Event Tracing for Windows (ETW) is an efficient kernel-level tracing facility that lets you log kernel or application-defined events to a log file. You can consume the events in real-time or from a log file and use them to debug an application or to determine where performance issues are occurring in the application. ETW lets…
The apps installed on your Windows Server, which is running in production, could be crucial. As an administrator, you don’t want anyone to uninstall an application from the server without your permission. What happens if a certain program has been uninstalled? How would you find the person who uninstalled the program? In this article, you…
If your organization has many system administrators, you may want to know who restarted the server at certain times. This post will show you How to find out who restarted Windows Server. This is to view shutdown/reboot/startup logs on Windows servers. Windows has a great application called Windows Event Viewer that records all actions that…
Microsoft’s identity solutions span across on-premises and cloud-based capabilities. In this article, we shall discuss how to fix “Error 0x801c001d – Automatic registration failed: Failed to look up the registration service information from Active Directory with exit code unknown HResult”. These solutions create a common user identity for authentication and authorization of all resources, regardless…
Event Logs contain lots of useful information. By creating a custom view in Windows Event Viewer you can easily see the specific errors you want to see. This article was created in order to display Sysmon events as described in this article. – Launch Windows Event Viewer as shown below Click on create Custom View,…
Read More “How to create a custom view in Windows Event Viewer” »
This method is a pretty straightforward approach when using a third-party Software to monitor the Active Directory. These tools help in mitigating challenges when it comes to managing and monitoring AD. In this article, we shall discuss how to detect who disabled a user in Active Directory. Please see how to detect if an application…
Read More “How to detect who disabled a user in Active Directory” »
This is needed in order to be able to analyse, resolve application and system errors correctly as well as get information about the system. knowing various ways to fire up core built-in tools is paramount for your day to day administration. Recently, the Windows search stopped working as stated in the articles below and I…
In the context of the Windows Event Viewer, “Failure Reasons” refers to the reasons provided for events categorized as failures. The Event Viewer is a tool in Microsoft Windows that allows you to view detailed information about system events, including errors, warnings, and informational events. In this article, we shall discuss “Logon Failure Reasons for…
Read More “Logon Failure Reasons for Windows Event Viewer” »
