MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint removed. Name: Domain Name: Transport Name: \Device\NetBT_Tcpip_{6F4CA840-268B-4CBF-9165-5E2DDC40DB7A} Guidance: You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required.10110410110230584300921369396077Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4220n-h2-758944-1S-1-5-1810/21/2020 6:07:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network. Guidance: You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall.10270410270230584300921369396076Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational24402520n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::3130:cecf:4dd4:57e2 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396075Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 10.222.0.55 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396074Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::3186:25b6:feab:59c4 Flags: 0x1 Interface Index: 3 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396073Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.0.29 Flags: 0x1 Interface Index: 3 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396072Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: N-H2-758944-1 Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{6F4CA840-268B-4CBF-9165-5E2DDC40DB7A} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396071Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: N-H2-758944-1 Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5E8B8775-F8C8-4917-A1B1-9F6F1C4B1FDB} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396070Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:15 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: N-H2-758944-1 Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396069Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4516n-h2-758944-1S-1-5-1810/21/2020 6:05:12 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network. Guidance: You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall.10270410270230584300921369396068Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational22682284WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::3130:cecf:4dd4:57e2 Flags: 0x1 Interface Index: 4 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396067Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 10.222.0.55 Flags: 0x1 Interface Index: 4 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396066Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::3186:25b6:feab:59c4 Flags: 0x1 Interface Index: 3 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396065Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.0.29 Flags: 0x1 Interface Index: 3 Capability: 0x1 Link Speed: 20000000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396064Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-PIJLFHNN6G1 Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{6F4CA840-268B-4CBF-9165-5E2DDC40DB7A} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396063Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:58 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-PIJLFHNN6G1 Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5E8B8775-F8C8-4917-A1B1-9F6F1C4B1FDB} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396062Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:55 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-PIJLFHNN6G1 Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396061Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4228WIN-5T344G8GM1HS-1-5-1810/21/2020 6:03:49 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint removed. Name: Domain Name: Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Guidance: You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required.10110410110230584300921369396060Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4212WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396059Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4376WIN-5T344G8GM1HS-1-5-181/19/2018 9:44:31 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint removed. Name: Domain Name: Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Guidance: You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required.10110410110230584300921369396058Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:44:18 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396057Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396056Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396055Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396054Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:33 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396053Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4376WIN-5T344G8GM1HS-1-5-181/19/2018 9:41:30 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396052Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396051Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396050Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396049Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:19 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396048Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:27:16 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396047Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:44 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396046Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:44 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396045Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:44 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396044Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:44 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396043Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 9:26:41 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396042Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396041Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396040Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396039Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:04 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396038Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:23:01 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396037Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/19/2018 9:19:22 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint removed. Name: Domain Name: Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Guidance: You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required.10110410110230584300921369396036Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational43588WIN-5T344G8GM1HS-1-5-181/19/2018 9:19:16 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396035Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 9:11:51 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint removed. Name: Domain Name: Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Guidance: You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required.10110410110230584300921369396034Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational43588WIN-5T344G8GM1HS-1-5-181/19/2018 9:11:38 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396033Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:52 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396032Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:52 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396031Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:52 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396030Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:52 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396029Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4360WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:49 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396028Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4196WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:06 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::6df4:53fe:c824:2937 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396027Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4196WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:06 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.3 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396026Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4196WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:06 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396025Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4196WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:06 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396024Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4196WIN-5T344G8GM1HS-1-5-181/19/2018 8:50:03 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396023Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/19/2018 8:24:03 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396022Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational42504WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:57 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network. Guidance: You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall.10270410270230584300921369396021Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational18922056WIN-5T344G8GM1HS-1-5-181/19/2018 8:23:56 AMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396020Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:28 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396019Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:28 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.10 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396018Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:28 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396017Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:28 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396016Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4200WIN-5T344G8GM1HS-1-5-181/16/2018 6:06:25 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396015Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4204WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:14 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396014Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4204WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:14 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.10 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.10120410120230584300921369396013Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4204WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:14 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396012Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4204WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:14 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.10100410100230584300921369396011Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4204WIN-5T344G8GM1HS-1-5-181/16/2018 5:42:11 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network. Guidance: You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall.10270410270230584300921369396010Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational21002132WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662::1 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.1012041012023058430092136939609Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.1012041012023058430092136939608Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: fe80::e432:d3ed:b94f:1d5e Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.1012041012023058430092136939607Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The network name information changed. Change Type: Add Net Name: * IP Address: 192.168.1.10 Flags: 0x1 Interface Index: 2 Capability: 0x1 Link Speed: 150000000 Guidance: You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required.1012041012023058430092136939606Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.1010041010023058430092136939605Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4380WIN-5T344G8GM1HS-1-5-181/16/2018 5:02:02 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-5T344G8GM1H Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.1010041010023058430092136939604Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4380WIN-5T344G8GM1HS-1-5-181/16/2018 5:01:59 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-PD8DQPRRTAO Domain Name: WORKGROUP Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF} Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.1010041010023058430092136939603Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational42552WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:27 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint added. Name: WIN-PD8DQPRRTAO Domain Name: WORKGROUP Transport Name: \Device\NetbiosSmb Transport Flags: 0x1 Guidance: You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required.1010041010023058430092136939602Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational4208WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:21 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network. Guidance: You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall.1027041027023058430092136939601Microsoft-Windows-SMBServerd48ce617-33a2-4bc3-a5c7-11aa4f29619eMicrosoft-Windows-SMBServer/Operational10361940WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-smbserver/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]