalDisk\Avg Disk Sec Per Transfer	Microsoft.Windows.Server.2000.LogicalDisk.AvgDiskSecPerTransfer.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Avg. Disk sec/Transfer	300	0		False			True
	Collection Rule for Average Disk Seconds Per Write 2000	Collects the performance counter LogicalDisk\Avg Disk Sec Per Write	Microsoft.Windows.Server.2000.LogicalDisk.AvgDiskSecPerWrite.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Avg. Disk sec/Write	300	0		False			True
	Collection rule for Current Disk Queue Length 2000	Collects the performance counter LogicalDisk\Current Disk Queue Length	Microsoft.Windows.Server.2000.LogicalDisk.CurrentDiskQueueLength.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Current Disk Queue Length	300	0		False			True
	Collection Rule for Disk Bytes Per Second 2000	Collects the performance counter LogicalDisk\Disk Bytes Per Second	Microsoft.Windows.Server.2000.LogicalDisk.DiskBytesPerSec.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Disk Bytes/sec	300	0		False			True
	Collection Rule for Disk Reads Per Second 2000	Collects the performance counter LogicalDisk\Disk Reads Per Second	Microsoft.Windows.Server.2000.LogicalDisk.DiskReadsPerSec.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Disk Reads/sec	300	0		False			True
	Collection Rule for Disk Writes Per Second 2000	Collects the performance counter LogicalDisk\Disk Writes Per Second	Microsoft.Windows.Server.2000.LogicalDisk.DiskWritesPerSec.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Disk Writes/sec	300	0		False			True
	Logical Disk Free Megabytes 2000	The space in megabytes on the logical disk that is unallocated	Microsoft.Windows.Server.2000.LogicalDisk.FreeMB.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	Free Megabytes	300	0		False			True
	\% Logical Disk Free Space 2000	The percentage of total usable space on the logical disk that is unallocated	Microsoft.Windows.Server.2000.LogicalDisk.FreeSpace.Collection	Microsoft.Windows.Server.2000.LogicalDisk	PerformanceCollection	True	LogicalDisk	\% Free Space	300	0		False			True
	Network Adapter Bytes Received per Second 2000	Collects the performance counter Network Interface\Bytes Received/sec	Microsoft.Windows.Server.2000.NetworkAdapter.BytesReceivedPerSec.Collection	Microsoft.Windows.Server.2000.NetworkAdapter	PerformanceCollection	True	Network Interface	Bytes Received/sec	300	0		False			True
	Network Adapter Bytes Sent per Second 2000	Collects the performance counter Network Interface\Bytes Sent/sec	Microsoft.Windows.Server.2000.NetworkAdapter.BytesSentPerSec.Collection	Microsoft.Windows.Server.2000.NetworkAdapter	PerformanceCollection	True	Network Interface	Bytes Sent/sec	300	0		False			True
	Network Adapter Bytes Total per Second 2000	Collects the performance counter Network Interface/Bytes Total/sec	Microsoft.Windows.Server.2000.NetworkAdapter.BytesTotalPerSec.Collection	Microsoft.Windows.Server.2000.NetworkAdapter	PerformanceCollection	True	Network Interface	Bytes Total/sec	300	0		False			True
	Checking File System Occurred on Startup	This event indicates that the system ran a chkdsk on startup	Microsoft.Windows.Server.2000.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	1001	Winlogon	False			True	Application
	Collection Rule for Windows Clean Restart Events	This rule collects the events indicating a clean Windows shutdown.	Microsoft.Windows.Server.2000.OperatingSystem.CleanShutdown.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	6006	Eventlog	False			True	System
	Collection Rule for Windows Dirty Shutdown Events	This rule collects events indicating a dirty Windows shutdown.	Microsoft.Windows.Server.2000.OperatingSystem.DirtyShutdown.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	6008	Eventlog	False			True	System
	Duplicate computer name was detected	A duplicate computer name was detected on the network.	Microsoft.Windows.Server.2000.OperatingSystem.DuplicateNameonNetwork.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0	netbt	True	Warning	Normal	True	System
	Event Log File is Full	The event log file is full.	Microsoft.Windows.Server.2000.OperatingSystem.EventLogFull.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	6000	Eventlog	True	Warning	Normal	True	System
	Duplicate IP Address has been Detected	A duplicate IP address has been detected on the network	Microsoft.Windows.Server.2000.OperatingSystem.IPAddressConflict.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	4199	TCPIP	True	Error	Normal	True	System
	Disk Group Auto Import Failed	Logical Disk Manager reports a failed disk group import	Microsoft.Windows.Server.2000.OperatingSystem.LDMAutoImportFailed.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	6	dmboot	True	Warning	Normal	True	System
	Disk can not be read	Logical Disk Manager reports that the disk can not be read	Microsoft.Windows.Server.2000.OperatingSystem.LDMCantReadDisk.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	31	DISK	True	Warning	Normal	True	System
	Disk Group Failed	Logical Disk Manager reports a group has failed	Microsoft.Windows.Server.2000.OperatingSystem.LDMDiskGroupFailed.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	5	dmboot	True	Warning	Normal	True	System
	Volume Not Started	Logical Disk Manager reports a volume has not started	Microsoft.Windows.Server.2000.OperatingSystem.LDMVolumeNotStarted.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0	dmboot	True	Warning	Normal	True	System
	Memory Available Megabytes 2000	Collects the performance counter Memory\Available MBytes	Microsoft.Windows.Server.2000.OperatingSystem.MemoryAvailableMBytes.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Memory	Available MBytes	300	0		False			True
	Memory Page Reads per Second 2000	Collects the performance counter Memory\Page Reads/Sec.	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPageReadsPerSec.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Memory	Page Reads/sec	300	0		False			True
	Memory Pages per Second 2000	Collects the performance counter Memory\Pages Reads/Sec.	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPagesPerSec.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Memory	Pages/sec	300	0		False			True
	Memory Page Writes per Second 2000	Collects the performance counter Memory\Page Writes/Sec.	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPageWritesPerSec.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Memory	Page Writes/sec	300	0		False			True
	Memory \% Committed Bytes in Use 2000	Collects the performance counter Memory\\% Committed Bytes in Use	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Memory	\% Committed Bytes In Use	300	0		False			True
	Memory Pool Non-paged Bytes 2000	Collects the performance counter Memory\Pool Nonpaged Bytes	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPoolNonPagedBytes.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	False	Memory	Pool Nonpaged Bytes	300	0		False			True
	Memory Pool Paged Bytes 2000	Collects the performance counter Memory\Pool Paged Bytes	Microsoft.Windows.Server.2000.OperatingSystem.MemoryPoolPagedBytes.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	False	Memory	Pool Paged Bytes	300	0		False			True
	Collection rule for Network Adapter was Disconnected from the Network.	Collection rule for events indicating the network adapter was disconnected from the network.	Microsoft.Windows.Server.2000.OperatingSystem.NetworkAdapterDisconnected.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	4202	TCPIP	False			True	Application
	NTFS - Delayed Write Lost	NT file system reports a delayed write was lost.	Microsoft.Windows.Server.2000.OperatingSystem.NTFSDelayedWriteLost.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	50	DISK	True	Warning	Normal	True	System
	NTFS - File System Corrupt	NT file system indicates a corrupt file system.	Microsoft.Windows.Server.2000.OperatingSystem.NTFSFileSystemCorrupt.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	41	DISK	True	Warning	Normal	True	System
	Collection rule for NTFS Quota Threshold Limit Reached	An NTFS disk quota threshold limit was reached.	Microsoft.Windows.Server.2000.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	40	DISK	False			True	Application
	Collection rule for NTFS Quota Threshold Reached	An NTFS disk quota threshold was reached.	Microsoft.Windows.Server.2000.OperatingSystem.NTFSQuotaThresholdReached.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	36	DISK	False			True	Application
	Page File Percentage Use 2000	Collection rule for the performance counter Paging File\\% Usage	Microsoft.Windows.Server.2000.OperatingSystem.PageFilePercentUsage.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Paging File	\% Usage	300	0		False			True
	Too many requests for performance counter data have failed	Too many requests for performance counter data have timed out and failed.	Microsoft.Windows.Server.2000.OperatingSystem.PerfCounterDataRequestTimeOut.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	1015	Perflib	True	Error	Normal	True	Application
	Performance registry corruption	Corruption was detected in the registry related to performance counters.	Microsoft.Windows.Server.2000.OperatingSystem.PerformanceRegistryCorruption.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0		True	Warning	Normal	True	Application
	Collection Rule for Windows Restart Events (restarted from bugcheck)	Collection rule for events indicating Windows restarted from bugcheck	Microsoft.Windows.Server.2000.OperatingSystem.RebootFromBugCheck.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0	Save Dump	False			True	System
	Collection Rule for Windows Restarted Events	This rule collects events indicating Windows has restarted	Microsoft.Windows.Server.2000.OperatingSystem.RestartEvent.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	6005	Eventlog	False			True	System
	A Service has Entered into an Unpredictable State	A service has entered an unpredictable state.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceEnteredUnpredictableState.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0	Service Control Manager	True	Error	Normal	True	System
	A Service is Misconfigured	A service has been detected as misconfigured.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceMisconfigured.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0		True	Error	Normal	True	System
	A Service or Driver Failed to Start	An event was detected indicating a service or driver failed to start.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceOrDriverFailedToStart.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	False			0	0		True	Warning	Normal	True	System
	Collection rule Service or Driver Failed to Start events	Collection rule for events indicating a service or driver has failed to start.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceOrDriverFailedToStart.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0		False			True	System
	A Service Terminated Unexpectedly	An event was collected indicating an unexpected service termination.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceTerminatedUnexpextedly.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	False			0	0		True	Warning	Normal	True	System
	Collection rule for unexpected service terminations	Collection rule for events indicating unexpected service terminations.	Microsoft.Windows.Server.2000.OperatingSystem.ServiceTerminatedUnexpextedly.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0		False			True	System
	A Share Configuration is Invalid	A share was detected as having invalid configuration.	Microsoft.Windows.Server.2000.OperatingSystem.ShareConfigurationInvalid.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	False			0	0	Server	True	Warning	Normal	True	System
	Collection rule for invalid Share Configuration Detected.	Collection rule for events indicating that a share has invalid configuration.	Microsoft.Windows.Server.2000.OperatingSystem.ShareConfigurationInvalid.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	0	Server	False			True	System
	A Software Update Installation Failed	A failed software update installation was detected.	Microsoft.Windows.Server.2000.OperatingSystem.SoftwareUpdateInstallationFailed.Alert	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	20	Windows Update Agent	True	Error	Normal	True	System
	Collection Rule for Software Update Installation Failed	Collection rule for events indicating a failed software update installation.	Microsoft.Windows.Server.2000.OperatingSystem.SoftwareUpdateInstallationFailed.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	20	Windows Update Agent	False			True	System
	Collection Rule for Software Updates Installation Events	Collection rule for events indicating that new software updates were installed.	Microsoft.Windows.Server.2000.OperatingSystem.SoftwareUpdatesInstalled.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	19	Automatic Updates	False			True	System
	Collection Rule for Software Updates Scheduled Installation Events	Collection rule for events indicating new software updates are scheduled.	Microsoft.Windows.Server.2000.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection	Microsoft.Windows.Server.2000.OperatingSystem	EventCollection	True			0	18	Automatic Updates	False			True	System
	System Context Switches per Second 2000	Collection rule for the performance counter System\Context Switches/sec	Microsoft.Windows.Server.2000.OperatingSystem.SystemContextSwitchesPerSec.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	System	Context Switches/sec	300	0		False			True
	System Processor Queue Length 2000	Collection rule for the performance counter System\Processor Queue Length.	Microsoft.Windows.Server.2000.OperatingSystem.SystemProcessorQueueLength.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	System	Processor Queue Length	300	0		False			True
	Total Processor \% DPC Time 2000	Collects the performance counter Processor\\% DPC Time	Microsoft.Windows.Server.2000.OperatingSystem.TotalPercentDPCTime.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	False	Processor	\% DPC Time	300	0		False			True
	Total Processor \% Interrupt Time 2000	Collects the performance counter Processor\\% Interrupt Time	Microsoft.Windows.Server.2000.OperatingSystem.TotalPercentInterruptTime.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	False	Processor	\% Interrupt Time	300	0		False			True
	Processor \% Processor Time Total 2000	Collects the performance counter Processor\\% Processor Time	Microsoft.Windows.Server.2000.OperatingSystem.TotalPercentProcessorTime.Collection	Microsoft.Windows.Server.2000.OperatingSystem	PerformanceCollection	True	Processor	\% Processor Time	300	0		False			True
	Physical Disk Average Disk Queue Length 2000	Collects the performance counter PhysicalDisk\Avg. Disk Queue Length	Microsoft.Windows.Server.2000.PhysicalDisk.AvgDiskQueueLength.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Avg. Disk Queue Length	300	0		False			True
	Physical Disk Average Disk Seconds per Read 2000	Collects the performance counter PhysicalDisk\Avg. Disk sec/Read	Microsoft.Windows.Server.2000.PhysicalDisk.AvgDiskSecPerRead.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Avg. Disk sec/Read	300	0		False			True
	Physical Disk Average Disk Seconds per Transfer 2000	Collects the performance counter PhysicalDisk\Avg. Disk sec/Transfer.	Microsoft.Windows.Server.2000.PhysicalDisk.AvgDiskSecPerTransfer.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Avg. Disk sec/Transfer	300	0		False			True
	Physical Disk Average Disk Seconds per Write 2000	Collects the performance counter PhysicalDisk\Avg. Disk sec/Write.	Microsoft.Windows.Server.2000.PhysicalDisk.AvgDiskSecPerWrite.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Avg. Disk sec/Write	300	0		False			True
	Physical Disk Current Disk Queue Length 2000	Collects the performance counter PhysicalDisk\Current Disk Queue Length	Microsoft.Windows.Server.2000.PhysicalDisk.CurrentDiskQueueLength.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Current Disk Queue Length	300	0		False			True
	Physical Disk Disk Bytes per Second 2000	Collects the performance counter PhysicalDisk\Disk Bytes/sec.	Microsoft.Windows.Server.2000.PhysicalDisk.DiskBytesPerSec.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	False	PhysicalDisk	Disk Bytes/sec	300	0		False			True
	Physical Disk Reads per Second 2000	Collects the performance counter PhysicalDisk\Disk Reads/sec	Microsoft.Windows.Server.2000.PhysicalDisk.DiskReadsPerSec.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Disk Reads/sec	300	0		False			True
	Physical Disk Writes per Second 2000	Collects the performance counter PhysicalDisk\Disk Writes/sec.	Microsoft.Windows.Server.2000.PhysicalDisk.DiskWritesPerSec.Collection	Microsoft.Windows.Server.2000.PhysicalDisk	PerformanceCollection	True	PhysicalDisk	Disk Writes/sec	300	0		False			True