Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 191 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 190 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:17 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 189 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:17 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 188 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 187 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 186 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 185 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 184 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:00 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 183 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:24:00 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 182 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 181 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 180 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 179 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 178 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 177 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 176 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:33 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 175 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:33 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 174 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:23 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 173 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:23 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 172 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:20 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 171 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:20 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 170 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 169 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 168 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:06 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 167 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:23:06 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 166 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:56 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 165 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:56 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 164 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:53 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 163 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:53 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 162 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:42 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 161 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:42 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 160 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:39 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 159 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:39 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 158 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:29 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 157 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:29 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 156 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:26 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 155 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 154 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 153 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 152 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 151 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:22:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 150 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:21:58 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 149 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:21:58 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 148 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:21:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 147 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:20:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 146 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:20:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 145 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:20:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 144 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:20:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 143 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:29 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 142 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:18 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 141 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:18 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 140 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:15 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 139 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:15 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 138 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:05 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 137 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2452 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:13:05 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 136 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:12:51 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 135 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:05:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 134 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:05:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 133 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:05:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 132 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 6:05:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 131 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:58:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 130 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:58:06 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 129 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:58:06 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 128 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:58:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 127 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:58:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 126 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:53 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 125 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:53 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 124 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 123 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 122 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:38 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 121 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:38 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 120 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:35 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 119 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:35 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 118 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:25 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 117 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:25 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 116 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 115 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 114 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:11 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 113 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:11 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 112 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:08 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 111 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:57:08 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 110 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:58 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 109 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:58 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 108 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 107 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 106 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:44 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 105 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:44 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 104 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:41 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 103 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:41 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 102 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:31 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 101 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:31 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 100 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 99 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 98 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:17 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 97 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:17 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 96 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 95 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 94 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:04 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 93 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:04 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 92 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:01 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 91 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:56:01 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 90 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 89 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 88 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 87 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 86 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:37 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 85 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:37 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 84 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:55:34 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 83 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:20 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 82 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2592 | 2636 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::880c:3fc7:d6b8:50c0
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 81 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 10.222.0.61
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 80 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::4c60:5c68:9251:858a
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 79 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{98F73293-1304-43F8-BDE8-008C60C7DDB8}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 78 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:12 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H1-760454-2
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 77 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 520 | n-h1-760454-2 | S-1-5-18 | 11/27/2020 5:54:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 76 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 75 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 74 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:26 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 73 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:26 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 72 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2012 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 71 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 70 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 69 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 68 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{1C17338E-8B26-4280-A4E7-CB2FC089BB77}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 67 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:53:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 66 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2180 | 2204 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::880c:3fc7:d6b8:50c0
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 65 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 10.222.0.61
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 64 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::4c60:5c68:9251:858a
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 63 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{98F73293-1304-43F8-BDE8-008C60C7DDB8}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 62 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-05ALAEF2AV3
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 61 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2020 5:52:50 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 60 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:09 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 59 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:44:31 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 58 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:44:18 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 57 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 56 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 55 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 54 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 53 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:30 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 52 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 51 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 50 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 49 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 48 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:16 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 47 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 46 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 45 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 44 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 43 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:41 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 42 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 41 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 40 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 39 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 38 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:01 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 37 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:19:22 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 36 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 3588 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:19:16 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 35 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:11:51 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 34 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 3588 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:11:38 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 33 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 32 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 31 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 30 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 29 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:49 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 28 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 27 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 26 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 25 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 24 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:03 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 23 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:03 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 22 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2504 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:23:57 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 21 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 1892 | 2056 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:23:56 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 20 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 19 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 18 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 17 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 16 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:25 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 15 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 14 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 13 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 12 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 11 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:11 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 10 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2100 | 2132 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662::1
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 9 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 8 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 7 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 6 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 5 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 4 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:01:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-PD8DQPRRTAO
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 3 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2552 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-PD8DQPRRTAO
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 2 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:21 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 1 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 1036 | 1940 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |