Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

3961 lines
179 KiB

  1. #include <windows.h>
  2. #include <stdio.h>
  3. #include <stdlib.h>
  4. #include <string.h>
  5. #include <lm.h>
  6. #define MAX_DB_EINTRIES 256
  7. #define MAX_SUB_STRINGS 8
  8. #define MAX_SUB_STR_LEN 128
  9. #define MAX_DESC_LEN 2048
  10. #define SIZE_EVENT_BUFFER 0x8000
  11. typedef struct _DBENTRY{
  12. DWORD dwID;
  13. DWORD dwTimeFirst;
  14. DWORD dwTimeLast;
  15. DWORD dwCount;
  16. char szSource[64];
  17. char szDescription[MAX_DESC_LEN];
  18. DWORD dwNumStrings;
  19. char szStrings[MAX_SUB_STRINGS][MAX_SUB_STR_LEN];
  20. } DBENTRY, *PDBENTRY;
  21. typedef enum {
  22. ePlaceHolder,
  23. eDbg,
  24. eCon,
  25. eBoth
  26. } OUTPUTS;
  27. #define SplitPrint() \
  28. if (enumOutput & eDbg) \
  29. DbgPrint(sp);\
  30. if (enumOutput & eCon)\
  31. printf(sp)
  32. char sp[256];
  33. OUTPUTS enumOutput=eCon;
  34. BOOLEAN bRemote = FALSE;
  35. BOOLEAN bFirst = TRUE;
  36. char szRemoteComputer[128];
  37. HKEY hRegistry = 0;
  38. DbgPrint(PCH x,...);
  39. void InitializeDatabase(void);
  40. PDBENTRY SearchDatabase(PEVENTLOGRECORD);
  41. PDBENTRY AddToDatabase(PEVENTLOGRECORD);
  42. PDBENTRY UpdateDatabase(PEVENTLOGRECORD,PDBENTRY);
  43. void DumpDatabase(void);
  44. void CleanupDatabase(void);
  45. void Usage(void);
  46. void PrintEventLogRecord(PEVENTLOGRECORD pelrEvent);
  47. PDBENTRY Database[MAX_DB_EINTRIES];
  48. char szLogType[128] = "System";
  49. typedef struct _FRS_EL_ENTRY{
  50. DWORD EventId;
  51. PCHAR EventTag;
  52. } FRS_EL_ENTRY, *PFRS_EL_ENTRY;
  53. FRS_EL_ENTRY FrsEvents[] = {
  54. {13500 , "EVENT_FRS_ERROR"},
  55. {13501 , "EVENT_FRS_STARTING"},
  56. {13502 , "EVENT_FRS_STOPPING"},
  57. {13503 , "EVENT_FRS_STOPPED"},
  58. {13504 , "EVENT_FRS_STOPPED_FORCE"},
  59. {13505 , "EVENT_FRS_STOPPED_ASSERT"},
  60. {13506 , "EVENT_FRS_ASSERT"},
  61. {13507 , "EVENT_FRS_VOLUME_NOT_SUPPORTED"},
  62. {13508 , "EVENT_FRS_LONG_JOIN"},
  63. {13509 , "EVENT_FRS_LONG_JOIN_DONE"},
  64. {13510 , "EVENT_FRS_CANNOT_COMMUNICATE"},
  65. {13511 , "EVENT_FRS_DATABASE_SPACE"},
  66. {13512 , "EVENT_FRS_DISK_WRITE_CACHE_ENABLED"},
  67. {13513 , "EVENT_FRS_JET_1414"},
  68. {13514 , "EVENT_FRS_SYSVOL_NOT_READY"},
  69. {13515 , "EVENT_FRS_SYSVOL_NOT_READY_PRIMARY"},
  70. {13516 , "EVENT_FRS_SYSVOL_READY"},
  71. {13517 , "EVENT_FRS_ACCESS_CHECKS_DISABLED"},
  72. {13518 , "EVENT_FRS_ACCESS_CHECKS_FAILED_USER"},
  73. {13519 , "EVENT_FRS_ACCESS_CHECKS_FAILED_UNKNOWN"},
  74. {13520 , "EVENT_FRS_MOVED_PREEXISTING"},
  75. {13521 , "EVENT_FRS_CANNOT_START_BACKUP_RESTORE_IN_PROGRESS"},
  76. {13522 , "EVENT_FRS_STAGING_AREA_FULL"},
  77. {13523 , "EVENT_FRS_HUGE_FILE"},
  78. {13524 , "EVENT_FRS_CANNOT_CREATE_UUID"},
  79. {13525 , "EVENT_FRS_NO_DNS_ATTRIBUTE"},
  80. {13526 , "EVENT_FRS_NO_SID"},
  81. {13527 , "NTFRSPRF_OPEN_RPC_BINDING_ERROR_SET"},
  82. {13528 , "NTFRSPRF_OPEN_RPC_BINDING_ERROR_CONN"},
  83. {13529 , "NTFRSPRF_OPEN_RPC_CALL_ERROR_SET"},
  84. {13530 , "NTFRSPRF_OPEN_RPC_CALL_ERROR_CONN"},
  85. {13531 , "NTFRSPRF_COLLECT_RPC_BINDING_ERROR_SET"},
  86. {13532 , "NTFRSPRF_COLLECT_RPC_BINDING_ERROR_CONN"},
  87. {13533 , "NTFRSPRF_COLLECT_RPC_CALL_ERROR_SET"},
  88. {13534 , "NTFRSPRF_COLLECT_RPC_CALL_ERROR_CONN"},
  89. {13535 , "NTFRSPRF_VIRTUALALLOC_ERROR_SET"},
  90. {13536 , "NTFRSPRF_VIRTUALALLOC_ERROR_CONN"},
  91. {13537 , "NTFRSPRF_REGISTRY_ERROR_SET"},
  92. {13538 , "NTFRSPRF_REGISTRY_ERROR_CONN"},
  93. {13539 , "EVENT_FRS_ROOT_NOT_VALID"},
  94. {13540 , "EVENT_FRS_STAGE_NOT_VALID"},
  95. {13541 , "EVENT_FRS_OVERLAPS_LOGGING"},
  96. {13542 , "EVENT_FRS_OVERLAPS_WORKING"},
  97. {13543 , "EVENT_FRS_OVERLAPS_STAGE"},
  98. {13544 , "EVENT_FRS_OVERLAPS_ROOT"},
  99. {13545 , "EVENT_FRS_OVERLAPS_OTHER_STAGE"},
  100. {13546 , "EVENT_FRS_PREPARE_ROOT_FAILED"},
  101. {13547 , "EVENT_FRS_BAD_REG_DATA"},
  102. {13548 , "EVENT_FRS_JOIN_FAIL_TIME_SKEW"},
  103. {13549 , "EVENT_FRS_RMTCO_TIME_SKEW"},
  104. {13550 , "EVENT_FRS_CANT_OPEN_STAGE"},
  105. {13551 , "EVENT_FRS_CANT_OPEN_PREINSTALL"},
  106. {13552 , "EVENT_FRS_REPLICA_SET_CREATE_FAIL"},
  107. {13553 , "EVENT_FRS_REPLICA_SET_CREATE_OK"},
  108. {13554 , "EVENT_FRS_REPLICA_SET_CXTIONS"},
  109. {13555 , "EVENT_FRS_IN_ERROR_STATE"},
  110. {13556 , "EVENT_FRS_REPLICA_NO_ROOT_CHANGE"},
  111. {13557 , "EVENT_FRS_DUPLICATE_IN_CXTION_SYSVOL"},
  112. {13558 , "EVENT_FRS_DUPLICATE_IN_CXTION"},
  113. {13559 , "EVENT_FRS_ROOT_HAS_MOVED"},
  114. {13560 , "EVENT_FRS_ERROR_REPLICA_SET_DELETED"},
  115. {13561 , "EVENT_FRS_REPLICA_IN_JRNL_WRAP_ERROR"},
  116. {13562 , "EVENT_FRS_DS_POLL_ERROR_SUMMARY"},
  117. {13563 , "EVENT_FRS_STAGE_HAS_CHANGED"},
  118. {13564 , "EVENT_FRS_LOG_SPACE"},
  119. {13565 , "EVENT_FRS_SYSVOL_NOT_READY_2"},
  120. {13566 , "EVENT_FRS_SYSVOL_NOT_READY_PRIMARY_2"},
  121. {13567 , "EVENT_FRS_FILE_UPDATES_SUPPRESSED"},
  122. {13568 , "EVENT_FRS_REPLICA_IN_JRNL_WRAP_NO_AUTO_RESTORE"},
  123. {13569 , "EVENT_FRS_FILES_SKIPPED_DURING_PRIMARY_LOAD"},
  124. {0 , "Event tag not found"}
  125. };
  126. //
  127. // The following was extracted from E:\nt\ds\ese98\src\ese\server\obj\i386\jetmsg.h
  128. //
  129. FRS_EL_ENTRY JetEvents[] = {
  130. {(0x00000001L), "GENERAL_CATEGORY"},
  131. {(0x00000002L), "BUFFER_MANAGER_CATEGORY"},
  132. {(0x00000003L), "LOGGING_RECOVERY_CATEGORY"},
  133. {(0x00000004L), "SPACE_MANAGER_CATEGORY"},
  134. {(0x00000005L), "DATA_DEFINITION_CATEGORY"},
  135. {(0x00000006L), "DATA_MANIPULATION_CATEGORY"},
  136. {(0x00000007L), "PERFORMANCE_CATEGORY"},
  137. {(0x00000008L), "REPAIR_CATEGORY"},
  138. {(0x00000009L), "CONVERSION_CATEGORY"},
  139. {(0x0000000AL), "ONLINE_DEFRAG_CATEGORY"},
  140. {(0x0000000BL), "SYSTEM_PARAMETER_CATEGORY"},
  141. {(0x0000000CL), "DATABASE_CORRUPTION_CATEGORY"},
  142. {(0x0000000DL), "DATABASE_ZEROING_CATEGORY"},
  143. {(0x0000000EL), "TRANSACTION_MANAGER_CATEGORY"},
  144. {(0x0000000FL), "RFS2_CATEGORY"},
  145. {(0x00000010L), "OS_SNAPSHOT_BACKUP"},
  146. {(0x00000011L), "MAC_CATEGORY"},
  147. {(0x00000064L), "START_ID"},
  148. {(0x00000065L), "STOP_ID"},
  149. {(0x00000066L), "START_INSTANCE_ID"},
  150. {(0x00000067L), "STOP_INSTANCE_ID"},
  151. {(0x00000068L), "STOP_INSTANCE_ID_WITH_ERROR"},
  152. {(0x000000C8L), "START_FULL_BACKUP_ID"},
  153. {(0x000000C9L), "START_INCREMENTAL_BACKUP_ID"},
  154. {(0x000000CAL), "STOP_BACKUP_ID"},
  155. {(0x000000CBL), "STOP_BACKUP_ERROR_ID"},
  156. {(0x000000CCL), "START_RESTORE_ID"},
  157. {(0x000000CDL), "STOP_RESTORE_ID"},
  158. {(0x000000CEL), "DATABASE_MISS_FULL_BACKUP_ERROR_ID"},
  159. {(0x000000CFL), "STOP_BACKUP_ERROR_ABORT_BY_CALLER"},
  160. {(0x000000D2L), "START_FULL_BACKUP_INSTANCE_ID"},
  161. {(0x000000D3L), "START_INCREMENTAL_BACKUP_INSTANCE_ID"},
  162. {(0x000000D4L), "START_SNAPSHOT_BACKUP_INSTANCE_ID"},
  163. {(0x000000D5L), "STOP_BACKUP_INSTANCE_ID"},
  164. {(0x000000D6L), "STOP_BACKUP_ERROR_INSTANCE_ID"},
  165. {(0x000000D7L), "STOP_BACKUP_ERROR_ABORT_BY_CALLER_INSTANCE_ID"},
  166. {(0x000000D8L), "DB_LOCATION_CHANGE_DETECTED"},
  167. {(0x000000D9L), "BACKUP_ERROR_FOR_ONE_DATABASE"},
  168. {(0x000000DAL), "BACKUP_ERROR_READ_FILE"},
  169. {(0x000000DBL), "BACKUP_ERROR_INFO_UPDATE"},
  170. {(0x000000DCL), "BACKUP_FILE_START"},
  171. {(0x000000DDL), "BACKUP_FILE_STOP_OK"},
  172. {(0x000000DEL), "BACKUP_FILE_STOP_BEFORE_END"},
  173. {(0x000000DFL), "BACKUP_LOG_FILES_START"},
  174. {(0x000000E0L), "BACKUP_TRUNCATE_LOG_FILES"},
  175. {(0x000000E1L), "BACKUP_NO_TRUNCATE_LOG_FILES"},
  176. {(0x0000012CL), "START_REDO_ID"},
  177. {(0x0000012DL), "STATUS_REDO_ID"},
  178. {(0x0000012EL), "STOP_REDO_ID"},
  179. {(0x0000012FL), "ERROR_ID"},
  180. {(0x00000190L), "S_O_READ_PAGE_TIME_ERROR_ID"},
  181. {(0x00000191L), "S_O_WRITE_PAGE_ISSUE_ERROR_ID"},
  182. {(0x00000192L), "S_O_WRITE_PAGE_ERROR_ID"},
  183. {(0x00000193L), "S_O_PATCH_FILE_WRITE_PAGE_ERROR_ID"},
  184. {(0x00000194L), "S_READ_PAGE_TIME_ERROR_ID"},
  185. {(0x00000195L), "PRE_READ_PAGE_TIME_ERROR_ID"},
  186. {(0x00000196L), "A_DIRECT_READ_PAGE_CORRUPTTED_ERROR_ID"},
  187. {(0x00000197L), "BFIO_TERM_ID"},
  188. {(0x00000198L), "LOG_WRITE_ERROR_ID"},
  189. {(0x00000199L), "LOG_HEADER_WRITE_ERROR_ID"},
  190. {(0x0000019AL), "LOG_READ_ERROR_ID"},
  191. {(0x0000019BL), "LOG_BAD_VERSION_ERROR_ID"},
  192. {(0x0000019CL), "LOG_HEADER_READ_ERROR_ID"},
  193. {(0x0000019DL), "NEW_LOG_ERROR_ID"},
  194. {(0x0000019EL), "LOG_FLUSH_WRITE_0_ERROR_ID"},
  195. {(0x0000019FL), "LOG_FLUSH_WRITE_1_ERROR_ID"},
  196. {(0x000001A0L), "LOG_FLUSH_WRITE_2_ERROR_ID"},
  197. {(0x000001A1L), "LOG_FLUSH_WRITE_3_ERROR_ID"},
  198. {(0x000001A2L), "LOG_FLUSH_OPEN_NEW_FILE_ERROR_ID"},
  199. {(0x000001A3L), "RESTORE_DATABASE_READ_PAGE_ERROR_ID"},
  200. {(0x000001A4L), "RESTORE_DATABASE_READ_HEADER_WARNING_ID"},
  201. {(0x000001A5L), "RESTORE_DATABASE_PARTIALLY_ERROR_ID"},
  202. {(0x000001A6L), "RESTORE_DATABASE_MISSED_ERROR_ID"},
  203. {(0x000001A7L), "BAD_PAGE"},
  204. {(0x000001A8L), "DISK_FULL_ERROR_ID"},
  205. {(0x000001A9L), "LOG_DATABASE_MISMATCH_ERROR_ID"},
  206. {(0x000001AAL), "FILE_NOT_FOUND_ERROR_ID"},
  207. {(0x000001ABL), "FILE_ACCESS_DENIED_ERROR_ID"},
  208. {(0x000001ACL), "LOW_LOG_DISK_SPACE"},
  209. {(0x000001ADL), "LOG_DISK_FULL"},
  210. {(0x000001AEL), "DATABASE_PATCH_FILE_MISMATCH_ERROR_ID"},
  211. {(0x000001AFL), "STARTING_RESTORE_LOG_TOO_HIGH_ERROR_ID"},
  212. {(0x000001B0L), "ENDING_RESTORE_LOG_TOO_LOW_ERROR_ID"},
  213. {(0x000001B1L), "RESTORE_LOG_FILE_HAS_BAD_SIGNATURE_ERROR_ID"},
  214. {(0x000001B2L), "RESTORE_LOG_FILE_NOT_CONTIGUOUS_ERROR_ID"},
  215. {(0x000001B3L), "RESTORE_LOG_FILE_MISSING_ERROR_ID"},
  216. {(0x000001B4L), "EXISTING_LOG_FILE_HAS_BAD_SIGNATURE_ERROR_ID"},
  217. {(0x000001B5L), "EXISTING_LOG_FILE_NOT_CONTIGUOUS_ERROR_ID"},
  218. {(0x000001B6L), "BAD_BACKUP_DATABASE_SIZE"},
  219. {(0x000001B7L), "SHADOW_PAGE_WRITE_FAIL_ID"},
  220. {(0x000001B8L), "LOG_FILE_CORRUPTED_ID"},
  221. {(0x000001B9L), "DB_FILE_SYS_ERROR_ID"},
  222. {(0x000001BAL), "DB_IO_SIZE_ERROR_ID"},
  223. {(0x000001BBL), "LOG_FILE_SYS_ERROR_ID"},
  224. {(0x000001BCL), "LOG_IO_SIZE_ERROR_ID"},
  225. {(0x000001BDL), "SPACE_MAX_DB_SIZE_REACHED_ID"},
  226. {(0x000001BEL), "REDO_END_ABRUPTLY_ERROR_ID"},
  227. {(0x000001BFL), "BAD_PAGE_LINKS_ID"},
  228. {(0x000001C0L), "CORRUPT_LONG_VALUE_ID"},
  229. {(0x000001C1L), "CORRUPT_SLV_SPACE_ID"},
  230. {(0x000001C2L), "CURRENT_LOG_FILE_MISSING_ERROR_ID"},
  231. {(0x000001C3L), "LOG_FLUSH_WRITE_4_ERROR_ID"},
  232. {(0x000001C4L), "REDO_MISSING_LOW_LOG_ERROR_ID"},
  233. {(0x000001C5L), "REDO_MISSING_HIGH_LOG_ERROR_ID"},
  234. {(0x000001C6L), "RESTORE_DATABASE_FAIL_ID"},
  235. {(0x000001C7L), "LOG_OPEN_FILE_ERROR_ID"},
  236. {(0x000001C8L), "PRIMARY_PAGE_READ_FAIL_ID"},
  237. {(0x000001C9L), "EXISTING_LOG_FILE_HAS_BAD_SIGNATURE_ERROR_ID_2"},
  238. {(0x000001CAL), "EXISTING_LOG_FILE_NOT_CONTIGUOUS_ERROR_ID_2"},
  239. {(0x000001CBL), "BACKUP_LOG_FILE_MISSING_ERROR_ID"},
  240. {(0x000001CCL), "LOG_TORN_WRITE_DURING_HARD_RESTORE_ID"},
  241. {(0x000001CDL), "LOG_TORN_WRITE_DURING_HARD_RECOVERY_ID"},
  242. {(0x000001CEL), "LOG_TORN_WRITE_DURING_SOFT_RECOVERY_ID"},
  243. {(0x000001CFL), "LOG_CORRUPTION_DURING_HARD_RESTORE_ID"},
  244. {(0x000001D0L), "LOG_CORRUPTION_DURING_HARD_RECOVERY_ID"},
  245. {(0x000001D1L), "LOG_CORRUPTION_DURING_SOFT_RECOVERY_ID"},
  246. {(0x000001D2L), "LOG_USING_SHADOW_SECTOR_ID"},
  247. {(0x000001D3L), "INDEX_CORRUPTED_ID"},
  248. {(0x000001D4L), "LOG_FLUSH_WRITE_5_ERROR_ID"},
  249. {(0x000001D6L), "DB_PARTIALLY_ATTACHED_ID"},
  250. {(0x000001D7L), "UNDO_FAILED_ID"},
  251. {(0x000001D8L), "SHADOW_PAGE_READ_FAIL_ID"},
  252. {(0x000001D9L), "DB_PARTIALLY_DETACHED_ID"},
  253. {(0x000001DAL), "DATABASE_PAGE_CHECKSUM_MISMATCH_ID"},
  254. {(0x000001DBL), "DATABASE_PAGE_NUMBER_MISMATCH_ID"},
  255. {(0x000001DCL), "DATABASE_PAGE_DATA_MISSING_ID"},
  256. {(0x000001DDL), "LOG_RANGE_CHECKSUM_MISMATCH_ID"},
  257. {(0x000001DEL), "SLV_PAGE_CHECKSUM_MISMATCH_ID"},
  258. {(0x000001DFL), "PATCH_PAGE_CHECKSUM_MISMATCH_ID"},
  259. {(0x000001E0L), "PATCH_PAGE_NUMBER_MISMATCH_ID"},
  260. {(0x000001E1L), "OSFILE_READ_ERROR_ID"},
  261. {(0x000001E2L), "OSFILE_WRITE_ERROR_ID"},
  262. {(0x000001E3L), "OSFS_CREATE_FOLDER_ERROR_ID"},
  263. {(0x000001E4L), "OSFS_REMOVE_FOLDER_ERROR_ID"},
  264. {(0x000001E5L), "OSFS_DELETE_FILE_ERROR_ID"},
  265. {(0x000001E6L), "OSFS_MOVE_FILE_ERROR_ID"},
  266. {(0x000001E7L), "OSFS_COPY_FILE_ERROR_ID"},
  267. {(0x000001E8L), "OSFS_CREATE_FILE_ERROR_ID"},
  268. {(0x000001E9L), "OSFS_OPEN_FILE_RO_ERROR_ID"},
  269. {(0x000001EAL), "OSFS_OPEN_FILE_RW_ERROR_ID"},
  270. {(0x000001EBL), "OSFS_SECTOR_SIZE_ERROR_ID"},
  271. {(0x000001ECL), "LOG_DOWN_ID"},
  272. {(0x000001EDL), "TRANSIENT_READ_ERROR_DETECTED_ID"},
  273. {(0x000001EEL), "ATTACHED_DB_MISMATCH_END_OF_RECOVERY_ID"},
  274. {(0x000001EFL), "ATTACHED_DB_MISMATCH_DURING_RECOVERY_ID"},
  275. {(0x000001F0L), "REDO_HIGH_LOG_MISMATCH_ERROR_ID"},
  276. {(0x000001F1L), "DATABASE_HEADER_ERROR_ID"},
  277. {(0x000001F2L), "DELETE_LOG_FILE_TOO_NEW_ID"},
  278. {(0x000001F3L), "DELETE_LAST_LOG_FILE_TOO_OLD_ID"},
  279. {(0x000001F4L), "REPAIR_BAD_PAGE_ID"},
  280. {(0x000001F5L), "REPAIR_PAGE_LINK_ID"},
  281. {(0x000001F6L), "REPAIR_BAD_COLUMN_ID"},
  282. {(0x000001F7L), "REPAIR_BAD_RECORD_ID"},
  283. {(0x000001F8L), "REPAIR_BAD_TABLE"},
  284. {(0x00000258L), "CONVERT_DUPLICATE_KEY"},
  285. {(0x00000259L), "FUNCTION_NOT_FOUND_ERROR_ID"},
  286. {(0x0000025AL), "MANY_LOST_COMPACTION_ID"},
  287. {(0x0000025BL), "SPACE_LOST_ON_FREE_ID"},
  288. {(0x0000025CL), "LANGUAGE_NOT_SUPPORTED_ID"},
  289. {(0x0000025DL), "CONVERT_COLUMN_TO_TAGGED_ID"},
  290. {(0x0000025EL), "CONVERT_COLUMN_TO_NONTAGGED_ID"},
  291. {(0x0000025FL), "CONVERT_COLUMN_BINARY_TO_LONGBINARY_ID"},
  292. {(0x00000260L), "CONVERT_COLUMN_TEXT_TO_LONGTEXT_ID"},
  293. {(0x00000261L), "START_INDEX_CLEANUP_KNOWN_VERSION_ID"},
  294. {(0x00000262L), "START_INDEX_CLEANUP_UNKNOWN_VERSION_ID"},
  295. {(0x00000263L), "DO_SECONDARY_INDEX_CLEANUP_ID"},
  296. {(0x00000264L), "STOP_INDEX_CLEANUP_ID"},
  297. {(0x00000265L), "PRIMARY_INDEX_CORRUPT_ERROR_ID"},
  298. {(0x00000266L), "SECONDARY_INDEX_CORRUPT_ERROR_ID"},
  299. {(0x00000267L), "START_FORMAT_UPGRADE_ID"},
  300. {(0x00000268L), "STOP_FORMAT_UPGRADE_ID"},
  301. {(0x00000269L), "CONVERT_INCOMPLETE_ERROR_ID"},
  302. {(0x0000026AL), "BUILD_SPACE_CACHE_ID"},
  303. {(0x0000026BL), "ATTACH_TO_BACKUP_SET_DATABASE_ERROR_ID"},
  304. {(0x0000026CL), "RECORD_FORMAT_CONVERSION_FAILED_ID"},
  305. {(0x0000026DL), "OUT_OF_OBJID"},
  306. {(0x0000026EL), "ALMOST_OUT_OF_OBJID"},
  307. {(0x0000026FL), "VERSION_STORE_REACHED_MAXIMUM_ID"},
  308. {(0x00000270L), "VERSION_STORE_OUT_OF_MEMORY_ID"},
  309. {(0x00000271L), "INVALID_LCMAPFLAGS_ID"},
  310. {(0x000002BCL), "OLD_BEGIN_FULL_PASS_ID"},
  311. {(0x000002BDL), "OLD_COMPLETE_FULL_PASS_ID"},
  312. {(0x000002BEL), "OLD_RESUME_PASS_ID"},
  313. {(0x000002BFL), "OLD_COMPLETE_RESUMED_PASS_ID"},
  314. {(0x000002C0L), "OLD_INTERRUPTED_PASS_ID"},
  315. {(0x000002C1L), "OLD_ERROR_ID"},
  316. {(0x000002C2L), "DATABASE_ZEROING_STARTED_ID"},
  317. {(0x000002C3L), "DATABASE_ZEROING_STOPPED_ID"},
  318. {(0x000002C4L), "OLDSLV_BEGIN_FULL_PASS_ID"},
  319. {(0x000002C5L), "OLDSLV_COMPLETE_FULL_PASS_ID"},
  320. {(0x000002C6L), "OLDSLV_SHRANK_DATABASE_ID"},
  321. {(0x000002C7L), "OLDSLV_ERROR_ID"},
  322. {(0x000002C8L), "DATABASE_SLV_ZEROING_STARTED_ID"},
  323. {(0x000002C9L), "DATABASE_SLV_ZEROING_STOPPED_ID"},
  324. {(0x000002CAL), "OLDSLV_STOP_ID"},
  325. {(0x00000320L), "SYS_PARAM_CACHEMIN_CSESS_ERROR_ID"},
  326. {(0x00000321L), "SYS_PARAM_CACHEMAX_CACHEMIN_ERROR_ID"},
  327. {(0x00000322L), "SYS_PARAM_CACHEMAX_STOPFLUSH_ERROR_ID"},
  328. {(0x00000323L), "SYS_PARAM_STOPFLUSH_STARTFLUSH_ERROR_ID"},
  329. {(0x00000324L), "SYS_PARAM_LOGBUFFER_FILE_ERROR_ID"},
  330. {(0x00000325L), "SYS_PARAM_MAXPAGES_PREFER_ID"},
  331. {(0x00000326L), "SYS_PARAM_VERPREFERREDPAGE_ID"},
  332. {(0x00000327L), "SYS_PARAM_CFCB_PREFER_ID"},
  333. {(0x00000328L), "SYS_PARAM_VERPREFERREDPAGETOOBIG_ID"},
  334. {(0x00000384L), "LOG_COMMIT0_FAIL_ID"},
  335. {(0x00000385L), "INTERNAL_TRACE_ID"},
  336. {(0x00000386L), "SESSION_SHARING_VIOLATION_ID"},
  337. {(0x00000387L), "SESSION_WRITE_CONFLICT_ID"},
  338. {(0x000007D1L), "OS_SNAPSHOT_FREEZE_START_ID"},
  339. {(0x000007D2L), "OS_SNAPSHOT_FREEZE_START_ERROR_ID"},
  340. {(0x000007D3L), "OS_SNAPSHOT_FREEZE_STOP_ID"},
  341. {(0x000007D4L), "OS_SNAPSHOT_TIME_OUT_ID"},
  342. {(0x000003E8L), "RFS2_INIT_ID"},
  343. {(0x000003E9L), "RFS2_PERMITTED_ID"},
  344. {(0x000003EAL), "RFS2_DENIED_ID"},
  345. {(0x000003EBL), "RFS2_JET_CALL_ID"},
  346. {(0x000003ECL), "RFS2_JET_ERROR_ID"},
  347. {(0x000007D0L), "OS_SNAPSHOT_TRACE_ID"},
  348. {0 , "Event tag not found"}
  349. };
  350. //
  351. // Status values are 32 bit values layed out as follows:
  352. //
  353. // 3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
  354. // 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
  355. // +---+-+-------------------------+-------------------------------+
  356. // |Sev|C| Facility | Code |
  357. // +---+-+-------------------------+-------------------------------+
  358. //
  359. // where
  360. //
  361. // Sev - is the severity code
  362. //
  363. // 00 - Success
  364. // 01 - Informational
  365. // 10 - Warning
  366. // 11 - Error
  367. //
  368. // C - is the Customer code flag
  369. //
  370. // Facility - is the facility code
  371. //
  372. // Code - is the facility's status code
  373. //
  374. //
  375. // Below is from drivers\nlsmsg\ntiologc.mc
  376. //
  377. // FacilityNames=(System=0x0
  378. // RpcRuntime=0x2:FACILITY_RPC_RUNTIME
  379. // RpcStubs=0x3:FACILITY_RPC_STUBS
  380. // Io=0x4:FACILITY_IO_ERROR_CODE
  381. // )
  382. FRS_EL_ENTRY SystemIoEvents[] = {
  383. {0x0001, "IO_ERR_RETRY_SUCCEEDED"},
  384. {0x0002, "IO_ERR_INSUFFICIENT_RESOURCES"},
  385. {0x0003, "IO_ERR_CONFIGURATION_ERROR"},
  386. {0x0004, "IO_ERR_DRIVER_ERROR"},
  387. {0x0005, "IO_ERR_PARITY"},
  388. {0x0006, "IO_ERR_SEEK_ERROR"},
  389. {0x0007, "IO_ERR_BAD_BLOCK"},
  390. {0x0008, "IO_ERR_OVERRUN_ERROR"},
  391. {0x0009, "IO_ERR_TIMEOUT"},
  392. {0x000a, "IO_ERR_SEQUENCE"},
  393. {0x000b, "IO_ERR_CONTROLLER_ERROR"},
  394. {0x000c, "IO_ERR_INTERNAL_ERROR"},
  395. {0x000d, "IO_ERR_INCORRECT_IRQL"},
  396. {0x000e, "IO_ERR_INVALID_IOBASE"},
  397. {0x000f, "IO_ERR_NOT_READY"},
  398. {0x0010, "IO_ERR_INVALID_REQUEST"},
  399. {0x0011, "IO_ERR_VERSION"},
  400. {0x0012, "IO_ERR_LAYERED_FAILURE"},
  401. {0x0013, "IO_ERR_RESET"},
  402. {0x0014, "IO_ERR_PROTOCOL"},
  403. {0x0015, "IO_ERR_MEMORY_CONFLICT_DETECTED"},
  404. {0x0016, "IO_ERR_PORT_CONFLICT_DETECTED"},
  405. {0x0017, "IO_ERR_DMA_CONFLICT_DETECTED"},
  406. {0x0018, "IO_ERR_IRQ_CONFLICT_DETECTED"},
  407. {0x0019, "IO_ERR_BAD_FIRMWARE"},
  408. {0x001a, "IO_WRN_BAD_FIRMWARE"},
  409. {0x001b, "IO_ERR_DMA_RESOURCE_CONFLICT"},
  410. {0x001c, "IO_ERR_INTERRUPT_RESOURCE_CONFLICT"},
  411. {0x001d, "IO_ERR_MEMORY_RESOURCE_CONFLICT"},
  412. {0x001e, "IO_ERR_PORT_RESOURCE_CONFLICT"},
  413. {0x001f, "IO_BAD_BLOCK_WITH_NAME"},
  414. {0x0020, "IO_WRITE_CACHE_ENABLED"},
  415. {0x0021, "IO_RECOVERED_VIA_ECC"},
  416. {0x0022, "IO_WRITE_CACHE_DISABLED"},
  417. {0x0024, "IO_FILE_QUOTA_THRESHOLD"},
  418. {0x0025, "IO_FILE_QUOTA_LIMIT"},
  419. {0x0026, "IO_FILE_QUOTA_STARTED"},
  420. {0x0027, "IO_FILE_QUOTA_SUCCEEDED"},
  421. {0x0028, "IO_FILE_QUOTA_FAILED"},
  422. {0x0029, "IO_FILE_SYSTEM_CORRUPT"},
  423. {0x002a, "IO_FILE_QUOTA_CORRUPT"},
  424. {0x002b, "IO_SYSTEM_SLEEP_FAILED"},
  425. {0x002c, "IO_DUMP_POINTER_FAILURE"},
  426. {0x002d, "IO_DUMP_DRIVER_LOAD_FAILURE"},
  427. {0x002e, "IO_DUMP_INITIALIZATION_FAILURE"},
  428. {0x002f, "IO_DUMP_DUMPFILE_CONFLICT"},
  429. {0x0030, "IO_DUMP_DIRECT_CONFIG_FAILED"},
  430. {0x0031, "IO_DUMP_PAGE_CONFIG_FAILED"},
  431. {0x0032, "IO_LOST_DELAYED_WRITE"},
  432. {0x0033, "IO_WARNING_PAGING_FAILURE"},
  433. {0x0034, "IO_WRN_FAILURE_PREDICTED"},
  434. {0x0035, "IO_WARNING_INTERRUPT_STILL_PENDING"},
  435. {0x0036, "IO_DRIVER_CANCEL_TIMEOUT"},
  436. {0x0037, "IO_FILE_SYSTEM_CORRUPT_WITH_NAME"},
  437. {0x0038, "IO_WARNING_ALLOCATION_FAILED"},
  438. {0x0039, "IO_WARNING_LOG_FLUSH_FAILED"},
  439. {0 , "Event tag not found"}
  440. };
  441. // The following came from \base\subsys\sm\sfc\dll\msg.mc
  442. FRS_EL_ENTRY WindowsFileProtEvents[] = {
  443. {0xfa00, "MSG_DLL_CHANGE"},
  444. {0xfa01, "MSG_DLL_CHANGE2"},
  445. {0xfa02, "MSG_DLL_CHANGE3"},
  446. {0xfa03, "MSG_DLL_CHANGE_NOVERSION"},
  447. {0xfa04, "MSG_RESTORE_FAILURE"},
  448. {0xfa05, "MSG_COPY_CANCEL"},
  449. {0xfa06, "MSG_COPY_CANCEL_NOUI"},
  450. {0xfa07, "MSG_RESTORE_FAILURE_MAX_RETRIES"},
  451. {0xfa08, "MSG_DLL_NOVALIDATION_TERMINATION"},
  452. {0xfa10, "MSG_SCAN_STARTED"},
  453. {0xfa11, "MSG_SCAN_COMPLETED"},
  454. {0xfa12, "MSG_SCAN_CANCELLED"},
  455. {0xfa13, "MSG_SCAN_FOUND_BAD_FILE_NOVERSION"},
  456. {0xfa14, "MSG_SCAN_FOUND_BAD_FILE"},
  457. {0xfa15, "MSG_CACHE_COPY_ERROR"},
  458. {0xfa20, "MSG_DISABLE"},
  459. {0xfa21, "MSG_INITIALIZATION_FAILED"},
  460. {0xfa22, "MSG_DLLCACHE_INVALID"},
  461. {0xfa23, "MSG_CATALOG_RESTORE_FAILURE"},
  462. {0xfa24, "MSG_SXS_INITIALIZATION_FAILED"},
  463. {0 , "Event tag not found"}
  464. };
  465. // The following came from \drivers\vsm\vsmio\nt\dmiolog.mc
  466. FRS_EL_ENTRY DMIOEvents[] = {
  467. {0x0001 , "VXERR_SPURCLOSE"},
  468. {0x0002 , "VXERR_DRLDETLOG"},
  469. {0x0003 , "VXERR_DRLDET"},
  470. {0x0004 , "VXERR_RDWR"},
  471. {0x0005 , "VXERR_OBJDET"},
  472. {0x0006 , "VXERR_MIRDET"},
  473. {0x0007 , "VXERR_KLOGFULL"},
  474. {0x0008 , "VXERR_KLOGUPDATE"},
  475. {0x0009 , "VXERR_RAID5DET"},
  476. {0x000a , "VXERR_RAID5OBJDET"},
  477. {0x000b , "VXERR_RAID5DEGRADE"},
  478. {0x000c , "VXERR_RAID5FAILED"},
  479. {0x000d , "VXERR_RAID5LOG"},
  480. {0x000e , "VXERR_R5LOGDET"},
  481. {0x000f , "VXERR_ILOCKSTRAND"},
  482. {0x0010 , "VXERR_ILOCKOVERLAP"},
  483. {0x0011 , "VXERR_ILLEGALVMINOR"},
  484. {0x0012 , "VXERR_IOERROR"},
  485. {0x0013 , "VXERR_IOERROR2"},
  486. {0x0014 , "VXERR_OPENDISK"},
  487. {0x0015 , "VXERR_CLOSEDISK"},
  488. {0x0016 , "VXERR_CORRECTRDERR"},
  489. {0x0017 , "VXLOG_BBREASSIGN"},
  490. {0x0018 , "VXLOG_SBBREASSIGN"},
  491. {0x0019 , "VXLOG_FBBREASSIGN"},
  492. {0x001a , "VXLOG_FOUNDBB"},
  493. {0x001b , "VXLOG_RAIDINITCORR"},
  494. {0x001c , "VXLOG_RAIDINITFAIL"},
  495. {0x001d , "VXLOG_DISK_READ_ERR"},
  496. {0x001e , "VXLOG_DISK_WRITE_ERR"},
  497. {0x001f , "VXLOG_DISKRM_WRITE_ERR"},
  498. {0x0020 , "VXLOG_DISKRM_READ_ERR"},
  499. {0x0021 , "VXLOG_DISK_DISABLED"},
  500. {0x0022 , "VXLOG_DISK_REONLINE"},
  501. {0x0023 , "VXERR_READ_ERROR"},
  502. {0x0024 , "VXERR_READ_ERROR2"},
  503. {0x0025 , "VXERR_WRITE_ERROR"},
  504. {0x0026 , "VXERR_WRITE_ERROR2"},
  505. {0 , "Event tag not found"}
  506. };
  507. //
  508. // The below comes from net\netevent\netevent.mc
  509. //
  510. //#define STATUS_SEVERITY_WARNING 0x2
  511. //#define STATUS_SEVERITY_SUCCESS 0x0
  512. //#define STATUS_SEVERITY_INFORMATIONAL 0x1
  513. //#define STATUS_SEVERITY_ERROR 0x3
  514. //
  515. FRS_EL_ENTRY NetEvents[] = {
  516. {0xC00007D0L, "EVENT_SRV_SERVICE_FAILED"},
  517. {0xC00007D1L, "EVENT_SRV_RESOURCE_SHORTAGE"},
  518. {0xC00007D2L, "EVENT_SRV_CANT_CREATE_DEVICE"},
  519. {0xC00007D3L, "EVENT_SRV_CANT_CREATE_PROCESS"},
  520. {0xC00007D4L, "EVENT_SRV_CANT_CREATE_THREAD"},
  521. {0xC00007D5L, "EVENT_SRV_UNEXPECTED_DISC"},
  522. {0xC00007D6L, "EVENT_SRV_INVALID_REQUEST"},
  523. {0xC00007D7L, "EVENT_SRV_CANT_OPEN_NPFS"},
  524. {0x800007D9L, "EVENT_SRV_CANT_GROW_TABLE"},
  525. {0xC00007DAL, "EVENT_SRV_CANT_START_SCAVENGER"},
  526. {0xC00007DBL, "EVENT_SRV_IRP_STACK_SIZE"},
  527. {0x800007DCL, "EVENT_SRV_NETWORK_ERROR"},
  528. {0x800007DDL, "EVENT_SRV_DISK_FULL"},
  529. {0xC00007E0L, "EVENT_SRV_NO_VIRTUAL_MEMORY"},
  530. {0xC00007E1L, "EVENT_SRV_NONPAGED_POOL_LIMIT"},
  531. {0xC00007E2L, "EVENT_SRV_PAGED_POOL_LIMIT"},
  532. {0xC00007E3L, "EVENT_SRV_NO_NONPAGED_POOL"},
  533. {0xC00007E4L, "EVENT_SRV_NO_PAGED_POOL"},
  534. {0x800007E5L, "EVENT_SRV_NO_WORK_ITEM"},
  535. {0x800007E6L, "EVENT_SRV_NO_FREE_CONNECTIONS"},
  536. {0x800007E7L, "EVENT_SRV_NO_FREE_RAW_WORK_ITEM"},
  537. {0x800007E8L, "EVENT_SRV_NO_BLOCKING_IO"},
  538. {0x800007E9L, "EVENT_SRV_DOS_ATTACK_DETECTED"},
  539. {0x800007EAL, "EVENT_SRV_TOO_MANY_DOS"},
  540. {0x800007EBL, "EVENT_SRV_OUT_OF_WORK_ITEM_DOS"},
  541. {0xC00009C5L, "EVENT_SRV_KEY_NOT_FOUND"},
  542. {0xC00009C6L, "EVENT_SRV_KEY_NOT_CREATED"},
  543. {0xC00009C7L, "EVENT_SRV_NO_TRANSPORTS_BOUND"},
  544. {0x800009C8L, "EVENT_SRV_CANT_BIND_TO_TRANSPORT"},
  545. {0xC00009C9L, "EVENT_SRV_CANT_BIND_DUP_NAME"},
  546. {0x800009CAL, "EVENT_SRV_INVALID_REGISTRY_VALUE"},
  547. {0x800009CBL, "EVENT_SRV_INVALID_SD"},
  548. {0x800009CCL, "EVENT_SRV_CANT_LOAD_DRIVER"},
  549. {0x800009CDL, "EVENT_SRV_CANT_UNLOAD_DRIVER"},
  550. {0x800009CEL, "EVENT_SRV_CANT_MAP_ERROR"},
  551. {0x800009CFL, "EVENT_SRV_CANT_RECREATE_SHARE"},
  552. {0x800009D0L, "EVENT_SRV_CANT_CHANGE_DOMAIN_NAME"},
  553. {0x80000BB9L, "EVENT_RDR_RESOURCE_SHORTAGE"},
  554. {0x80000BBAL, "EVENT_RDR_CANT_CREATE_DEVICE"},
  555. {0x80000BBBL, "EVENT_RDR_CANT_CREATE_THREAD"},
  556. {0x80000BBCL, "EVENT_RDR_CANT_SET_THREAD"},
  557. {0x80000BBDL, "EVENT_RDR_INVALID_REPLY"},
  558. {0x80000BBEL, "EVENT_RDR_INVALID_SMB"},
  559. {0x80000BBFL, "EVENT_RDR_INVALID_LOCK_REPLY"},
  560. {0x80000BC1L, "EVENT_RDR_FAILED_UNLOCK"},
  561. {0x80000BC3L, "EVENT_RDR_CLOSE_BEHIND"},
  562. {0x80000BC4L, "EVENT_RDR_UNEXPECTED_ERROR"},
  563. {0x80000BC5L, "EVENT_RDR_TIMEOUT"},
  564. {0x80000BC6L, "EVENT_RDR_INVALID_OPLOCK"},
  565. {0x80000BC7L, "EVENT_RDR_CONNECTION_REFERENCE"},
  566. {0x80000BC8L, "EVENT_RDR_SERVER_REFERENCE"},
  567. {0x80000BC9L, "EVENT_RDR_SMB_REFERENCE"},
  568. {0x80000BCAL, "EVENT_RDR_ENCRYPT"},
  569. {0x80000BCBL, "EVENT_RDR_CONNECTION"},
  570. {0x80000BCDL, "EVENT_RDR_MAXCMDS"},
  571. {0x80000BCEL, "EVENT_RDR_OPLOCK_SMB"},
  572. {0x80000BCFL, "EVENT_RDR_DISPOSITION"},
  573. {0x80000BD0L, "EVENT_RDR_CONTEXTS"},
  574. {0x80000BD1L, "EVENT_RDR_WRITE_BEHIND_FLUSH_FAILED"},
  575. {0x80000BD2L, "EVENT_RDR_AT_THREAD_MAX"},
  576. {0x80000BD3L, "EVENT_RDR_CANT_READ_REGISTRY"},
  577. {0x80000BD4L, "EVENT_RDR_TIMEZONE_BIAS_TOO_LARGE"},
  578. {0x80000BD5L, "EVENT_RDR_PRIMARY_TRANSPORT_CONNECT_FAILED"},
  579. {0x80000BD6L, "EVENT_RDR_DELAYED_SET_ATTRIBUTES_FAILED"},
  580. {0x80000BD7L, "EVENT_RDR_DELETEONCLOSE_FAILED"},
  581. {0x80000BD8L, "EVENT_RDR_CANT_BIND_TRANSPORT"},
  582. {0x80000BD9L, "EVENT_RDR_CANT_REGISTER_ADDRESS"},
  583. {0x80000BDAL, "EVENT_RDR_CANT_GET_SECURITY_CONTEXT"},
  584. {0x80000BDBL, "EVENT_RDR_CANT_BUILD_SMB_HEADER"},
  585. {0x80000BDCL, "EVENT_RDR_SECURITY_SIGNATURE_MISMATCH"},
  586. {0x40000C1CL, "EVENT_TCPIP6_STARTED"},
  587. {0xC0000FA0L, "EVENT_STREAMS_STRLOG"},
  588. {0x80000FA1L, "EVENT_STREAMS_ALLOCB_FAILURE"},
  589. {0x80000FA2L, "EVENT_STREAMS_ALLOCB_FAILURE_CNT"},
  590. {0x80000FA3L, "EVENT_STREAMS_ESBALLOC_FAILURE"},
  591. {0x80000FA4L, "EVENT_STREAMS_ESBALLOC_FAILURE_CNT"},
  592. {0xC0001004L, "EVENT_TCPIP_CREATE_DEVICE_FAILED"},
  593. {0xC0001005L, "EVENT_TCPIP_NO_RESOURCES_FOR_INIT"},
  594. {0xC0001059L, "EVENT_TCPIP_TOO_MANY_NETS"},
  595. {0xC000105AL, "EVENT_TCPIP_NO_MASK"},
  596. {0xC000105BL, "EVENT_TCPIP_INVALID_ADDRESS"},
  597. {0xC000105CL, "EVENT_TCPIP_INVALID_MASK"},
  598. {0xC000105DL, "EVENT_TCPIP_NO_ADAPTER_RESOURCES"},
  599. {0x8000105EL, "EVENT_TCPIP_DHCP_INIT_FAILED"},
  600. {0xC000105FL, "EVENT_TCPIP_ADAPTER_REG_FAILURE"},
  601. {0x80001060L, "EVENT_TCPIP_INVALID_DEFAULT_GATEWAY"},
  602. {0xC0001061L, "EVENT_TCPIP_NO_ADDRESS_LIST"},
  603. {0xC0001062L, "EVENT_TCPIP_NO_MASK_LIST"},
  604. {0xC0001063L, "EVENT_TCPIP_NO_BINDINGS"},
  605. {0xC0001064L, "EVENT_TCPIP_IP_INIT_FAILED"},
  606. {0x80001065L, "EVENT_TCPIP_TOO_MANY_GATEWAYS"},
  607. {0xC0001066L, "EVENT_TCPIP_ADDRESS_CONFLICT1"},
  608. {0xC0001067L, "EVENT_TCPIP_ADDRESS_CONFLICT2"},
  609. {0xC0001068L, "EVENT_TCPIP_NTE_CONTEXT_LIST_FAILURE"},
  610. {0x40001069L, "EVENT_TCPIP_MEDIA_CONNECT"},
  611. {0x4000106AL, "EVENT_TCPIP_MEDIA_DISCONNECT"},
  612. {0xC0001081L, "EVENT_TCPIP_TCP_INIT_FAILED"},
  613. {0x800010A9L, "EVENT_TCPIP_UDP_LIMIT_REACHED"},
  614. {0xC00010B9L, "EVENT_IPSEC_NO_RESOURCES_FOR_INIT"},
  615. {0xC00010BAL, "EVENT_IPSEC_CREATE_DEVICE_FAILED"},
  616. {0xC00010BBL, "EVENT_IPSEC_BAD_SPI_RECEIVED"},
  617. {0xC00010BCL, "EVENT_IPSEC_UNEXPECTED_CLEARTEXT"},
  618. {0xC00010BDL, "EVENT_IPSEC_AUTH_FAILURE"},
  619. {0xC00010BEL, "EVENT_IPSEC_BAD_PACKET_SYNTAX"},
  620. {0xC00010BFL, "EVENT_IPSEC_BAD_PROTOCOL_RECEIVED"},
  621. {0xC00010C0L, "EVENT_IPSEC_GENERIC_FAILURE"},
  622. {0xC00010C1L, "EVENT_IPSEC_NEG_FAILURE"},
  623. {0x400010C2L, "EVENT_IPSEC_DROP_PACKET_INBOUND"},
  624. {0x400010C3L, "EVENT_IPSEC_DROP_PACKET_OUTBOUND"},
  625. {0xC00010CCL, "EVENT_NBT_CREATE_DRIVER"},
  626. {0xC00010CDL, "EVENT_NBT_OPEN_REG_PARAMS"},
  627. {0x800010CEL, "EVENT_NBT_NO_BACKUP_WINS"},
  628. {0x800010CFL, "EVENT_NBT_NO_WINS"},
  629. {0x800010D0L, "EVENT_NBT_BAD_BACKUP_WINS_ADDR"},
  630. {0x800010D1L, "EVENT_NBT_BAD_PRIMARY_WINS_ADDR"},
  631. {0xC00010D2L, "EVENT_NBT_NAME_SERVER_ADDRS"},
  632. {0xC00010D3L, "EVENT_NBT_CREATE_ADDRESS"},
  633. {0xC00010D4L, "EVENT_NBT_CREATE_CONNECTION"},
  634. {0xC00010D5L, "EVENT_NBT_NON_OS_INIT"},
  635. {0xC00010D6L, "EVENT_NBT_TIMERS"},
  636. {0xC00010D7L, "EVENT_NBT_CREATE_DEVICE"},
  637. {0x800010D8L, "EVENT_NBT_NO_DEVICES"},
  638. {0xC00010D9L, "EVENT_NBT_OPEN_REG_LINKAGE"},
  639. {0xC00010DAL, "EVENT_NBT_READ_BIND"},
  640. {0xC00010DBL, "EVENT_NBT_READ_EXPORT"},
  641. {0x800010DCL, "EVENT_NBT_OPEN_REG_NAMESERVER"},
  642. {0x800010DDL, "EVENT_SCOPE_LABEL_TOO_LONG"},
  643. {0x800010DEL, "EVENT_SCOPE_TOO_LONG"},
  644. {0xC00010DFL, "EVENT_NBT_DUPLICATE_NAME"},
  645. {0xC00010E0L, "EVENT_NBT_NAME_RELEASE"},
  646. {0xC00010E1L, "EVENT_NBT_DUPLICATE_NAME_ERROR"},
  647. {0xC00010E2L, "EVENT_NBT_NO_RESOURCES"},
  648. {0xC0001388L, "EVENT_NDIS_RESOURCE_CONFLICT"},
  649. {0xC0001389L, "EVENT_NDIS_OUT_OF_RESOURCE"},
  650. {0xC000138AL, "EVENT_NDIS_HARDWARE_FAILURE"},
  651. {0xC000138BL, "EVENT_NDIS_ADAPTER_NOT_FOUND"},
  652. {0xC000138CL, "EVENT_NDIS_INTERRUPT_CONNECT"},
  653. {0xC000138DL, "EVENT_NDIS_DRIVER_FAILURE"},
  654. {0xC000138EL, "EVENT_NDIS_BAD_VERSION"},
  655. {0x8000138FL, "EVENT_NDIS_TIMEOUT"},
  656. {0xC0001390L, "EVENT_NDIS_NETWORK_ADDRESS"},
  657. {0xC0001391L, "EVENT_NDIS_UNSUPPORTED_CONFIGURATION"},
  658. {0xC0001392L, "EVENT_NDIS_INVALID_VALUE_FROM_ADAPTER"},
  659. {0xC0001393L, "EVENT_NDIS_MISSING_CONFIGURATION_PARAMETER"},
  660. {0xC0001394L, "EVENT_NDIS_BAD_IO_BASE_ADDRESS"},
  661. {0x40001395L, "EVENT_NDIS_RECEIVE_SPACE_SMALL"},
  662. {0x80001396L, "EVENT_NDIS_ADAPTER_DISABLED"},
  663. {0x80001397L, "EVENT_NDIS_IO_PORT_CONFLICT"},
  664. {0x80001398L, "EVENT_NDIS_PORT_OR_DMA_CONFLICT"},
  665. {0x80001399L, "EVENT_NDIS_MEMORY_CONFLICT"},
  666. {0x8000139AL, "EVENT_NDIS_INTERRUPT_CONFLICT"},
  667. {0x8000139BL, "EVENT_NDIS_DMA_CONFLICT"},
  668. {0xC000139CL, "EVENT_NDIS_INVALID_DOWNLOAD_FILE_ERROR"},
  669. {0x8000139DL, "EVENT_NDIS_MAXRECEIVES_ERROR"},
  670. {0x8000139EL, "EVENT_NDIS_MAXTRANSMITS_ERROR"},
  671. {0x8000139FL, "EVENT_NDIS_MAXFRAMESIZE_ERROR"},
  672. {0x800013A0L, "EVENT_NDIS_MAXINTERNALBUFS_ERROR"},
  673. {0x800013A1L, "EVENT_NDIS_MAXMULTICAST_ERROR"},
  674. {0x800013A2L, "EVENT_NDIS_PRODUCTID_ERROR"},
  675. {0x800013A3L, "EVENT_NDIS_LOBE_FAILUE_ERROR"},
  676. {0x800013A4L, "EVENT_NDIS_SIGNAL_LOSS_ERROR"},
  677. {0x800013A5L, "EVENT_NDIS_REMOVE_RECEIVED_ERROR"},
  678. {0x400013A6L, "EVENT_NDIS_TOKEN_RING_CORRECTION"},
  679. {0xC00013A7L, "EVENT_NDIS_ADAPTER_CHECK_ERROR"},
  680. {0x800013A8L, "EVENT_NDIS_RESET_FAILURE_ERROR"},
  681. {0x800013A9L, "EVENT_NDIS_CABLE_DISCONNECTED_ERROR"},
  682. {0x800013AAL, "EVENT_NDIS_RESET_FAILURE_CORRECTION"},
  683. {0x80001770L, "EVENT_LOG_FULL"},
  684. {0x80001771L, "EVENT_LogFileNotOpened"},
  685. {0x80001772L, "EVENT_LogFileCorrupt"},
  686. {0x80001773L, "EVENT_DefaultLogCorrupt"},
  687. {0x80001774L, "EVENT_BadDriverPacket"},
  688. {0x80001775L, "EVENT_EventlogStarted"},
  689. {0x80001776L, "EVENT_EventlogStopped"},
  690. {0x80001777L, "TITLE_EventlogMessageBox"},
  691. {0x80001778L, "EVENT_EventlogAbnormalShutdown"},
  692. {0x80001779L, "EVENT_EventLogProductInfo"},
  693. {0xC000177AL, "EVENT_ServiceNoEventLog"},
  694. {0xC000177BL, "EVENT_ComputerNameChange"},
  695. {0xC000177CL, "EVENT_DNSDomainNameChange"},
  696. {0xC00017D4L, "EVENT_UP_DRIVER_ON_MP"},
  697. {0xC0001B58L, "EVENT_SERVICE_START_FAILED"},
  698. {0xC0001B59L, "EVENT_SERVICE_START_FAILED_II"},
  699. {0xC0001B5AL, "EVENT_SERVICE_START_FAILED_GROUP"},
  700. {0xC0001B5BL, "EVENT_SERVICE_START_FAILED_NONE"},
  701. {0xC0001B5DL, "EVENT_CALL_TO_FUNCTION_FAILED"},
  702. {0xC0001B5EL, "EVENT_CALL_TO_FUNCTION_FAILED_II"},
  703. {0xC0001B5FL, "EVENT_REVERTED_TO_LASTKNOWNGOOD"},
  704. {0xC0001B60L, "EVENT_BAD_ACCOUNT_NAME"},
  705. {0xC0001B61L, "EVENT_CONNECTION_TIMEOUT"},
  706. {0xC0001B62L, "EVENT_READFILE_TIMEOUT"},
  707. {0xC0001B63L, "EVENT_TRANSACT_TIMEOUT"},
  708. {0xC0001B64L, "EVENT_TRANSACT_INVALID"},
  709. {0xC0001B65L, "EVENT_FIRST_LOGON_FAILED"},
  710. {0xC0001B66L, "EVENT_SECOND_LOGON_FAILED"},
  711. {0xC0001B67L, "EVENT_INVALID_DRIVER_DEPENDENCY"},
  712. {0xC0001B68L, "EVENT_BAD_SERVICE_STATE"},
  713. {0xC0001B69L, "EVENT_CIRCULAR_DEPENDENCY_DEMAND"},
  714. {0xC0001B6AL, "EVENT_CIRCULAR_DEPENDENCY_AUTO"},
  715. {0xC0001B6BL, "EVENT_DEPEND_ON_LATER_SERVICE"},
  716. {0xC0001B6CL, "EVENT_DEPEND_ON_LATER_GROUP"},
  717. {0xC0001B6DL, "EVENT_SEVERE_SERVICE_FAILED"},
  718. {0xC0001B6EL, "EVENT_SERVICE_START_HUNG"},
  719. {0xC0001B6FL, "EVENT_SERVICE_EXIT_FAILED"},
  720. {0xC0001B70L, "EVENT_SERVICE_EXIT_FAILED_SPECIFIC"},
  721. {0xC0001B71L, "EVENT_SERVICE_START_AT_BOOT_FAILED"},
  722. {0xC0001B72L, "EVENT_BOOT_SYSTEM_DRIVERS_FAILED"},
  723. {0xC0001B73L, "EVENT_RUNNING_LASTKNOWNGOOD"},
  724. {0xC0001B74L, "EVENT_TAKE_OWNERSHIP"},
  725. {0xC0001B75L, "TITLE_SC_MESSAGE_BOX"},
  726. {0xC0001B76L, "EVENT_SERVICE_NOT_INTERACTIVE"},
  727. {0xC0001B77L, "EVENT_SERVICE_CRASH"},
  728. {0xC0001B78L, "EVENT_SERVICE_RECOVERY_FAILED"},
  729. {0xC0001B79L, "EVENT_SERVICE_SCESRV_FAILED"},
  730. {0xC0001B7AL, "EVENT_SERVICE_CRASH_NO_ACTION"},
  731. {0x40001B7BL, "EVENT_SERVICE_CONTROL_SUCCESS"},
  732. {0x40001B7CL, "EVENT_SERVICE_STATUS_SUCCESS"},
  733. {0xC0001B7DL, "EVENT_SERVICE_CONFIG_BACKOUT_FAILED"},
  734. {0xC0001B7EL, "EVENT_FIRST_LOGON_FAILED_II"},
  735. {0xC0001EDCL, "EVENT_COMMAND_NOT_INTERACTIVE"},
  736. {0xC0001EDDL, "EVENT_COMMAND_START_FAILED"},
  737. {0xC0001F43L, "EVENT_BOWSER_OTHER_MASTER_ON_NET"},
  738. {0x80001F44L, "EVENT_BOWSER_PROMOTED_WHILE_ALREADY_MASTER"},
  739. {0x80001F45L, "EVENT_BOWSER_NON_MASTER_MASTER_ANNOUNCE"},
  740. {0x80001F46L, "EVENT_BOWSER_ILLEGAL_DATAGRAM"},
  741. {0xC0001F47L, "EVENT_BROWSER_STATUS_BITS_UPDATE_FAILED"},
  742. {0xC0001F48L, "EVENT_BROWSER_ROLE_CHANGE_FAILED"},
  743. {0xC0001F49L, "EVENT_BROWSER_MASTER_PROMOTION_FAILED"},
  744. {0xC0001F4AL, "EVENT_BOWSER_NAME_CONVERSION_FAILED"},
  745. {0xC0001F4BL, "EVENT_BROWSER_OTHERDOMAIN_ADD_FAILED"},
  746. {0x00001F4CL, "EVENT_BOWSER_ELECTION_RECEIVED"},
  747. {0x40001F4DL, "EVENT_BOWSER_ELECTION_SENT_GETBLIST_FAILED"},
  748. {0x40001F4EL, "EVENT_BOWSER_ELECTION_SENT_FIND_MASTER_FAILED"},
  749. {0x40001F4FL, "EVENT_BROWSER_ELECTION_SENT_LANMAN_NT_STARTED"},
  750. {0xC0001F50L, "EVENT_BOWSER_ILLEGAL_DATAGRAM_THRESHOLD"},
  751. {0xC0001F51L, "EVENT_BROWSER_DEPENDANT_SERVICE_FAILED"},
  752. {0xC0001F53L, "EVENT_BROWSER_MASTER_PROMOTION_FAILED_STOPPING"},
  753. {0xC0001F54L, "EVENT_BROWSER_MASTER_PROMOTION_FAILED_NO_MASTER"},
  754. {0x80001F55L, "EVENT_BROWSER_SERVER_LIST_FAILED"},
  755. {0x80001F56L, "EVENT_BROWSER_DOMAIN_LIST_FAILED"},
  756. {0x80001F57L, "EVENT_BROWSER_ILLEGAL_CONFIG"},
  757. {0x40001F58L, "EVENT_BOWSER_OLD_BACKUP_FOUND"},
  758. {0x00001F59L, "EVENT_BROWSER_SERVER_LIST_RETRIEVED"},
  759. {0x00001F5AL, "EVENT_BROWSER_DOMAIN_LIST_RETRIEVED"},
  760. {0x40001F5BL, "EVENT_BOWSER_PDC_LOST_ELECTION"},
  761. {0x40001F5CL, "EVENT_BOWSER_NON_PDC_WON_ELECTION"},
  762. {0x40001F5DL, "EVENT_BOWSER_CANT_READ_REGISTRY"},
  763. {0x40001F5EL, "EVENT_BOWSER_MAILSLOT_DATAGRAM_THRESHOLD_EXCEEDED"},
  764. {0x40001F5FL, "EVENT_BOWSER_GETBROWSERLIST_THRESHOLD_EXCEEDED"},
  765. {0xC0001F60L, "EVENT_BROWSER_BACKUP_STOPPED"},
  766. {0x40001F61L, "EVENT_BROWSER_ELECTION_SENT_LANMAN_NT_STOPPED"},
  767. {0xC0001F62L, "EVENT_BROWSER_GETBLIST_RECEIVED_NOT_MASTER"},
  768. {0x40001F63L, "EVENT_BROWSER_ELECTION_SENT_ROLE_CHANGED"},
  769. {0xC0001F64L, "EVENT_BROWSER_NOT_STARTED_IPX_CONFIG_MISMATCH"},
  770. {0xC0002134L, "NWSAP_EVENT_KEY_NOT_FOUND"},
  771. {0xC0002135L, "NWSAP_EVENT_WSASTARTUP_FAILED"},
  772. {0xC0002136L, "NWSAP_EVENT_SOCKET_FAILED"},
  773. {0xC0002137L, "NWSAP_EVENT_SETOPTBCAST_FAILED"},
  774. {0xC0002138L, "NWSAP_EVENT_BIND_FAILED"},
  775. {0xC0002139L, "NWSAP_EVENT_GETSOCKNAME_FAILED"},
  776. {0xC000213AL, "NWSAP_EVENT_OPTEXTENDEDADDR_FAILED"},
  777. {0xC000213BL, "NWSAP_EVENT_OPTBCASTINADDR_FAILED"},
  778. {0xC000213CL, "NWSAP_EVENT_CARDMALLOC_FAILED"},
  779. {0xC000213DL, "NWSAP_EVENT_NOCARDS"},
  780. {0xC000213EL, "NWSAP_EVENT_THREADEVENT_FAIL"},
  781. {0xC000213FL, "NWSAP_EVENT_RECVSEM_FAIL"},
  782. {0xC0002140L, "NWSAP_EVENT_SENDEVENT_FAIL"},
  783. {0xC0002141L, "NWSAP_EVENT_STARTRECEIVE_ERROR"},
  784. {0xC0002142L, "NWSAP_EVENT_STARTWORKER_ERROR"},
  785. {0xC0002143L, "NWSAP_EVENT_TABLE_MALLOC_FAILED"},
  786. {0xC0002144L, "NWSAP_EVENT_HASHTABLE_MALLOC_FAILED"},
  787. {0xC0002145L, "NWSAP_EVENT_STARTLPCWORKER_ERROR"},
  788. {0xC0002146L, "NWSAP_EVENT_CREATELPCPORT_ERROR"},
  789. {0xC0002147L, "NWSAP_EVENT_CREATELPCEVENT_ERROR"},
  790. {0xC0002148L, "NWSAP_EVENT_LPCLISTENMEMORY_ERROR"},
  791. {0xC0002149L, "NWSAP_EVENT_LPCHANDLEMEMORY_ERROR"},
  792. {0xC000214AL, "NWSAP_EVENT_BADWANFILTER_VALUE"},
  793. {0xC000214BL, "NWSAP_EVENT_CARDLISTEVENT_FAIL"},
  794. {0xC000214CL, "NWSAP_EVENT_SDMDEVENT_FAIL"},
  795. {0x8000214DL, "NWSAP_EVENT_INVALID_FILTERNAME"},
  796. {0xC000214EL, "NWSAP_EVENT_WANSEM_FAIL"},
  797. {0xC000214FL, "NWSAP_EVENT_WANSOCKET_FAILED"},
  798. {0xC0002150L, "NWSAP_EVENT_WANBIND_FAILED"},
  799. {0xC0002151L, "NWSAP_EVENT_STARTWANWORKER_ERROR"},
  800. {0xC0002152L, "NWSAP_EVENT_STARTWANCHECK_ERROR"},
  801. {0xC0002153L, "NWSAP_EVENT_OPTMAXADAPTERNUM_ERROR"},
  802. {0xC0002154L, "NWSAP_EVENT_WANHANDLEMEMORY_ERROR"},
  803. {0xC0002155L, "NWSAP_EVENT_WANEVENT_ERROR"},
  804. {0x80002329L, "EVENT_TRANSPORT_RESOURCE_POOL"},
  805. {0x8000232AL, "EVENT_TRANSPORT_RESOURCE_LIMIT"},
  806. {0x8000232BL, "EVENT_TRANSPORT_RESOURCE_SPECIFIC"},
  807. {0xC000232CL, "EVENT_TRANSPORT_REGISTER_FAILED"},
  808. {0xC000232DL, "EVENT_TRANSPORT_BINDING_FAILED"},
  809. {0xC000232EL, "EVENT_TRANSPORT_ADAPTER_NOT_FOUND"},
  810. {0xC000232FL, "EVENT_TRANSPORT_SET_OID_FAILED"},
  811. {0xC0002330L, "EVENT_TRANSPORT_QUERY_OID_FAILED"},
  812. {0x40002331L, "EVENT_TRANSPORT_TRANSFER_DATA"},
  813. {0x40002332L, "EVENT_TRANSPORT_TOO_MANY_LINKS"},
  814. {0x40002333L, "EVENT_TRANSPORT_BAD_PROTOCOL"},
  815. {0x4000251DL, "EVENT_IPX_NEW_DEFAULT_TYPE"},
  816. {0x8000251EL, "EVENT_IPX_SAP_ANNOUNCE"},
  817. {0x8000251FL, "EVENT_IPX_ILLEGAL_CONFIG"},
  818. {0xC0002520L, "EVENT_IPX_INTERNAL_NET_INVALID"},
  819. {0xC0002521L, "EVENT_IPX_NO_FRAME_TYPES"},
  820. {0xC0002522L, "EVENT_IPX_CREATE_DEVICE"},
  821. {0xC0002523L, "EVENT_IPX_NO_ADAPTERS"},
  822. {0xC0002710L, "EVENT_RPCSS_CREATEPROCESS_FAILURE"},
  823. {0xC0002711L, "EVENT_RPCSS_RUNAS_CREATEPROCESS_FAILURE"},
  824. {0xC0002712L, "EVENT_RPCSS_LAUNCH_ACCESS_DENIED"},
  825. {0xC0002713L, "EVENT_RPCSS_DEFAULT_LAUNCH_ACCESS_DENIED"},
  826. {0xC0002714L, "EVENT_RPCSS_RUNAS_CANT_LOGIN"},
  827. {0xC0002715L, "EVENT_RPCSS_START_SERVICE_FAILURE"},
  828. {0xC0002716L, "EVENT_RPCSS_REMOTE_SIDE_ERROR"},
  829. {0xC0002717L, "EVENT_RPCSS_ACTIVATION_ERROR"},
  830. {0xC0002718L, "EVENT_RPCSS_REMOTE_SIDE_ERROR_WITH_FILE"},
  831. {0xC0002719L, "EVENT_RPCSS_REMOTE_SIDE_UNAVAILABLE"},
  832. {0xC000271AL, "EVENT_RPCSS_SERVER_START_TIMEOUT"},
  833. {0xC000271BL, "EVENT_RPCSS_SERVER_NOT_RESPONDING"},
  834. {0xC000271CL, "EVENT_DCOM_ASSERTION_FAILURE"},
  835. {0xC000271DL, "EVENT_DCOM_INVALID_ENDPOINT_DATA"},
  836. {0xC0002AF8L, "EVENT_DNS_CACHE_START_FAILURE_NO_DLL"},
  837. {0xC0002AF9L, "EVENT_DNS_CACHE_START_FAILURE_NO_ENTRY"},
  838. {0xC0002AFAL, "EVENT_DNS_CACHE_START_FAILURE_NO_CONTROL"},
  839. {0xC0002AFBL, "EVENT_DNS_CACHE_START_FAILURE_NO_DONE_EVENT"},
  840. {0xC0002AFCL, "EVENT_DNS_CACHE_START_FAILURE_NO_RPC"},
  841. {0xC0002AFDL, "EVENT_DNS_CACHE_START_FAILURE_NO_SHUTDOWN_NOTIFY"},
  842. {0xC0002AFEL, "EVENT_DNS_CACHE_START_FAILURE_NO_UPDATE"},
  843. {0xC0002AFFL, "EVENT_DNS_CACHE_START_FAILURE_LOW_MEMORY"},
  844. {0x80002B2AL, "EVENT_DNS_CACHE_NETWORK_PERF_WARNING"},
  845. {0x80002B2BL, "EVENT_DNS_CACHE_UNABLE_TO_REACH_SERVER_WARNING"},
  846. {0x80002B8EL, "EVENT_DNSAPI_REGISTRATION_FAILED_TIMEOUT"},
  847. {0x80002B8FL, "EVENT_DNSAPI_REGISTRATION_FAILED_SERVERFAIL"},
  848. {0x80002B90L, "EVENT_DNSAPI_REGISTRATION_FAILED_NOTSUPP"},
  849. {0x80002B91L, "EVENT_DNSAPI_REGISTRATION_FAILED_REFUSED"},
  850. {0x80002B92L, "EVENT_DNSAPI_REGISTRATION_FAILED_SECURITY"},
  851. {0x80002B93L, "EVENT_DNSAPI_REGISTRATION_FAILED_OTHER"},
  852. {0x80002B94L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_TIMEOUT"},
  853. {0x80002B95L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_SERVERFAIL"},
  854. {0x80002B96L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_NOTSUPP"},
  855. {0x80002B97L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_REFUSED"},
  856. {0x80002B98L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_SECURITY"},
  857. {0x80002B99L, "EVENT_DNSAPI_PTR_REGISTRATION_FAILED_OTHER"},
  858. {0x80002B9AL, "EVENT_DNSAPI_REGISTRATION_FAILED_TIMEOUT_PRIMARY_DN"},
  859. {0x80002B9BL, "EVENT_DNSAPI_REGISTRATION_FAILED_SERVERFAIL_PRIMARY_DN"},
  860. {0x80002B9CL, "EVENT_DNSAPI_REGISTRATION_FAILED_NOTSUPP_PRIMARY_DN"},
  861. {0x80002B9DL, "EVENT_DNSAPI_REGISTRATION_FAILED_REFUSED_PRIMARY_DN"},
  862. {0x80002B9EL, "EVENT_DNSAPI_REGISTRATION_FAILED_SECURITY_PRIMARY_DN"},
  863. {0x80002B9FL, "EVENT_DNSAPI_REGISTRATION_FAILED_OTHER_PRIMARY_DN"},
  864. {0x80002BACL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_TIMEOUT"},
  865. {0x80002BADL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_SERVERFAIL"},
  866. {0x80002BAEL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_NOTSUPP"},
  867. {0x80002BAFL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_REFUSED"},
  868. {0x80002BB0L, "EVENT_DNSAPI_DEREGISTRATION_FAILED_SECURITY"},
  869. {0x80002BB1L, "EVENT_DNSAPI_DEREGISTRATION_FAILED_OTHER"},
  870. {0x80002BB2L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_TIMEOUT"},
  871. {0x80002BB3L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_SERVERFAIL"},
  872. {0x80002BB4L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_NOTSUPP"},
  873. {0x80002BB5L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_REFUSED"},
  874. {0x80002BB6L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_SECURITY"},
  875. {0x80002BB7L, "EVENT_DNSAPI_PTR_DEREGISTRATION_FAILED_OTHER"},
  876. {0x80002BB8L, "EVENT_DNSAPI_DEREGISTRATION_FAILED_TIMEOUT_PRIMARY_DN"},
  877. {0x80002BB9L, "EVENT_DNSAPI_DEREGISTRATION_FAILED_SERVERFAIL_PRIMARY_DN"},
  878. {0x80002BBAL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_NOTSUPP_PRIMARY_DN"},
  879. {0x80002BBBL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_REFUSED_PRIMARY_DN"},
  880. {0x80002BBCL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_SECURITY_PRIMARY_DN"},
  881. {0x80002BBDL, "EVENT_DNSAPI_DEREGISTRATION_FAILED_OTHER_PRIMARY_DN"},
  882. {0x40002BC0L, "EVENT_DNSAPI_REGISTERED_ADAPTER"},
  883. {0x40002BC1L, "EVENT_DNSAPI_REGISTERED_PTR"},
  884. {0x40002BC2L, "EVENT_DNSAPI_REGISTERED_ADAPTER_PRIMARY_DN"},
  885. {0xC0002EE0L, "EVENT_WMI_CANT_OPEN_DEVICE"},
  886. {0x80002F44L, "EVENT_WMI_INVALID_MOF"},
  887. {0x80002F45L, "EVENT_WMI_MOF_LOAD_FAILURE"},
  888. {0x80002F46L, "EVENT_WMI_INVALID_REGINFO"},
  889. {0x80002F47L, "EVENT_WMI_INVALID_REGPATH"},
  890. {0x80002F48L, "EVENT_WMI_CANT_RESOLVE_INSTANCE"},
  891. {0x80002F49L, "EVENT_WMI_CANT_GET_EVENT_DATA"},
  892. {0xC00030D4L, "EVENT_TRK_INTERNAL_ERROR"},
  893. {0x400030D5L, "EVENT_TRK_SERVICE_START_SUCCESS"},
  894. {0xC00030D6L, "EVENT_TRK_SERVICE_START_FAILURE"},
  895. {0xC00030D7L, "EVENT_TRK_SERVICE_CORRUPT_LOG"},
  896. {0x800030D8L, "EVENT_TRK_SERVICE_VOL_QUOTA_EXCEEDED"},
  897. {0x400030D9L, "EVENT_TRK_SERVICE_VOLUME_CREATE"},
  898. {0x400030DAL, "EVENT_TRK_SERVICE_VOLUME_CLAIM"},
  899. {0x400030DBL, "EVENT_TRK_SERVICE_DUPLICATE_VOLIDS"},
  900. {0x800030DCL, "EVENT_TRK_SERVICE_MOVE_QUOTA_EXCEEDED"},
  901. {0xC000332CL, "EVENT_ATMLANE_CFGREQ_FAIL_VERSNOSUPP"},
  902. {0xC000332DL, "EVENT_ATMLANE_JOINREQ_FAIL_VERSNOSUPP"},
  903. {0xC000332EL, "EVENT_ATMLANE_CFGREQ_FAIL_REQPARMINVAL"},
  904. {0xC000332FL, "EVENT_ATMLANE_JOINREQ_FAIL_REQPARMINVAL"},
  905. {0xC0003330L, "EVENT_ATMLANE_JOINREQ_FAIL_DUPLANDEST"},
  906. {0xC0003331L, "EVENT_ATMLANE_JOINREQ_FAIL_DUPATMADDR"},
  907. {0xC0003332L, "EVENT_ATMLANE_CFGREQ_FAIL_INSUFFRES"},
  908. {0xC0003333L, "EVENT_ATMLANE_JOINREQ_FAIL_INSUFFRES"},
  909. {0xC0003334L, "EVENT_ATMLANE_CFGREQ_FAIL_NOACCESS"},
  910. {0xC0003335L, "EVENT_ATMLANE_JOINREQ_FAIL_NOACCESS"},
  911. {0xC0003336L, "EVENT_ATMLANE_CFGREQ_FAIL_REQIDINVAL"},
  912. {0xC0003337L, "EVENT_ATMLANE_JOINREQ_FAIL_REQIDINVAL"},
  913. {0xC0003338L, "EVENT_ATMLANE_CFGREQ_FAIL_LANDESTINVAL"},
  914. {0xC0003339L, "EVENT_ATMLANE_JOINREQ_FAIL_LANDESTINVAL"},
  915. {0xC000333AL, "EVENT_ATMLANE_CFGREQ_FAIL_ATMADDRINVAL"},
  916. {0xC000333BL, "EVENT_ATMLANE_JOINREQ_FAIL_ATMADDRINVAL"},
  917. {0xC000333CL, "EVENT_ATMLANE_CFGREQ_FAIL_NOCONF"},
  918. {0xC000333DL, "EVENT_ATMLANE_CFGREQ_FAIL_CONFERROR"},
  919. {0xC000333EL, "EVENT_ATMLANE_CFGREQ_FAIL_INSUFFINFO"},
  920. {0xC0003390L, "EVENT_ATMARPS_ADDRESS_ALREADY_EXISTS"},
  921. {0xC00036B0L, "EVENT_PS_GPC_REGISTER_FAILED"},
  922. {0xC00036B1L, "EVENT_PS_NO_RESOURCES_FOR_INIT"},
  923. {0xC00036B2L, "EVENT_PS_REGISTER_PROTOCOL_FAILED"},
  924. {0xC00036B3L, "EVENT_PS_REGISTER_MINIPORT_FAILED"},
  925. {0x80003714L, "EVENT_PS_BAD_BESTEFFORT_LIMIT"},
  926. {0xC0003715L, "EVENT_PS_QUERY_OID_GEN_MAXIMUM_FRAME_SIZE"},
  927. {0xC0003716L, "EVENT_PS_QUERY_OID_GEN_MAXIMUM_TOTAL_SIZE"},
  928. {0xC0003717L, "EVENT_PS_QUERY_OID_GEN_LINK_SPEED"},
  929. {0xC0003718L, "EVENT_PS_BINDING_FAILED"},
  930. {0xC0003719L, "EVENT_PS_MISSING_ADAPTER_REGISTRY_DATA"},
  931. {0xC000371AL, "EVENT_PS_REGISTER_ADDRESS_FAMILY_FAILED"},
  932. {0xC000371BL, "EVENT_PS_INIT_DEVICE_FAILED"},
  933. {0xC000371CL, "EVENT_PS_WMI_INSTANCE_NAME_FAILED"},
  934. {0x8000371DL, "EVENT_PS_WAN_LIMITED_BESTEFFORT"},
  935. {0xC000371EL, "EVENT_PS_RESOURCE_POOL"},
  936. {0x8000371FL, "EVENT_PS_ADMISSIONCONTROL_OVERFLOW"},
  937. {0xC0003720L, "EVENT_PS_NETWORK_ADDRESS_FAIL"},
  938. // DFS Events.
  939. {14300 , "EXTRA_EXIT_POINT"},
  940. {14301 , "MISSING_EXIT_POINT"},
  941. {14302 , "MISSING_VOLUME"},
  942. {14303 , "EXTRA_VOLUME"},
  943. {14304 , "EXTRA_EXIT_POINT_DELETED"},
  944. {14305 , "EXTRA_EXIT_POINT_NOT_DELETED"},
  945. {14306 , "MISSING_EXIT_POINT_CREATED"},
  946. {14307 , "MISSING_EXIT_POINT_NOT_CREATED"},
  947. {14308 , "MISSING_VOLUME_CREATED"},
  948. {14309 , "MISSING_VOLUME_NOT_CREATED"},
  949. {14310 , "EXTRA_VOLUME_DELETED"},
  950. {14311 , "EXTRA_VOLUME_NOT_DELETED"},
  951. {14312 , "COULD_NOT_VERIFY_VOLUMES"},
  952. {14313 , "KNOWLEDGE_INCONSISTENCY_DETECTED"},
  953. {14314 , "PREFIX_MISMATCH"},
  954. {14315 , "PREFIX_MISMATCH_FIXED"},
  955. {14316 , "PREFIX_MISMATCH_NOT_FIXED"},
  956. {14317 , "MACHINE_UNJOINED"},
  957. {14318 , "DFS_REFERRAL_REQUEST"},
  958. {14400 , "NOT_A_DFS_PATH"},
  959. {14401 , "LM_REDIR_FAILURE"},
  960. {14402 , "DFS_CONNECTION_FAILURE"},
  961. {14403 , "DFS_REFERRAL_FAILURE"},
  962. {14404 , "DFS_REFERRAL_SUCCESS"},
  963. {14405 , "DFS_MAX_DNR_ATTEMPTS"},
  964. {14406 , "DFS_SPECIAL_REFERRAL_FAILURE"},
  965. {14407 , "DFS_OPEN_FAILURE"},
  966. {14500 , "NET_DFS_ENUM"},
  967. {14501 , "NET_DFS_ENUMEX"},
  968. {14502 , "DFS_ERROR_CREATE_DIRECTORY_FAILURE"},
  969. {14503 , "DFS_ERROR_CREATE_REPARSEPOINT_FAILURE"},
  970. {14504 , "DFS_ERROR_UNSUPPORTED_FILESYSTEM"},
  971. {14505 , "DFS_ERROR_OVERLAPPING_DIRECTORIES"},
  972. {14506 , "DFS_ERROR_AD_WRITE_ERROR"},
  973. {14507 , "DFS_ERROR_AD_READ_ERROR"},
  974. {14508 , "DFS_ERROR_DIRECTORY_NOT_EMPTY"},
  975. {14509 , "DFS_ERROR_TOO_MANY_ERRORS"},
  976. {14510 , "DFS_ERROR_WINSOCKINIT_FAILED"},
  977. {14511 , "DFS_ERROR_SECURITYINIT_FAILED"},
  978. {14512 , "DFS_ERROR_THREADINIT_FAILED"},
  979. {14513 , "DFS_ERROR_SITECACHEINIT_FAILED"},
  980. {14514 , "DFS_ERROR_ROOTSYNCINIT_FAILED"},
  981. {14515 , "DFS_ERROR_CREATEEVENT_FAILED"},
  982. {14516 , "DFS_ERROR_COMPUTERINFO_FAILED"},
  983. {14517 , "DFS_ERROR_CLUSTERINFO_FAILED"},
  984. {14518 , "DFS_ERROR_DCINFO_FAILED"},
  985. {14519 , "DFS_ERROR_PREFIXTABLE_FAILED"},
  986. {14520 , "DFS_ERROR_HANDLENAMESPACE_FAILED"},
  987. {14521 , "DFS_ERROR_REGISTERSTORE_FAILED"},
  988. {14522 , "DFS_ERROR_REFLECTIONENGINE_FAILED"},
  989. {14523 , "DFS_ERROR_SPECIALSHARES_FAILED"},
  990. {14524 , "DFS_ERROR_SITESUPPOR_FAILED"},
  991. {14525 , "DFS_ERROR_DSINITIALCONNECT_FAILED"},
  992. {14526 , "DFS_ERROR_DSCONNECT_FAILED"},
  993. {14527 , "DFS_ERROR_ROOT_TURNED_OFF"},
  994. {14528 , "DFS_INFO_ROOT_TURNED_ON"},
  995. {14529 , "DFS_INFO_DS_RECONNECTED"},
  996. {0xC0003908L, "EVENT_BRIDGE_PROTOCOL_REGISTER_FAILED"},
  997. {0xC0003909L, "EVENT_BRIDGE_MINIPROT_DEVNAME_MISSING"},
  998. {0xC000390AL, "EVENT_BRIDGE_MINIPORT_REGISTER_FAILED"},
  999. {0xC000390BL, "EVENT_BRIDGE_DEVICE_CREATION_FAILED"},
  1000. {0xC000390CL, "EVENT_BRIDGE_NO_BRIDGE_MAC_ADDR"},
  1001. {0xC000390DL, "EVENT_BRIDGE_MINIPORT_INIT_FAILED"},
  1002. {0xC000390EL, "EVENT_BRIDGE_ETHERNET_NOT_OFFERED"},
  1003. {0xC000390FL, "EVENT_BRIDGE_THREAD_CREATION_FAILED"},
  1004. {0xC0003910L, "EVENT_BRIDGE_THREAD_REF_FAILED"},
  1005. {0xC0003911L, "EVENT_BRIDGE_PACKET_POOL_CREATION_FAILED"},
  1006. {0xC0003912L, "EVENT_BRIDGE_BUFFER_POOL_CREATION_FAILED"},
  1007. {0xC0003913L, "EVENT_BRIDGE_INIT_MALLOC_FAILED"},
  1008. {0xC000396CL, "EVENT_BRIDGE_ADAPTER_LINK_SPEED_QUERY_FAILED"},
  1009. {0xC000396DL, "EVENT_BRIDGE_ADAPTER_MAC_ADDR_QUERY_FAILED"},
  1010. {0xC000396EL, "EVENT_BRIDGE_ADAPTER_FILTER_FAILED"},
  1011. {0xC000396FL, "EVENT_BRIDGE_ADAPTER_NAME_QUERY_FAILED"},
  1012. {0xC0003970L, "EVENT_BRIDGE_ADAPTER_BIND_FAILED"},
  1013. // Time service codes from \nt\ds\security\services\w32time\w32time\obj\i386\w32timemsg.h
  1014. {0xC25A0001L, "MSG_TIMEPROV_ERROR"},
  1015. {0x825A0002L, "MSG_TIMEPROV_WARNING"},
  1016. {0x425A0003L, "MSG_TIMEPROV_INFORMATIONAL"},
  1017. {0xC25A0004L, "MSG_TIMEPROV_FAILED_START"},
  1018. {0xC25A0005L, "MSG_TIMEPROV_FAILED_STOP"},
  1019. {0x825A0006L, "MSG_CONFIG_READ_FAILED_WARNING"},
  1020. {0x825A0007L, "MSG_TIMEPROV_FAILED_UPDATE"},
  1021. {0x825A0008L, "MSG_TIMEPROV_FAILED_POLLUPDATE"},
  1022. {0x825A0009L, "MSG_TIMEPROV_FAILED_TIMEJUMP"},
  1023. {0x825A000AL, "MSG_TIMEPROV_FAILED_GETSAMPLES"},
  1024. {0x825A000BL, "MSG_NOT_DOMAIN_MEMBER"},
  1025. {0x825A000CL, "MSG_DOMAIN_HIERARCHY_ROOT"},
  1026. {0x825A000DL, "MSG_NT4_DOMAIN"},
  1027. {0x825A000EL, "MSG_NO_DC_LOCATED"},
  1028. {0xC25A000FL, "MSG_NO_DC_LOCATED_UNEXPECTED_ERROR"},
  1029. {0x825A0010L, "MSG_MANUAL_PEER_LOOKUP_FAILED_UNEXPECTED"},
  1030. {0x825A0011L, "MSG_MANUAL_PEER_LOOKUP_FAILED_RETRYING"},
  1031. {0x825A0012L, "MSG_RID_LOOKUP_FAILED"},
  1032. {0xC25A0013L, "MSG_FILELOG_FAILED"},
  1033. {0xC25A0014L, "MSG_FILELOG_WRITE_FAILED"},
  1034. {0xC25A0015L, "MSG_NO_INPUT_PROVIDERS_STARTED"},
  1035. {0x825A0016L, "MSG_CLIENT_COMPUTE_SERVER_DIGEST_FAILED"},
  1036. {0x825A0017L, "MSG_SYMMETRIC_COMPUTE_SERVER_DIGEST_FAILED"},
  1037. {0x825A0018L, "MSG_DOMHIER_PEER_TIMEOUT"},
  1038. {0x825A0019L, "MSG_COMPUTE_CLIENT_DIGEST_FAILED"},
  1039. {0x825A001AL, "MSG_BAD_SIGNATURE"},
  1040. {0x825A001BL, "MSG_MISSING_SIGNATURE"},
  1041. {0xC25A001CL, "MSG_NO_NTP_PEERS"},
  1042. {0xC25A001DL, "MSG_NO_NTP_PEERS_BUT_PENDING"},
  1043. {0xC25A001EL, "MSG_CONFIG_READ_FAILED"},
  1044. {0x825A001FL, "MSG_TIME_ZONE_FIXED"},
  1045. {0xC25A0020L, "MSG_TIME_ZONE_FIX_FAILED"},
  1046. {0x825A0021L, "MSG_TIME_JUMPED"},
  1047. {0xC25A0022L, "MSG_TIME_CHANGE_TOO_BIG"},
  1048. {0x425A0023L, "MSG_TIME_SOURCE_CHOSEN"},
  1049. {0x825A0024L, "MSG_TIME_SOURCE_NONE"},
  1050. {0x425A0025L, "MSG_TIME_SOURCE_REACHABLE"},
  1051. {0x425A0026L, "MSG_TIME_SOURCE_UNREACHABLE"},
  1052. {0x825A0027L, "MSG_TCP_NOT_INSTALLED"},
  1053. {0x825A0028L, "MSG_TIMEPROV_STOPPED"},
  1054. {0xC25A0029L, "MSG_NO_INPUT_PROVIDERS_RUNNING"},
  1055. {0xC25A002AL, "MSG_NAMED_EVENT_ALREADY_OPEN"},
  1056. {0x825A002BL, "MSG_TIMEPROV_FAILED_NETTOPOCHANGE"},
  1057. {0xC25A002CL, "MSG_NTPCLIENT_ERROR_SHUTDOWN"},
  1058. {0xC25A002DL, "MSG_NTPSERVER_ERROR_SHUTDOWN"},
  1059. {0xC25A002EL, "MSG_ERROR_SHUTDOWN"},
  1060. {0xC25A002FL, "MSG_MANUAL_PEER_TIMEOUT"},
  1061. {0xC25A0030L, "MSG_MANUAL_PEER_LOOKUP_FAILED"},
  1062. {0xC25A0031L, "MSG_NO_DC_LOCATED_LAST_WARNING"},
  1063. {0xC25A0032L, "MSG_LOCALCLOCK_UNSET"},
  1064. {0xC25A005AL, "W32TIMEMSG_AUTHTYPE_NOAUTH"},
  1065. {0xC25A005BL, "W32TIMEMSG_AUTHTYPE_NTDIGEST"},
  1066. {0xC25A005CL, "W32TIMEMSG_UNREACHABLE_PEER"},
  1067. {0xC25A005EL, "W32TIMEMSG_ERROR_PACKETTEST1"},
  1068. {0xC25A005FL, "W32TIMEMSG_ERROR_PACKETTEST2"},
  1069. {0xC25A0060L, "W32TIMEMSG_ERROR_PACKETTEST3"},
  1070. {0xC25A0061L, "W32TIMEMSG_ERROR_PACKETTEST4"},
  1071. {0xC25A0062L, "W32TIMEMSG_ERROR_PACKETTEST5"},
  1072. {0xC25A0063L, "W32TIMEMSG_ERROR_PACKETTEST6"},
  1073. {0xC25A0064L, "W32TIMEMSG_ERROR_PACKETTEST7"},
  1074. {0xC25A0065L, "W32TIMEMSG_ERROR_PACKETTEST8"},
  1075. {0xC25A0066L, "W32TIMEMSG_SERVICE_DESCRIPTION"},
  1076. {0 , "Event tag not found"}
  1077. };
  1078. // The following printer event codes from
  1079. // printscan\print\spooler\inc\messages.mc
  1080. FRS_EL_ENTRY PrinterEvents[] = {
  1081. {0x0002 ,"MSG_PRINTER_CREATED"},
  1082. {0x0003 ,"MSG_PRINTER_DELETED"},
  1083. {0x0004 ,"MSG_PRINTER_DELETION_PENDING"},
  1084. {0x0006 ,"MSG_PRINTER_PAUSED"},
  1085. {0x0007 ,"MSG_PRINTER_UNPAUSED"},
  1086. {0x0008 ,"MSG_PRINTER_PURGED"},
  1087. {0x0009 ,"MSG_PRINTER_SET"},
  1088. {0x000a ,"MSG_DOCUMENT_PRINTED"},
  1089. {0x000b ,"MSG_DOCUMENT_PAUSED"},
  1090. {0x000c ,"MSG_DOCUMENT_RESUMED"},
  1091. {0x000d ,"MSG_DOCUMENT_DELETED"},
  1092. {0x000e ,"MSG_DOCUMENT_POSITION_CHANGED"},
  1093. {0x000f ,"MSG_FORM_ADDED"},
  1094. {0x0010 ,"MSG_FORM_DELETED"},
  1095. {0x0012 ,"MSG_DOCUMENT_TIMEOUT"},
  1096. {0x0013 ,"MSG_SHARE_FAILED"},
  1097. {0x0014 ,"MSG_DRIVER_ADDED"},
  1098. {0x0015 ,"MSG_DRIVER_DELETED"},
  1099. {0x0016 ,"MSG_DRIVER_FAILED_UPGRADE"},
  1100. {0x0017 ,"MSG_NO_DRIVER_FOUND_FOR_PRINTER"},
  1101. {0x0018 ,"MSG_NO_PORT_FOUND_FOR_PRINTER"},
  1102. {0x0019 ,"MSG_FILES_COPIED"},
  1103. {0x001A ,"MSG_CANT_PUBLISH_PROPERTY"},
  1104. {0x001B ,"MSG_CANT_GET_CONTAINER"},
  1105. {0x001C ,"MSG_CANT_WRITE_ACL"},
  1106. {0x001D ,"MSG_CANT_DELETE_PRINTQUEUE"},
  1107. {0x001E ,"MSG_CANT_CREATE_PRINTQUEUE"},
  1108. {0x001F ,"MSG_CANT_PUBLISH_MANDATORY_PROPERTIES"},
  1109. {0x0020 ,"MSG_CANT_GET_PRIMARY_DOMAIN_INFO"},
  1110. {0x0021 ,"MSG_CANT_GET_DNS_DOMAIN_NAME"},
  1111. {0x0022 ,"MSG_CANT_BIND"},
  1112. {0x0023 ,"MSG_CANT_CRACK"},
  1113. {0x0024 ,"MSG_PRINTER_PUBLISHED"},
  1114. {0x0025 ,"MSG_PRINTER_NOT_PUBLISHED"},
  1115. {0x0026 ,"MSG_PRINTER_UNPUBLISHED"},
  1116. {0x0027 ,"MSG_PRINTER_NOT_UNPUBLISHED"},
  1117. {0x0028 ,"MSG_PRINTER_UPDATED"},
  1118. {0x0029 ,"MSG_CANT_CRACK_GUID"},
  1119. {0x002A ,"MSG_MISSING_PRINTER_UNPUBLISHED"},
  1120. {0x002B ,"MSG_NO_DS"},
  1121. {0x002C ,"MSG_CANT_GET_DNS_SERVER_NAME"},
  1122. {0x002D ,"MSG_DOCUMENT_FAILED_GDIDRIVER_ERROR"},
  1123. {0x002E ,"MSG_PRUNING_NOUNC_PRINTER"},
  1124. {0x002F ,"MSG_PRUNING_ABSENT_PRINTER"},
  1125. {0x0030 ,"MSG_PRUNING_UNPUBLISHED_PRINTER"},
  1126. {0x0031 ,"MSG_PRUNING_DUPLICATE_PRINTER"},
  1127. {0x0032 ,"MSG_PRUNING_PRINTER"},
  1128. {0x0033 ,"MSG_CANT_PRUNE_PRINTER"},
  1129. {0x0034 ,"MSG_BAD_OEM_DRIVER"},
  1130. {0x0035 ,"MSG_BACKUP_SPOOLER_REGISTRY"},
  1131. {0x0036 ,"MSG_BAD_JOB"},
  1132. {0x0037 ,"MSG_KM_PRINTERS_BLOCKED"},
  1133. {0x0038 ,"MSG_DOCUMENT_PRIORITY_CHANGED"},
  1134. {0x0039 ,"MSG_DOCUMENT_FAILED_ACCESS_DENIED"},
  1135. {0x003A ,"MSG_INIT_FAILED"},
  1136. {0x003B ,"MSG_CANT_ADD_CLUSTER_ACE"},
  1137. {0x003C ,"MSG_CANT_ADD_UPDATE_CLUSTER_DRIVER"},
  1138. {0x003D ,"MSG_PRINT_ON_PROC_FAILED"},
  1139. {0x003E ,"MSG_DRIVER_MISMATCHED_WITH_SERVER"},
  1140. {0x0018 ,"MSG_PORT_INITIALIZATION_ERROR"},
  1141. {0 , "Event tag not found"}
  1142. };
  1143. // The following DHCP event codes from
  1144. // \\index1\w2krtm\private\net\sockets\tcpcmd\dhcpm\server\messages\dhcpmsg.mc
  1145. FRS_EL_ENTRY DHCPEvents[] = {
  1146. {1000, "EVENT_SERVER_UNKNOWN_OPTION"},
  1147. {1001, "EVENT_SERVER_FAILED_REGISTER_SC"},
  1148. {1002, "EVENT_SERVER_INIT_DATA_FAILED"},
  1149. {1003, "EVENT_SERVER_INIT_REGISTRY_FAILED"},
  1150. {1004, "EVENT_SERVER_INIT_DATABASE_FAILED"},
  1151. {1005, "EVENT_SERVER_INIT_WINSOCK_FAILED"},
  1152. {1006, "EVENT_SERVER_INIT_RPC_FAILED"},
  1153. {1007, "EVENT_SERVER_INIT_SOCK_FAILED"},
  1154. {1008, "EVENT_SERVER_SHUTDOWN"},
  1155. {1009, "EVENT_SERVER_CLIENT_CLEANUP"},
  1156. {1010, "EVENT_SERVER_DATABASE_CLEANUP"},
  1157. {1011, "EVENT_SERVER_LEASE_NACK"},
  1158. {1012, "EVENT_SERVER_LEASE_DECLINED"},
  1159. {1013, "EVENT_SERVER_LEASE_RELEASE"},
  1160. {1014, "EVENT_SERVER_JET_ERROR"},
  1161. {1015, "EVENT_SERVER_JET_WARNING"},
  1162. {1016, "EVENT_SERVER_DATABASE_BACKUP"},
  1163. {1017, "EVENT_SERVER_CONFIG_BACKUP"},
  1164. {1018, "EVENT_SERVER_DATABASE_RESTORE_FAILED"},
  1165. {1019, "EVENT_SERVER_CONFIG_RESTORE_FAILED"},
  1166. {1020, "EVENT_SERVER_LOW_ADDRESS_WARNING"},
  1167. {1021, "EVENT_SERVER_LOAD_JET_FAILED"},
  1168. {1022, "EVENT_SERVER_JET_CONV_REQUIRED"},
  1169. {1023, "EVENT_SERVER_JET_CONV_IN_PROGRESS"},
  1170. {1024, "EVENT_SERVER_INIT_AND_READY"},
  1171. {1025, "EVENT_SERVER_BOOT_FILE_TABLE"},
  1172. {1026, "EVENT_SERVER_BOOT_FILE_NAME"},
  1173. {1027, "EVENT_SERVER_AUDIT_LOG_APPEND_FAILED"},
  1174. {1028, "EVENT_SERVER_INIT_AUDIT_LOG_FAILED"},
  1175. {1029, "EVENT_SERVER_PING_FAILED"},
  1176. {1030, "EVENT_SERVER_MOVE_AUDIT_LOG_FAILED"},
  1177. {1031, "EVENT_SERVER_CALLOUT_UNHANDLED_EXCEPTION"},
  1178. {1032, "EVENT_SERVER_CALLOUT_LOAD_EXCEPTION"},
  1179. {1033, "EVENT_SERVER_CALLOUT_LOAD_SUCCESS"},
  1180. {1034, "EVENT_SERVER_CALLOUT_LOAD_FAILED"},
  1181. {1035, "EVENT_SERVER_READ_ONLY_GROUP_ERROR"},
  1182. {1036, "EVENT_SERVER_ADMIN_GROUP_ERROR"},
  1183. {1037, "EVENT_SERVER_CLEANUP_STARTED"},
  1184. {1038, "EVENT_SERVER_IPCLEANUP_FINISHED"},
  1185. {1039, "EVENT_SERVER_MCASTCLEANUP_FINISHED"},
  1186. {1040, "EVENT_SERVER_DATABASE_RESTORE_SUCCEEDED"},
  1187. {1041, "DHCP_ROGUE_EVENT_NO_NETWORK"},
  1188. {1042, "DHCP_ROGUE_EVENT_UNAUTHORIZED_INFO"},
  1189. {1043, "DHCP_ROGUE_EVENT_STARTED"},
  1190. {1044, "DHCP_ROGUE_EVENT_STARTED_DOMAIN"},
  1191. {1045, "DHCP_ROGUE_EVENT_STOPPED"},
  1192. {1046, "DHCP_ROGUE_EVENT_STOPPED_DOMAIN"},
  1193. {1047, "DHCP_ROGUE_EVENT_JUST_UPGRADED"},
  1194. {1048, "DHCP_ROGUE_EVENT_JUST_UPGRADED_DOMAIN"},
  1195. {1049, "DHCP_ROGUE_EVENT_CANT_FIND_DOMAIN"},
  1196. {1050, "DHCP_ROGUE_EVENT_NETWORK_FAILURE"},
  1197. {1051, "DHCP_ROGUE_EVENT_UNAUTHORIZED"},
  1198. {1052, "DHCP_ROGUE_EVENT_OTHER_SERVER"},
  1199. {1053, "DHCP_ROGUE_EVENT_SAM_OTHER_SERVER"},
  1200. {1054, "DHCP_ROGUE_EVENT_SHUTDOWN"},
  1201. {1055, "DHCP_EVENT_DNS_REGPARAMS_FAILURE"},
  1202. {1056, "DHCP_EVENT_NO_DNSCREDENTIALS_ON_DC"},
  1203. {1057, "EVENT_SERVER_DATABASE_CONVERSION"},
  1204. {1058, "EVENT_SERVER_INIT_CONFIG_FAILED"},
  1205. {1059, "EVENT_SERVER_COULDNT_SEE_DS"},
  1206. {1060, "EVENT_SERVER_AUDITLOG_PATH_NOT_ACCESSIBLE"},
  1207. {1061, "EVENT_SERVER_BACKUP_PATH_NOT_ACCESSIBLE"},
  1208. {1062, "EVENT_SERVER_DB_PATH_NOT_ACCESSIBLE"},
  1209. {1063, "EVENT_SERVER_SCOPE_FULL"},
  1210. {0 , "Event tag not found"}
  1211. };
  1212. // The following SceCli event codes from
  1213. // \\index1\sdnt\ds\security\services\scerpc\uevents.mc
  1214. FRS_EL_ENTRY SecPolicyEngine[] = {
  1215. {1000, "SCEEVENT_ERROR_BACKUP_SECURITY"},
  1216. {1001, "SCEPOL_ERROR_PROCESS_GPO"},
  1217. {1002, "SCEEVENT_ERROR_CREATE_GPO"},
  1218. {1003, "SCEEVENT_ERROR_QUEUE_RETRY_TIMEOUT"},
  1219. {1004, "SCEEVENT_ERROR_POLICY_QUEUE"},
  1220. {1005, "SCEEVENT_ERROR_JET_DATABASE"},
  1221. {1006, "SCEEVENT_ERROR_POLICY_PDCVERIFY"},
  1222. {1007, "SCEEVENT_ERROR_POLICY_PDCTIMEOUT"},
  1223. {1200, "SCEEVENT_WARNING_BACKUP_SECURITY"},
  1224. {1201, "SCEEVENT_WARNING_REGISTER"},
  1225. {1202, "SCEPOL_WARNING_PROCESS_GPO"},
  1226. {1203, "SCEEVENT_WARNING_MACHINE_ROLE"},
  1227. {1204, "SCEEVENT_WARNING_PROMOTE_SECURITY"},
  1228. {1205, "SCEEVENT_WARNING_LOW_DISK_SPACE"},
  1229. {1500, "SCEEVENT_INFO_BACKUP_SECURITY"},
  1230. {1700, "SCEEVENT_INFO_REPLICA"},
  1231. {1701, "SCEEVENT_INFO_REGISTER"},
  1232. {1702, "SCEPOL_INFO_IGNORE_DOMAINPOLICY"},
  1233. {1703, "SCEPOL_INFO_GPO_NOCHANGE"},
  1234. {1704, "SCEPOL_INFO_GPO_COMPLETED"},
  1235. {1705, "SCEPOL_INFO_PROCESS_GPO"},
  1236. {1706, "SCEEVENT_ERROR_CONVERT_PARAMETER"},
  1237. {1707, "SCEEVENT_ERROR_CONVERT_BAD_ENV_VAR"},
  1238. {1708, "SCEEVENT_INFO_ERROR_CONVERT_DRIVE"},
  1239. {1709, "SCEEVENT_INFO_SUCCESS_CONVERT_DRIVE"},
  1240. {1710, "SCEEVENT_WARNING_BACKUP_SECURITY_ROOT_SDDL"},
  1241. {0 , "Event tag not found"}
  1242. };
  1243. // The following time service codes from
  1244. // \\index1\w2krtm\private\ntrk\source\timeserv\timeserv.h
  1245. FRS_EL_ENTRY TimeservEvents[] = {
  1246. {0x40000000L, "MSG_TIMESET_SMALL"},
  1247. {0x40000001L, "MSG_TIMESOURCE"},
  1248. {0x40000002L, "MSG_CHANGE"},
  1249. {0x40000003L, "MSG_BC_FLYING"},
  1250. {0x40000004L, "MSG_TOO_OFTEN"},
  1251. {0x40000005L, "MSG_LEAP"},
  1252. {0x40000006L, "MSG_TIMESET_LARGE"},
  1253. {0x40000007L, "MSG_TOO_MUCH_SKEW"},
  1254. {0x80000008L, "MSG_QUAL_A"},
  1255. {0x80000009L, "MSG_NC_NOTSET"},
  1256. {0x8000000AL, "MSG_INET_FAILED"},
  1257. {0x8000000BL, "MSG_NTPTROUBLE"},
  1258. {0x8000000CL, "MSG_NTPBAD"},
  1259. {0x8000000DL, "MSG_GPSBAD"},
  1260. {0x8000000EL, "MSG_TOOBIG"},
  1261. {0x8000000FL, "MSG_DST"},
  1262. {0x80000010L, "MSG_COMM_PORT"},
  1263. {0x80000011L, "MSG_MODEM_TIMEOUT"},
  1264. {0x80000012L, "MSG_LINE_NOISE"},
  1265. {0x80000013L, "MSG_GC_TIMEOUTOK"},
  1266. {0x80000014L, "MSG_GC_NOTSET"},
  1267. {0x80000015L, "MSG_GC_NOTENTHS"},
  1268. {0x80000016L, "MSG_PRIMARY_FAILED"},
  1269. {0x80000017L, "MSG_SECONDARY_FAILED"},
  1270. {0x80000018L, "MSG_TOD_FAILED"},
  1271. {0x80000019L, "MSG_LONG_TIME"},
  1272. {0x8000001AL, "MSG_NO_DELAY"},
  1273. {0x8000001BL, "MSG_BC_NOTSET"},
  1274. {0x8000001CL, "MSG_DELAY_FAIL"},
  1275. {0x8000001DL, "MSG_FIFO"},
  1276. {0x8000001EL, "MSG_HEALTH"},
  1277. {0x8000001FL, "MSG_TOOEARLY"},
  1278. {0xC0000020L, "MSG_EVENT_KEY"},
  1279. {0xC0000021L, "MSG_EVENT_MSG"},
  1280. {0xC0000022L, "MSG_EVENT_TYPES"},
  1281. {0xC0000023L, "MSG_SCM_FAILED"},
  1282. {0xC0000024L, "MSG_CS_FAILED"},
  1283. {0xC0000025L, "MSG_OPT_FAILED"},
  1284. {0xC0000026L, "MSG_ATPE_FAILED"},
  1285. {0xC0000027L, "MSG_ATPD_FAILED"},
  1286. {0xC0000028L, "MSG_GCS_FAILED"},
  1287. {0xC0000029L, "MSG_SCS_FAILED"},
  1288. {0xC000002AL, "MSG_GCT_FAILED"},
  1289. {0xC000002BL, "MSG_SCT_FAILED"},
  1290. {0xC000002CL, "MSG_DEV_TIMEOUT"},
  1291. {0xC000002DL, "MSG_SLT_FAILED"},
  1292. {0xC000002EL, "MSG_SST_FAILED"},
  1293. {0xC000002FL, "MSG_CLOSE_FAILED"},
  1294. {0xC0000030L, "MSG_SSS_FAILED"},
  1295. {0xC0000031L, "MSG_BC_DRIVER"},
  1296. {0xC0000032L, "MSG_WNOE_FAILED"},
  1297. {0xC0000033L, "MSG_SOCKET_FAILED"},
  1298. {0xC0000034L, "MSG_NTP_NAME"},
  1299. {0x40000040L, "MSG_NTP_RFC868"},
  1300. {0 , "Event tag not found"}
  1301. };
  1302. // \\index1\w2krtm\private\security\kerb.prx\server\kdcevent.h
  1303. FRS_EL_ENTRY KDCEvents[] = {
  1304. {0x00000001L, "CATEGORY_KDC"},
  1305. {0x00000002L, "CATEGORY_MAX_CATEGORY"},
  1306. {0x80000003L, "KDCEVENT_UNKNOWN_PRINCIPAL"},
  1307. {0x80000004L, "KDCEVENT_FAILED_DOMAIN_CREDS"},
  1308. {0xC0000005L, "KDCEVENT_POLICY_UPDATE_FAILED"},
  1309. {0xC0000006L, "KDCEVENT_DOMAIN_LIST_UPDATE_FAILED"},
  1310. {0xC0000007L, "KDCEVENT_SAM_CALL_FAILED"},
  1311. {0xC0000008L, "KDCEVENT_NO_KEY_TYPE"},
  1312. {0x00000009L, "KDCEVENT_KRBTGT_PASSWORD_CHANGED"},
  1313. {0xC000000AL, "KDCEVENT_KRBTGT_PASSWORD_CHANGE_FAILED"},
  1314. {0xC000000BL, "KDCEVENT_NAME_NOT_UNIQUE"},
  1315. {0 , "Event tag not found"}
  1316. };
  1317. // \nt\ds\ds\src\sam\server\sampmsgs.mc
  1318. FRS_EL_ENTRY SAMEvents[] = {
  1319. {0x3000L, "SAMMSG_COMMIT_FAILED"},
  1320. {0x3001L, "SAMMSG_REFRESH_FAILED"},
  1321. {0x3002L, "SAMMSG_UPDATE_FAILED"},
  1322. {0x3003L, "SAMMSG_RPC_INIT_FAILED"},
  1323. {0x3004L, "SAMMSG_DUPLICATE_ACCOUNT_NAME"},
  1324. {0x3005L, "SAMMSG_DUPLICATE_SID"},
  1325. {0x3006L, "SAMMSG_LOCKOUT_NOT_UPDATED"},
  1326. {0x3007L, "SAMMSG_DATABASE_FILE_NOT_DELETED"},
  1327. {0x3008L, "SAMMSG_DATABASE_DIR_NOT_DELETED"},
  1328. {0x3009L, "SAMMSG_PROMOTED_TO_PDC"},
  1329. {0x300AL, "SAMMSG_DC_NEEDS_TO_BE_COMPUTER"},
  1330. {0x300BL, "SAMMSG_SITE_INFO_UPDATE_FAILED"},
  1331. {0x300CL, "SAMMSG_SITE_INFO_UPDATE_SUCCEEDED_ON"},
  1332. {0x300DL, "SAMMSG_SITE_INFO_UPDATE_SUCCEEDED_OFF"},
  1333. {0x300EL, "SAMMSG_CREDENTIAL_UPDATE_PKG_FAILED"},
  1334. {0x4000L, "SAMMSG_DUPLICATE_ACCOUNT"},
  1335. {0x4001L, "SAMMSG_USER_NOT_UPGRADED"},
  1336. {0x4002L, "SAMMSG_UNKNOWN_USER_NOT_UPGRADED"},
  1337. {0x4003L, "SAMMSG_ALIAS_NOT_UPGRADED"},
  1338. {0x4004L, "SAMMSG_UNKNOWN_ALIAS_NOT_UPGRADED"},
  1339. {0x4005L, "SAMMSG_GROUP_NOT_UPGRADED"},
  1340. {0x4006L, "SAMMSG_UNKNOWN_GROUP_NOT_UPGRADED"},
  1341. {0x4007L, "SAMMSG_ERROR_ALIAS_MEMBER"},
  1342. {0x4008L, "SAMMSG_ERROR_ALIAS_MEMBER_UNKNOWN"},
  1343. {0x4009L, "SAMMSG_ERROR_GROUP_MEMBER"},
  1344. {0x400aL, "SAMMSG_ERROR_GROUP_MEMBER_UNKNOWN"},
  1345. {0x400bL, "SAMMSG_FATAL_UPGRADE_ERROR"},
  1346. {0x400cL, "SAMMSG_KRBTGT_RENAMED"},
  1347. {0x400dL, "SAMMSG_BLANK_ADMIN_PASSWORD"},
  1348. {0x400eL, "SAMMSG_ERROR_UPGRADE_USERPARMS"},
  1349. {0x400fL, "SAMMSG_ERROR_SET_USERPARMS"},
  1350. {0x4010L, "SAMMSG_ACCEPTABLE_ERROR_UPGRADE_USER"},
  1351. {0x4011L, "SAMMSG_MEMBERSHIP_SETUP_ERROR_NO_GROUP"},
  1352. {0x4012L, "SAMMSG_MEMBERSHIP_SETUP_ERROR"},
  1353. {0x4013L, "SAMMSG_USER_SETUP_ERROR"},
  1354. {0x4014L, "SAMMSG_EA_TO_ADMIN_FAILED"},
  1355. {0x4015L, "SAMMSG_MACHINE_ACCOUNT_MISSING"},
  1356. {0x4016L, "SAMMSG_WELL_KNOWN_ACCOUNT_RECREATED"},
  1357. {0x4017L, "SAMMSG_WELL_KNOWN_GROUP_RECREATED"},
  1358. {0x4018L, "SAMMSG_CHANGE_TO_NATIVE_MODE"},
  1359. {0x4100L, "SAMMSG_RID_MANAGER_INITIALIZATION"},
  1360. {0x4101L, "SAMMSG_RID_POOL_UPDATE_FAILED"},
  1361. {0x4102L, "SAMMSG_GET_NEXT_RID_ERROR"},
  1362. {0x4103L, "SAMMSG_NO_RIDS_ASSIGNED"},
  1363. {0x4104L, "SAMMSG_MAX_DOMAIN_RID"},
  1364. {0x4105L, "SAMMSG_MAX_DC_RID"},
  1365. {0x4106L, "SAMMSG_INVALID_RID"},
  1366. {0x4107L, "SAMMSG_REQUESTING_NEW_RID_POOL"},
  1367. {0x4108L, "SAMMSG_RID_REQUEST_STATUS_SUCCESS"},
  1368. {0x4109L, "SAMMSG_RID_MANAGER_CREATION"},
  1369. {0x410AL, "SAMMSG_RID_INIT_FAILURE"},
  1370. {0x410BL, "SAMMSG_RID_REQUEST_STATUS_FAILURE"},
  1371. {0x4200L, "SAMMSG_AUDIT_ENABLED_LOCAL_GROUP_TO_ENABLED_UNIVERSAL_GROUP"},
  1372. {0x4201L, "SAMMSG_AUDIT_ENABLED_LOCAL_GROUP_TO_DISABLED_LOCAL_GROUP"},
  1373. {0x4202L, "SAMMSG_AUDIT_ENABLED_LOCAL_GROUP_TO_DISABLED_UNIVERSAL_GROUP"},
  1374. {0x4203L, "SAMMSG_AUDIT_ENABLED_GLOBAL_GROUP_TO_ENABLED_UNIVERSAL_GROUP"},
  1375. {0x4204L, "SAMMSG_AUDIT_ENABLED_GLOBAL_GROUP_TO_DISABLED_GLOBAL_GROUP"},
  1376. {0x4205L, "SAMMSG_AUDIT_ENABLED_GLOBAL_GROUP_TO_DISABLED_UNIVERSAL_GROUP"},
  1377. {0x4206L, "SAMMSG_AUDIT_ENABLED_UNIVERSAL_GROUP_TO_ENABLED_LOCAL_GROUP"},
  1378. {0x4207L, "SAMMSG_AUDIT_ENABLED_UNIVERSAL_GROUP_TO_ENABLED_GLOBAL_GROUP"},
  1379. {0x4208L, "SAMMSG_AUDIT_ENABLED_UNIVERSAL_GROUP_TO_DISABLED_LOCAL_GROUP"},
  1380. {0x4209L, "SAMMSG_AUDIT_ENABLED_UNIVERSAL_GROUP_TO_DISABLED_GLOBAL_GROUP"},
  1381. {0x420AL, "SAMMSG_AUDIT_ENABLED_UNIVERSAL_GROUP_TO_DISABLED_UNIVERSAL_GROUP"},
  1382. {0x420BL, "SAMMSG_AUDIT_DISABLED_LOCAL_GROUP_TO_ENABLED_LOCAL_GROUP"},
  1383. {0x420CL, "SAMMSG_AUDIT_DISABLED_LOCAL_GROUP_TO_ENABLED_UNIVERSAL_GROUP"},
  1384. {0x420DL, "SAMMSG_AUDIT_DISABLED_LOCAL_GROUP_TO_DISABLED_UNIVERSAL_GROUP"},
  1385. {0x420EL, "SAMMSG_AUDIT_DISABLED_GLOBAL_GROUP_TO_ENABLED_GLOBAL_GROUP"},
  1386. {0x420FL, "SAMMSG_AUDIT_DISABLED_GLOBAL_GROUP_TO_ENABLED_UNIVERSAL_GROUP"},
  1387. {0x4210L, "SAMMSG_AUDIT_DISABLED_GLOBAL_GROUP_TO_DISABLED_UNIVERSAL_GROUP"},
  1388. {0x4211L, "SAMMSG_AUDIT_DISABLED_UNIVERSAL_GROUP_TO_ENABLED_LOCAL_GROUP"},
  1389. {0x4212L, "SAMMSG_AUDIT_DISABLED_UNIVERSAL_GROUP_TO_ENABLED_GLOBAL_GROUP"},
  1390. {0x4213L, "SAMMSG_AUDIT_DISABLED_UNIVERSAL_GROUP_TO_ENABLED_UNIVERSAL_GROUP"},
  1391. {0x4214L, "SAMMSG_AUDIT_DISABLED_UNIVERSAL_GROUP_TO_DISABLED_LOCAL_GROUP"},
  1392. {0x4215L, "SAMMSG_AUDIT_DISABLED_UNIVERSAL_GROUP_TO_DISABLED_GLOBAL_GROUP"},
  1393. {0x4216L, "SAMMSG_AUDIT_MEMBER_ACCOUNT_NAME_NOT_AVAILABLE"},
  1394. {0 , "Event tag not found"}
  1395. };
  1396. // The following come from \\index1\sdnt\public\sdk\inc\lmerrlog.h
  1397. #define ERRLOG_BASE 3100 /* NELOG errors start here */
  1398. #define ERRLOG2_BASE 5700 /* New NT NELOG errors start here */
  1399. FRS_EL_ENTRY NetlogonEvents[] = {
  1400. {(ERRLOG_BASE + 0), "NELOG_Internal_Error"},
  1401. {(ERRLOG_BASE + 1), "NELOG_Resource_Shortage"},
  1402. {(ERRLOG_BASE + 2), "NELOG_Unable_To_Lock_Segment"},
  1403. {(ERRLOG_BASE + 3), "NELOG_Unable_To_Unlock_Segment"},
  1404. {(ERRLOG_BASE + 4), "NELOG_Uninstall_Service"},
  1405. {(ERRLOG_BASE + 5), "NELOG_Init_Exec_Fail"},
  1406. {(ERRLOG_BASE + 6), "NELOG_Ncb_Error"},
  1407. {(ERRLOG_BASE + 7), "NELOG_Net_Not_Started"},
  1408. {(ERRLOG_BASE + 8), "NELOG_Ioctl_Error"},
  1409. {(ERRLOG_BASE + 9), "NELOG_System_Semaphore"},
  1410. {(ERRLOG_BASE + 10), "NELOG_Init_OpenCreate_Err"},
  1411. {(ERRLOG_BASE + 11), "NELOG_NetBios"},
  1412. {(ERRLOG_BASE + 12), "NELOG_SMB_Illegal"},
  1413. {(ERRLOG_BASE + 13), "NELOG_Service_Fail"},
  1414. {(ERRLOG_BASE + 14), "NELOG_Entries_Lost"},
  1415. {(ERRLOG_BASE + 20), "NELOG_Init_Seg_Overflow"},
  1416. {(ERRLOG_BASE + 21), "NELOG_Srv_No_Mem_Grow"},
  1417. {(ERRLOG_BASE + 22), "NELOG_Access_File_Bad"},
  1418. {(ERRLOG_BASE + 23), "NELOG_Srvnet_Not_Started"},
  1419. {(ERRLOG_BASE + 24), "NELOG_Init_Chardev_Err"},
  1420. {(ERRLOG_BASE + 25), "NELOG_Remote_API"},
  1421. {(ERRLOG_BASE + 26), "NELOG_Ncb_TooManyErr"},
  1422. {(ERRLOG_BASE + 27), "NELOG_Mailslot_err"},
  1423. {(ERRLOG_BASE + 28), "NELOG_ReleaseMem_Alert"},
  1424. {(ERRLOG_BASE + 29), "NELOG_AT_cannot_write"},
  1425. {(ERRLOG_BASE + 30), "NELOG_Cant_Make_Msg_File"},
  1426. {(ERRLOG_BASE + 31), "NELOG_Exec_Netservr_NoMem"},
  1427. {(ERRLOG_BASE + 32), "NELOG_Server_Lock_Failure"},
  1428. {(ERRLOG_BASE + 40), "NELOG_Msg_Shutdown"},
  1429. {(ERRLOG_BASE + 41), "NELOG_Msg_Sem_Shutdown"},
  1430. {(ERRLOG_BASE + 50), "NELOG_Msg_Log_Err"},
  1431. {(ERRLOG_BASE + 51), "NELOG_VIO_POPUP_ERR"},
  1432. {(ERRLOG_BASE + 52), "NELOG_Msg_Unexpected_SMB_Type"},
  1433. {(ERRLOG_BASE + 60), "NELOG_Wksta_Infoseg"},
  1434. {(ERRLOG_BASE + 61), "NELOG_Wksta_Compname"},
  1435. {(ERRLOG_BASE + 62), "NELOG_Wksta_BiosThreadFailure"},
  1436. {(ERRLOG_BASE + 63), "NELOG_Wksta_IniSeg"},
  1437. {(ERRLOG_BASE + 64), "NELOG_Wksta_HostTab_Full"},
  1438. {(ERRLOG_BASE + 65), "NELOG_Wksta_Bad_Mailslot_SMB"},
  1439. {(ERRLOG_BASE + 66), "NELOG_Wksta_UASInit"},
  1440. {(ERRLOG_BASE + 67), "NELOG_Wksta_SSIRelogon"},
  1441. {(ERRLOG_BASE + 70), "NELOG_Build_Name"},
  1442. {(ERRLOG_BASE + 71), "NELOG_Name_Expansion"},
  1443. {(ERRLOG_BASE + 72), "NELOG_Message_Send"},
  1444. {(ERRLOG_BASE + 73), "NELOG_Mail_Slt_Err"},
  1445. {(ERRLOG_BASE + 74), "NELOG_AT_cannot_read"},
  1446. {(ERRLOG_BASE + 75), "NELOG_AT_sched_err"},
  1447. {(ERRLOG_BASE + 76), "NELOG_AT_schedule_file_created"},
  1448. {(ERRLOG_BASE + 77), "NELOG_Srvnet_NB_Open"},
  1449. {(ERRLOG_BASE + 78), "NELOG_AT_Exec_Err"},
  1450. {(ERRLOG_BASE + 80), "NELOG_Lazy_Write_Err"},
  1451. {(ERRLOG_BASE + 81), "NELOG_HotFix"},
  1452. {(ERRLOG_BASE + 82), "NELOG_HardErr_From_Server"},
  1453. {(ERRLOG_BASE + 83), "NELOG_LocalSecFail1"},
  1454. {(ERRLOG_BASE + 84), "NELOG_LocalSecFail2"},
  1455. {(ERRLOG_BASE + 85), "NELOG_LocalSecFail3"},
  1456. {(ERRLOG_BASE + 86), "NELOG_LocalSecGeneralFail"},
  1457. {(ERRLOG_BASE + 90), "NELOG_NetWkSta_Internal_Error"},
  1458. {(ERRLOG_BASE + 91), "NELOG_NetWkSta_No_Resource"},
  1459. {(ERRLOG_BASE + 92), "NELOG_NetWkSta_SMB_Err"},
  1460. {(ERRLOG_BASE + 93), "NELOG_NetWkSta_VC_Err"},
  1461. {(ERRLOG_BASE + 94), "NELOG_NetWkSta_Stuck_VC_Err"},
  1462. {(ERRLOG_BASE + 95), "NELOG_NetWkSta_NCB_Err"},
  1463. {(ERRLOG_BASE + 96), "NELOG_NetWkSta_Write_Behind_Err"},
  1464. {(ERRLOG_BASE + 97), "NELOG_NetWkSta_Reset_Err"},
  1465. {(ERRLOG_BASE + 98), "NELOG_NetWkSta_Too_Many"},
  1466. {(ERRLOG_BASE + 104), "NELOG_Srv_Thread_Failure"},
  1467. {(ERRLOG_BASE + 105), "NELOG_Srv_Close_Failure"},
  1468. {(ERRLOG_BASE + 106), "NELOG_ReplUserCurDir"},
  1469. {(ERRLOG_BASE + 107), "NELOG_ReplCannotMasterDir"},
  1470. {(ERRLOG_BASE + 108), "NELOG_ReplUpdateError"},
  1471. {(ERRLOG_BASE + 109), "NELOG_ReplLostMaster"},
  1472. {(ERRLOG_BASE + 110), "NELOG_NetlogonAuthDCFail"},
  1473. {(ERRLOG_BASE + 111), "NELOG_ReplLogonFailed"},
  1474. {(ERRLOG_BASE + 112), "NELOG_ReplNetErr"},
  1475. {(ERRLOG_BASE + 113), "NELOG_ReplMaxFiles"},
  1476. {(ERRLOG_BASE + 114), "NELOG_ReplMaxTreeDepth"},
  1477. {(ERRLOG_BASE + 115), "NELOG_ReplBadMsg"},
  1478. {(ERRLOG_BASE + 116), "NELOG_ReplSysErr"},
  1479. {(ERRLOG_BASE + 117), "NELOG_ReplUserLoged"},
  1480. {(ERRLOG_BASE + 118), "NELOG_ReplBadImport"},
  1481. {(ERRLOG_BASE + 119), "NELOG_ReplBadExport"},
  1482. {(ERRLOG_BASE + 120), "NELOG_ReplSignalFileErr"},
  1483. {(ERRLOG_BASE + 121), "NELOG_DiskFT"},
  1484. {(ERRLOG_BASE + 122), "NELOG_ReplAccessDenied"},
  1485. {(ERRLOG_BASE + 123), "NELOG_NetlogonFailedPrimary"},
  1486. {(ERRLOG_BASE + 124), "NELOG_NetlogonPasswdSetFailed"},
  1487. {(ERRLOG_BASE + 125), "NELOG_NetlogonTrackingError"},
  1488. {(ERRLOG_BASE + 126), "NELOG_NetlogonSyncError"},
  1489. {(ERRLOG_BASE + 127), "NELOG_NetlogonRequireSignOrSealError"},
  1490. {(ERRLOG_BASE + 130), "NELOG_UPS_PowerOut"},
  1491. {(ERRLOG_BASE + 131), "NELOG_UPS_Shutdown"},
  1492. {(ERRLOG_BASE + 132), "NELOG_UPS_CmdFileError"},
  1493. {(ERRLOG_BASE + 133), "NELOG_UPS_CannotOpenDriver"},
  1494. {(ERRLOG_BASE + 134), "NELOG_UPS_PowerBack"},
  1495. {(ERRLOG_BASE + 135), "NELOG_UPS_CmdFileConfig"},
  1496. {(ERRLOG_BASE + 136), "NELOG_UPS_CmdFileExec"},
  1497. {(ERRLOG_BASE + 150), "NELOG_Missing_Parameter"},
  1498. {(ERRLOG_BASE + 151), "NELOG_Invalid_Config_Line"},
  1499. {(ERRLOG_BASE + 152), "NELOG_Invalid_Config_File"},
  1500. {(ERRLOG_BASE + 153), "NELOG_File_Changed"},
  1501. {(ERRLOG_BASE + 154), "NELOG_Files_Dont_Fit"},
  1502. {(ERRLOG_BASE + 155), "NELOG_Wrong_DLL_Version"},
  1503. {(ERRLOG_BASE + 156), "NELOG_Error_in_DLL"},
  1504. {(ERRLOG_BASE + 157), "NELOG_System_Error"},
  1505. {(ERRLOG_BASE + 158), "NELOG_FT_ErrLog_Too_Large"},
  1506. {(ERRLOG_BASE + 159), "NELOG_FT_Update_In_Progress"},
  1507. {(ERRLOG_BASE + 160), "NELOG_Joined_Domain"},
  1508. {(ERRLOG_BASE + 199), "NELOG_OEM_Code"},
  1509. {(ERRLOG2_BASE + 0), "NELOG_NetlogonSSIInitError"},
  1510. {(ERRLOG2_BASE + 1), "NELOG_NetlogonFailedToUpdateTrustList"},
  1511. {(ERRLOG2_BASE + 2), "NELOG_NetlogonFailedToAddRpcInterface"},
  1512. {(ERRLOG2_BASE + 3), "NELOG_NetlogonFailedToReadMailslot"},
  1513. {(ERRLOG2_BASE + 4), "NELOG_NetlogonFailedToRegisterSC"},
  1514. {(ERRLOG2_BASE + 5), "NELOG_NetlogonChangeLogCorrupt"},
  1515. {(ERRLOG2_BASE + 6), "NELOG_NetlogonFailedToCreateShare"},
  1516. {(ERRLOG2_BASE + 7), "NELOG_NetlogonDownLevelLogonFailed"},
  1517. {(ERRLOG2_BASE + 8), "NELOG_NetlogonDownLevelLogoffFailed"},
  1518. {(ERRLOG2_BASE + 9), "NELOG_NetlogonNTLogonFailed"},
  1519. {(ERRLOG2_BASE + 10), "NELOG_NetlogonNTLogoffFailed"},
  1520. {(ERRLOG2_BASE + 11), "NELOG_NetlogonPartialSyncCallSuccess"},
  1521. {(ERRLOG2_BASE + 12), "NELOG_NetlogonPartialSyncCallFailed"},
  1522. {(ERRLOG2_BASE + 13), "NELOG_NetlogonFullSyncCallSuccess"},
  1523. {(ERRLOG2_BASE + 14), "NELOG_NetlogonFullSyncCallFailed"},
  1524. {(ERRLOG2_BASE + 15), "NELOG_NetlogonPartialSyncSuccess"},
  1525. {(ERRLOG2_BASE + 16), "NELOG_NetlogonPartialSyncFailed"},
  1526. {(ERRLOG2_BASE + 17), "NELOG_NetlogonFullSyncSuccess"},
  1527. {(ERRLOG2_BASE + 18), "NELOG_NetlogonFullSyncFailed"},
  1528. {(ERRLOG2_BASE + 19), "NELOG_NetlogonAuthNoDomainController"},
  1529. {(ERRLOG2_BASE + 20), "NELOG_NetlogonAuthNoTrustLsaSecret"},
  1530. {(ERRLOG2_BASE + 21), "NELOG_NetlogonAuthNoTrustSamAccount"},
  1531. {(ERRLOG2_BASE + 22), "NELOG_NetlogonServerAuthFailed"},
  1532. {(ERRLOG2_BASE + 23), "NELOG_NetlogonServerAuthNoTrustSamAccount"},
  1533. {(ERRLOG2_BASE + 24), "NELOG_FailedToRegisterSC"},
  1534. {(ERRLOG2_BASE + 25), "NELOG_FailedToSetServiceStatus"},
  1535. {(ERRLOG2_BASE + 26), "NELOG_FailedToGetComputerName"},
  1536. {(ERRLOG2_BASE + 27), "NELOG_DriverNotLoaded"},
  1537. {(ERRLOG2_BASE + 28), "NELOG_NoTranportLoaded"},
  1538. {(ERRLOG2_BASE + 29), "NELOG_NetlogonFailedDomainDelta"},
  1539. {(ERRLOG2_BASE + 30), "NELOG_NetlogonFailedGlobalGroupDelta"},
  1540. {(ERRLOG2_BASE + 31), "NELOG_NetlogonFailedLocalGroupDelta"},
  1541. {(ERRLOG2_BASE + 32), "NELOG_NetlogonFailedUserDelta"},
  1542. {(ERRLOG2_BASE + 33), "NELOG_NetlogonFailedPolicyDelta"},
  1543. {(ERRLOG2_BASE + 34), "NELOG_NetlogonFailedTrustedDomainDelta"},
  1544. {(ERRLOG2_BASE + 35), "NELOG_NetlogonFailedAccountDelta"},
  1545. {(ERRLOG2_BASE + 36), "NELOG_NetlogonFailedSecretDelta"},
  1546. {(ERRLOG2_BASE + 37), "NELOG_NetlogonSystemError"},
  1547. {(ERRLOG2_BASE + 38), "NELOG_NetlogonDuplicateMachineAccounts"},
  1548. {(ERRLOG2_BASE + 39), "NELOG_NetlogonTooManyGlobalGroups"},
  1549. {(ERRLOG2_BASE + 40), "NELOG_NetlogonBrowserDriver"},
  1550. {(ERRLOG2_BASE + 41), "NELOG_NetlogonAddNameFailure"},
  1551. {(ERRLOG2_BASE + 42), "NELOG_RplMessages"},
  1552. {(ERRLOG2_BASE + 43), "NELOG_RplXnsBoot"},
  1553. {(ERRLOG2_BASE + 44), "NELOG_RplSystem"},
  1554. {(ERRLOG2_BASE + 45), "NELOG_RplWkstaTimeout"},
  1555. {(ERRLOG2_BASE + 46), "NELOG_RplWkstaFileOpen"},
  1556. {(ERRLOG2_BASE + 47), "NELOG_RplWkstaFileRead"},
  1557. {(ERRLOG2_BASE + 48), "NELOG_RplWkstaMemory"},
  1558. {(ERRLOG2_BASE + 49), "NELOG_RplWkstaFileChecksum"},
  1559. {(ERRLOG2_BASE + 50), "NELOG_RplWkstaFileLineCount"},
  1560. {(ERRLOG2_BASE + 51), "NELOG_RplWkstaBbcFile"},
  1561. {(ERRLOG2_BASE + 52), "NELOG_RplWkstaFileSize"},
  1562. {(ERRLOG2_BASE + 53), "NELOG_RplWkstaInternal"},
  1563. {(ERRLOG2_BASE + 54), "NELOG_RplWkstaWrongVersion"},
  1564. {(ERRLOG2_BASE + 55), "NELOG_RplWkstaNetwork"},
  1565. {(ERRLOG2_BASE + 56), "NELOG_RplAdapterResource"},
  1566. {(ERRLOG2_BASE + 57), "NELOG_RplFileCopy"},
  1567. {(ERRLOG2_BASE + 58), "NELOG_RplFileDelete"},
  1568. {(ERRLOG2_BASE + 59), "NELOG_RplFilePerms"},
  1569. {(ERRLOG2_BASE + 60), "NELOG_RplCheckConfigs"},
  1570. {(ERRLOG2_BASE + 61), "NELOG_RplCreateProfiles"},
  1571. {(ERRLOG2_BASE + 62), "NELOG_RplRegistry"},
  1572. {(ERRLOG2_BASE + 63), "NELOG_RplReplaceRPLDISK"},
  1573. {(ERRLOG2_BASE + 64), "NELOG_RplCheckSecurity"},
  1574. {(ERRLOG2_BASE + 65), "NELOG_RplBackupDatabase"},
  1575. {(ERRLOG2_BASE + 66), "NELOG_RplInitDatabase"},
  1576. {(ERRLOG2_BASE + 67), "NELOG_RplRestoreDatabaseFailure"},
  1577. {(ERRLOG2_BASE + 68), "NELOG_RplRestoreDatabaseSuccess"},
  1578. {(ERRLOG2_BASE + 69), "NELOG_RplInitRestoredDatabase"},
  1579. {(ERRLOG2_BASE + 70), "NELOG_NetlogonSessionTypeWrong"},
  1580. {(ERRLOG2_BASE + 71), "NELOG_RplUpgradeDBTo40"},
  1581. {(ERRLOG2_BASE + 72), "NELOG_NetlogonLanmanBdcsNotAllowed"},
  1582. {(ERRLOG2_BASE + 73), "NELOG_NetlogonNoDynamicDns"},
  1583. {(ERRLOG2_BASE + 74), "NELOG_NetlogonDynamicDnsRegisterFailure"},
  1584. {(ERRLOG2_BASE + 75), "NELOG_NetlogonDynamicDnsDeregisterFailure"},
  1585. {(ERRLOG2_BASE + 76), "NELOG_NetlogonFailedFileCreate"},
  1586. {(ERRLOG2_BASE + 77), "NELOG_NetlogonGetSubnetToSite"},
  1587. {(ERRLOG2_BASE + 78), "NELOG_NetlogonNoSiteForClient"},
  1588. {(ERRLOG2_BASE + 79), "NELOG_NetlogonBadSiteName"},
  1589. {(ERRLOG2_BASE + 80), "NELOG_NetlogonBadSubnetName"},
  1590. {(ERRLOG2_BASE + 81), "NELOG_NetlogonDynamicDnsServerFailure"},
  1591. {(ERRLOG2_BASE + 82), "NELOG_NetlogonDynamicDnsFailure"},
  1592. {(ERRLOG2_BASE + 83), "NELOG_NetlogonRpcCallCancelled"},
  1593. {(ERRLOG2_BASE + 84), "NELOG_NetlogonDcSiteCovered"},
  1594. {(ERRLOG2_BASE + 85), "NELOG_NetlogonDcSiteNotCovered"},
  1595. {(ERRLOG2_BASE + 86), "NELOG_NetlogonGcSiteCovered"},
  1596. {(ERRLOG2_BASE + 87), "NELOG_NetlogonGcSiteNotCovered"},
  1597. {(ERRLOG2_BASE + 88), "NELOG_NetlogonFailedSpnUpdate"},
  1598. {(ERRLOG2_BASE + 89), "NELOG_NetlogonFailedDnsHostNameUpdate"},
  1599. {(ERRLOG2_BASE + 90), "NELOG_NetlogonAuthNoUplevelDomainController"},
  1600. {(ERRLOG2_BASE + 91), "NELOG_NetlogonAuthDomainDowngraded"},
  1601. {(ERRLOG2_BASE + 92), "NELOG_NetlogonNdncSiteCovered"},
  1602. {(ERRLOG2_BASE + 93), "NELOG_NetlogonNdncSiteNotCovered"},
  1603. {(ERRLOG2_BASE + 94), "NELOG_NetlogonDcOldSiteCovered"},
  1604. {(ERRLOG2_BASE + 95), "NELOG_NetlogonDcSiteNotCoveredAuto"},
  1605. {(ERRLOG2_BASE + 96), "NELOG_NetlogonGcOldSiteCovered"},
  1606. {(ERRLOG2_BASE + 97), "NELOG_NetlogonGcSiteNotCoveredAuto"},
  1607. {(ERRLOG2_BASE + 98), "NELOG_NetlogonNdncOldSiteCovered"},
  1608. {(ERRLOG2_BASE + 99), "NELOG_NetlogonNdncSiteNotCoveredAuto"},
  1609. {(ERRLOG2_BASE + 100), "NELOG_NetlogonSpnMultipleSamAccountNames"},
  1610. {(ERRLOG2_BASE + 101), "NELOG_NetlogonSpnCrackNamesFailure"},
  1611. {(ERRLOG2_BASE + 102), "NELOG_NetlogonNoAddressToSiteMapping"},
  1612. {(ERRLOG2_BASE + 103), "NELOG_NetlogonInvalidGenericParameterValue"},
  1613. {(ERRLOG2_BASE + 104), "NELOG_NetlogonInvalidDwordParameterValue"},
  1614. {(ERRLOG2_BASE + 105), "NELOG_NetlogonServerAuthFailedNoAccount"},
  1615. {(ERRLOG2_BASE + 106), "NELOG_NetlogonNoDynamicDnsManual"},
  1616. {(ERRLOG2_BASE + 107), "NELOG_NetlogonNoSiteForClients"},
  1617. {0 , "Event tag not found"}
  1618. };
  1619. //
  1620. // DS Eventlog codes.
  1621. //
  1622. // DIR_ETYPE_WARNING 0x2
  1623. // DIR_ETYPE_SECURITY 0x0
  1624. // DIR_ETYPE_INFORMATIONAL 0x1
  1625. // DIR_ETYPE_ERROR 0x3
  1626. // KCC_CATEGORY ((MessageId)0x00000001L)
  1627. // SECURITY_CATEGORY ((MessageId)0x00000002L)
  1628. // XDS_INTERFACE_CATEGORY ((MessageId)0x00000003L)
  1629. // MAPI_CATEGORY ((MessageId)0x00000004L)
  1630. // REPLICATION_CATEGORY ((MessageId)0x00000005L)
  1631. // GARBAGE_COLLECTION_CATEGORY ((MessageId)0x00000006L)
  1632. // INTERNAL_CONFIGURATION_CATEGORY ((MessageId)0x00000007L)
  1633. // DIRECTORY_ACCESS_CATEGORY ((MessageId)0x00000008L)
  1634. // INTERNAL_PROCESSING_CATEGORY ((MessageId)0x00000009L)
  1635. // PERFORMANCE_CATEGORY ((MessageId)0x0000000AL)
  1636. // STARTUP_SHUTDOWN_CATEGORY ((MessageId)0x0000000BL)
  1637. // SERVICE_CONTROL_CATEGORY ((MessageId)0x0000000CL)
  1638. // NAME_RESOLUTION_CATEGORY ((MessageId)0x0000000DL)
  1639. // BACKUP_CATEGORY ((MessageId)0x0000000EL)
  1640. // FIELD_ENGINEERING_CATEGORY ((MessageId)0x0000000FL)
  1641. // LDAP_INTERFACE_CATEGORY ((MessageId)0x00000010L)
  1642. // SETUP_CATEGORY ((MessageId)0x00000011L)
  1643. // GC_CATEGORY ((MessageId)0x00000012L)
  1644. // ISM_CATEGORY ((MessageId)0x00000013L)
  1645. // GROUP_CACHING_CATEGORY ((MessageId)0x00000014L)
  1646. // LVR_CATEGORY ((MessageId)0x00000015L)
  1647. // DS_RPC_CLIENT_CATEGORY ((MessageId)0x00000016L)
  1648. // DS_RPC_SERVER_CATEGORY ((MessageId)0x00000017L)
  1649. // DS_SCHEMA_CATEGORY ((MessageId)0x00000018L)
  1650. // ALERT_TEMPLATE ((MessageId)0x00000320L)
  1651. // Below is built from E:\nt\ds\ds\src\idl\mdcodes.mc
  1652. FRS_EL_ENTRY DirSvcEvents[] = {
  1653. {0x400003E8, "DIRLOG_STARTED"},
  1654. {0x400003E9, "DIRLOG_START_FAILED"},
  1655. {0x400003EA, "DIRLOG_INSTALLED"},
  1656. {0xC00003EB, "DIRLOG_DBINIT_FAILED"},
  1657. {0x400003EC, "DIRLOG_NORMAL_SHUTDOWN"},
  1658. {0x400003ED, "DIRLOG_GC_STARTED"},
  1659. {0x400003EE, "DIRLOG_GC_COMPLETED"},
  1660. {0x400003EF, "DIRLOG_CHK_INIT_SUCCESS"},
  1661. {0xC00003F0, "DIRLOG_CHK_INIT_FAILURE"},
  1662. {0x400003F1, "DIRLOG_CHK_UPDATE_REPL_TOPOLOGY_BEGIN"},
  1663. {0xC00003F2, "DIRLOG_NO_MEMORY_FOR_LOG_OVERRIDES"},
  1664. {0x400003F3, "DIRLOG_SERVICE_GARBAGE_COLLECT"},
  1665. {0x400003F4, "DIRLOG_SERVICE_UNKNOWN"},
  1666. {0x400003F5, "DIRLOG_CHK_UPDATE_REPL_TOPOLOGY_END_NORMAL"},
  1667. {0x800003F6, "DIRLOG_CHK_UPDATE_REPL_TOPOLOGY_END_ABNORMAL"},
  1668. {0x400003F7, "DIRLOG_CHK_STOP_SUCCESS"},
  1669. {0xC00003F8, "DIRLOG_SCHEMA_NOT_LOADED"},
  1670. {0xC00003F9, "DIRLOG_PREFIX_LOAD_FAILED"},
  1671. {0xC00003FA, "DIRLOG_CONFIG_PARAM_MISSING"},
  1672. {0xC00003FB, "DIRLOG_CANT_REMOVE_ATT_CACHE"},
  1673. {0xC00003FC, "DIRLOG_BAD_CONT_REF"},
  1674. {0xC00003FD, "DIRLOG_CANT_REPLACE_HIDDEN_REC"},
  1675. {0xC00003FE, "DIRLOG_READ_CACHE_SKIPPED"},
  1676. {0xC00003FF, "DIRLOG_CODE_INCONSISTENCY"},
  1677. {0xC0000400, "DIRLOG_CHK_STOP_FAILURE"},
  1678. {0xC0000401, "DIRLOG_CANT_RETRIEVE_DN"},
  1679. {0xC0000402, "DIRLOG_CANT_RETRIEVE_RDN"},
  1680. {0xC0000403, "DIRLOG_CANT_RETRIEVE_INSTANCE"},
  1681. {0xC0000404, "DIRLOG_CANT_RETRIEVE_CHILD"},
  1682. {0xC0000405, "DIRLOG_NAME_MISSING_ON_ALIAS"},
  1683. {0xC0000406, "DIRLOG_BAD_ATT_SCHEMA_SYNTAX"},
  1684. {0xC0000407, "DIRLOG_NCNAME_MISSING_CR_REF"},
  1685. {0xC0000408, "DIRLOG_GOVERNSID_MISSING"},
  1686. {0xC0000409, "DIRLOG_CANT_CACHE_CLASS"},
  1687. {0xC000040A, "DIRLOG_CANT_REMOVE_CLASS_CACHE"},
  1688. {0xC000040B, "DIRLOG_ATT_SCHEMA_REQ_ID"},
  1689. {0xC000040C, "DIRLOG_ATT_SCHEMA_REQ_SYNTAX"},
  1690. {0xC000040D, "DIRLOG_MISSING_EXPECTED_ATT"},
  1691. {0xC000040E, "DIRLOG_CANT_FIND_DSA_OBJ"},
  1692. {0xC000040F, "DIRLOG_DATABASE_ERROR"},
  1693. {0xC0000410, "DIRLOG_CANT_FIND_NC_IN_CACHE"},
  1694. {0xC0000411, "DIRLOG_CANT_FIND_EXPECTED_NC"},
  1695. {0xC0000412, "DIRLOG_CANT_FIND_SUBREF_LIST"},
  1696. {0xC0000413, "DIRLOG_CANT_FIND_DSA_NAME"},
  1697. {0xC0000414, "DIRLOG_CANT_FIND_NODE_ADDRESS"},
  1698. {0x40000415, "DIRLOG_DRA_REPLICAMODIFY_ENTRY"},
  1699. {0xC0000416, "DIRLOG_JET_FAULTED"},
  1700. {0xC0000417, "DIRLOG_MISSING_CROSS_REF"},
  1701. {0xC0000418, "DIRLOG_MASTERDSA_MISSING_CR_REF"},
  1702. {0xC0000419, "DIRLOG_MISSING_SUPREF"},
  1703. {0xC000041A, "DIRLOG_UNUSED_1"},
  1704. {0xC000041B, "DIRLOG_LOOP_DETECTED"},
  1705. {0xC000041C, "DIRLOG_MASTERDSA_MISSING_SUBREF"},
  1706. {0xC000041D, "DIRLOG_CANT_CACHE_ATT"},
  1707. {0xC000041E, "DIRLOG_SECURITY_CHECKING_ERROR"},
  1708. {0x4000041F, "DIRLOG_SECURITY_ACCESS_GRANTED_SD"},
  1709. {0x40000420, "DIRLOG_SECURITY_ACCESS_GRANTED_DEFAULT"},
  1710. {0x80000421, "DIRLOG_SECURITY_ACCESS_DENIED"},
  1711. {0x00000422, "DIRLOG_SECURITY_ILLEGAL_MODIFY"},
  1712. {0x40000423, "DIRLOG_DRA_SET_UUID"},
  1713. {0x40000424, "DIRLOG_DRA_CALL_EXIT_OK"},
  1714. {0x80000425, "DIRLOG_DRA_CALL_EXIT_BAD"},
  1715. {0x40000426, "DIRLOG_CHK_LINK_DEL_NONC_BUSY"},
  1716. {0x40000427, "DIRLOG_CHK_LINK_DEL_NOTGC_BUSY"},
  1717. {0x40000428, "DIRLOG_CHK_LINK_DEL_DOMDEL_BUSY"},
  1718. {0x80000429, "DIRLOG_CHK_LINK_DEL_NOCONN_BUSY"},
  1719. {0x4000042A, "DIRLOG_DRA_REPLICAADD_ENTRY"},
  1720. {0x4000042B, "DIRLOG_DRA_REPLICADEL_ENTRY"},
  1721. {0x4000042C, "DIRLOG_DRA_UPDATEREFS_ENTRY"},
  1722. {0x4000042D, "DIRLOG_CHK_LINK_DEL_NOSRC_BUSY"},
  1723. {0x4000042E, "DIRLOG_DRA_REPLICASYNC_ENTRY"},
  1724. {0xC000042F, "DIRLOG_UNUSED_7"},
  1725. {0x40000430, "DIRLOG_DRA_GETNCCH_ENTRY"},
  1726. {0x40000431, "DIRLOG_DRA_GETNCCH_EXIT"},
  1727. {0x80000432, "DIRLOG_DRA_UPDREP_PICFAULT"},
  1728. {0x80000433, "DIRLOG_DRA_REQUPD_PICFAULT"},
  1729. {0x40000434, "DIRLOG_RPC_UNUSED_0"},
  1730. {0xC0000435, "DIRLOG_DRA_PR_ALLOC_FAIL"},
  1731. {0x40000436, "DIRLOG_PERF_OPEN"},
  1732. {0x80000437, "DIRLOG_DRA_OUT_OF_MEMORY"},
  1733. {0x80000438, "DIRLOG_DRA_NOTIFY_FAILED"},
  1734. {0x80000439, "DIRLOG_DRA_IDUPDATE_FAILED"},
  1735. {0x8000043A, "DIRLOG_DRA_IDREQUEST_FAILED"},
  1736. {0x8000043B, "DIRLOG_DRA_UPDATE_FAILURE"},
  1737. {0xC000043C, "DIRLOG_DRA_UPDATE_FAILURE_NOT_BUSY"},
  1738. {0x8000043D, "DIRLOG_DRA_SYNC_FAILURE"},
  1739. {0xC000043E, "DIRLOG_UNUSED_10"},
  1740. {0x4000043F, "DIRLOG_CANT_FIND_REG_PARM"},
  1741. {0x80000440, "DIRLOG_DRA_CONFIG_MISMATCH"},
  1742. {0x40000441, "DIRLOG_DSP_CONFIG_INVALID"},
  1743. {0xC0000442, "DIRLOG_CHK_INVALID_TRANSPORT_FOR_WRITEABLE_DOMAIN_NC"},
  1744. {0x80000443, "DIRLOG_CHK_CANT_REPLICATE_FROM_SELF"},
  1745. {0x80000444, "DIRLOG_DRA_RECORD_TOO_BIG_PRUNE_FAILURE"},
  1746. {0x80000445, "DIRLOG_DRA_RECORD_TOO_BIG_OVERRIDE"},
  1747. {0x80000446, "DIRLOG_DISABLE_DISK_WRITE_CACHE"},
  1748. {0x80000447, "DIRLOG_DRA_MAIL_REQUPD_BADMSG"},
  1749. {0x80000448, "DIRLOG_DRA_MAIL_UPDREP_BADMSG"},
  1750. {0x80000449, "DIRLOG_DRA_MAIL_REQUPD_BADNC"},
  1751. {0x8000044A, "DIRLOG_DRA_MAIL_UPDREP_BADNC"},
  1752. {0x8000044B, "DIRLOG_DRA_MAIL_REQUPD_BADSRC"},
  1753. {0x8000044C, "DIRLOG_DRA_MAIL_UPDREP_BADSRC"},
  1754. {0x4000044D, "DIRLOG_DRA_RECORD_TOO_BIG_SUCCESS"},
  1755. {0x4000044E, "DIRLOG_DRA_MAIL_REQ_UPD_SENT"},
  1756. {0x4000044F, "DIRLOG_DRA_MAIL_UPD_REP_SENT"},
  1757. {0x40000450, "DIRLOG_CHK_REPSTO_DEL_SUCCESS"},
  1758. {0x80000451, "DIRLOG_CHK_REPSTO_DEL_FAILURE"},
  1759. {0x80000452, "DIRLOG_DRA_DISPATCHER_TIMEOUT"},
  1760. {0xC0000453, "DIRLOG_DRA_DISPATCHER_DEAD"},
  1761. {0x40000454, "DIRLOG_KCC_CANDIDATE_CONNECTIONS"},
  1762. {0x40000455, "DIRLOG_DRA_INVOCATION_ID_CHANGED"},
  1763. {0x40000456, "DIRLOG_GC_PROMOTION_DELAYED"},
  1764. {0x40000457, "DIRLOG_DRA_UPDATENC_PROGRESS"},
  1765. {0x80000458, "DIRLOG_DRA_DISP_DEAD_DETAILS"},
  1766. {0x80000459, "DIRLOG_DRA_DISABLED_INBOUND_REPL"},
  1767. {0x4000045A, "DIRLOG_DRA_REENABLED_INBOUND_REPL"},
  1768. {0x8000045B, "DIRLOG_DRA_DISABLED_OUTBOUND_REPL"},
  1769. {0x4000045C, "DIRLOG_DRA_REENABLED_OUTBOUND_REPL"},
  1770. {0x8000045D, "DIRLOG_CHK_ALL_CONNECTIONS_FOR_NC_DISABLED"},
  1771. {0xC000045E, "DIRLOG_CHK_NO_LOCAL_SOURCE_FOR_NC"},
  1772. {0x4000045F, "DIRLOG_GC_PROMOTED"},
  1773. {0x40000460, "DIRLOG_GC_DEMOTED"},
  1774. {0xC0000461, "DIRLOG_CHK_BAD_SCHEDULE"},
  1775. {0x40000462, "DIRLOG_DRA_DELETED_PARENT"},
  1776. {0x40000463, "DIRLOG_CHK_REMOVED_CONN_FROM_DEAD_SERVER"},
  1777. {0x40000464, "DIRLOG_DRA_GET_RPC_HANDLE_FAILURE"},
  1778. {0xC0000465, "DIRLOG_RPC_CONNECTION_FAILED"},
  1779. {0xC0000466, "DIRLOG_GCVERIFY_ERROR"},
  1780. {0xC0000467, "DIRLOG_DRA_NC_HEAD_NAME_CONFLICT"},
  1781. {0x40000468, "DIRLOG_KCC_CONNECTION_OBJECT_CREATED"},
  1782. {0x40000469, "DIRLOG_KCC_CONNECTION_OBJECT_DELETED"},
  1783. {0xC000046A, "DIRLOG_KCC_AUTO_TOPL_GENERATION_INCOMPLETE"},
  1784. {0x4000046B, "DIRLOG_KCC_ERROR_CREATING_CONNECTION_OBJECT"},
  1785. {0x4000046C, "DIRLOG_GC_REMOVED_OBJECT"},
  1786. {0x4000046D, "DIRLOG_KCC_SITE_GENERATOR"},
  1787. {0x8000046E, "DIRLOG_CHK_DUPLICATE_CONNECTION"},
  1788. {0xC000046F, "DIRLOG_SCHEMA_SEARCH_FAILED"},
  1789. {0x40000470, "DIRLOG_SCHEMA_CREATE_INDEX_FAILED"},
  1790. {0x40000471, "DIRLOG_SCHEMA_INDEX_CREATED"},
  1791. {0x40000472, "DIRLOG_API_TRACE"},
  1792. {0x40000473, "DIRLOG_API_TRACE_COMPLETE"},
  1793. {0xC0000474, "DIRLOG_SCHEMA_ALLOC_FAILED"},
  1794. {0xC0000475, "DIRLOG_SCHEMA_BOGUS_SEARCH"},
  1795. {0xC0000476, "DIRLOG_SCHEMA_INVALID_AUX"},
  1796. {0xC0000477, "DIRLOG_SCHEMA_NOT_AUX"},
  1797. {0xC0000478, "DIRLOG_SCHEMA_AUXILIARY_INHERIT_STRUCTURAL"},
  1798. {0xC0000479, "DIRLOG_SCHEMA_ABSTRACT_INHERIT_NON_ABSTRACT"},
  1799. {0xC000047A, "DIRLOG_SCHEMA_STRUCTURAL_WITH_MULT_INHERIT"},
  1800. {0xC000047B, "DIRLOG_SCHEMA_MISSING_ATT_ID"},
  1801. {0x8000047C, "DIRLOG_SCHEMA_SURPLUS_INFO"},
  1802. {0x4000047D, "DIRLOG_SCHEMA_CREATING_COLUMN"},
  1803. {0xC000047E, "DIRLOG_SCHEMA_COLUMN_ADD_FAILED"},
  1804. {0x4000047F, "DIRLOG_SCHEMA_COLUMN_ADDED"},
  1805. {0xC0000480, "DIRLOG_SCHEMA_CIRCULAR_INHERIT"},
  1806. {0x80000481, "DIRLOG_SCHEMA_INVALID_SUPER"},
  1807. {0x40000482, "DIRLOG_SCHEMA_INVALID_RDN"},
  1808. {0x40000483, "DIRLOG_SCHEMA_INVALID_MUST"},
  1809. {0x40000484, "DIRLOG_SCHEMA_INVALID_MAY"},
  1810. {0x40000485, "DIRLOG_SCHEMA_CREATING_INDEX"},
  1811. {0xC0000486, "DIRLOG_DELAYED_FREE_FAILED"},
  1812. {0xC0000487, "DIRLOG_BAD_CHAR_FOR_LOG_OVERRIDES"},
  1813. {0xC0000488, "DIRLOG_BAD_CHAR_COUNT_FOR_LOG_OVERRIDES"},
  1814. {0xC0000489, "DIRLOG_BUILD_HIERARCHY_TABLE_FAILED"},
  1815. {0x4000048A, "DIRLOG_BUILD_HIERARCHY_TABLE_SUCCEEDED"},
  1816. {0x4000048B, "DIRLOG_HIERARCHY_TABLE_MALLOC_FAILED"},
  1817. {0x8000048C, "DIRLOG_TOO_MANY_OVERRIDES"},
  1818. {0xC000048D, "DIRLOG_GET_GUID_FAILED"},
  1819. {0x4000048E, "DIRLOG_QUERY_INDEX_CONSIDERED"},
  1820. {0x4000048F, "DIRLOG_QUERY_INDEX_CHOSEN"},
  1821. {0xC0000490, "DIRLOG_INTERNAL_FAILURE"},
  1822. {0xC0000491, "DIRLOG_MALLOC_FAILURE"},
  1823. {0xC0000492, "DIRLOG_ASSERTION_FAILURE"},
  1824. {0x80000493, "DIRLOG_EXIT_WITH_ACTIVE_THREADS"},
  1825. {0x40000494, "DIRLOG_RPC_CONNECTION"},
  1826. {0x80000495, "DIRLOG_EXCEPTION"},
  1827. {0x40000496, "DIRLOG_PRIVILEGED_OPERATION_PERFORMED"},
  1828. {0x40000497, "DIRLOG_PRIVILEGED_OPERATION_FAILED"},
  1829. {0x40000498, "DIRLOG_UNAUTHENTICATED_LOGON"},
  1830. {0x40000499, "DIRLOG_SECURITY_ATTS_MODIFIED"},
  1831. {0x8000049A, "DIRLOG_BAD_LANGUAGE"},
  1832. {0x8000049B, "DIRLOG_BAD_CODEPAGE"},
  1833. {0x4000049C, "DIRLOG_SCHEMA_DELETE_COLUMN_FAIL"},
  1834. {0x4000049D, "DIRLOG_SCHEMA_DELETED_COLUMN_IN_USE"},
  1835. {0x4000049E, "DIRLOG_SCHEMA_DELETED_COLUMN"},
  1836. {0xC000049F, "DIRLOG_UNUSED_12"},
  1837. {0x400004A0, "DIRLOG_SCHEMA_DELETE_INDEX_FAIL"},
  1838. {0x400004A1, "DIRLOG_SCHEMA_DELETED_INDEX"},
  1839. {0x800004A2, "DIRLOG_DRA_INCOMPAT_MAIL_MSG_P"},
  1840. {0x800004A3, "DIRLOG_DRA_INCOMPAT_MAIL_MSG_C"},
  1841. {0xC00004A4, "DIRLOG_DRA_DISPATCHER_VILLIAN"},
  1842. {0xC00004A5, "DIRLOG_ABNORMAL_EXIT"},
  1843. {0x400004A6, "DIRLOG_DRA_RPC_EXCEPTION"},
  1844. {0x400004A7, "DIRLOG_DRA_CALL_EXIT_WARN"},
  1845. {0x400004A8, "DIRLOG_DRA_ADUPD_INC_SRC"},
  1846. {0x400004A9, "DIRLOG_DRA_ADUPD_DEC_SRC"},
  1847. {0x400004AA, "DIRLOG_DRA_ADUPD_NC_SYNCED"},
  1848. {0x400004AB, "DIRLOG_DRA_ADUPD_ALL_SYNCED"},
  1849. {0xC00004AC, "DIRLOG_CANT_APPLY_SERVER_SECURITY"},
  1850. {0x400004AD, "DIRLOG_KCC_NC_SITE_TOPOLOGY"},
  1851. {0x400004AE, "DIRLOG_RECOVER_RESTORED_FAILED"},
  1852. {0x400004AF, "DIRLOG_SCHEMA_DELETE_LOCALIZED_INDEX_FAIL"},
  1853. {0x400004B0, "DIRLOG_SCHEMA_DELETED_LOCALIZED_INDEX"},
  1854. {0x400004B1, "DIRLOG_MAIL_COMPRESSED"},
  1855. {0xC00004B2, "DIRLOG_DRA_BAD_NC"},
  1856. {0x400004B3, "DIRLOG_DRA_SCHEMA_MISMATCH"},
  1857. {0xC00004B4, "DIRLOG_ATQ_WRITE_COMPLETION_LIGHT"},
  1858. {0xC00004B5, "DIRLOG_SDPROP_OBJ_CLASS_PROBLEM"},
  1859. {0xC00004B6, "DIRLOG_ATQ_UDP_WRITE_COMPLETION_ERROR"},
  1860. {0xC00004B7, "DIRLOG_SCHEMA_CACHE_UPDATE_RETRY"},
  1861. {0xC00004B8, "DIRLOG_SCHEMA_CACHE_UPDATE_FAILED"},
  1862. {0xC00004B9, "DIRLOG_AUDIT_PRIVILEGE_FAILED"},
  1863. {0xC00004BA, "DIRLOG_ATQ_MAX_CONNECTIONS_EXCEEDED"},
  1864. {0x400004BB, "DIRLOG_ATQ_CLOSE_SOCKET_SHUTDOWN"},
  1865. {0x400004BC, "DIRLOG_ATQ_MULTI_PACKET_UDP"},
  1866. {0x400004BD, "DIRLOG_ATQ_CLOSE_SOCKET_CONTACT_LOST"},
  1867. {0x800004BE, "DIRLOG_SDPROP_NO_SD"},
  1868. {0x400004BF, "DIRLOG_ATQ_CLOSE_SOCKET_OK"},
  1869. {0x800004C0, "DIRLOG_ATQ_CLOSE_SOCKET_ERROR"},
  1870. {0x800004C1, "DIRLOG_LDAP_NTLM_WARNING"},
  1871. {0x800004C2, "DIRLOG_LDAP_NEGOTIATE_WARNING"},
  1872. {0x800004C3, "DIRLOG_LDAP_SIMPLE_WARNING"},
  1873. {0x400004C4, "DIRLOG_LDAP_SSL_NO_CERT"},
  1874. {0x400004C5, "DIRLOG_LDAP_SSL_GOT_CERT"},
  1875. {0xC00004C6, "DIRLOG_DRA_CERT_ACCESS_DENIED_WINERR"},
  1876. {0xC00004C7, "DIRLOG_DRA_CERT_ACCESS_DENIED_TRUSTERR"},
  1877. {0x800004C8, "DIRLOG_SERVER_INFO_UPDATE_FAILED"},
  1878. {0x400004C9, "DIRLOG_DRA_NAME_CONFLICT_ON_RENAME"},
  1879. {0x400004CA, "DIRLOG_DRA_NAME_CONFLICT_ON_ADD"},
  1880. {0x400004CB, "DIRLOG_PERF_CLOSE"},
  1881. {0xC00004CC, "DIRLOG_PERF_FAIL_QUERY_REG"},
  1882. {0xC00004CD, "DIRLOG_PERF_FAIL_OPEN_MEMORY"},
  1883. {0xC00004CE, "DIRLOG_PERF_FAIL_MAP_MEMORY"},
  1884. {0xC00004CF, "DIRLOG_PERF_FAIL_OPEN_REG"},
  1885. {0x800004D0, "DIRLOG_DRA_DISPATCHER_CANCELED"},
  1886. {0x400004D1, "DIRLOG_REPLICATION_REPLACE_EQUAL"},
  1887. {0xC00004D2, "DIRLOG_FAILED_LOOKUP_ACCOUNT_SID"},
  1888. {0xC00004D3, "DIRLOG_OABGEN_FAIL_CREATE_MESSAGE"},
  1889. {0xC00004D4, "DIRLOG_WRONG_SERVER_NAME"},
  1890. {0xC00004D5, "DIRLOG_SAM_LOOPBACK_ERROR"},
  1891. {0xC00004D6, "DIRLOG_LDAP_SSP_ERROR"},
  1892. {0x400004D7, "DIRLOG_DRA_PROPERTY_FILTERED"},
  1893. {0x400004D8, "DIRLOG_DRA_PROPERTY_NOT_FILTERED"},
  1894. {0xC00004D9, "DIRLOG_NO_MORE_OIDS"},
  1895. {0xC00004DA, "DIRLOG_BACKUP_REGISTRY"},
  1896. {0xC00004DB, "DIRLOG_BACKUP_NOT_DONE"},
  1897. {0xC00004DC, "DIRLOG_BACKUP_JET_BACKUP_FAILED"},
  1898. {0xC00004DD, "DIRLOG_BACKUP_UNABLE_TO_RECOVER"},
  1899. {0xC00004DE, "DIRLOG_BACKUP_THREAD_INIT_FAILED"},
  1900. {0x400004DF, "DIRLOG_SEC_PRINCIPAL_NOT_TRANSFERRED"},
  1901. {0xC00004E0, "DIRLOG_RESTORE_UNABLE_TO_RESET_TRIGGER"},
  1902. {0xC00004E1, "DIRLOG_RESTORE_CANT_READ_DB_PATHS"},
  1903. {0xC00004E2, "DIRLOG_RESTORE_UNABLE_TO_CREATE_SD"},
  1904. {0xC00004E3, "DIRLOG_RESTORE_FAILED_NOT_RECOVERED_ORIGINAL"},
  1905. {0xC00004E4, "DIRLOG_RESTORE_FAILED_RECOVERED_ORIGINAL"},
  1906. {0xC00004E5, "DIRLOG_RESTORE_CREATE_DBDIR_FAILED"},
  1907. {0xC00004E6, "DIRLOG_RESTORE_RENAME_DBDIR_FAILED"},
  1908. {0x400004E7, "DIRLOG_RESTORE_SUCCESSFUL"},
  1909. {0xC00004E8, "DIRLOG_CANT_FIND_PARTITIONS_OBJ"},
  1910. {0x400004E9, "DIRLOG_SDPROP_DOING_PROPAGATION"},
  1911. {0x400004EA, "DIRLOG_SDPROP_REPORT_ON_PROPAGATION"},
  1912. {0x400004EB, "DIRLOG_SDPROP_STARTING"},
  1913. {0x400004EC, "DIRLOG_SDPROP_SLEEP"},
  1914. {0x400004ED, "DIRLOG_SDPROP_AWAKE"},
  1915. {0xC00004EE, "DIRLOG_SDPROP_END_ABNORMAL"},
  1916. {0x400004EF, "DIRLOG_SDPROP_END_NORMAL"},
  1917. {0x400004F0, "DIRLOG_CHK_LINK_ADD_SUCCESS"},
  1918. {0x800004F1, "DIRLOG_CHK_LINK_ADD_FAILURE"},
  1919. {0x400004F2, "DIRLOG_CHK_LINK_DEL_NOSRC_SUCCESS"},
  1920. {0x400004F3, "DIRLOG_CHK_LINK_DEL_NOSRC_FAILURE"},
  1921. {0x400004F4, "DIRLOG_CHK_LINK_DEL_NOTGC_SUCCESS"},
  1922. {0x400004F5, "DIRLOG_CHK_LINK_DEL_NOTGC_FAILURE"},
  1923. {0x400004F6, "DIRLOG_CHK_LINK_DEL_DOMDEL_SUCCESS"},
  1924. {0x400004F7, "DIRLOG_CHK_LINK_DEL_DOMDEL_FAILURE"},
  1925. {0x400004F8, "DIRLOG_CHK_LINK_DEL_NOCONN_SUCCESS"},
  1926. {0x400004F9, "DIRLOG_CHK_LINK_DEL_NOCONN_FAILURE"},
  1927. {0x400004FA, "DIRMSG_INSTALL_FAILED_REPLICATION"},
  1928. {0x400004FB, "DIRMSG_INSTALL_FAILED_NC_CREATE"},
  1929. {0x400004FC, "DIRMSG_INSTALL_FAILED_TO_CREATE_OBJECT"},
  1930. {0x400004FD, "DIRMSG_INSTALL_FAILED_TO_CREATE_NTDSA_OBJECT"},
  1931. {0x400004FE, "DIRMSG_INSTALL_FAILED_TO_CREATE_DOMAIN_OBJECT"},
  1932. {0x400004FF, "DIRMSG_INSTALL_FAILED_TO_INIT_JET"},
  1933. {0x40000500, "DIRMSG_INSTALL_FAILED_GENERAL"},
  1934. {0x40000501, "DIRMSG_INSTALL_FAILED_LDAP_CONNECT"},
  1935. {0x40000502, "DIRMSG_INSTALL_FAILED_BIND"},
  1936. {0x40000503, "DIRMSG_INSTALL_FAILED_SITE"},
  1937. {0x40000504, "DIRMSG_INSTALL_FAILED_SITE_EXIST"},
  1938. {0x40000505, "DIRLOG_INSTALL_SERVER_EXISTS"},
  1939. {0x40000506, "DIRLOG_INSTALL_FAILED_TO_DELETE_SERVER"},
  1940. {0x40000507, "DIRLOG_INSTALL_DOMAIN_EXISTS"},
  1941. {0x40000508, "DIRLOG_INSTALL_FAILED_TO_DELETE_DOMAIN"},
  1942. {0x40000509, "DIRLOG_INSTALL_FAILED_JOIN_THE_ENTERPRISE"},
  1943. {0x4000050A, "DIRLOG_INSTALL_FAILED_REGISTRY"},
  1944. {0x4000050B, "DIRLOG_INSTALL_FAILED_PERF_COUNTERS"},
  1945. {0x4000050C, "DIRLOG_INSTALL_FAILED_LOAD_SAM_DB"},
  1946. {0x4000050D, "DIRLOG_INSTALL_FAILED_CREATE_NEW_ACCOUNT_INFO"},
  1947. {0x4000050E, "DIRLOG_INSTALL_FAILED_CA_ENROLLMENT"},
  1948. {0x4000050F, "DIRLOG_INSTALL_FAILED_CREATE_BOOT_OPTION"},
  1949. {0x40000510, "DIRLOG_INSTALL_FAILED_ENVIRONMENT"},
  1950. {0x40000511, "DIRLOG_INSTALL_FAILED_GENERAL"},
  1951. {0x40000512, "DIRMSG_INSTALL_FAILED_LDAP_READ_CONFIG"},
  1952. {0x40000513, "DIRMSG_INSTALL_FAILED_SCHEMA_CHECK"},
  1953. {0x40000514, "DIRMSG_INSTALL_CANNOT_DERIVE_DN"},
  1954. {0x40000515, "DIRMSG_INSTALL_SAM_FAILED"},
  1955. {0x40000516, "DIRMSG_INSTALL_DS_CORE_INSTALL_FAILED"},
  1956. {0x40000517, "DIRLOG_DEMOTE_DS_DOMAIN_STATUS"},
  1957. {0x40000518, "DIRLOG_DEMOTE_IS_OPERATION_VALID"},
  1958. {0x40000519, "DIRLOG_DEMOTE_IS_PARTIAL_SHUTDOWN"},
  1959. {0x4000051A, "DIRLOG_KCC_CONNECTION_OBJECT_DELETION_FAILED"},
  1960. {0x4000051B, "DIRLOG_KCC_CONNECTION_NOT_INSTANTIATED"},
  1961. {0x4000051C, "DIRLOG_KCC_REPLICA_LINK_DOWN"},
  1962. {0xC000051D, "DIRLOG_WINSOCK_INIT_FAILED"},
  1963. {0x4000051E, "DIRLOG_RPC_PROTSEQ_FAILED"},
  1964. {0xC000051F, "DIRLOG_KCC_NO_SPANNING_TREE"},
  1965. {0xC0000520, "DIRLOG_ISM_TRANSPORT_FAILURE"},
  1966. {0x80000521, "DIRLOG_CHK_CONFIG_PARAM_TOO_LOW"},
  1967. {0x80000522, "DIRLOG_CHK_CONFIG_PARAM_TOO_HIGH"},
  1968. {0xC0000523, "DIRLOG_SCHEMA_CLOSURE_FAILURE"},
  1969. {0x40000524, "DIRLOG_KCC_KEEPING_INTERSITE_CONN"},
  1970. {0x40000525, "DIRLOG_LDAP_CONNECTION_TIMEOUT"},
  1971. {0x40000526, "DIRMSG_DEMOTE_INIT"},
  1972. {0x40000527, "DIRMSG_DEMOTE_ENTERPRISE_VALIDATE"},
  1973. {0x40000528, "DIRMSG_AUTHENTICATING"},
  1974. {0x40000529, "DIRMSG_DEMOTE_NEW_ACCOUNT_INFO"},
  1975. {0x4000052A, "DIRMSG_DEMOTE_SAM"},
  1976. {0x4000052B, "DIRMSG_DEMOTE_LSA"},
  1977. {0x4000052C, "DIRMSG_DEMOTE_REMOVING_EXTERNAL_REFS"},
  1978. {0x4000052D, "DIRMSG_DEMOTE_REMOVING_FSMOS"},
  1979. {0x4000052E, "DIRMSG_DEMOTE_SHUTTING_DOWN_INTERFACES"},
  1980. {0x4000052F, "DIRMSG_DEMOTE_COMPLETING"},
  1981. {0x40000530, "DIRMSG_INSTALL_INITIALIZATION"},
  1982. {0x40000531, "DIRMSG_INSTALL_VALIDATING_PARAMS"},
  1983. {0x40000532, "DIRMSG_INSTALL_FINDING_SITE"},
  1984. {0x40000533, "DIRMSG_INSTALL_CONTEXT"},
  1985. {0x40000534, "DIRMSG_INSTALL_SITE_EXIST"},
  1986. {0x40000535, "DIRMSG_INSTALL_SERVER_EXIST"},
  1987. {0x40000536, "DIRMSG_INSTALL_DOMAIN_EXIST"},
  1988. {0x40000537, "DIRMSG_INSTALL_CONFIGURE_LOCAL"},
  1989. {0x40000538, "DIRMSG_INSTALL_SETTING_PERF"},
  1990. {0x40000539, "DIRMSG_INSTALL_SECURITY"},
  1991. {0x4000053A, "DIRMSG_INSTALL_REPLICATING_SCHEMA"},
  1992. {0x4000053B, "DIRMSG_INSTALL_CREATE_PROGRESS"},
  1993. {0x4000053C, "DIRMSG_INSTALL_REPLICATING_CONFIG"},
  1994. {0x4000053D, "DIRMSG_INSTALL_CREATING_CONFIG"},
  1995. {0x4000053E, "DIRMSG_INSTALL_REPLICATING_DOMAIN"},
  1996. {0x4000053F, "DIRMSG_INSTALL_CREATING_DOMAIN"},
  1997. {0x40000540, "DIRMSG_INSTALL_CREATING_LOCAL_DS"},
  1998. {0x40000541, "DIRMSG_INSTALL_UPGRADING_SAM"},
  1999. {0x40000542, "DIRMSG_INSTALL_CREATING_SAM"},
  2000. {0x40000543, "DIRMSG_INSTALL_COMPLETING"},
  2001. {0x40000544, "DIRLOG_BEGIN_DIR_SEARCH"},
  2002. {0x40000545, "DIRLOG_END_DIR_SEARCH"},
  2003. {0x40000546, "DIRLOG_BEGIN_DIR_ADDENTRY"},
  2004. {0x40000547, "DIRLOG_END_DIR_ADDENTRY"},
  2005. {0x40000548, "DIRLOG_BEGIN_DIR_REMOVE"},
  2006. {0x40000549, "DIRLOG_END_DIR_REMOVE"},
  2007. {0x4000054A, "DIRLOG_BEGIN_DIR_MODIFY"},
  2008. {0x4000054B, "DIRLOG_END_DIR_MODIFY"},
  2009. {0x4000054C, "DIRLOG_BEGIN_DIR_MODIFYDN"},
  2010. {0x4000054D, "DIRLOG_END_DIR_MODIFYDN"},
  2011. {0x4000054E, "DIRLOG_BEGIN_DIR_COMPARE"},
  2012. {0x4000054F, "DIRLOG_END_DIR_COMPARE"},
  2013. {0x40000550, "DIRLOG_DRA_REPLICASYNC_EXIT"},
  2014. {0x40000551, "DIRMSG_INSTALL_CREATING_REMOTE"},
  2015. {0x40000552, "DIRMSG_INSTALL_REPLICATE_FULL"},
  2016. {0x40000553, "DIRLOG_DRA_IMPROVING_UPTODATE_VECTOR"},
  2017. {0x40000554, "DIRLOG_DRA_IMPROVING_USN_VECTOR"},
  2018. {0x40000555, "DIRLOG_DRA_APPLYING_OBJ_CREATION"},
  2019. {0x40000556, "DIRLOG_DRA_APPLYING_OBJ_UPDATE"},
  2020. {0x40000557, "DIRMSG_INSTALL_REPLICATE_PROGRESS"},
  2021. {0x80000558, "DIRLOG_ISM_LDAP_BASE_SEARCH_FAILED"},
  2022. {0x80000559, "DIRLOG_ISM_LDAP_ONELEVEL_SEARCH_FAILED"},
  2023. {0x4000055A, "DIRLOG_ISM_SEND_SUCCESS"},
  2024. {0x8000055B, "DIRLOG_ISM_SEND_FAILURE"},
  2025. {0x4000055C, "DIRLOG_ISM_RECEIVE_SUCCESS"},
  2026. {0xC000055D, "DIRLOG_ISM_RECEIVE_FAILURE"},
  2027. {0xC000055E, "DIRLOG_ISM_GET_CONNECTIVITY_FAILURE"},
  2028. {0xC000055F, "DIRLOG_ISM_GET_TRANSPORT_SERVERS_FAILURE"},
  2029. {0xC0000560, "DIRLOG_ISM_GET_CONECTION_SCHEDULE_FAILURE"},
  2030. {0xC0000561, "DIRLOG_ISM_TRANSPORT_LOAD_FAILURE"},
  2031. {0xC0000562, "DIRLOG_ISM_TRANSPORT_REFRESH_FAILURE"},
  2032. {0x40000563, "DIRLOG_ISM_MESSAGE_PENDING"},
  2033. {0x80000564, "DIRLOG_ISM_TRANSPORT_MONITOR_FAILURE"},
  2034. {0xC0000565, "DIRLOG_ISM_SITELINK_INVALID_SCHEDULE_FORMAT"},
  2035. {0xC0000566, "DIRLOG_ISM_SITELINK_SCHEDULE_NEVER"},
  2036. {0xC0000567, "DIRLOG_DRA_NO_CERTIFICATE"},
  2037. {0x40000568, "DIRLOG_DRA_CERTIFICATE_ACQUIRED"},
  2038. {0xC0000569, "DIRLOG_ISM_IP_RPC_REG_FAILED"},
  2039. {0x4000056A, "DIRLOG_UNUSED_2"},
  2040. {0xC000056B, "DIRLOG_ISM_IP_MESSAGE_DROPPED"},
  2041. {0xC000056C, "DIRLOG_DRA_MISSING_OBJECT"},
  2042. {0xC000056D, "DIRLOG_DEMOTE_SAM_FAILED"},
  2043. {0xC000056E, "DIRLOG_DEMOTE_LSA_FAILED"},
  2044. {0xC000056F, "DIRLOG_DEMOTE_SET_MACHINE_ACC_FAILED"},
  2045. {0x40000570, "DIRLOG_DEMOTE_FAILED_TO_UPDATE_EXTN"},
  2046. {0xC0000571, "DIRLOG_STOPPED_NETLOGON"},
  2047. {0x40000572, "DIRLOG_RESTARTED_NETLOGON"},
  2048. {0x40000573, "DIRMSG_DEMOTE_FAILED_TO_ABANDON_DOMAIN_FSMOS"},
  2049. {0xC0000574, "DIRMSG_DEMOTE_FAILED_TO_ABANDON_ENTERPRISE_FSMOS"},
  2050. {0x40000575, "DIRMSG_DEMOTE_ABANDONING_DOMAIN_FSMOS"},
  2051. {0x40000576, "DIRMSG_DEMOTE_ABANDONING_ENTERPRISE_FSMOS"},
  2052. {0xC0000577, "DIRMSG_INSTALL_FAILED_TO_MOVE_BOOT_SCHEMA"},
  2053. {0xC0000578, "DIRMSG_FAILED_SET_PRODUCT_TYPE"},
  2054. {0x40000579, "DIRLOG_KCC_CONNECTION_EDGE_NEEDED"},
  2055. {0x4000057A, "DIRMSG_DBDUMP_SUCCESS"},
  2056. {0xC000057B, "DIRMSG_DBDUMP_FAILURE"},
  2057. {0x4000057C, "DIRLOG_CHK_CLAIMED_SITE_GENERATOR_ROLE"},
  2058. {0xC000057D, "DIRLOG_ISM_SMTP_MSG_UNREADABLE"},
  2059. {0x8000057E, "DIRLOG_ISM_SMTP_NOTIFY_FAILED"},
  2060. {0xC000057F, "DIRLOG_ISM_LDAP_MODIFY_FAILED"},
  2061. {0x40000580, "DIRLOG_ISM_SMTP_MAIL_ADDRESS"},
  2062. {0x80000581, "DIRLOG_ISM_SMTP_NO_MAIL_ADDRESS"},
  2063. {0x40000582, "DIRMSG_WRONG_PRODUCT_TYPE"},
  2064. {0xC0000583, "DIRLOG_BUILD_SPN_FAILURE"},
  2065. {0x40000584, "DIRLOG_DRA_PROPERTY_APPLIED"},
  2066. {0x40000585, "DIRLOG_DRA_PROPERTY_NOT_APPLIED"},
  2067. {0xC0000586, "DIRLOG_STALE_PHANTOM_CLEANUP_ADD_FAILED"},
  2068. {0xC0000587, "DIRLOG_STALE_PHANTOM_CLEANUP_LOCATE_PHANTOMS_FAILED"},
  2069. {0xC0000588, "DIRLOG_STALE_PHANTOM_CLEANUP_GC_COMM_FAILED"},
  2070. {0xC0000589, "DIRLOG_STALE_PHANTOM_CLEANUP_CANT_USE_INDEX"},
  2071. {0xC000058A, "DIRLOG_STALE_PHANTOM_CLEANUP_CANT_MAKE_INDEX"},
  2072. {0xC000058B, "DIRLOG_STALE_PHANTOM_CLEANUP_MACHINE_IS_GC"},
  2073. {0xC000058C, "DIRLOG_STALE_PHANTOM_CLEANUP_TOO_BUSY"},
  2074. {0x4000058D, "DIRLOG_STALE_PHANTOM_CLEANUP_SUCCESS_AS_MASTER"},
  2075. {0x4000058E, "DIRLOG_STALE_PHANTOM_CLEANUP_SUCCESS_NOT_AS_MASTER"},
  2076. {0x4000058F, "DIRMSG_DOMAIN_SID_EXISTS"},
  2077. {0x40000590, "DIRMSG_SYNCING_RID_FSMO"},
  2078. {0x80000591, "DIRLOG_FAILED_TO_SYNC_RID_FSMO"},
  2079. {0x80000592, "DIRLOG_FAILED_TO_CREATE_BOOT_OPTION"},
  2080. {0xC0000593, "DIRLOG_REMOTE_ADD_FAILED"},
  2081. {0xC0000594, "DIRLOG_REMOTE_ADD_SUCCEEDED"},
  2082. {0xC0000595, "DIRLOG_DUPLICATE_MOVED_OBJECT"},
  2083. {0xC0000596, "DIRLOG_CROSS_DOMAIN_MOVE_SUCCEEDED"},
  2084. {0xC0000597, "DIRLOG_CROSS_DOMAIN_MOVE_FAILED"},
  2085. {0xC0000598, "DIRLOG_CROSS_DOMAIN_MOVE_CLEANUP_REQUIRED"},
  2086. {0x40000599, "DIRLOG_CANT_FIND_REG_PARM_DEFAULT"},
  2087. {0x4000059A, "DIRLOG_DB_REG_PATH_CHANGED"},
  2088. {0x8000059B, "DIRLOG_KCC_DIR_OP_FAILURE"},
  2089. {0x8000059C, "DIRLOG_ISM_OBJECT_FAILURE"},
  2090. {0x8000059D, "DIRMSG_INSTALL_MISSING_INFO"},
  2091. {0x8000059E, "DIRMSG_INSTALL_SPECIAL_NAME"},
  2092. {0x8000059F, "DIRLOG_KCC_TRANSPORT_ADDRESS_MISSING"},
  2093. {0x400005A0, "DIRMSG_FAILED_TO_CREATE_REMOTE_NTDSA"},
  2094. {0x400005A1, "DIRMSG_CREATING_REMOTE_NTDSA"},
  2095. {0x400005A2, "DIRLOG_FAILED_TO_REMOVE_NTDSA"},
  2096. {0x400005A3, "DIRLOG_FAILED_TO_REMOVE_EXTN_OBJECT"},
  2097. {0x400005A4, "DIRLOG_FAILED_TO_CREATE_EXTN_OBJECT"},
  2098. {0x400005A5, "DIRLOG_FAILED_TO_FIND_MACHINE_ACCOUNT"},
  2099. {0xC00005A6, "DIRLOG_FAILED_TO_CREATE_RESTORE_MARKER_FILE"},
  2100. {0xC00005A7, "DIRLOG_FAILED_TO_DELETE_RESTORE_MARKER_FILE"},
  2101. {0xC00005A8, "DIRLOG_ISM_SMTP_DSN"},
  2102. {0x400005A9, "DIRLOG_SDPROP_NO_CLASS_CACHE"},
  2103. {0xC00005AA, "DIRLOG_SDPROP_MERGE_SD_FAIL"},
  2104. {0xC00005AB, "DIRLOG_SDPROP_REMOVE_SD_PROBLEM"},
  2105. {0xC00005AC, "DIRLOG_SDPROP_ADD_SD_PROBLEM"},
  2106. {0x400005AD, "DIRLOG_SDPROP_TOO_BUSY_TO_PROPAGATE"},
  2107. {0x400005AE, "DIRMSG_SEARCHING_FOR_SYNC_SERVER"},
  2108. {0x400005AF, "DIRMSG_FAILED_TO_FIND_SYNC_SERVER"},
  2109. {0x400005B0, "DIRMSG_REPLICATING_OFF_CHANGES"},
  2110. {0x400005B1, "DIRMSG_FAILED_TO_REPLICATE_OFF_CHANGES"},
  2111. {0x400005B2, "DIRLOG_FSMO_XFER"},
  2112. {0x400005B3, "DIRLOG_BEGIN_DIR_FIND"},
  2113. {0x400005B4, "DIRLOG_END_DIR_FIND"},
  2114. {0x400005B5, "DIRLOG_BEGIN_LDAP_BIND"},
  2115. {0x400005B6, "DIRLOG_END_LDAP_BIND"},
  2116. {0x800005B7, "DIRLOG_CORRUPT_INDICES_DELETED"},
  2117. {0x400005B8, "DIRLOG_SCHEMA_INDEX_NEEDED"},
  2118. {0x800005B9, "DIRLOG_ISM_LINK_MONITOR_FAILURE"},
  2119. {0xC00005BA, "DIRLOG_ISM_SMTP_DOMAIN_ADD_FAILURE"},
  2120. {0xC00005BB, "DIRLOG_ISM_SMTP_SINK_REG_FAILURE"},
  2121. {0xC00005BC, "DIRLOG_ISM_SMTP_SINK_BIND_FAILURE"},
  2122. {0xC00005BD, "DIRLOG_ISM_SMTP_CLASS_MISSING"},
  2123. {0x400005BE, "DIRLOG_ISM_SMTP_DOMAIN_ADD"},
  2124. {0x800005BF, "DIRLOG_ISM_SMTP_DROP_DIR_MISSING"},
  2125. {0xC00005C0, "DIRLOG_DUPLICATE_SPN_MAPPING_VALUE"},
  2126. {0x800005C1, "DIRLOG_ISM_TRANSPORT_CONFIG_FAILURE"},
  2127. {0x800005C2, "DIRLOG_KCC_TRANSPORT_BRIDGEHEAD_NOT_FOUND"},
  2128. {0x800005C3, "DIRLOG_PERFMON_COUNTER_UNREG_FAILED"},
  2129. {0x800005C4, "DIRLOG_PERFMON_COUNTER_REG_FAILED"},
  2130. {0x400005C5, "DIRLOG_PERFMON_COUNTER_REG_SUCCESS"},
  2131. {0x400005C6, "DIRLOG_DRA_COMPRESSED_OUTBOUND_RPC"},
  2132. {0xC00005C7, "DIRLOG_DRA_UPDATE_FAILURE_TOO_LARGE"},
  2133. {0xC00005C8, "DIRLOG_DRA_UPDATE_FAILURE_DISK_FULL"},
  2134. {0x800005C9, "DIRLOG_DSA_OBJECT_FAILURE"},
  2135. {0x400005CA, "DIRLOG_CHK_LINK_DEL_NONC_SUCCESS"},
  2136. {0x400005CB, "DIRLOG_CHK_LINK_DEL_NONC_FAILURE"},
  2137. {0x400005CC, "DIRMSG_CANNOT_CONTACT_DOMAIN_FSMO"},
  2138. {0x400005CD, "DIRLOG_KCC_TASK_ENTRY"},
  2139. {0x400005CE, "DIRLOG_KCC_TASK_EXIT"},
  2140. {0x400005CF, "DIRLOG_IDL_DRS_REPLICA_SYNC_ENTRY"},
  2141. {0x400005D0, "DIRLOG_IDL_DRS_REPLICA_SYNC_EXIT"},
  2142. {0x400005D1, "DIRLOG_IDL_DRS_GETCHG_ENTRY"},
  2143. {0x400005D2, "DIRLOG_IDL_DRS_GETCHG_EXIT"},
  2144. {0x400005D3, "DIRLOG_IDL_DRS_UPDREFS_ENTRY"},
  2145. {0x400005D4, "DIRLOG_IDL_DRS_UPDREFS_EXIT"},
  2146. {0x400005D5, "DIRLOG_IDL_DRS_REPLICA_ADD_ENTRY"},
  2147. {0x400005D6, "DIRLOG_IDL_DRS_REPLICA_ADD_EXIT"},
  2148. {0x400005D7, "DIRLOG_IDL_DRS_REPLICA_MODIFY_ENTRY"},
  2149. {0x400005D8, "DIRLOG_IDL_DRS_REPLICA_MODIFY_EXIT"},
  2150. {0x400005D9, "DIRLOG_IDL_DRS_REPLICA_DEL_ENTRY"},
  2151. {0x400005DA, "DIRLOG_IDL_DRS_REPLICA_DEL_EXIT"},
  2152. {0x400005DB, "DIRLOG_IDL_DRS_VERIFY_NAMES_ENTRY"},
  2153. {0x400005DC, "DIRLOG_IDL_DRS_VERIFY_NAMES_EXIT"},
  2154. {0x400005DD, "DIRLOG_IDL_DRS_INTERDOMAIN_MOVE_ENTRY"},
  2155. {0x400005DE, "DIRLOG_IDL_DRS_INTERDOMAIN_MOVE_EXIT"},
  2156. {0x400005DF, "DIRLOG_IDL_DRS_ADD_ENTRY_ENTRY"},
  2157. {0x400005E0, "DIRLOG_IDL_DRS_ADD_ENTRY_EXIT"},
  2158. {0x400005E1, "DIRLOG_IDL_DRS_EXECUTE_KCC_ENTRY"},
  2159. {0x400005E2, "DIRLOG_IDL_DRS_EXECUTE_KCC_EXIT"},
  2160. {0x400005E3, "DIRLOG_IDL_DRS_GET_REPL_INFO_ENTRY"},
  2161. {0x400005E4, "DIRLOG_IDL_DRS_GET_REPL_INFO_EXIT"},
  2162. {0x400005E5, "DIRLOG_IDL_DRS_GET_NT4_CHGLOG_ENTRY"},
  2163. {0x400005E6, "DIRLOG_IDL_DRS_GET_NT4_CHGLOG_EXIT"},
  2164. {0x400005E7, "DIRLOG_IDL_DRS_CRACK_NAMES_ENTRY"},
  2165. {0x400005E8, "DIRLOG_IDL_DRS_CRACK_NAMES_EXIT"},
  2166. {0x400005E9, "DIRLOG_IDL_DRS_WRITE_SPN_ENTRY"},
  2167. {0x400005EA, "DIRLOG_IDL_DRS_WRITE_SPN_EXIT"},
  2168. {0x400005EB, "DIRLOG_IDL_DRS_DC_INFO_ENTRY"},
  2169. {0x400005EC, "DIRLOG_IDL_DRS_DC_INFO_EXIT"},
  2170. {0x400005ED, "DIRLOG_IDL_DRS_GET_MEMBERSHIPS_ENTRY"},
  2171. {0x400005EE, "DIRLOG_IDL_DRS_GET_MEMBERSHIPS_EXIT"},
  2172. {0x800005EF, "DIRLOG_OUT_OF_VERSION_STORE"},
  2173. {0x800005F0, "DIRLOG_GC_FAILED_TO_REMOVE_OBJECT"},
  2174. {0x800005F1, "DIRLOG_NO_LOCALIZED_INDEX_CREATED_FOR_LANGUAGE"},
  2175. {0xC00005F2, "DIRLOG_NO_LOCALIZED_INDICES_CREATED"},
  2176. {0xC00005F3, "DIRLOG_SCHEMA_SD_CONVERSION_FAILED"},
  2177. {0x400005F4, "DIRLOG_BEGIN_LDAP_REQUEST"},
  2178. {0x400005F5, "DIRLOG_END_LDAP_REQUEST"},
  2179. {0x400005F6, "DIRLOG_CHK_UPDATED_SCHEDULE"},
  2180. {0xC00005F7, "DIRLOG_ISM_SMTP_CDO_CLASS_MISSING"},
  2181. {0xC00005F8, "DIRLOG_ISM_SMTP_CDO_ERROR"},
  2182. {0x800005F9, "DIRLOG_DRA_MAIL_BADMSGTYPE"},
  2183. {0x400005FA, "DIRLOG_DRA_MAIL_RECEIVED"},
  2184. {0x800005FB, "DIRLOG_DRA_MAIL_ISM_RECEIVE_RETRY"},
  2185. {0x800005FC, "DIRLOG_DRA_MAIL_ISM_SEND_FAILURE"},
  2186. {0x400005FD, "DIRLOG_CHK_UPDATED_TRANSPORT_TYPE"},
  2187. {0x800005FE, "DIRLOG_DOMAIN_FSMO_AND_NOT_GC"},
  2188. {0x400005FF, "DIRLOG_LDAP_EXT_ERROR"},
  2189. {0xC0000600, "DIRLOG_SCHEMA_VALIDATION_FAILED"},
  2190. {0xC0000601, "DIRLOG_FAILED_TO_DELETE_NEW_DB_GUID_KEY"},
  2191. {0x80000602, "DIRLOG_FAILED_TO_CREATE_INVOCATION_ID"},
  2192. {0x80000603, "DIRLOG_FAILED_TO_DISABLE_DISK_WRITE_CACHE"},
  2193. {0x40000604, "DIRLOG_FAILED_TO_ADD_SID_HISTORY"},
  2194. {0x40000605, "DIRLOG_SID_HISTORY_MODIFIED"},
  2195. {0x40000606, "DIRLOG_KCC_LIVE_CONNECTION"},
  2196. {0x40000607, "DIRLOG_KCC_CONNECTION_REPLICATES_NC"},
  2197. {0x40000608, "DIRLOG_KCC_BRIDGEHEAD_CHOSEN"},
  2198. {0xC0000609, "DIRLOG_DRA_SCHEMA_INFO_MISMATCH"},
  2199. {0xC000060A, "DIRLOG_SCHEMA_ATT_CONFLICT"},
  2200. {0xC000060B, "DIRLOG_SCHEMA_CLASS_CONFLICT"},
  2201. {0x4000060C, "DIRLOG_DRA_OBJ_NC_MISMATCH"},
  2202. {0x4000060D, "DIRLOG_UNUSED_16"},
  2203. {0xC000060E, "DIRLOG_CHK_SITE_HAS_NO_NTDS_SETTINGS"},
  2204. {0x4000060F, "DIRLOG_DSA_UP_TO_DATE"},
  2205. {0x40000610, "DIRLOG_DSA_NOT_ADVERTISE_DC"},
  2206. {0x40000611, "DIRLOG_ADUPD_SYNC_PROGRESS"},
  2207. {0x40000612, "DIRLOG_ADUPD_SYNC_NO_PROGRESS"},
  2208. {0x40000613, "DIRLOG_ADUPD_INIT_SYNC_ONGOING"},
  2209. {0x40000614, "DIRLOG_ADUPD_NC_GAVE_UP"},
  2210. {0x40000615, "DIRLOG_ADUPD_NC_NEVER_SYNCED_WRITE"},
  2211. {0x40000616, "DIRLOG_ADUPD_UNUSED_1"},
  2212. {0x40000617, "DIRLOG_ADUPD_GC_NC_MISSING"},
  2213. {0x40000618, "DIRLOG_DRA_NEW_REPLICA_FULL_SYNC"},
  2214. {0x40000619, "DIRLOG_DRA_USER_REQ_FULL_SYNC"},
  2215. {0x4000061A, "DIRLOG_DRA_FULL_SYNC_CONTINUED"},
  2216. {0x4000061B, "DIRLOG_DRA_SOURCE_RESTORE_FULL_SYNC"},
  2217. {0x4000061C, "DIRLOG_DRA_INIT_SYNCS_DISABLED"},
  2218. {0x8000061D, "DIRLOG_GC_PROMOTION_CHECKS_DISABLED"},
  2219. {0x8000061E, "DIRLOG_KCC_ALL_TRANSPORT_BRIDGEHEADS_STALE"},
  2220. {0xC000061F, "DIRLOG_KCC_EXPLICIT_BRIDGEHEAD_LIST_INCOMPLETE"},
  2221. {0xC0000620, "DIRLOG_KCC_NO_BRIDGEHEADS_ENABLED_FOR_TRANSPORT"},
  2222. {0x40000621, "DIRMSG_NTDSETUP_CANCELLED"},
  2223. {0x40000622, "DIRLOG_ISM_SMTP_DROP_DIRECTORY"},
  2224. {0xC0000623, "DIRLOG_UNUSED_15"},
  2225. {0x40000624, "DIRLOG_UNUSED_14"},
  2226. {0x40000625, "DIRLOG_UNUSED_3"},
  2227. {0x80000626, "DIRLOG_DRA_SDP_LOCK_CONTENTION"},
  2228. {0x40000627, "DIRLOG_DRA_PARTIAL_ATTR_ADD_FULL_SYNC"},
  2229. {0xC0000628, "DIRLOG_INHERIT_SECURITY_IDENTITY_FAILURE"},
  2230. {0x40000629, "DIRLOG_INHERIT_SECURITY_IDENTITY_SUCCEEDED"},
  2231. {0x4000062A, "DIRLOG_GC_OCCUPANCY_NOT_MET"},
  2232. {0x8000062B, "DIRLOG_DRA_MAIL_SEND_CONTENTION"},
  2233. {0x4000062C, "DIRLOG_DRA_REPLICATION_FINISHED"},
  2234. {0x8000062D, "DIRLOG_DS_DNS_HOST_RESOLUTION_FAILED"},
  2235. {0x4000062E, "DIRLOG_SCHEMA_CACHE_UPDATED"},
  2236. {0x8000062F, "DIRLOG_DEMOTE_LAST_DC_MISMATCH"},
  2237. {0x80000630, "DIRLOG_DEMOTE_NOT_LAST_DC_MISMATCH"},
  2238. {0x40000631, "DIRLOG_NT4_REPLICATION_CHECKPOINT_SUCCESSFUL"},
  2239. {0x80000632, "DIRLOG_NT4_REPLICATION_CHECKPOINT_UNSUCCESSFUL"},
  2240. {0x40000633, "DIRLOG_DRA_ADJUSTED_DEST_BOOKMARKS_AFTER_RESTORE"},
  2241. {0x80000634, "DIRLOG_DRA_VALUE_NOT_PROPER_FOR_DELETED"},
  2242. {0x40000635, "DIRLOG_RPC_UNUSED_1"},
  2243. {0x40000636, "DIRLOG_RPC_UNUSED_2"},
  2244. {0x40000637, "DIRLOG_RPC_UNUSED_3"},
  2245. {0x40000638, "DIRLOG_RPC_CALL_GETCHG"},
  2246. {0x40000639, "DIRLOG_RPC_UNUSED_5"},
  2247. {0x4000063A, "DIRLOG_RPC_UNUSED_6"},
  2248. {0x4000063B, "DIRLOG_RPC_UNUSED_7"},
  2249. {0x4000063C, "DIRLOG_RPC_UNUSED_8"},
  2250. {0x4000063D, "DIRLOG_RPC_UNUSED_9"},
  2251. {0x4000063E, "DIRLOG_RPC_UNUSED_10"},
  2252. {0x4000063F, "DIRLOG_RPC_UNUSED_11"},
  2253. {0x40000640, "DIRLOG_RPC_UNUSED_12"},
  2254. {0x40000641, "DIRLOG_RPC_UNUSED_13"},
  2255. {0x40000642, "DIRLOG_RPC_UNUSED_14"},
  2256. {0xC0000643, "DIRLOG_FIXED_INDEX_CREATION_FAILED"},
  2257. {0x40000644, "DIRLOG_NSPI_BEGIN_UPDATE_STAT"},
  2258. {0x40000645, "DIRLOG_NSPI_END_UPDATE_STAT"},
  2259. {0x40000646, "DIRLOG_NSPI_BEGIN_COMPARE_DNT"},
  2260. {0x40000647, "DIRLOG_NSPI_END_COMPARE_DNT"},
  2261. {0x40000648, "DIRLOG_NSPI_BEGIN_QUERY_ROWS"},
  2262. {0x40000649, "DIRLOG_NSPI_END_QUERY_ROWS"},
  2263. {0x4000064A, "DIRLOG_NSPI_BEGIN_SEEK_ENTRIES"},
  2264. {0x4000064B, "DIRLOG_NSPI_END_SEEK_ENTRIES"},
  2265. {0x4000064C, "DIRLOG_NSPI_BEGIN_GET_MATCHES"},
  2266. {0x4000064D, "DIRLOG_NSPI_END_GET_MATCHES"},
  2267. {0x4000064E, "DIRLOG_NSPI_BEGIN_RESOLVE_NAMES"},
  2268. {0x4000064F, "DIRLOG_NSPI_END_RESOLVE_NAMES"},
  2269. {0x40000650, "DIRLOG_NSPI_BEGIN_DNT2EPH"},
  2270. {0x40000651, "DIRLOG_NSPI_END_DNT2EPH"},
  2271. {0x40000652, "DIRLOG_NSPI_BEGIN_HIERARCHY_INFO"},
  2272. {0x40000653, "DIRLOG_NSPI_END_HIERARCHY_INFO"},
  2273. {0x40000654, "DIRLOG_NSPI_BEGIN_RESORT_RESTRICTION"},
  2274. {0x40000655, "DIRLOG_NSPI_END_RESORT_RESTRICTION"},
  2275. {0x40000656, "DIRLOG_NSPI_BEGIN_BIND"},
  2276. {0x40000657, "DIRLOG_NSPI_END_BIND"},
  2277. {0x40000658, "DIRLOG_NSPI_BEGIN_NAME_FROM_ID"},
  2278. {0x40000659, "DIRLOG_NSPI_END_NAME_FROM_ID"},
  2279. {0x4000065A, "DIRLOG_NSPI_BEGIN_ID_FROM_NAME"},
  2280. {0x4000065B, "DIRLOG_NSPI_END_ID_FROM_NAME"},
  2281. {0x4000065C, "DIRLOG_NSPI_BEGIN_GET_PROP_LIST"},
  2282. {0x4000065D, "DIRLOG_NSPI_END_GET_PROP_LIST"},
  2283. {0x4000065E, "DIRLOG_NSPI_BEGIN_QUERY_COLUMNS"},
  2284. {0x4000065F, "DIRLOG_NSPI_END_QUERY_COLUMNS"},
  2285. {0x40000660, "DIRLOG_NSPI_BEGIN_GET_PROPS"},
  2286. {0x40000661, "DIRLOG_NSPI_END_GET_PROPS"},
  2287. {0x40000662, "DIRLOG_NSPI_BEGIN_GET_TEMPLATE_INFO"},
  2288. {0x40000663, "DIRLOG_NSPI_END_GET_TEMPLATE_INFO"},
  2289. {0x40000664, "DIRLOG_NSPI_BEGIN_MOD_PROPS"},
  2290. {0x40000665, "DIRLOG_NSPI_END_MOD_PROPS"},
  2291. {0x40000666, "DIRLOG_NSPI_BEGIN_MOD_LINKATT"},
  2292. {0x40000667, "DIRLOG_NSPI_END_MOD_LINKATT"},
  2293. {0x40000668, "DIRLOG_NSPI_BEGIN_DELETE_ENTRIES"},
  2294. {0x40000669, "DIRLOG_NSPI_END_DELETE_ENTRIES"},
  2295. {0xC000066A, "DIRLOG_DRA_CERT_ACCESS_DENIED_NOT_DC"},
  2296. {0x4000066B, "DIRLOG_SEARCH_OPERATIONS"},
  2297. {0x4000066C, "DIRLOG_SEARCH_FILTER_LOGGING"},
  2298. {0xC000066D, "DIRLOG_DRA_SPN_WRONG_TARGET_NAME"},
  2299. {0x4000066E, "DIRLOG_DB_FREE_SPACE"},
  2300. {0x8000066F, "DIRLOG_DRA_SCHEMA_INFO_WRITE_FAILED"},
  2301. {0x80000670, "DIRLOG_SDPROP_BAD_DELETED_SD"},
  2302. {0x40000671, "DIRLOG_PAO_ADD_REPLICA"},
  2303. {0x40000672, "DIRLOG_PAO_DELETE_REPLICA"},
  2304. {0x40000673, "DIRLOG_PAO_SYNCHRONIZE_REPLICA"},
  2305. {0x40000674, "DIRLOG_PAO_UPDATE_REFERENCES"},
  2306. {0x40000675, "DIRLOG_PAO_MODIFY_REPLICA"},
  2307. {0x80000676, "DIRLOG_ISM_LDAP_EXT_SEARCH_RESULT"},
  2308. {0x80000677, "DIRLOG_GC_INVALIDATED"},
  2309. {0xC0000678, "DIRLOG_NO_RPC_PROTSEQS"},
  2310. {0x80000679, "DIRLOG_ISM_ADS_GET_OBJECT_FAILURE"},
  2311. {0x4000067A, "DIRLOG_DRA_NC_TEARDOWN_BEGIN"},
  2312. {0x4000067B, "DIRLOG_DRA_NC_TEARDOWN_RESUME"},
  2313. {0x4000067C, "DIRLOG_DRA_NC_TEARDOWN_SUCCESS"},
  2314. {0x4000067D, "DIRLOG_DRA_NC_TEARDOWN_FAILURE"},
  2315. {0xC000067E, "DIRLOG_MAPI_TABLE_TOO_BIG"},
  2316. {0x8000067F, "DIRLOG_KCC_CACHE_INIT_FAILED"},
  2317. {0xC0000680, "DIRLOG_KCC_CONNECTION_OBJ_TRANSLATION_DISABLED"},
  2318. {0x40000681, "DIRLOG_IDL_DRS_GET_MEMBERSHIPS2_ENTRY"},
  2319. {0x40000682, "DIRLOG_IDL_DRS_GET_MEMBERSHIPS2_EXIT"},
  2320. {0x80000683, "DIRLOG_GROUP_CACHING_CONFIGURED_SITE_NOT_CLOSEST"},
  2321. {0x80000684, "DIRLOG_GROUP_CACHING_CLOSER_GC_FOUND"},
  2322. {0x80000685, "DIRLOG_GROUP_CACHING_MAX_USERS_REFRESHED"},
  2323. {0x80000686, "DIRLOG_GROUP_CACHING_FALLING_BEHIND"},
  2324. {0x80000687, "DIRLOG_GROUP_CACHING_CANT_FIND_OPEN_SLOT"},
  2325. {0x80000688, "DIRLOG_GROUP_CACHING_NO_SCHEDULE_FOR_PREFERRED_SITE"},
  2326. {0x40000689, "DIRLOG_LVR_SET_META_INSERT_MADE_PRESENT"},
  2327. {0x4000068A, "DIRLOG_LVR_SET_META_INSERT_PRESENT"},
  2328. {0x4000068B, "DIRLOG_LVR_SET_META_REPLACE_MADE_ABSENT"},
  2329. {0x4000068C, "DIRLOG_LVR_SET_META_REPLACE_TOUCHED"},
  2330. {0x4000068D, "DIRLOG_LVR_SET_META_REMOVE_ATT_MADE_ABSENT"},
  2331. {0x4000068E, "DIRLOG_LVR_SET_META_REMOVE_VALUE_MADE_ABSENT"},
  2332. {0x4000068F, "DIRLOG_LVR_META_INFO"},
  2333. {0x40000690, "DIRLOG_LVR_FILTERED_NOT_PAS"},
  2334. {0x40000691, "DIRLOG_LVR_FILTERED_NOT_GROUP"},
  2335. {0x40000692, "DIRLOG_LVR_FILTERED_NOT_NEEDED"},
  2336. {0x40000693, "DIRLOG_LVR_SHIPPED"},
  2337. {0x40000694, "DIRLOG_LVR_NOT_APPLIED_DELETED"},
  2338. {0x40000695, "DIRLOG_LVR_NOT_APPLIED_MISSING"},
  2339. {0x40000696, "DIRLOG_LVR_NOT_APPLIED_NOT_NEEDED"},
  2340. {0x40000697, "DIRLOG_LVR_GET_META_OP"},
  2341. {0x40000698, "DIRLOG_LVR_REMOTE_META_INFO"},
  2342. {0x40000699, "DIRLOG_LVR_APPLIED"},
  2343. {0x4000069A, "DIRLOG_LVR_CONFLICT"},
  2344. {0x4000069B, "DIRLOG_LVR_NOT_APPLIED_VALUE_DELETED"},
  2345. {0x4000069C, "DIRLOG_LVR_NOT_APPLIED_MISSING2"},
  2346. {0x4000069D, "DIRLOG_LVR_SET_META_INSERT_ABSENT"},
  2347. {0xC000069E, "DIRLOG_DRA_UPDATE_VALUE_FAILURE_NOT_BUSY"},
  2348. {0x4000069F, "DIRLOG_LVR_ENABLED"},
  2349. {0x400006A0, "DIRMSG_INSTALL_REPLICATE_PROGRESS_VALUES"},
  2350. {0x400006A1, "DIRLOG_GC_REMOVED_OBJECT_VALUE"},
  2351. {0x800006A2, "DIRLOG_GC_FAILED_TO_REMOVE_OBJECT_VALUE"},
  2352. {0xC00006A3, "DIRLOG_DRA_GETCHANGES_FAILED"},
  2353. {0xC00006A4, "DIRLOG_MAIL_INTERSITE_TRANSPORT_MISSING"},
  2354. {0xC00006A5, "DIRLOG_MAIL_ADD_SCHEMA_INFO_FAILED"},
  2355. {0x400006A6, "DIRLOG_GC_PAS_COMPLETED"},
  2356. {0x400006A7, "DIRLOG_GC_TRIGGER_FULL_SYNC"},
  2357. {0x400006A8, "DIRLOG_GC_PAS_CYCLE"},
  2358. {0x400006A9, "DIRLOG_GC_FOUND_INVALID_PAS_SOURCE"},
  2359. {0x400006AA, "DIRLOG_GC_FOUND_PAS_SOURCE"},
  2360. {0x400006AB, "DIRLOG_GC_PAS_SOURCE_NOT_FOUND"},
  2361. {0x400006AC, "DIRLOG_GC_REGISTER_ACTIVE_PAS"},
  2362. {0x400006AD, "DIRLOG_GC_REGISTER_RESET_PAS"},
  2363. {0x800006AE, "DIRLOG_GC_NO_SOURCES"},
  2364. {0x400006AF, "DIRLOG_GC_SKIP_ENQUEUE"},
  2365. {0x400006B0, "DIRLOG_GC_ABANDON_PAS"},
  2366. {0x400006B1, "DIRLOG_SEARCH_VLV_INDEX_NOT_FOUND"},
  2367. {0x400006B2, "DIRLOG_LVR_SET_META_GROUP_TYPE_CHANGE"},
  2368. {0x800006B3, "DIRLOG_LINK_CLEAN_END_ABNORMAL"},
  2369. {0x400006B4, "DIRLOG_GC_UPDATED_OBJECT_VALUE"},
  2370. {0xC00006B5, "DIRMSG_INSTALL_FAILED_VERSION_CHECK"},
  2371. {0xC00006B6, "DIRLOG_FAILED_VERSION_CHECK"},
  2372. {0xC00006B7, "DIRLOG_UNABLE_TO_CHECK_VERSION"},
  2373. {0xC00006B8, "DIRLOG_HIGHER_DSA_VERSION"},
  2374. {0xC00006B9, "DIRLOG_UNABLE_TO_UPDATE_VERSION"},
  2375. {0x400006BA, "DIRLOG_DSA_VERSION_UPDATED"},
  2376. {0x800006BB, "DIRLOG_LOWER_DSA_VERSION"},
  2377. {0x800006BC, "DIRLOG_NO_VERSION_UPGRADE_IN_MIXED_DOMAIN"},
  2378. {0x800006BD, "DIRLOG_DRA_TOO_LOW_VERSION"},
  2379. {0xC00006BE, "DIRLOG_BAD_VERSION_REP_IN"},
  2380. {0xC00006BF, "DIRLOG_DS_TOO_OLD"},
  2381. {0xC00006C0, "DIRLOG_FAILED_BOOT_OPTION_SETUP"},
  2382. {0xC00006C1, "DIRMSG_INSTALL_FAILED_TOMBSTONE_CHECK"},
  2383. {0x400006C2, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_RMSOURCE_SUCCESS"},
  2384. {0x400006C3, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_RMSOURCE_FAILURE"},
  2385. {0x400006C4, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_TEARDOWN_SUCCESS"},
  2386. {0x400006C5, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_TEARDOWN_FAILURE"},
  2387. {0x400006C6, "DIRLOG_CHK_LINK_DEL_HAVE_READONLY_NEED_WRITEABLE_RMSOURCE_SUCCESS"},
  2388. {0x400006C7, "DIRLOG_CHK_LINK_DEL_HAVE_READONLY_NEED_WRITEABLE_RMSOURCE_FAILURE"},
  2389. {0x400006C8, "DIRLOG_CHK_LINK_DEL_HAVE_READONLY_NEED_WRITEABLE_TEARDOWN_SUCCESS"},
  2390. {0x400006C9, "DIRLOG_CHK_LINK_DEL_HAVE_READONLY_NEED_WRITEABLE_TEARDOWN_FAILURE"},
  2391. {0x400006CA, "DIRLOG_CHK_LINK_DEL_HAVE_WRITEABLE_NEED_READONLY_RMSOURCE_SUCCESS"},
  2392. {0x400006CB, "DIRLOG_CHK_LINK_DEL_HAVE_WRITEABLE_NEED_READONLY_RMSOURCE_FAILURE"},
  2393. {0x400006CC, "DIRLOG_CHK_LINK_DEL_HAVE_WRITEABLE_NEED_READONLY_TEARDOWN_SUCCESS"},
  2394. {0x400006CD, "DIRLOG_CHK_LINK_DEL_HAVE_WRITEABLE_NEED_READONLY_TEARDOWN_FAILURE"},
  2395. {0x400006CE, "DIRLOG_CHK_LINK_DEL_SOURCE_READONLY_SUCCESS"},
  2396. {0x400006CF, "DIRLOG_CHK_LINK_DEL_SOURCE_READONLY_FAILURE"},
  2397. {0x400006D0, "DIRLOG_CHK_LINK_DEL_NOTGC_TEARDOWN_SUCCESS"},
  2398. {0x400006D1, "DIRLOG_CHK_LINK_DEL_NOTGC_TEARDOWN_FAILURE"},
  2399. {0x400006D2, "DIRLOG_CHK_LINK_DEL_DOMDEL_TEARDOWN_SUCCESS"},
  2400. {0x400006D3, "DIRLOG_CHK_LINK_DEL_DOMDEL_TEARDOWN_FAILURE"},
  2401. {0x800006D4, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_TEARDOWN_NOREPLICACFG"},
  2402. {0x800006D5, "DIRLOG_CHK_LINK_DEL_NDNC_NOTREPLICA_TEARDOWN_NOREPLICAADVERTISING"},
  2403. {0x400006D6, "DIRLOG_CHK_LINK_DEL_NDNC_NOCROSSREF_TEARDOWN_SUCCESS"},
  2404. {0x400006D7, "DIRLOG_CHK_LINK_DEL_NDNC_NOCROSSREF_TEARDOWN_FAILURE"},
  2405. {0x400006D8, "DIRLOG_CHK_LINK_DEL_NDNC_NOCROSSREF_RMSOURCE_SUCCESS"},
  2406. {0x400006D9, "DIRLOG_CHK_LINK_DEL_NDNC_NOCROSSREF_RMSOURCE_FAILURE"},
  2407. {0x400006DA, "DIRLOG_CHK_LINK_DEL_READONLY_NOTGCHOSTED_RMSOURCE_SUCCESS"},
  2408. {0x400006DB, "DIRLOG_CHK_LINK_DEL_READONLY_NOTGCHOSTED_RMSOURCE_FAILURE"},
  2409. {0x400006DC, "DIRLOG_CHK_LINK_DEL_READONLY_NOTGCHOSTED_TEARDOWN_SUCCESS"},
  2410. {0x400006DD, "DIRLOG_CHK_LINK_DEL_READONLY_NOTGCHOSTED_TEARDOWN_FAILURE"},
  2411. {0x400006DE, "DIRMSG_DEMOTE_NC_GIVING_AWAY_FSMO_ROLES"},
  2412. {0x400006DF, "DIRMSG_DEMOTE_NC_COMPLETING_LINK_CLEANUP"},
  2413. {0x400006E0, "DIRMSG_DEMOTE_NC_REPLICATING_OFF_CHANGES"},
  2414. {0x400006E1, "DIRMSG_DEMOTE_NC_GETTING_TARGET"},
  2415. {0x400006E2, "DIRMSG_DEMOTE_NC_BEGIN"},
  2416. {0x400006E3, "DIRMSG_DEMOTE_NC_FAILED"},
  2417. {0x400006E4, "DIRMSG_DEMOTE_NC_SUCCESS"},
  2418. {0x400006E5, "DIRMSG_DEMOTE_NC_NO_TARGETS"},
  2419. {0x400006E6, "DIRLOG_LOCALIZED_CREATE_INDEX_FAILED"},
  2420. {0xC00006E7, "DIRMSG_SPACE_IN_NETBIOSNAME"},
  2421. {0xC00006E8, "DIRLOG_KCC_SITE_LINK_SITE_NOT_IN_SITE_LIST"},
  2422. {0xC00006E9, "DIRLOG_NDNC_NO_REFERENCE_DOMAIN_SET"},
  2423. {0xC00006EA, "DIRLOG_UNUSED_4"},
  2424. {0xC00006EB, "DIRLOG_KCC_BRIDGE_SITE_LINK_NOT_IN_SITE_LINK_LIST"},
  2425. {0x800006EC, "DIRLOG_HEAP_CREATE_FAILED"},
  2426. {0xC00006ED, "DIRLOG_FAILED_BOOT_OPTION_SETUP_DISK"},
  2427. {0xC00006EE, "DIRLOG_AUTO_LINK_ID_FAILED"},
  2428. {0x800006EF, "DIRLOG_LDAP_DIGEST_WARNING"},
  2429. {0x400006F0, "DIRLOG_GROUP_CACHING_TASK_STARTING"},
  2430. {0x400006F1, "DIRLOG_GROUP_CACHING_TASK_ENDING"},
  2431. {0x400006F2, "DIRLOG_GROUP_CACHING_TASK_RESCHEDULING"},
  2432. {0x400006F3, "DIRLOG_GROUP_CACHING_GC_FOUND"},
  2433. {0x400006F4, "DIRLOG_GROUP_CACHING_NO_GC_FOUND"},
  2434. {0x400006F5, "DIRLOG_GROUP_CACHING_SITE_FOUND"},
  2435. {0x400006F6, "DIRLOG_GROUP_CACHING_NO_SITE_FOUND"},
  2436. {0x400006F7, "DIRLOG_GROUP_CACHING_GROUP_RETRIEVAL_FAILED"},
  2437. {0x400006F8, "DIRLOG_GROUP_CACHING_GROUP_NO_GC_SITE"},
  2438. {0x400006F9, "DIRLOG_GROUP_CACHING_NO_SCHEDULE_FOR_SITE"},
  2439. {0x800006FA, "DIRLOG_KCC_SITE_LINK_TOO_SMALL"},
  2440. {0xC00006FB, "DIRLOG_KCC_SITE_LINK_BRIDGE_TOO_SMALL"},
  2441. {0xC00006FC, "DIRLOG_KCC_NONINTERSECTING_SCHEDULES"},
  2442. {0xC00006FD, "DIRLOG_KCC_SITE_WITH_NO_LINKS"},
  2443. {0xC00006FE, "DIRLOG_GC_PROMOTION_FAILED"},
  2444. {0xC00006FF, "DIRLOG_REPLICATION_SKIP_REQUEUE"},
  2445. {0x80000700, "DIRLOG_OVERLONG_TRANSACTION"},
  2446. {0x40000701, "DIRLOG_TASK_QUEUE_BEGIN_EXECUTE"},
  2447. {0x40000702, "DIRLOG_TASK_QUEUE_END_EXECUTE"},
  2448. {0x80000703, "DIRLOG_KCC_UNKNOWN_TRANSPORT"},
  2449. {0x80000704, "DIRLOG_KCC_SET_PRIORITY_ERROR"},
  2450. {0x80000705, "DIRLOG_KCC_ALMOST_MADE_DUP_CONNECTION"},
  2451. {0xC0000706, "DIRMSG_FAIL_GET_GUID_REPLSERVER"},
  2452. {0x80000707, "DIRLOG_KCC_DESTINATION_DSA_NOT_FOUND"},
  2453. {0x80000708, "DIRLOG_KCC_NO_WRITEABLE_SOURCE_FOR_GC_TOPOLOGY"},
  2454. {0x80000709, "DIRLOG_KCC_NC_NOT_INSTANTIATED_ANYWHERE"},
  2455. {0x4000070A, "DIRLOG_KCC_NC_HEAD_NOT_FOUND"},
  2456. {0x8000070B, "DIRLOG_CHK_BAD_ISM_SCHEDULE"},
  2457. {0x4000070C, "DIRMSG_DEMOTE_NC_GIVING_AWAY_FSMO_ROLES_COMPELETE"},
  2458. {0x4000070D, "DIRMSG_DEMOTE_NC_REPLICATING_OFF_CHANGES_COMPELETE"},
  2459. {0x4000070E, "DISMSG_INSTALL_SCHEMA_COMPELETE"},
  2460. {0x4000070F, "DISMSG_INSTALL_CONFIGURATION_COMPELETE"},
  2461. {0x40000710, "DISMSG_INSTALL_CRITICAL_COMPELETE"},
  2462. {0x40000711, "DIRLOG_GC_NO_INTRA_SITE_SOURCES"},
  2463. {0xC0000712, "DIRLOG_ISM_WAIT_FOR_OBJECTS_FAILED"},
  2464. {0xC0000713, "DIRLOG_ISM_START_SERVICE_CTRL_DISPATCHER_FAILURE"},
  2465. {0xC0000714, "DIRLOG_ISM_INIT_SERVICE"},
  2466. {0xC0000715, "DIRLOG_ISM_CREATE_EVENT_FAILED"},
  2467. {0xC0000716, "DIRLOG_ISM_DS_BAD_NAME_SYNTAX"},
  2468. {0xC0000717, "DIRLOG_ISM_NOT_ENOUGH_MEMORY"},
  2469. {0xC0000718, "DIRLOG_ISM_REGISTER_SERVICE_CONTROL_HANDLER_FAILED"},
  2470. {0xC0000719, "DIRLOG_ISM_START_RPC_SERVER_FAILED"},
  2471. {0xC000071A, "DIRLOG_ISM_CONSTRUCT_SECURITY_DESCRIPTOR_FAILED"},
  2472. {0xC000071B, "DIRLOG_ISM_RPC_SERVER_USE_PROT_SEQ_FAILED"},
  2473. {0xC000071C, "DIRLOG_ISM_RPC_SERVER_REGISTER_IF_FAILED"},
  2474. {0xC000071D, "DIRLOG_ISM_RPC_SERVER_LISTEN_FAILED"},
  2475. {0x8000071E, "DIRLOG_ISM_RPC_SERVER_STOP_FAILED"},
  2476. {0xC000071F, "DIRLOG_ISM_LDAP_ABANDON_FAILED"},
  2477. {0xC0000720, "DIRLOG_ISM_LDAP_BIND_FAILED"},
  2478. {0xC0000721, "DIRLOG_ISM_TRANSPORT_MONITOR_START_FAILURE"},
  2479. {0x80000722, "DIRLOG_ISM_CRITICAL_SITE_ATTRIBUTE_FAILURE"},
  2480. {0x80000723, "DIRLOG_ISM_CRITICAL_TRANSPORT_ATTRIBUTE_FAILURE"},
  2481. {0x80000724, "DIRLOG_KCC_SKIPPED_DIRREPLICAADD"},
  2482. {0xC0000725, "DIRMSG_INSTALL_FAILED_TOO_MANY_STANDARD_SERVERS"},
  2483. {0xC0000726, "DIRMSG_INSTALL_FAILED_NO_VER"},
  2484. {0xC0000727, "DIRMSG_INSTALL_FAILED_IMPROPERLY_DELETED_DOMAIN_FSMO"},
  2485. {0xC0000728, "DIRLOG_ISM_NO_SMTP_DOMAIN"},
  2486. {0x80000729, "DIRLOG_ISM_ADS_DELETE_OBJECT_FAILURE"},
  2487. {0xC000072A, "DIRLOG_ISM_SMTP_DOMAIN_REMOVE_FAILURE"},
  2488. {0x8000072B, "DIRLOG_ISM_ADS_SET_INFO_FAILURE"},
  2489. {0x4000072C, "DIRLOG_ISM_SMTP_MESSAGE_COUNT"},
  2490. {0x4000072D, "DIRLOG_FSMO_XFER_FAILURE"},
  2491. {0x8000072E, "DIRLOG_DRA_REPLICATION_OP_OVER_TIME_LIMIT"},
  2492. {0x8000072F, "DIRLOG_DRA_REPLICATION_OP_NOT_EXECUTING"},
  2493. {0x40000730, "DIRLOG_SCHEMA_DELETED_TUPLE_INDEX"},
  2494. {0x40000731, "DIRLOG_SCHEMA_DELETE_TUPLE_INDEX_FAIL"},
  2495. {0x40000732, "DIRLOG_GROUP_CACHING_PREFERRED_SITE_LINK"},
  2496. {0x40000733, "DIRLOG_DRA_OBJECT_REVIVED"},
  2497. {0xC0000734, "DIRLOG_VERIFY_BY_CRACK_ERROR"},
  2498. {0x80000735, "DIRLOG_SCHEMA_DUP_GOVERNSID"},
  2499. {0x40000736, "DIRLOG_SCHEMA_IGNORE_DEFUNCT"},
  2500. {0x80000737, "DIRLOG_SCHEMA_DUP_GOVERNSID_ATTRIBUTEID"},
  2501. {0x80000738, "DIRLOG_SCHEMA_DUP_SCHEMAIDGUID_CLASS"},
  2502. {0x80000739, "DIRLOG_SCHEMA_DUP_LDAPDISPLAYNAME_CLASS_CLASS"},
  2503. {0x8000073A, "DIRLOG_SCHEMA_DUP_LDAPDISPLAYNAME_CLASS_ATTRIBUTE"},
  2504. {0x8000073B, "DIRLOG_SCHEMA_DUP_ATTRIBUTEID"},
  2505. {0x8000073C, "DIRLOG_SCHEMA_DUP_SCHEMAIDGUID_ATTRIBUTE"},
  2506. {0x8000073D, "DIRLOG_SCHEMA_DUP_MAPIID"},
  2507. {0x8000073E, "DIRLOG_SCHEMA_DUP_LDAPDISPLAYNAME_ATTRIBUTE"},
  2508. {0x4000073F, "DIRLOG_SCHEMA_RESURRECT_RDNATTID"},
  2509. {0x40000740, "DIRLOG_UNUSED_13"},
  2510. {0x40000741, "DIRMSG_INSTALL_FAILED_SCHEMA_RELOAD"},
  2511. {0x40000742, "DISMSG_RELOAD_SCHEMA_COMPELETE"},
  2512. {0x80000743, "DIRLOG_GC_CONFIG_PERIOD_TOOLONG"},
  2513. {0x40000744, "DIRLOG_DRA_SET_IT"},
  2514. {0xC0000745, "DIRLOG_ISM_RPC_SERVER_REGISTER_AUTH_INFO_FAILED"},
  2515. {0x80000746, "DIRLOG_DRA_REPLICATION_LATENCY_WARNINGS"},
  2516. {0xC0000747, "DIRLOG_DRA_REPLICATION_LATENCY_ERRORS"},
  2517. {0xC0000748, "DIRLOG_DRA_REPLICATION_LATENCY_ERRORS_FULL"},
  2518. {0x80000749, "DIRLOG_KCC_DISCONNECTED_SITE"},
  2519. {0xC000074A, "DIRLOG_ISM_LDAP_EXTENDED_SERVER_ERROR"},
  2520. {0x8000074B, "DIRLOG_ISM_LINK_MONITOR_FAILURE_RESTART"},
  2521. {0x4000074C, "DIRLOG_OFFSITE_GC_FAILBACK"},
  2522. {0x4000074D, "DIRLOG_GC_FOUND"},
  2523. {0x8000074E, "DIRLOG_KCC_TOO_MANY_PARTNERS"},
  2524. {0xC000074F, "DIRLOG_DRA_ORPHAN_MOVE_FAILURE"},
  2525. {0x40000750, "DIRLOG_DRA_ORPHAN_MOVE_SUCCESS"},
  2526. {0x40000751, "DIRMSG_COPY_RESTORED_FILES"},
  2527. {0xC0000752, "DIRMSG_COPY_RESTORED_FILES_FAILURE"},
  2528. {0x80000753, "DIRLOG_DRA_REPL_EPOCH_CHANGED"},
  2529. {0x80000754, "DIRLOG_REPL_EPOCH_MISMATCH_COMMUNICATION_REJECTED"},
  2530. {0xC0000755, "DIRLOG_DOMAIN_RENAME_ACCESS_DENIED"},
  2531. {0xC0000756, "DIRLOG_DOMAIN_RENAME_CANNOT_PROCEED"},
  2532. {0xC0000757, "DIRLOG_DOMAIN_RENAME_READ_SCRIPT_FAILED"},
  2533. {0xC0000758, "DIRLOG_DOMAIN_RENAME_EXECUTE_SCRIPT_FAILED"},
  2534. {0xC0000759, "DIRLOG_DOMAIN_RENAME_CANNOT_SET_NEW_DOMAIN_NAME"},
  2535. {0x4000075A, "DIRLOG_DS_SHUTDOWN_DOMAIN_RENAME"},
  2536. {0xC000075B, "DIRLOG_DS_SHUTDOWN_DOMAIN_RENAME_FORCE"},
  2537. {0x4000075C, "DIRLOG_SCRIPT_OPERATION_INSTANTIATED"},
  2538. {0x4000075D, "DIRLOG_SCRIPT_OPERATION_CARDINALITY"},
  2539. {0x4000075E, "DIRLOG_SCRIPT_OPERATION_COMPARE"},
  2540. {0x4000075F, "DIRLOG_SCRIPT_OPERATION_UPDATE"},
  2541. {0x40000760, "DIRLOG_SCRIPT_OPERATION_MOVE"},
  2542. {0x40000761, "DIRLOG_SCRIPT_OPERATION_CREATE"},
  2543. {0xC0000762, "DIRLOG_DRA_NCNAME_CONFLICT_RENAME_FAILURE"},
  2544. {0x40000763, "DIRLOG_DRA_NCNAME_CONFLICT_RENAME_SUCCESS"},
  2545. {0xC0000764, "DIRLOG_DSA_CHILD_CLEANUP_FAILURE"},
  2546. {0xC0000765, "DIRMSG_REPLICATION_EPOCH_NOT_RETRIEVED"},
  2547. {0xC0000766, "DIRMSG_REPLICATION_EPOCH_NOT_MATCHED"},
  2548. {0x40000767, "DIRLOG_SCHEMA_ATTRIBUTE_WON_OID"},
  2549. {0x40000768, "DIRLOG_SCHEMA_ATTRIBUTE_WON_LDN"},
  2550. {0x40000769, "DIRLOG_SCHEMA_ATTRIBUTE_WON_MAPIID"},
  2551. {0x4000076A, "DIRLOG_DSA_SCHEMA_OBJECT_MODIFIED"},
  2552. {0x4000076B, "DIRLOG_DSA_SCHEMA_OBJECT_ADDED"},
  2553. {0xC000076C, "DIRLOG_DUPLICATE_MOVED_OBJECT_CLEANUP"},
  2554. {0x8000076D, "DIRLOG_DEMOTE_REMOVE_CA_ERROR"},
  2555. {0x4000076E, "DIRLOG_KCC_WHISTLER_ELECTION_ALG"},
  2556. {0x4000076F, "DIRLOG_CHK_LINK_ADD_MASTER_SUCCESS"},
  2557. {0x40000770, "DIRLOG_KCC_WHISTLER_TOPOLOGY_ALG"},
  2558. {0x40000771, "DIRLOG_KCC_SITE_GENERATOR_NOT_VIABLE"},
  2559. {0x40000772, "DIRLOG_KCC_SITE_GENERATOR_NO_UTD"},
  2560. {0x40000773, "DIRLOG_KCC_SITE_GENERATOR_CLAIM_VALID"},
  2561. {0x40000774, "DIRLOG_KCC_SITE_GENERATOR_CLAIM_EXPIRED"},
  2562. {0x40000775, "DIRLOG_KCC_ISTG_FAIL_OVER"},
  2563. {0xC0000776, "DIRLOG_KCC_UTD_VEC_WRONG_VERSION"},
  2564. {0x80000777, "DIRLOG_KCC_INTRASITE_UNAVAILABLE"},
  2565. {0xC0000778, "DIRLOG_BACKUP_JET_WRITER_INIT_FAILURE"},
  2566. {0xC0000779, "DIRLOG_BACKUP_UNEXPECTED_WIN32_ERROR"},
  2567. {0xC000077A, "DIRLOG_BACKUP_NO_NTDS_NO_BACKUP"},
  2568. {0xC000077B, "DIRLOG_BACKUP_YES_NTDS_NO_RESTORE"},
  2569. {0xC000077C, "DIRLOG_BACKUP_SNAPSHOT_FAILURE"},
  2570. {0x4000077D, "DIRLOG_BACKUP_SNAPSHOT_SUCCESS"},
  2571. {0xC000077E, "DIRLOG_BACKUP_SNAPSHOT_TOO_OLD"},
  2572. {0xC000077F, "DIRLOG_BACKUP_SNAPSHOT_RESTORE_FAILURE"},
  2573. {0x40000780, "DIRLOG_BACKUP_SNAPSHOT_RESTORE_SUCCESS"},
  2574. {0x80000781, "DIRLOG_BACKUP_DIR_READ_FAILURE"},
  2575. {0x80000782, "DIRLOG_SETUP_MACHINE_ACCOUNT_NOT_REVERTED"},
  2576. {0x80000783, "DIRMSG_SETUP_MACHINE_ACCOUNT_NOT_MORPHED"},
  2577. {0x40000784, "DIRLOG_CHK_LINK_ADD_REPLICA_SUCCESS"},
  2578. {0x80000785, "DIRLOG_CHK_LINK_ADD_MASTER_FAILURE"},
  2579. {0x80000786, "DIRLOG_CHK_LINK_ADD_REPLICA_FAILURE"},
  2580. {0x40000787, "DIRLOG_ADUPD_NC_SYNC_PROGRESS"},
  2581. {0x40000788, "DIRLOG_ADUPD_NC_SYNC_NO_PROGRESS"},
  2582. {0x40000789, "DIRLOG_RPC_MESSAGE"},
  2583. {0x4000078A, "DIRLOG_ADUPD_INIT_SYNC_ONGOING_READONLY"},
  2584. {0xC000078B, "DIRLOG_BACKUP_SNAPSHOT_PRERESTORE_FAILURE"},
  2585. {0x4000078C, "DIRLOG_DEL_SUB_FROM_NC"},
  2586. {0x4000078D, "DIRLOG_ADD_SUB_TO_NC"},
  2587. {0x4000078E, "DIRLOG_DEL_AUTO_SUBREF"},
  2588. {0x4000078F, "DIRLOG_ADD_AUTO_SUBREF"},
  2589. {0x40000790, "DIRLOG_SCRIPT_EXECUTE_STATUS"},
  2590. {0x80000791, "DIRLOG_LOR_BEGIN"},
  2591. {0x40000792, "DIRLOG_LOR_BEGIN_ADVISORY"},
  2592. {0x80000793, "DIRLOG_LOR_END_SUCCESS"},
  2593. {0x40000794, "DIRLOG_LOR_SUCCESS_TRANSACTION"},
  2594. {0x40000795, "DIRLOG_LOR_FAILURE_TRANSACTION"},
  2595. {0x40000796, "DIRLOG_LOR_END_ADVISORY_SUCCESS"},
  2596. {0xC0000797, "DIRLOG_LOR_END_FAILURE"},
  2597. {0xC0000798, "DIRLOG_LOR_END_ADVISORY_FAILURE"},
  2598. {0x80000799, "DIRLOG_LOR_OBJECT_DELETION"},
  2599. {0x4000079A, "DIRLOG_LOR_OBJECT_DELETION_ADVISORY"},
  2600. {0xC000079B, "DIRLOG_LOR_OBJECT_DELETION_FAILED"},
  2601. {0xC000079C, "DIRLOG_LOR_OBJECT_DELETION_FAILED_CRITICAL_OBJECT"},
  2602. {0xC000079D, "DIRLOG_LOR_OBJECT_DELETION_ERROR"},
  2603. {0xC000079E, "DIRLOG_LOR_OBJECT_DELETION_ERROR_FATAL"},
  2604. {0x4000079F, "DIRLOG_REF_CACHE_REBUILD_FAILURE"},
  2605. {0x400007A0, "DIRLOG_KCC_CONN_ON_PROBATION"},
  2606. {0xC0002710, "DIRMSG_DB_success"},
  2607. {0xC0002711, "DIRMSG_DB_ERR_UNKNOWN_ERROR"},
  2608. {0xC0002712, "DIRMSG_DB_ERR_NO_CHILD"},
  2609. {0xC0002713, "DIRMSG_DB_ERR_NEXTCHILD_NOTFOUND"},
  2610. {0xC0002714, "DIRMSG_DB_ERR_CANT_SORT"},
  2611. {0xC0002715, "DIRMSG_DB_ERR_TIMELIMIT"},
  2612. {0xC0002716, "DIRMSG_DB_ERR_NO_VALUE"},
  2613. {0xC0002717, "DIRMSG_DB_ERR_BUFFER_INADEQUATE"},
  2614. {0xC0002718, "DIRMSG_DB_ERR_UNUSED_1"},
  2615. {0xC0002719, "DIRMSG_DB_ERR_VALUE_TRUNCATED"},
  2616. {0xC000271A, "DIRMSG_DB_ERR_ATTRIBUTE_EXISTS"},
  2617. {0xC000271B, "DIRMSG_DB_ERR_ATTRIBUTE_DOESNT_EXIST"},
  2618. {0xC000271C, "DIRMSG_DB_ERR_VALUE_EXISTS"},
  2619. {0xC000271D, "DIRMSG_DB_ERR_SYNTAX_CONVERSION_FAILED"},
  2620. {0xC000271E, "DIRMSG_DB_ERR_NOT_ON_BACKLINK"},
  2621. {0xC000271F, "DIRMSG_DB_ERR_VALUE_DOESNT_EXIST"},
  2622. {0xC0002720, "DIRMSG_DB_ERR_NO_PROPAGATIONS"},
  2623. {0xC0002721, "DIRMSG_DB_ERR_DATABASE_ERROR"},
  2624. {0xC0002722, "DIRMSG_DB_ERR_CANT_ADD_DEL_KEY"},
  2625. {0xC0002723, "DIRMSG_DB_ERR_DSNAME_LOOKUP_FAILED"},
  2626. {0xC0002724, "DIRMSG_DB_ERR_NO_MORE_DEL_RECORD"},
  2627. {0xC0002725, "DIRMSG_DB_ERR_NO_SORT_TABLE"},
  2628. {0xC0002726, "DIRMSG_DB_ERR_NOT_OPTIMIZABLE"},
  2629. {0xC0002727, "DIRMSG_DB_ERR_BAD_INDEX"},
  2630. {0xC0002728, "DIRMSG_DB_ERR_UNUSED_2"},
  2631. {0xC0002729, "DIRMSG_DB_ERR_TOO_MANY"},
  2632. {0xC000272A, "DIRMSG_DB_ERR_SYSERROR"},
  2633. {0xC000272B, "DIRMSG_DB_ERR_BAD_SYNTAX"},
  2634. {0xC000272C, "DIRMSG_DB_ERR_UNUSED_3"},
  2635. {0xC000272D, "DIRMSG_DB_ERR_NOT_ON_CORRECT_VALUE"},
  2636. {0xC000272E, "DIRMSG_DB_ERR_ONLY_ON_LINKED_ATTRIBUTE"},
  2637. {0xC000272F, "DIRMSG_DB_ERR_EXCEPTION"},
  2638. {0xC0002730, "DIRMSG_DB_ERR_SHUTTING_DOWN"},
  2639. {0xC0002731, "DIRMSG_DB_ERR_WRITE_CONFLICT"},
  2640. {0xC0002732, "DIRMSG_DB_ERR_VLV_CONTROL"},
  2641. {0xC0002733, "DIRMSG_DB_ERR_NOT_AN_OBJECT"},
  2642. {0xC0002734, "DIRLOG_DB_ERR_ALREADY_INSERTED"},
  2643. {0xC0002735, "DIRLOG_DB_ERR_NO_CURRENT_RECORD"},
  2644. {0xC0002736, "DIRLOG_DB_ERR_RECORD_NOT_FOUND"},
  2645. {0 , "Event tag not found"}
  2646. };
  2647. // Below is built from \\index1\sdnt\ds\dns\server\server\dnsmsg.mc
  2648. FRS_EL_ENTRY DNSSvcEvents[] = {
  2649. {1 ,"DNS_EVENT_STARTING"},
  2650. {2 ,"DNS_EVENT_STARTUP_OK"},
  2651. {3 ,"DNS_EVENT_SHUTDOWN"},
  2652. {111 ,"DNS_EVENT_CANNOT_CREATE_THREAD"},
  2653. {112 ,"DNS_EVENT_RECURSION_INIT_FAILED"},
  2654. {113 ,"DNS_EVENT_SERVICE_NOTIFY"},
  2655. {130 ,"DNS_EVENT_WINS_INIT_FAILED"},
  2656. {131 ,"DNS_EVENT_NBSTAT_INIT_FAILED"},
  2657. {132 ,"DNS_EVENT_NBSTAT_ADAPTER_FAILED"},
  2658. {140 ,"DNS_EVENT_RPC_SERVER_INIT_FAILED"},
  2659. {403 ,"DNS_EVENT_CANNOT_CREATE_TCP_SOCKET"},
  2660. {404 ,"DNS_EVENT_CANNOT_BIND_TCP_SOCKET"},
  2661. {405 ,"DNS_EVENT_CANNOT_LISTEN_TCP_SOCKET"},
  2662. {406 ,"DNS_EVENT_CANNOT_CREATE_UDP_SOCKET"},
  2663. {407 ,"DNS_EVENT_CANNOT_BIND_UDP_SOCKET"},
  2664. {408 ,"DNS_EVENT_OPEN_SOCKET_FOR_ADDRESS"},
  2665. {409 ,"DNS_EVENT_UPDATE_LISTEN_ADDRESSES"},
  2666. {410 ,"DNS_EVENT_INVALID_LISTEN_ADDRESSES"},
  2667. {411 ,"DNS_EVENT_HOSTENT_MAX_IPS"},
  2668. {412 ,"DNS_EVENT_MANY_IP_INTERFACES"},
  2669. {413 ,"DNS_EVENT_NON_DNS_PORT"},
  2670. {414 ,"DNS_EVENT_SINGLE_LABEL_HOSTNAME"},
  2671. {500 ,"DNS_EVENT_INVALID_REGISTRY_ZONE"},
  2672. {501 ,"DNS_EVENT_INVALID_ZONE_TYPE"},
  2673. {502 ,"DNS_EVENT_NO_ZONE_FILE"},
  2674. {503 ,"DNS_EVENT_SECONDARY_REQUIRES_MASTERS"},
  2675. {504 ,"DNS_EVENT_REG_ZONE_CREATION_FAILED"},
  2676. {505 ,"DNS_EVENT_INVALID_REGISTRY_ZONE_DATA"},
  2677. {506 ,"DNS_EVENT_INVALID_REGISTRY_PARAM"},
  2678. {507 ,"DNS_EVENT_INVALID_REGISTRY_FORWARDERS"},
  2679. {706 ,"DNS_EVENT_NO_ROOT_NAME_SERVER"},
  2680. {707 ,"DNS_EVENT_NO_CACHE_FILE_SPECIFIED"},
  2681. {708 ,"DNS_EVENT_CACHING_SERVER_ONLY"},
  2682. {800 ,"DNS_EVENT_ZONE_BAD_PRIMARY_SERVER"},
  2683. {1000 ,"DNS_EVENT_FILE_OPEN_ERROR"},
  2684. {1001 ,"DNS_EVENT_FILE_NOT_MAPPED"},
  2685. {1003 ,"DNS_EVENT_CACHE_FILE_NOT_FOUND"},
  2686. {1004 ,"DNS_EVENT_COULD_NOT_OPEN_DATABASE"},
  2687. {1008 ,"DNS_EVENT_FILE_PATH_TOO_LONG"},
  2688. {1200 ,"DNS_EVENT_BOOT_FILE_NOT_FOUND"},
  2689. {1201 ,"DNS_EVENT_ZONE_CREATION_FAILED"},
  2690. {1202 ,"DNS_EVENT_DIRECTORY_DIRECTIVE"},
  2691. {1203 ,"DNS_EVENT_NO_FORWARDING_ADDRESSES"},
  2692. {1204 ,"DNS_EVENT_SLAVE_REQUIRES_FORWARDERS"},
  2693. {1205 ,"DNS_EVENT_UNKNOWN_BOOTFILE_OPTION"},
  2694. {1206 ,"DNS_EVENT_MISSING_DIRECTORY_NAME"},
  2695. {1501 ,"DNS_EVENT_COULD_NOT_PARSE_DATABASE"},
  2696. {1502 ,"DNS_EVENT_DATABASE_PARSING_ERROR"},
  2697. {1503 ,"DNS_EVENT_PARSING_ERROR_LINE"},
  2698. {1504 ,"DNS_EVENT_UNEXPECTED_TOKEN"},
  2699. {1505 ,"DNS_EVENT_UNEXPECTED_END_OF_TOKENS"},
  2700. {1506 ,"DNS_EVENT_INVALID_TOKEN"},
  2701. {1507 ,"DNS_EVENT_INVALID_CLASS_TOKEN"},
  2702. {1508 ,"DNS_EVENT_IGNORING_FILE_RECORD"},
  2703. {1520 ,"DNS_EVENT_UNKNOWN_DIRECTIVE"},
  2704. {1521 ,"DNS_EVENT_UNSUPPORTED_DIRECTIVE"},
  2705. {1522 ,"DNS_EVENT_OBSOLETE_DIRECTIVE"},
  2706. {1523 ,"DNS_EVENT_DIRECTIVE_NOT_YET_IMPLEMENTED"},
  2707. {1540 ,"DNS_EVENT_DOMAIN_NODE_CREATION_ERROR"},
  2708. {1541 ,"DNS_EVENT_PARSED_INVALID_DOMAIN_NAME"},
  2709. {1542 ,"DNS_EVENT_INVALID_DOTTED_DOMAIN_NAME"},
  2710. {1543 ,"DNS_EVENT_DOMAIN_NAME_TOO_LONG"},
  2711. {1544 ,"DNS_EVENT_INVALID_ORIGIN_TOKEN"},
  2712. {1545 ,"DNS_EVENT_FILE_NODE_OUTSIDE_ZONE"},
  2713. {1546 ,"DNS_EVENT_FILE_INVALID_NS_NODE"},
  2714. {1547 ,"DNS_EVENT_FILE_INVALID_A_NODE"},
  2715. {1600 ,"DNS_EVENT_UNKNOWN_RESOURCE_RECORD_TYPE"},
  2716. {1601 ,"DNS_EVENT_OBSOLETE_RECORD_SKIPPED"},
  2717. {1602 ,"DNS_EVENT_INVALID_SOA_RECORD"},
  2718. {1610 ,"DNS_EVENT_PARSED_ADD_RR_AT_CNAME"},
  2719. {1611 ,"DNS_EVENT_PARSED_CNAME_NOT_ALONE"},
  2720. {1612 ,"DNS_EVENT_PARSED_CNAME_LOOP"},
  2721. {1613 ,"DNS_EVENT_INVALID_PREFERENCE"},
  2722. {1614 ,"DNS_EVENT_INVALID_DWORD_TOKEN"},
  2723. {1616 ,"DNS_EVENT_TEXT_STRING_TOO_LONG"},
  2724. {1617 ,"DNS_EVENT_INVALID_IP_ADDRESS_STRING"},
  2725. {1618 ,"DNS_EVENT_INVALID_IPV6_ADDRESS"},
  2726. {1619 ,"DNS_EVENT_UNKNOWN_PROTOCOL"},
  2727. {1620 ,"DNS_EVENT_UNKNOWN_SERVICE"},
  2728. {1621 ,"DNS_EVENT_WKS_PORT_UNSUPPORTED"},
  2729. {1650 ,"DNS_EVENT_INVALID_WINS_RECORD"},
  2730. {1651 ,"DNS_EVENT_INVALID_NBSTAT_RECORD"},
  2731. {1654 ,"DNS_EVENT_UNKNOWN_WINS_FLAG"},
  2732. {1656 ,"DNS_EVENT_NO_NBSTAT_DOMAIN"},
  2733. {2000 ,"DNS_BOOTFILE_BACKUP_MESSAGE"},
  2734. {2001 ,"DNS_BOOTFILE_BACKUP_MESSAGE"},
  2735. {2002 ,"DNS_EVENT_BOOTFILE_REWRITE"},
  2736. {2003 ,"DNS_EVENT_BOOTFILE_WRITE_ERROR"},
  2737. {2004 ,"DNS_EVENT_SWITCH_TO_BOOTFILE"},
  2738. {2005 ,"DNS_EVENT_SWITCH_TO_BOOTFILE"},
  2739. {2200 ,"DNS_EVENT_REGISTRY_OPEN_FAILED"},
  2740. {2202 ,"DNS_EVENT_REGISTRY_WRITE_FAILED"},
  2741. {2203 ,"DNS_EVENT_REGISTRY_DELETE_FAILED"},
  2742. {2501 ,"DNS_EVENT_AGING_SCAVENGING_END"},
  2743. {2502 ,"DNS_EVENT_AGING_SCAVENGING_END_NO_WORK"},
  2744. {2600 ,"DNS_EVENT_SERVER_SUPPRESSION"},
  2745. {2601 ,"DNS_EVENT_ZONE_SUPPRESSION"},
  2746. {3000 ,"DNS_EVENT_START_LOG_SUPPRESS"},
  2747. {3150 ,"DNS_EVENT_ZONE_WRITE_COMPLETED"},
  2748. {3151 ,"DNS_EVENT_ZONE_WRITE_FAILED"},
  2749. {3152 ,"DNS_EVENT_FILE_NOT_OPENED_FOR_WRITE"},
  2750. {3153 ,"DNS_EVENT_WRITE_FILE_FAILURE"},
  2751. {3160 ,"DNS_EVENT_UNWRITABLE_RECORD_TYPE"},
  2752. {3162 ,"DNS_EVENT_UNKNOWN_PROTOCOL_NUMBER"},
  2753. {3163 ,"DNS_EVENT_UNKNOWN_SERVICE_PORT"},
  2754. {4000 ,"DNS_EVENT_DS_OPEN_FAILED"},
  2755. {4001 ,"DNS_EVENT_DS_ZONE_OPEN_FAILED"},
  2756. {4002 ,"DNS_EVENT_DS_ZONE_ADD_FAILED"},
  2757. {4003 ,"DNS_EVENT_DS_ZONE_DELETE_FAILED"},
  2758. {4004 ,"DNS_EVENT_DS_ZONE_ENUM_FAILED"},
  2759. {4005 ,"DNS_EVENT_DS_ZONE_DELETE_DETECTED"},
  2760. {4006 ,"DNS_EVENT_DS_NODE_LOAD_FAILED"},
  2761. {4007 ,"DNS_EVENT_DS_REGISTRY_DP_INVALID"},
  2762. {4010 ,"DNS_EVENT_DS_RECORD_LOAD_FAILED"},
  2763. {4011 ,"DNS_EVENT_DS_WRITE_FAILED"},
  2764. {4012 ,"DNS_EVENT_DS_WRITE_TIMEOUT"},
  2765. {4013 ,"DNS_EVENT_DS_OPEN_WAIT"},
  2766. {4014 ,"DNS_EVENT_DS_SECURITY_INIT_FAILURE"},
  2767. {4015 ,"DNS_EVENT_DS_INTERFACE_ERROR"},
  2768. {4016 ,"DNS_EVENT_DS_LDAP_TIMEOUT"},
  2769. {4017 ,"DNS_EVENT_DS_DNSADMINS_ERROR"},
  2770. {4500 ,"DNS_EVENT_DP_CREATED"},
  2771. {4501 ,"DNS_EVENT_DP_DELETED"},
  2772. {4502 ,"DNS_EVENT_DP_ENLISTED"},
  2773. {4503 ,"DNS_EVENT_DP_UNENLISTED"},
  2774. {4510 ,"DNS_EVENT_DP_FSMO_UNAVAILABLE"},
  2775. {4511 ,"DNS_EVENT_DP_DEL_DURING_CHANGE_ERR"},
  2776. {4512 ,"DNS_EVENT_DP_CANT_CREATE_BUILTIN"},
  2777. {4513 ,"DNS_EVENT_DP_CANT_JOIN_FOREST_BUILTIN"},
  2778. {4514 ,"DNS_EVENT_DP_CANT_JOIN_DOMAIN_BUILTIN"},
  2779. {4515 ,"DNS_EVENT_DP_ZONE_CONFLICT"},
  2780. {5050 ,"DNS_EVENT_ASSERT"},
  2781. {5051 ,"DNS_EVENT_EXCESSIVE_MEMORY_USE"},
  2782. {5105 ,"DNS_EVENT_ADDING_RR_AT_CNAME"},
  2783. {5106 ,"DNS_EVENT_CNAME_NOT_ALONE"},
  2784. {5107 ,"DNS_EVENT_CNAME_LOOP"},
  2785. {5108 ,"DNS_EVENT_CNAME_LOOP_LINK"},
  2786. {5500 ,"DNS_EVENT_BAD_QUERY"},
  2787. {5501 ,"DNS_EVENT_BAD_PACKET_LENGTH"},
  2788. {5502 ,"DNS_EVENT_BAD_TCP_MESSAGE"},
  2789. {5504 ,"DNS_EVENT_INVALID_PACKET_DOMAIN_NAME"},
  2790. {5505 ,"DNS_EVENT_PACKET_NAME_TOO_LONG"},
  2791. {5506 ,"DNS_EVENT_PACKET_NAME_BAD_OFFSET"},
  2792. {5507 ,"DNS_EVENT_PACKET_NAME_OFFSET_TOO_LONG"},
  2793. {5508 ,"DNS_EVENT_PACKET_NAME_TOO_MANY_LABELS"},
  2794. {5509 ,"DNS_EVENT_BAD_UPDATE_PACKET"},
  2795. {5510 ,"DNS_EVENT_BAD_RESPONSE_PACKET"},
  2796. {6000 ,"DNS_EVENT_ZONEXFR_START"},
  2797. {6001 ,"DNS_EVENT_ZONEXFR_SUCCESSFUL"},
  2798. {6002 ,"DNS_EVENT_ZONEXFR_ABORTED"},
  2799. {6003 ,"DNS_EVENT_UDP_ZONE_TRANSFER"},
  2800. {6004 ,"DNS_EVENT_BAD_ZONE_TRANSFER_REQUEST"},
  2801. {6520 ,"DNS_EVENT_ZONE_UPDATE"},
  2802. {6521 ,"DNS_EVENT_ZONE_IN_SYNC"},
  2803. {6522 ,"DNS_EVENT_ZONE_TRANSFER_IN_PROGRESS"},
  2804. {6523 ,"DNS_EVENT_XFR_MASTER_UNAVAILABLE"},
  2805. {6524 ,"DNS_EVENT_AXFR_BAD_RESPONSE"},
  2806. {6525 ,"DNS_EVENT_AXFR_REFUSED"},
  2807. {6526 ,"DNS_EVENT_ZONE_NEWER_THAN_SERVER_VERSION"},
  2808. {6527 ,"DNS_EVENT_ZONE_EXPIRATION"},
  2809. {6530 ,"DNS_EVENT_XFR_ADD_RR_AT_CNAME"},
  2810. {6531 ,"DNS_EVENT_XFR_CNAME_NOT_ALONE"},
  2811. {6532 ,"DNS_EVENT_XFR_CNAME_LOOP"},
  2812. {6533 ,"DNS_EVENT_AXFR_INIT_FAILED"},
  2813. {6534 ,"DNS_EVENT_XFR_ABORTED_BY_MASTER"},
  2814. {6535 ,"DNS_EVENT_IXFR_UNSUPPORTED"},
  2815. {6536 ,"DNS_EVENT_IXFR_BAD_RESPONSE"},
  2816. {6701 ,"DNS_EVENT_UPDATE_DS_PEERS_SUCCESS"},
  2817. {6702 ,"DNS_EVENT_UPDATE_DS_PEERS_FAILURE"},
  2818. {7050 ,"DNS_EVENT_RECV_CALL_FAILED"},
  2819. {7051 ,"DNS_EVENT_RECVFROM_CALL_FAILED"},
  2820. {7052 ,"DNS_EVENT_SEND_CALL_FAILED"},
  2821. {7053 ,"DNS_EVENT_SENDTO_CALL_FAILED"},
  2822. {7054 ,"DNS_EVENT_SELECT_CALL_FAILED"},
  2823. {7055 ,"DNS_EVENT_ACCEPT_CALL_FAILED"},
  2824. {7056 ,"DNS_EVENT_GQCS_CALL_FAILED"},
  2825. {7060 ,"DNS_EVENT_CANNOT_CONNECT_TO_SERVER"},
  2826. {7061 ,"DNS_EVENT_CANNOT_SET_WINS_BROADCAST"},
  2827. {7062 ,"DNS_EVENT_SELF_SEND"},
  2828. {7063 ,"DNS_EVENT_NON_RECURSIVE_FORWARDER"},
  2829. {7500 ,"DNS_EVENT_SERVER_FAILURE_PROCESSING_PACKET"},
  2830. {7502 ,"DNS_EVENT_OUT_OF_MEMORY"},
  2831. {7503 ,"DNS_EVENT_CANNOT_ALLOCATE_RECORD"},
  2832. {7504 ,"DNS_EVENT_CANNOT_ALLOCATE_NODE"},
  2833. {9999 ,"DNS_EVENT_CONTINUE_LOG_SUPPRESS"},
  2834. {10101 ,"DNSMSG_FILE_HEADER"},
  2835. {10102 ,"DNSMSG_FILE_VERSION"},
  2836. {10103 ,"DNSMSG_FILE_DELEGATION"},
  2837. {10104 ,"DNSMSG_FILE_DELEGATION_END"},
  2838. {10105 ,"DNSMSG_FILE_NAME_SERVERS"},
  2839. {10106 ,"DNSMSG_FILE_WINS"},
  2840. {10107 ,"DNSMSG_FILE_WINSR"},
  2841. {10108 ,"DNSMSG_FILE_ZONE_RECORDS"},
  2842. {0 , "Event tag not found"}
  2843. };
  2844. /*
  2845. // The following came from \\index1\sdnt\ds\security\base\lsa\idl\lsapmsgs.mc
  2846. // Not sure of the facility names. Presumably these go into the security event log.
  2847. MessageIdTypedef=DWORD
  2848. MessageId=0x1FFF SymbolicName=LSAP_UNUSED_MESSAGE
  2849. MessageId=0x2000 SymbolicName=LSAP_SID_NAME_NULL
  2850. MessageId=0x2001 SymbolicName=LSAP_SID_NAME_WORLD
  2851. MessageId=0x2002 SymbolicName=LSAP_SID_NAME_LOCAL
  2852. MessageId=0x2003 SymbolicName=LSAP_SID_NAME_CREATOR_OWNER
  2853. MessageId=0x2004 SymbolicName=LSAP_SID_NAME_CREATOR_GROUP
  2854. MessageId=0x2005 SymbolicName=LSAP_SID_NAME_NT_DOMAIN
  2855. MessageId=0x2006 SymbolicName=LSAP_SID_NAME_NT_AUTHORITY
  2856. MessageId=0x2007 SymbolicName=LSAP_SID_NAME_DIALUP
  2857. MessageId=0x2008 SymbolicName=LSAP_SID_NAME_NETWORK
  2858. MessageId=0x2009 SymbolicName=LSAP_SID_NAME_BATCH
  2859. MessageId=0x200A SymbolicName=LSAP_SID_NAME_INTERACTIVE
  2860. MessageId=0x200B SymbolicName=LSAP_SID_NAME_SERVICE
  2861. MessageId=0x200C SymbolicName=LSAP_SID_NAME_BUILTIN
  2862. MessageId=0x200D SymbolicName=LSAP_SID_NAME_SYSTEM
  2863. MessageId=0x200E SymbolicName=LSAP_SID_NAME_ANONYMOUS
  2864. MessageId=0x200f SymbolicName=LSAP_SID_NAME_CREATOR_OWNER_SERVER
  2865. MessageId=0x2010 SymbolicName=LSAP_SID_NAME_CREATOR_GROUP_SERVER
  2866. MessageId=0x2011 SymbolicName=LSAP_SID_NAME_SERVER
  2867. MessageId=0x2012 SymbolicName=LSAP_SID_NAME_SELF
  2868. MessageId=0x2013 SymbolicName=LSAP_SID_NAME_AUTHENTICATED_USER
  2869. MessageId=0x2014 SymbolicName=LSAP_SID_NAME_RESTRICTED
  2870. MessageId=0x2015 SymbolicName=LSAP_SID_NAME_INTERNET
  2871. MessageId=0x2016 SymbolicName=LSAP_SID_NAME_TERMINAL_SERVER
  2872. MessageId=0x2017 SymbolicName=LSAP_SID_NAME_PROXY
  2873. MessageId=0x2018 SymbolicName=LSAP_SID_NAME_LOCALSERVICE
  2874. MessageId=0x2019 SymbolicName=LSAP_SID_NAME_NETWORKSERVICE
  2875. MessageId=0x201A SymbolicName=LSAP_SID_NAME_REMOTE_INTERACTIVE
  2876. MessageId=0x201B SymbolicName=LSAP_SID_NAME_USERS
  2877. MessageId=0x4000 SymbolicName=LSAP_DEFAULT_DOMAIN_NAME
  2878. MessageId=1 Severity=Success SymbolicName=CATEGORY_SPM
  2879. MessageId= Severity=Success SymbolicName=CATEGORY_LOCATOR
  2880. MessageId= Severity=Success SymbolicName=CATEGORY_NEGOTIATE
  2881. MessageId= Severity=Success SymbolicName=CATEGORY_MAX_CATEGORY
  2882. MessageId=4000 Severity=Warning SymbolicName=SPMEVENT_SUPPCRED_FAILED
  2883. MessageId=5000 Severity=Error SymbolicName=SPMEVENT_PACKAGE_FAULT
  2884. MessageId=6000 Severity=Informational Facility=EFSServer SymbolicName=EFS_RECOVERY_STARTED
  2885. MessageId=6001 Severity=Error Facility=EFSServer SymbolicName=EFS_PNP_NOT_READY
  2886. MessageId=6002 Severity=Error Facility=EFSServer SymbolicName=EFS_GET_VOLUMES_ERROR
  2887. MessageId=6003 Severity=Informational Facility=EFSServer SymbolicName=EFS_FT_STARTED
  2888. MessageId=6004 Severity=Error Facility=EFSServer SymbolicName=EFS_OPEN_LOGFILE_ERROR
  2889. MessageId=6005 Severity=Error Facility=Io SymbolicName=EFS_READ_LOGFILE_ERROR
  2890. MessageId=6006 Severity=Informational Facility=EFSServer SymbolicName=EFS_LOGFILE_FORMAT_ERROR
  2891. MessageId=6007 Severity=Error Facility=EFSServer SymbolicName=EFS_OPEN_LOGFILE_NC_ERROR
  2892. MessageId=6008 Severity=Warning Facility=EFSServer SymbolicName=EFS_TMP_FILENAME_ERROR
  2893. MessageId=6009 Severity=Error Facility=EFSServer SymbolicName=EFS_TMP_FILEID_ERROR
  2894. MessageId=6010 Severity=Warning Facility=EFSServer SymbolicName=EFS_TMP_OPEN_NAME_ERROR
  2895. MessageId=6011 Severity=Error Facility=EFSServer SymbolicName=EFS_TARGET_OPEN_ERROR
  2896. MessageId=6012 Severity=Informational Facility=EFSServer SymbolicName=EFS_TARGET_RECOVERED
  2897. MessageId=6013 Severity=Error Facility=EFSServer SymbolicName=EFS_DRIVER_MISSING
  2898. MessageId=6014 Severity=Error Facility=EFSServer SymbolicName=EFS_TMPFILE_MISSING
  2899. MessageId=6015 Severity=Error Facility=EFSServer SymbolicName=EFS_TMP_STREAM_INFO_ERROR
  2900. MessageId=6016 Severity=Error Facility=EFSServer SymbolicName=EFS_TMP_STREAM_OPEN_ERROR
  2901. MessageId=6017 Severity=Error Facility=EFSServer SymbolicName=EFS_TARGET_STREAM_OPEN_ERROR
  2902. MessageId=6018 Severity=Error Facility=EFSServer SymbolicName=EFS_STREAM_COPY_ERROR
  2903. MessageId=6019 Severity=Error Facility=EFSServer SymbolicName=EFS_REPARSE_FILE_ERROR
  2904. MessageId=6020 Severity=Error Facility=EFSServer SymbolicName=EFS_TMP_FILE_ERROR
  2905. MessageId=6021 Severity=Error Facility=EFSServer SymbolicName=EFS_DIR_MULTISTR_ERROR
  2906. MessageId=6022 Severity=Error Facility=EFSServer SymbolicName=EFS_OPEN_CACHE_ERROR
  2907. MessageId=6023 Severity=Warning Facility=EFSServer SymbolicName=EFS_DEL_LOGFILE_ERROR
  2908. MessageId=6024 Severity=Error Facility=EFSServer SymbolicName=EFS_BAD_RECOVERY_POLICY_ERROR
  2909. MessageId=6025 Severity=Error Facility=System SymbolicName=LSA_TRUST_UPGRADE_ERROR
  2910. MessageId=6026 Severity=Error Facility=System SymbolicName=LSA_ITA_UPGRADE_ERROR
  2911. MessageId=6027 Severity=Error Facility=System SymbolicName=LSA_SECRET_UPGRADE_ERROR
  2912. MessageId=6028 Severity=Error Facility=EFSServer SymbolicName=EFS_INVALID_RECOVERY_POLICY_ERROR
  2913. MessageId=6029 Severity=Error Facility=System SymbolicName=LSA_DOMAIN_RENAME_ERROR1
  2914. ;//MessageId=6030 Severity=Error Facility=System SymbolicName=LSA_DOMAIN_RENAME_ERROR2
  2915. MessageId=6031 Severity=Error Facility=System SymbolicName=LSA_TRUST_INSERT_ERROR
  2916. MessageId=6032 Severity=Error Facility=EFSServer SymbolicName=EFS_NTLM_ERROR
  2917. MessageId=0x7000 Severity=Success SymbolicName=DSROLEEVT_SEARCH_DC
  2918. MessageId=0x7001 Severity=Success SymbolicName=DSROLEEVT_FOUND_DC
  2919. MessageId=0x7002 Severity=Success SymbolicName=DSROLEEVT_FOUND_SITE
  2920. MessageId=0x7003 Severity=Success SymbolicName=DSROLEEVT_STOP_SERVICE
  2921. MessageId=0x7004 Severity=Success SymbolicName=DSROLEEVT_CONFIGURE_SERVICE
  2922. MessageId=0x7005 Severity=Success SymbolicName=DSROLEEVT_START_SERVICE
  2923. MessageId=0x7006 Severity=Success SymbolicName=DSROLEEVT_INSTALL_DS
  2924. MessageId=0x7007 Severity=Success SymbolicName=DSROLEEVT_REPLICATE_SCHEMA
  2925. MessageId=0x7008 Severity=Success SymbolicName=DSROLEEVT_SET_LSA
  2926. MessageId=0x7009 Severity=Success SymbolicName=DSROLEEVT_SET_LSA_FROM
  2927. MessageId=0x7010 Severity=Success SymbolicName=DSROLEEVT_CREATE_TRUST
  2928. MessageId=0x7011 Severity=Success SymbolicName=DSROLEEVT_PRODUCT_TYPE
  2929. MessageId=0x7012 Severity=Success SymbolicName=DSROLEEVT_LSA_UPGRADE
  2930. MessageId=0x7013 Severity=Success SymbolicName=DSROLEEVT_CREATE_SYSVOL
  2931. MessageId=0x7014 Severity=Success SymbolicName=DSROLEEVT_CREATE_SYSVOL_DIR
  2932. MessageId=0x7015 Severity=Success SymbolicName=DSROLEEVT_DELETE_TRUST
  2933. MessageId=0x7016 Severity=Success SymbolicName=DSROLEEVT_RESTORE_LSA
  2934. MessageId=0x7017 Severity=Success SymbolicName=DSROLEEVT_MACHINE_ACCT
  2935. MessageId=0x7018 Severity=Success SymbolicName=DSROLEEVT_PROMOTION_COMPLETE
  2936. MessageId=0x7019 Severity=Success SymbolicName=DSROLEEVT_CREATE_PARENT_TRUST
  2937. MessageId=0x7020 Severity=Success SymbolicName=DSROLEEVT_SEARCH_REPLICA
  2938. MessageId=0x7021 Severity=Success SymbolicName=DSROLEEVT_FOUND_REPLICA
  2939. MessageId=0x7022 Severity=Success SymbolicName=DSROLEEVT_MACHINE_POLICY
  2940. MessageId=0x7023 Severity=Success SymbolicName=DSROLEEVT_IMPERSONATE
  2941. MessageId=0x7024 Severity=Success SymbolicName=DSROLEEVT_REVERT
  2942. MessageId=0x7025 Severity=Success SymbolicName=DSROLEEVT_LOCAL_POLICY
  2943. MessageId=0x7026 Severity=Success SymbolicName=DSROLEEVT_PREPARE_DEMOTION
  2944. MessageId=0x7027 Severity=Success SymbolicName=DSROLEEVT_UNINSTALL_DS
  2945. MessageId=0x7028 Severity=Success SymbolicName=DSROLEEVT_SVSETUP
  2946. MessageId=0x7029 Severity=Success SymbolicName=DSROLEEVT_COPY_DIT
  2947. MessageId=0x7030 Severity=Success SymbolicName=DSROLEEVT_FIND_DC_FOR_ACCOUNT
  2948. MessageId=0x7031 Severity=Success SymbolicName=DSROLEEVT_SETTING_SECURITY
  2949. MessageId=0x7032 Severity=Success SymbolicName=DSROLEEVT_UNJOIN_DOMAIN
  2950. MessageId=0x7033 Severity=Success SymbolicName=DSROLEEVT_TIMESYNC
  2951. MessageId=0x7034 Severity=Success SymbolicName=DSROLEEVT_UPGRADE_SAM
  2952. MessageId=0x7035 Severity=Success SymbolicName=DSROLEEVT_MOVE_SCRIPTS
  2953. MessageId=0x7036 Severity=Success SymbolicName=DSROLEEVT_SET_COMPUTER_DNS
  2954. MessageId=0x7037 Severity=Success SymbolicName=DSROLEEVT_SCRIPTS_MOVED
  2955. MessageId=0x7038 Severity=Success SymbolicName=DSROLEEVT_COPY_RESTORED_FILES
  2956. MessageId=0x7100 Severity=Success SymbolicName=DSROLESTATUS_MACH_CONFIG
  2957. MessageId=0x7101 Severity=Success SymbolicName=DSROLESTATUS_INSTALL_DS
  2958. MessageId=0x7102 Severity=Success SymbolicName=DSROLESTATUS_INSTALL_SYSVOL
  2959. MessageId=0x7103 Severity=Success SymbolicName=DSROLESTATUS_TREE
  2960. MessageId=0x7104 Severity=Success SymbolicName=DSROLESTATUS_SERVICES
  2961. MessageId=0x7105 Severity=Success SymbolicName=DSROLESTATUS_SECURITY
  2962. MessageId=0x7106 Severity=Success SymbolicName=DSROLESTATUS_MEMBERSHIP
  2963. MessageId=0x7108 Severity=Success SymbolicName=DSROLESTATUS_DEMOTABLE
  2964. MessageId=0x7109 Severity=Success SymbolicName=DSROLESTATUS_UNINSTALL_DS
  2965. MessageId=0x710a Severity=Success SymbolicName=DSROLESTATUS_UNINSTALL_SYSVOL
  2966. MessageId=0x7200 Severity=Success SymbolicName=DSROLERES_PROMO_SUCCEEDED
  2967. MessageId=0x7201 Severity=Error SymbolicName=DSROLERES_PROMO_FAILED
  2968. MessageId=0x7202 Severity=Error SymbolicName=DSROLERES_FAIL_SCRIPT_COPY
  2969. MessageId=0x7203 Severity=Error SymbolicName=DSROLERES_FAIL_SET_SECURITY
  2970. MessageId=0x7204 Severity=Error SymbolicName=DSROLERES_INCOMPATIBLE_TRUST
  2971. MessageId=0x7205 Severity=Error SymbolicName=DSROLERES_FIND_DC
  2972. MessageId=0x7206 Severity=Error SymbolicName=DSROLERES_IMPERSONATION
  2973. MessageId=0x7207 Severity=Error SymbolicName=DSROLERES_NET_USE
  2974. MessageId=0x7208 Severity=Error SymbolicName=DSROLERES_TIME_SYNC
  2975. MessageId=0x7209 Severity=Error SymbolicName=DSROLERES_POLICY_READ_REMOTE
  2976. MessageId=0x7210 Severity=Error SymbolicName=DSROLERES_POLICY_READ_LOCAL
  2977. MessageId=0x7211 Severity=Error SymbolicName=DSROLERES_POLICY_WRITE_LOCAL
  2978. MessageId=0x7212 Severity=Error SymbolicName=DSROLERES_LSA_UPGRADE
  2979. MessageId=0x7213 Severity=Error SymbolicName=DSROLERES_LOGON_DOMAIN
  2980. MessageId=0x7214 Severity=Error SymbolicName=DSROLERES_SET_COMPUTER_DNS
  2981. MessageId=0x7215 Severity=Error SymbolicName=DSROLERES_MODIFY_MACHINE_ACCOUNT
  2982. MessageId=0x7216 Severity=Error SymbolicName=DSROLERES_LEAF_DOMAIN
  2983. MessageId=0x7217 Severity=Error SymbolicName=DSROLERES_SYSVOL_DEMOTION
  2984. MessageId=0x7218 Severity=Error SymbolicName=DSROLERES_DEMOTE_DS
  2985. MessageId=0x7219 Severity=Error SymbolicName=DSROLERES_SERVICE_CONFIGURE
  2986. MessageId=0x721A Severity=Error SymbolicName=DSROLERES_PRODUCT_TYPE
  2987. MessageId=0x721B Severity=Error SymbolicName=DSROLERES_PARENT_TRUST_EXISTS
  2988. MessageId=0x721C Severity=Error SymbolicName=DSROLERES_PARENT_TRUST_FAIL
  2989. MessageId=0x721D Severity=Error SymbolicName=DSROLERES_NO_PARENT_TRUST
  2990. MessageId=0x721E Severity=Error SymbolicName=DSROLERES_TRUST_FAILURE
  2991. MessageId=0x721F Severity=Error SymbolicName=DSROLERES_TRUST_CONFIGURE_FAILURE
  2992. MessageId=0x7220 Severity=Error SymbolicName=DSROLERES_FAIL_DISABLE_AUTO_LOGON
  2993. MessageId=0x7221 Severity=Error SymbolicName=DSROLERES_FAIL_LOGON_DOMAIN
  2994. MessageId=0x7222 Severity=Error SymbolicName=DSROLERES_FAIL_UNJOIN
  2995. MessageId=0x7223 Severity=Error SymbolicName=DSROLERES_NOT_FOREST_ROOT
  2996. MessageId=0x7224 Severity=Error SymbolicName=DSROLERES_GPO_CREATION
  2997. MessageId=0x7225 Severity=Error SymbolicName=DSROLERES_FAILED_TO_DELETE_TRUST
  2998. MessageId=0x7226 Severity=Error SymbolicName=DSROLERES_FAILED_TO_DEMOTE_FRS
  2999. MessageId=0x7227 Severity=Informational SymbolicName=DSROLERES_PROMOTE_SUCCESS
  3000. MessageId=0x7228 Severity=Informational SymbolicName=DSROLERES_DEMOTE_SUCCESS
  3001. MessageId=0x7229 Severity=Informational SymbolicName=DSROLERES_STARTING
  3002. MessageId=0x7230 Severity=Informational SymbolicName=DSROLERES_SYSVOL_DIR_ERROR
  3003. MessageId=0x7231 Severity=Informational SymbolicName=DSROLERES_OP_CANCELLED
  3004. MessageId=0x7232 Severity=Error SymbolicName=DSROLERES_UPDATE_PRENT4_ACCOUNT
  3005. MessageId=0x7233 Severity=Error SymbolicName=DSROLERES_WRONG_DOMAIN
  3006. MessageId=0x7234 Severity=Error SymbolicName=DSROLERES_FAILED_SYSVOL_CANNOT_BE_ROOT_DIRECTORY
  3007. MessageId=0x7235 Severity=Error SymbolicName=DSROLERES_FAILED_FIND_REQUESTED_DC
  3008. MessageId=0x7236 Severity=Error SymbolicName=DSROLERES_FAILED_FIND_SITE
  3009. MessageId=0x8000 Severity=Warning SymbolicName=LSAEVENT_ITA_NOT_DELETED
  3010. MessageId=0x8001 Severity=Warning SymbolicName=LSAEVENT_TRUST_FOR_ITA_NOT_CREATED
  3011. MessageId=0x8002 Severity=Warning SymbolicName=LSAEVENT_TRUST_FOR_ITA_NOT_DELETED
  3012. MessageId=0x8003 Severity=Warning SymbolicName=LSAEVENT_DUP_TRUST_REMOVED
  3013. MessageId=0x8004 Severity=Warning SymbolicName=LSAEVENT_ITA_FOR_TRUST_NOT_CREATED
  3014. MessageId=0x8005 Severity=Warning SymbolicName=LSAEVENT_LOOKUP_SC_FAILED
  3015. MessageId=0x8006 Severity=Warning SymbolicName=LSAEVENT_LOOKUP_SC_HANDLE_FAILED
  3016. MessageId=0x8007 Severity=Warning SymbolicName=LSAEVENT_LOOKUP_SC_LOOKUP_FAILED
  3017. MessageId=0x8008 Severity=Warning SymbolicName=LSAEVENT_LOOKUP_GC_FAILED
  3018. MessageId=0x8009 Severity=Warning SymbolicName=LSAEVENT_LOOKUP_TCPIP_NOT_INSTALLED
  3019. MessageId=0x800A Severity=Warning SymbolicName=LSAEVENT_LOOKUP_SID_FILTERED
  3020. MessageId=0x9000 Severity=Informational SymbolicName=SSLEVENT_SCHANNEL_STARTED
  3021. MessageId=0x9001 Severity=Error SymbolicName=SSLEVENT_GLOBAL_ACQUIRE_CONTEXT_FAILED
  3022. MessageId=0x9002 Severity=Error SymbolicName=SSLEVENT_SCHANNEL_INIT_FAILURE
  3023. MessageId=0x9003 Severity=Informational SymbolicName=SSLEVENT_CREATE_CRED
  3024. MessageId=0x9004 Severity=Informational SymbolicName=SSLEVENT_CRED_PROPERTIES
  3025. MessageId=0x9005 Severity=Error SymbolicName=SSLEVENT_NO_PRIVATE_KEY
  3026. MessageId=0x9006 Severity=Error SymbolicName=SSLEVENT_CRED_ACQUIRE_CONTEXT_FAILED
  3027. MessageId=0x9007 Severity=Error SymbolicName=SSLEVENT_CREATE_CRED_FAILED
  3028. MessageId=0x9008 Severity=Warning SymbolicName=SSLEVENT_NO_DEFAULT_SERVER_CRED
  3029. MessageId=0x9009 Severity=Error SymbolicName=SSLEVENT_NO_CIPHERS_SUPPORTED
  3030. MessageId=0x900a Severity=Error SymbolicName=SSLEVENT_CIPHER_MISMATCH
  3031. MessageId=0x900b Severity=Warning SymbolicName=SSLEVENT_NO_CLIENT_CERT_FOUND
  3032. MessageId=0x900c Severity=Error SymbolicName=SSLEVENT_BOGUS_SERVER_CERT
  3033. MessageId=0x900d Severity=Warning SymbolicName=SSLEVENT_BOGUS_CLIENT_CERT
  3034. MessageId=0x900e Severity=Warning SymbolicName=SSLEVENT_FAST_MAPPING_FAILURE
  3035. MessageId=0x900f Severity=Warning SymbolicName=SSLEVENT_CERT_MAPPING_FAILURE
  3036. MessageId=0x9010 Severity=Informational SymbolicName=SSLEVENT_HANDSHAKE_INFO
  3037. MessageId=0x9011 Severity=Error SymbolicName=SSLEVENT_EXPIRED_SERVER_CERT
  3038. MessageId=0x9012 Severity=Error SymbolicName=SSLEVENT_UNTRUSTED_SERVER_CERT
  3039. MessageId=0x9013 Severity=Error SymbolicName=SSLEVENT_REVOKED_SERVER_CERT
  3040. MessageId=0x9014 Severity=Error SymbolicName=SSLEVENT_NAME_MISMATCHED_SERVER_CERT
  3041. MessageId=0x9015 Severity=Warning SymbolicName=SSLEVENT_ISSUER_LIST_OVERFLOW_FAILURE
  3042. MessageId=0x9080 SymbolicName=SSLEVENTTEXT_CLIENT
  3043. MessageId=0x9081 SymbolicName=SSLEVENTTEXT_SERVER
  3044. MessageId=0xa000 Severity=Warning SymbolicName=NEGOTIATE_DOWNGRADE_DETECTED
  3045. MessageId=0xa001 Severity=Warning SymbolicName=NEGOTIATE_INVALID_SERVER
  3046. MessageId=0xa002 Severity=Warning SymbolicName=NEGOTIATE_UNBALANCED_EXCHANGE
  3047. MessageId=0xa003 Severity=Warning SymbolicName=NEGOTIATE_PACKAGE_FAILED
  3048. MessageId=0xa004 Severity=Warning SymbolicName=NEGOTIATE_UNKNOWN_PACKAGE
  3049. MessageId=0xa005 Severity=Informational SymbolicName=NEGOTIATE_PACKAGE_SELECTED
  3050. MessageId=0xa006 Severity=Informational SymbolicName=NEGOTIATE_MESSAGE_DECODED
  3051. MessageId=0xa007 Severity=Informational SymbolicName=NEGOTIATE_RAW_PACKET
  3052. MessageId=0xa008 Severity=Warning SymbolicName=NEGOTIATE_UNKNOWN_PACKET
  3053. MessageId=0xa009 Severity=Informational SymbolicName=NEGOTIATE_MESSAGE_DECODED_NO_TOKEN
  3054. */
  3055. PCHAR GenIdToTag (
  3056. DWORD ID,
  3057. PFRS_EL_ENTRY Etab
  3058. )
  3059. {
  3060. DWORD j = 0;
  3061. while (((Etab[j].EventId & 0x0FFFFFFF) != ID) &&
  3062. (Etab[j].EventId != 0)) {j++;}
  3063. return Etab[j].EventTag;
  3064. }
  3065. PCHAR JetIdToTag (
  3066. DWORD ID
  3067. )
  3068. {
  3069. DWORD j = 0;
  3070. while (((JetEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3071. (JetEvents[j].EventId != 0)) {j++;}
  3072. return JetEvents[j].EventTag;
  3073. }
  3074. PCHAR KDCIdToTag (
  3075. DWORD ID
  3076. )
  3077. {
  3078. DWORD j = 0;
  3079. while (((KDCEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3080. (KDCEvents[j].EventId != 0)) {j++;}
  3081. return KDCEvents[j].EventTag;
  3082. }
  3083. PCHAR TimeservIdToTag (
  3084. DWORD ID
  3085. )
  3086. {
  3087. DWORD j = 0;
  3088. while (((TimeservEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3089. (TimeservEvents[j].EventId != 0)) {j++;}
  3090. return TimeservEvents[j].EventTag;
  3091. }
  3092. PCHAR NetLogonIdToTag (
  3093. DWORD ID
  3094. )
  3095. {
  3096. DWORD j = 0;
  3097. while (((NetlogonEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3098. (NetlogonEvents[j].EventId != 0)) {j++;}
  3099. return NetlogonEvents[j].EventTag;
  3100. }
  3101. PCHAR NetEventIdToTag (
  3102. DWORD ID
  3103. )
  3104. {
  3105. DWORD j = 0;
  3106. while (((NetEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3107. (NetEvents[j].EventId != 0)) {j++;}
  3108. return NetEvents[j].EventTag;
  3109. }
  3110. PCHAR DirSvcEventIdToTag (
  3111. DWORD ID
  3112. )
  3113. {
  3114. DWORD j = 0;
  3115. while (((DirSvcEvents[j].EventId & 0x0FFFFFFF) != ID) &&
  3116. (DirSvcEvents[j].EventId != 0)) {j++;}
  3117. return DirSvcEvents[j].EventTag;
  3118. }
  3119. PCHAR FrsEventIdToTag (
  3120. DWORD ID
  3121. )
  3122. {
  3123. DWORD j = 0;
  3124. while ((FrsEvents[j].EventId != ID) && (FrsEvents[j].EventId != 0)) {j++;}
  3125. return FrsEvents[j].EventTag;
  3126. }
  3127. PCHAR SystemIoEventIdToTag (
  3128. DWORD ID
  3129. )
  3130. {
  3131. DWORD j = 0;
  3132. while ((SystemIoEvents[j].EventId != ID) && (SystemIoEvents[j].EventId != 0)) {j++;}
  3133. return SystemIoEvents[j].EventTag;
  3134. }
  3135. VOID
  3136. EventLogTimeToLocalTime (
  3137. DWORD eTime,
  3138. SYSTEMTIME *plTime
  3139. )
  3140. {
  3141. LONGLONG time;
  3142. FILETIME ftime;
  3143. FILETIME lftime;
  3144. // file time @ 1970 + nSec since 1970
  3145. time = 0x019DB1DED53E8000 + (LONGLONG)eTime * 10000000;
  3146. // convert the LONGLONG time to file time
  3147. ftime.dwHighDateTime = (DWORD)(time >> 32);
  3148. ftime.dwLowDateTime = (DWORD)(time & 0x00000000FFFFFFFF);
  3149. // get local file time
  3150. FileTimeToLocalFileTime (&ftime, &lftime);
  3151. // get local system time
  3152. FileTimeToSystemTime (&lftime, plTime);
  3153. }
  3154. INT
  3155. FormatTime (
  3156. SYSTEMTIME *pLocalTime
  3157. )
  3158. {
  3159. CHAR szTime[100];
  3160. INT iR;
  3161. iR = GetTimeFormat (LOCALE_USER_DEFAULT, 0, pLocalTime, NULL, szTime, 100);
  3162. if (iR)
  3163. return printf ("%13s", szTime);
  3164. else
  3165. return 0;
  3166. }
  3167. INT
  3168. FormatDate (
  3169. SYSTEMTIME *pLocalTime
  3170. )
  3171. {
  3172. CHAR szDate[100];
  3173. INT iR;
  3174. iR = GetDateFormat (LOCALE_USER_DEFAULT, 0, pLocalTime, "M'/'d'/'yyyy", szDate, 100);
  3175. if (iR)
  3176. return printf ("%11s", szDate);
  3177. else
  3178. return 0;
  3179. }
  3180. int __cdecl main(int argc, char *argv[])
  3181. {
  3182. HANDLE hEventLog = NULL;
  3183. DWORD dwNumOfEvents = 0;
  3184. PVOID pvEventBuffer;
  3185. PEVENTLOGRECORD pelrCurrEvent = NULL;
  3186. DWORD dwNumRead = 0, dwNumRequired = 0;
  3187. PDBENTRY Match=NULL;
  3188. DWORD dwIteration = 0;
  3189. BOOL boolBackup=FALSE, boolClear=FALSE, boolRemote=FALSE;
  3190. char szBackupStub[128], szComputerName[24];
  3191. DWORD dwClearInterval = 96, dwBufferSize;
  3192. DWORD i;
  3193. DWORD NumRecordsDisplayed = 200;
  3194. DWORD LoopCount;
  3195. szBackupStub[0]='\0';
  3196. szComputerName[0]='\0';
  3197. szRemoteComputer[0]='\0';
  3198. for (i=0;i<(unsigned long) argc;i++) {
  3199. if (strstr(_strlwr(argv[i]),"/?") ||
  3200. strstr(argv[i],"-?") ||
  3201. strstr(argv[i],"/h") ||
  3202. strstr(argv[i],"-h")) {
  3203. Usage();
  3204. continue;
  3205. }
  3206. if (strstr(argv[i],"/b")) {
  3207. sscanf(argv[i]," /b:%s",szBackupStub);
  3208. boolBackup = TRUE;
  3209. continue;
  3210. }
  3211. if (strstr(argv[i],"/m")) {
  3212. if (!sscanf(argv[i]," /m:%s",szComputerName)) {
  3213. Usage();
  3214. continue;
  3215. }
  3216. continue;
  3217. }
  3218. if (strstr(argv[i],"/r")) {
  3219. if (!sscanf(argv[i]," /r:%s",szRemoteComputer)) {
  3220. Usage();
  3221. continue;
  3222. }
  3223. bRemote = TRUE;
  3224. continue;
  3225. }
  3226. if (strstr(argv[i],"/l")) {
  3227. if (!sscanf(argv[i]," /l:%s",szLogType)) {
  3228. printf("invalid szlogtype: %s\n", argv[i]);
  3229. Usage();
  3230. continue;
  3231. }
  3232. if (_stricmp("DS", szLogType) == 0) {
  3233. sprintf(szLogType, "Directory Service");
  3234. } else if (_stricmp("DNS", szLogType) == 0) {
  3235. sprintf(szLogType, "DNS Server");
  3236. }
  3237. continue;
  3238. }
  3239. if (strstr(argv[i],"/n")) {
  3240. if (!sscanf(argv[i]," /n:%d", &NumRecordsDisplayed)) {
  3241. printf("invalid NumRecordsDisplayed: %s\n", argv[i]);
  3242. Usage();
  3243. continue;
  3244. }
  3245. continue;
  3246. }
  3247. if (strstr(argv[i],"/c")) {
  3248. sscanf(argv[i]," /c:%lu",&dwClearInterval);
  3249. dwClearInterval *= 4;
  3250. boolClear=TRUE;
  3251. continue;
  3252. }
  3253. if (strstr(argv[i],"/o")) {
  3254. char c;
  3255. sscanf(argv[i]," /o:%c",&c);
  3256. switch (c) {
  3257. case 'c':
  3258. enumOutput = eCon;
  3259. break;
  3260. case 'd':
  3261. enumOutput = eDbg;
  3262. break;
  3263. default:
  3264. break;
  3265. }
  3266. }
  3267. }
  3268. //
  3269. // Default to local computer if no name supplied.
  3270. //
  3271. if (!strlen(szComputerName)) {
  3272. dwBufferSize = sizeof(szComputerName);
  3273. GetComputerName(szComputerName,&dwBufferSize);
  3274. }
  3275. if (!strlen(szRemoteComputer)) {
  3276. dwBufferSize = sizeof(szRemoteComputer);
  3277. GetComputerName(szRemoteComputer,&dwBufferSize);
  3278. }
  3279. printf("Log Type: %s\n", szLogType);
  3280. printf("Computer: %s\n", szRemoteComputer);
  3281. printf("MaxRecordsDisplayed: %d\n", NumRecordsDisplayed);
  3282. pvEventBuffer = VirtualAlloc(NULL, SIZE_EVENT_BUFFER, MEM_COMMIT, PAGE_READWRITE);
  3283. if (!pvEventBuffer) {
  3284. sprintf(sp,"EVENTDMP: Unable to allocate sufficient memory -> Error: %lu\n", GetLastError());
  3285. SplitPrint();
  3286. exit(1);
  3287. }
  3288. i = 0;
  3289. InitializeDatabase();
  3290. if (!(hEventLog = OpenEventLog(szRemoteComputer, szLogType))) {
  3291. sprintf(sp,"EVENTDMP: Could not open event log -> Error: %lu\n", GetLastError());
  3292. SplitPrint();
  3293. exit(1);
  3294. }
  3295. if (!GetNumberOfEventLogRecords(hEventLog, &dwNumOfEvents)) {
  3296. sprintf(sp,"EVENTDMP: Could not get number of records -> Error: %lu\n", GetLastError());
  3297. SplitPrint();
  3298. }
  3299. if (dwNumOfEvents == 0) {
  3300. sprintf(sp,"EVENTDMP: no event log entries found.\n");
  3301. SplitPrint();
  3302. return 1;
  3303. }
  3304. sprintf(sp,"EVENTDMP: Attempting to read %d event log entries...\n", dwNumOfEvents);
  3305. SplitPrint();
  3306. LoopCount = 0;
  3307. while (i < dwNumOfEvents) {
  3308. if (!ReadEventLog(hEventLog,
  3309. EVENTLOG_BACKWARDS_READ | EVENTLOG_SEQUENTIAL_READ,
  3310. 1,
  3311. pvEventBuffer,
  3312. SIZE_EVENT_BUFFER,
  3313. &dwNumRead,
  3314. &dwNumRequired)) {
  3315. sprintf(sp, "EVENTDMP: Unable to read event log -> Error: %lu\n", GetLastError());
  3316. SplitPrint();
  3317. sprintf(sp, "NumRead = %d NumRequired = %d\n", dwNumRead, dwNumRequired);
  3318. SplitPrint();
  3319. if (++LoopCount > 50) goto SCAN_DONE;
  3320. continue;
  3321. }
  3322. pelrCurrEvent = (PEVENTLOGRECORD) pvEventBuffer;
  3323. while ((char *)pelrCurrEvent < (char *)pvEventBuffer+dwNumRead) {
  3324. if (i < NumRecordsDisplayed) {
  3325. PrintEventLogRecord( pelrCurrEvent );
  3326. } else {
  3327. goto SCAN_DONE;
  3328. }
  3329. #if 0
  3330. // skip this stuff for now since it doesn't work for remote access anyway.
  3331. if ((pelrCurrEvent->EventType &
  3332. (EVENTLOG_ERROR_TYPE | EVENTLOG_WARNING_TYPE)) != 0) {
  3333. if (!(Match = SearchDatabase(pelrCurrEvent))) {
  3334. if (!(Match = AddToDatabase(pelrCurrEvent))) {
  3335. sprintf(sp,"EVENTDMP: Database is full. Unable to add unique Event ID.");
  3336. SplitPrint();
  3337. }
  3338. } else {
  3339. if (!(Match = UpdateDatabase(pelrCurrEvent, Match))) {
  3340. //sprintf(sp,"EVENTDMP: Match error in Database management code");
  3341. //SplitPrint();
  3342. }
  3343. }
  3344. }
  3345. #endif
  3346. pelrCurrEvent = (PEVENTLOGRECORD) ((char*) pelrCurrEvent + pelrCurrEvent->Length);
  3347. i++;
  3348. }
  3349. }
  3350. DumpDatabase();
  3351. CleanupDatabase();
  3352. SCAN_DONE:
  3353. if (boolClear && !(dwIteration % dwClearInterval)) {
  3354. SYSTEMTIME stCurrentTime;
  3355. char szBackup[128];
  3356. sprintf(sp,"EVENTDMP: Attempting to clear event log...\n");
  3357. SplitPrint();
  3358. GetLocalTime(&stCurrentTime);
  3359. if (boolBackup) {
  3360. sprintf(szBackup,"%s%s%c%02d%02d.evt",szBackupStub,strlen(szBackupStub)?"\\":"",szComputerName[0],
  3361. stCurrentTime.wMonth,stCurrentTime.wDay);
  3362. }
  3363. if (!ClearEventLog(hEventLog,szBackup)) {
  3364. sprintf(sp,"EVENTDMP: Unable to clear event log...ERROR: %d\n", GetLastError());
  3365. SplitPrint();
  3366. } else {
  3367. sprintf(sp,"EVENTDMP: Event log cleared...backup file is %s\n", szBackup);
  3368. SplitPrint();
  3369. dwIteration++;
  3370. }
  3371. }
  3372. CloseEventLog(hEventLog);
  3373. if (hRegistry != 0) {
  3374. RegCloseKey(hRegistry);
  3375. }
  3376. free(pvEventBuffer);
  3377. return(0);
  3378. }
  3379. void InitializeDatabase(void)
  3380. {
  3381. DWORD i=0;
  3382. for (;i<MAX_DB_EINTRIES;i++) {
  3383. Database[i]=NULL;
  3384. }
  3385. return;
  3386. }
  3387. PDBENTRY SearchDatabase(PEVENTLOGRECORD pelrEvent)
  3388. {
  3389. DWORD i=0, j=0;
  3390. char *szString = (char*)pelrEvent + pelrEvent->StringOffset;
  3391. for (;i<MAX_DB_EINTRIES && Database[i];i++) {
  3392. if (pelrEvent->EventID==Database[i]->dwID) {
  3393. for (;j<pelrEvent->NumStrings && !strcmp(szString,Database[i]->szStrings[j]); j++, szString+=strlen(szString)+1);
  3394. }
  3395. if (j==pelrEvent->NumStrings) {
  3396. break;
  3397. }
  3398. }
  3399. return(Database[i]);
  3400. }
  3401. PDBENTRY AddToDatabase(
  3402. PEVENTLOGRECORD pelrEvent
  3403. )
  3404. {
  3405. DWORD i=0, j=0, dwBuffer=128, dwRegType;
  3406. char *szString = (char*)pelrEvent + pelrEvent->StringOffset;
  3407. HKEY hkServiceKey;
  3408. char szKeyName[128], szMessageFile[128], *szDLLName, szDLLFullPath[128], *szParamStrings[MAX_SUB_STRINGS];
  3409. HINSTANCE hMessageFile;
  3410. for (;i<MAX_DB_EINTRIES && Database[i];i++);
  3411. if (i==MAX_DB_EINTRIES) {
  3412. return(NULL);
  3413. }
  3414. Database[i] = malloc(sizeof(DBENTRY));
  3415. Database[i]->dwID = pelrEvent->EventID;
  3416. Database[i]->dwTimeFirst = pelrEvent->TimeGenerated;
  3417. Database[i]->dwTimeLast = pelrEvent->TimeGenerated;
  3418. Database[i]->dwNumStrings = pelrEvent->NumStrings;
  3419. strncpy(Database[i]->szSource,(char*)pelrEvent+sizeof(EVENTLOGRECORD),64);
  3420. for (;j<Database[i]->dwNumStrings;j++) {
  3421. strncpy(Database[i]->szStrings[j],szString,MAX_SUB_STR_LEN);
  3422. szString+=strlen(szString)+1;
  3423. }
  3424. Database[i]->dwCount = 1;
  3425. if (hRegistry == 0) {
  3426. hRegistry = HKEY_LOCAL_MACHINE;
  3427. if (bRemote) {
  3428. if (!RegConnectRegistry(szRemoteComputer, HKEY_LOCAL_MACHINE, &hRegistry)) {
  3429. //sprintf(sp,"EVENTDMP: Unable to open registry on remote computer %s ...ERROR: %d\n",
  3430. // szRemoteComputer, GetLastError());
  3431. //SplitPrint();
  3432. }
  3433. }
  3434. }
  3435. sprintf(szKeyName,"System\\CurrentControlSet\\Services\\EventLog\\System\\%s",Database[i]->szSource);
  3436. if (RegOpenKeyEx(hRegistry,szKeyName,0,KEY_READ,&hkServiceKey)) {
  3437. //sprintf(sp,"EVENTDMP: Unable to open EventLog service key on source: %s...\n",Database[i]->szSource);
  3438. //SplitPrint();
  3439. //sprintf(sp," ...Extended event description unavailable.");
  3440. //SplitPrint();
  3441. } else {
  3442. if (RegQueryValueEx(hkServiceKey,"EventMessageFile", NULL, &dwRegType, szMessageFile, &dwBuffer)) {
  3443. //sprintf(sp,"EVENTDMP: Unable to get message file value from registry on source: %s...\n",Database[i]->szSource);
  3444. //SplitPrint();
  3445. //sprintf(sp," ...Extended event description unavailable.");
  3446. //SplitPrint();
  3447. } else {
  3448. szDLLName = strtok(szMessageFile,";\0");
  3449. for (j=0;j<Database[i]->dwNumStrings;j++) {
  3450. szParamStrings[j]=(char *) Database[i]->szStrings[j];
  3451. }
  3452. while (szDLLName) {
  3453. ExpandEnvironmentStrings(szDLLName, szDLLFullPath, 128);
  3454. if (!(hMessageFile = LoadLibrary(szDLLFullPath))) {
  3455. sprintf(sp,"EVENTDMP: Unable to load message file %s...\n",szDLLName);
  3456. SplitPrint();
  3457. } else {
  3458. #pragma warning( disable : 4090)
  3459. if (FormatMessage(FORMAT_MESSAGE_FROM_HMODULE |
  3460. FORMAT_MESSAGE_ARGUMENT_ARRAY,
  3461. (LPCVOID)hMessageFile,
  3462. Database[i]->dwID,
  3463. 0,
  3464. Database[i]->szDescription,
  3465. MAX_DESC_LEN,
  3466. szParamStrings)) {
  3467. break;
  3468. }
  3469. #pragma warning( default : 4090 )
  3470. }
  3471. FreeLibrary(hMessageFile);
  3472. szDLLName = strtok(NULL,";\0");
  3473. }
  3474. if (hMessageFile)
  3475. FreeLibrary(hMessageFile);
  3476. }
  3477. }
  3478. return(Database[i]);
  3479. }
  3480. PDBENTRY UpdateDatabase(PEVENTLOGRECORD pelrEvent, PDBENTRY pdbEntry)
  3481. {
  3482. if (pdbEntry->dwID!=pelrEvent->EventID)
  3483. return(NULL);
  3484. pdbEntry->dwCount++;
  3485. if (pelrEvent->TimeGenerated < pdbEntry->dwTimeFirst) {
  3486. pdbEntry->dwTimeFirst = pelrEvent->TimeGenerated;
  3487. }
  3488. if (pelrEvent->TimeGenerated > pdbEntry->dwTimeLast) {
  3489. pdbEntry->dwTimeLast = pelrEvent->TimeGenerated;
  3490. }
  3491. return(pdbEntry);
  3492. }
  3493. void DumpDatabase(void)
  3494. {
  3495. DWORD i=0;
  3496. return; // Turn this off for now.
  3497. if (Database[i]) {
  3498. sprintf(sp,"\n\n\nEVENTDMP:\n");
  3499. SplitPrint();
  3500. sprintf(sp," Red Event Statistics :\n");
  3501. SplitPrint();
  3502. while (Database[i]) {
  3503. DWORD dwSecFirst = Database[i]->dwTimeFirst % 60;
  3504. DWORD dwSecLast = Database[i]->dwTimeLast % 60;
  3505. DWORD dwMinFirst = (Database[i]->dwTimeFirst % 3600)/60;
  3506. DWORD dwMinLast = (Database[i]->dwTimeLast % 3600)/60;
  3507. DWORD dwHourFirst = (Database[i]->dwTimeFirst % 86400)/3600;
  3508. DWORD dwHourLast = (Database[i]->dwTimeLast % 86400)/3600;
  3509. char szFirstTime[32];
  3510. char szLastTime[32];
  3511. sprintf(szFirstTime,"%2d:%02d:%02d",dwHourFirst,dwMinFirst,dwSecFirst);
  3512. sprintf(szLastTime ,"%2d:%02d:%02d",dwHourLast ,dwMinLast ,dwSecLast );
  3513. sprintf(sp," %2d. EVENT SOURCE, ID : %s, %d\n",i+1,Database[i]->szSource, Database[i]->dwID & 0xffff);
  3514. SplitPrint();
  3515. sprintf(sp," DESCRIPTION : %s",Database[i]->szDescription);
  3516. SplitPrint();
  3517. sprintf(sp," OCCURENCES(FIRST/LAST) : %d (%s/%s)\n\n",Database[i]->dwCount,szFirstTime,szLastTime);
  3518. SplitPrint();
  3519. i++;
  3520. }
  3521. }
  3522. return;
  3523. }
  3524. void PrintEventLogRecord(
  3525. PEVENTLOGRECORD pelrEvent
  3526. )
  3527. {
  3528. DWORD j, EvId;
  3529. char *szString;
  3530. char szSource[64];
  3531. SYSTEMTIME LocalTime;
  3532. DWORD EvType;
  3533. strncpy(szSource, (char*)pelrEvent+sizeof(EVENTLOGRECORD), sizeof(szSource));
  3534. EventLogTimeToLocalTime (pelrEvent->TimeWritten, &LocalTime);
  3535. if (bFirst) {
  3536. printf("Fields are EVENT SOURCE, TIME, TYPE, ID, Tag \n");
  3537. bFirst = FALSE;
  3538. }
  3539. printf("%6d : %-14s ", pelrEvent->RecordNumber, szSource);
  3540. FormatTime (&LocalTime);
  3541. FormatDate (&LocalTime);
  3542. EvType = (DWORD) pelrEvent->EventType;
  3543. if (EvType == EVENTLOG_SUCCESS) {szString = "Success";
  3544. } else if (EvType & EVENTLOG_ERROR_TYPE) {szString = "Error";
  3545. } else if (EvType & EVENTLOG_WARNING_TYPE) {szString = "Warn";
  3546. } else if (EvType & EVENTLOG_INFORMATION_TYPE) {szString = "Info";
  3547. } else if (EvType & EVENTLOG_AUDIT_SUCCESS) {szString = "AudSuccess";
  3548. } else if (EvType & EVENTLOG_AUDIT_FAILURE) {szString = "AudFail";
  3549. }
  3550. printf("%11s ", szString);
  3551. EvId = pelrEvent->EventID & 0xffff;
  3552. //
  3553. // Decode event ID based on Event log.
  3554. // ntfrs, System, Application, Security, DNS, DS
  3555. //
  3556. if (_stricmp("Directory Service", szLogType) == 0) {
  3557. if ((_stricmp("esent", szSource) == 0)) {
  3558. printf("%8d %s\n", EvId, JetIdToTag(EvId));
  3559. } else if ((_stricmp("NTDS ISAM", szSource) == 0)) {
  3560. printf("%8d %s\n", EvId, JetIdToTag(EvId));
  3561. } else {
  3562. printf("%8d %s\n", EvId, DirSvcEventIdToTag(EvId));
  3563. }
  3564. } else if (_stricmp("DNS Server", szLogType) == 0) {
  3565. printf("%8d %s\n", EvId, GenIdToTag(EvId, DNSSvcEvents));
  3566. } else if (_stricmp("Application", szLogType) == 0) {
  3567. if ((_stricmp("esent", szSource) == 0)) {
  3568. printf("%8d %s\n", EvId, JetIdToTag(EvId));
  3569. } else
  3570. if ((_stricmp("SceCli", szSource) == 0)) {
  3571. printf("%8d %s\n", EvId, GenIdToTag(EvId, SecPolicyEngine));
  3572. } else {
  3573. printf("%8d\n", EvId);
  3574. }
  3575. } else if (_stricmp("Security", szLogType) == 0) {
  3576. printf("%8d\n", EvId);
  3577. } else if (_stricmp("System", szLogType) == 0) {
  3578. if ((_stricmp("Disk", szSource) == 0) ||
  3579. (_stricmp("scsiport", szSource) == 0) ||
  3580. (_stricmp("ftdisk", szSource) == 0)) {
  3581. printf("%8d %s\n", EvId, SystemIoEventIdToTag(EvId));
  3582. } else
  3583. if ((_stricmp("netlogon", szSource) == 0)) {
  3584. printf("%8d %s\n", EvId, NetLogonIdToTag(EvId));
  3585. } else
  3586. if ((_stricmp("print", szSource) == 0)) {
  3587. printf("%8d %s\n", EvId, GenIdToTag(EvId, PrinterEvents));
  3588. } else
  3589. if ((_stricmp("Windows File Protection", szSource) == 0)) {
  3590. printf("%8d %s\n", EvId, GenIdToTag(EvId, WindowsFileProtEvents));
  3591. } else
  3592. if ((_stricmp("dmio", szSource) == 0)) {
  3593. printf("%8d %s\n", EvId, GenIdToTag(EvId, DMIOEvents));
  3594. } else
  3595. if ((_stricmp("sam", szSource) == 0)) {
  3596. printf("%8d %s\n", EvId, GenIdToTag(EvId, SAMEvents));
  3597. } else
  3598. if ((_stricmp("kdc", szSource) == 0)) {
  3599. printf("%8d %s\n", EvId, KDCIdToTag(EvId));
  3600. } else
  3601. if ((_stricmp("w32time", szSource) == 0)) {
  3602. printf("%8d %s\n", EvId, TimeservIdToTag(EvId));
  3603. } else
  3604. if ((_stricmp("dhcp", szSource) == 0) ||
  3605. (_stricmp("DhcpServer", szSource) == 0)) {
  3606. printf("%8d %s\n", EvId, GenIdToTag(EvId, DHCPEvents));
  3607. } else
  3608. if ((_stricmp("rdr", szSource) == 0) ||
  3609. (_stricmp("NDIS", szSource) == 0) ||
  3610. (_stricmp("TrkSvr", szSource) == 0) ||
  3611. (_stricmp("tcpip", szSource) == 0) ||
  3612. (_stricmp("rdbss", szSource) == 0) ||
  3613. (_stricmp("mrxsmb", szSource) == 0) ||
  3614. (_stricmp("srv", szSource) == 0) ||
  3615. (_stricmp("Server", szSource) == 0) ||
  3616. (_stricmp("ipsec", szSource) == 0) ||
  3617. (_stricmp("EventLog", szSource) == 0) ||
  3618. (_stricmp("DCOM", szSource) == 0) ||
  3619. (_stricmp("Service Control Manager", szSource) == 0) ||
  3620. (_stricmp("dfs", szSource) == 0)) {
  3621. printf("%8d %s\n", EvId, GenIdToTag(EvId, NetEvents));
  3622. } else {
  3623. printf("%8d\n", EvId);
  3624. }
  3625. } else if (_stricmp("ntfrs", szLogType) == 0) {
  3626. if (strcmp("NtFrs", szSource) == 0) {
  3627. printf("%8d %s\n", EvId, FrsEventIdToTag(EvId));
  3628. } else {
  3629. printf("%8d\n", EvId);
  3630. }
  3631. }
  3632. if (pelrEvent->NumStrings > 0) {
  3633. printf("STRINGS: ");
  3634. szString = (char*)pelrEvent + pelrEvent->StringOffset;
  3635. for (j=0; j<pelrEvent->NumStrings; j++) {
  3636. if (j > 0) {printf(" | ");}
  3637. printf("%s", szString);
  3638. szString += strlen(szString)+1;
  3639. }
  3640. printf("\n");
  3641. }
  3642. }
  3643. void CleanupDatabase(void)
  3644. {
  3645. DWORD i=0;
  3646. for (;i<MAX_DB_EINTRIES && Database[i];i++)
  3647. free(Database[i]);
  3648. return;
  3649. }
  3650. void Usage(void)
  3651. {
  3652. printf("USAGE:\n");
  3653. printf(" EventDmp [options]\n");
  3654. printf(" /r[:machine-name] - If included, this indicates the remote machine whose eventlog\n");
  3655. printf(" is to be read. The machine name should be in UNC format, i.e. \\\\G24.\n\n");
  3656. printf(" /l:logname - ntfrs, System, Application, Security, DNS, DS\n\n");
  3657. printf(" /n:nnnn - number of event log records to display (default: 200)\n");
  3658. printf(" /b[:pathname] - Backup eventlog before clearing. If <path> is included then the\n");
  3659. printf(" log will be backed up to the indicated path. Otherwise, the backup\n");
  3660. printf(" will reside in the current directory. Backup files take the form\n");
  3661. printf(" <[First letter of machine name][2 digit month][2 digit day][0-9].evt>.\n");
  3662. printf(" Backup files are not created by default.\n\n");
  3663. printf(" /c[:#] - Enables clearing of the log. If # is included, then the log is cleared\n");
  3664. printf(" every # hours. The default value is 24 hours. Log clearing is disabled\n");
  3665. printf(" by default.\n\n");
  3666. // printf(" /f:filename - Specifies a filter file. {This option is currently invalid}\n\n");
  3667. // printf(" /d:filename - Specifies a dump format file. {This option is currently invalid}\n\n");
  3668. // printf(" /o:{c,d,b} - Specifies output destination. The valid options are: \n");
  3669. // printf(" c = application console\n");
  3670. // printf(" d = debugger\n");
  3671. // printf(" b = both\n");
  3672. // printf(" Default condition is console\n");
  3673. printf(" /?, -?, /h, -h - This message.");
  3674. exit(0);
  3675. return;
  3676. }