Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 205 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:43 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 204 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:43 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 203 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 202 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 201 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 200 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 199 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 198 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 197 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 196 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 195 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 194 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 193 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 192 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:26:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 191 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 190 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 189 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 188 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 187 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:46 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 186 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:46 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 185 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 184 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 220 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 183 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:32 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 182 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:32 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 181 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 180 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 179 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:19 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 178 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:19 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 177 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 176 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 175 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:06 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 174 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:25:01 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 173 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:24:51 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 172 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 508 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:24:51 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 171 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:24:48 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e80f:a524:72:31b
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 170 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 10.222.0.95
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 169 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::fd29:9ba8:74fb:5c55
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 168 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 169.254.92.85
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 167 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 166 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:47 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetBT_Tcpip_{48BE3A1E-BD6D-4B0B-A7CB-E71358F53153}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 165 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:44 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: CBCI-821840-3
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 164 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3.cbci-821840-3.local | S-1-5-18 | 2/10/2022 12:17:41 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 163 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:53 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 162 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:43 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 161 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:43 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 160 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 159 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:40 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 158 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 157 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:30 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 156 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:26 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 155 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 1592 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:26 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 154 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 153 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 152 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 151 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:13 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 150 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 149 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:10:03 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 148 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 147 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 146 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 145 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:49 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 144 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:46 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 143 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:46 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 142 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 141 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:36 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 140 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:32 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 139 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:32 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 138 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 137 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 1592 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:22 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 136 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:19 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 135 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:19 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 134 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 133 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 1592 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:09 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 132 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:05 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 131 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:09:05 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 130 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4068 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 129 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:55 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 128 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:52 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 127 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 1592 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:52 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 126 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:41 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 125 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 4708 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:41 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 124 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:08:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 123 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 1592 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:00:18 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 122 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:00:07 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 121 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:00:07 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 120 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 12:00:04 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 119 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:46:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 118 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:46:09 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 117 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:46:09 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 116 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:46:05 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 115 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:46:05 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 114 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:55 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 113 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:55 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 112 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 111 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 110 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:42 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 109 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:42 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 108 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:38 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 107 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:38 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 106 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:28 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 105 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:28 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 104 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:25 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 103 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:25 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 102 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:15 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 101 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:15 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 100 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:11 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 99 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:11 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 98 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:01 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 97 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:45:01 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 96 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 516 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:58 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 95 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:58 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 94 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 93 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 92 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:45 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 91 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:41 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 90 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:31 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 89 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:31 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 88 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:27 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 87 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:27 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 86 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:17 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 85 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:17 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 84 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:14 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 83 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 528 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:14 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 82 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 81 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 80 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:00 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 79 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 228 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:44:00 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 78 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:43:50 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 77 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:43:50 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 76 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 524 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:43:47 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 75 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2484 | 2580 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e80f:a524:72:31b
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 74 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 10.222.0.95
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 73 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::fd29:9ba8:74fb:5c55
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 72 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 169.254.92.85
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 71 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{48BE3A1E-BD6D-4B0B-A7CB-E71358F53153}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 70 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:48 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 69 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:45 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: N-H2-821840-3
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 68 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | n-h2-821840-3 | S-1-5-18 | 2/10/2022 11:42:42 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-QH38BR3AC1T
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{3646E67A-9B22-444A-84B1-707F4BA63076}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 67 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 224 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:59 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 66 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2268 | 2284 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:53 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e80f:a524:72:31b
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 65 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:53 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 10.222.0.95
Flags: 0x1
Interface Index: 4
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 64 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:53 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::fd29:9ba8:74fb:5c55
Flags: 0x1
Interface Index: 3
Capability: 0x1
Link Speed: 20000000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 63 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:53 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-QH38BR3AC1T
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{48BE3A1E-BD6D-4B0B-A7CB-E71358F53153}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 62 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:53 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-QH38BR3AC1T
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 61 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 216 | WIN-5T344G8GM1H | S-1-5-18 | 2/10/2022 11:40:47 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 60 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 212 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:09 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 59 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:44:31 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 58 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:44:18 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 57 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 56 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 55 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 54 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:33 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 53 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 376 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:41:30 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 52 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 51 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 50 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 49 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:19 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 48 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:27:16 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 47 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 46 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 45 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 44 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:44 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 43 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:26:41 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 42 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 41 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 40 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 39 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:04 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 38 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:23:01 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 37 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:19:22 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 36 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 3588 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:19:16 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 35 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:11:51 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint removed.
Name:
Domain Name:
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Guidance:
You should expect this event when the server stops listening on an interface, such as during shutdown or when disabling a network adaptor. No user action is required. | 1011 | 0 | | 4 | 1011 | 0 | 2305843009213693960 | 34 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 3588 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:11:38 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 33 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 32 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 31 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 30 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:52 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 29 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 360 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:49 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 28 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::6df4:53fe:c824:2937
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 27 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.3
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 26 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 25 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:06 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 24 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 196 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:50:03 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{518CDFA4-5492-4D9E-BEAA-908825A4A289}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 23 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:03 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 22 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2504 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:23:57 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 21 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 1892 | 2056 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:23:56 AM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 20 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 19 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 18 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 17 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:28 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 16 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 200 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 6:06:25 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 15 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 14 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 13 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 12 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:14 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 11 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 204 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:42:11 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 10 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 2100 | 2132 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662::1
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 9 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 2a02:2f09:33b0:1662:e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 8 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: fe80::e432:d3ed:b94f:1d5e
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 7 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The network name information changed.
Change Type: Add
Net Name: *
IP Address: 192.168.1.10
Flags: 0x1
Interface Index: 2
Capability: 0x1
Link Speed: 150000000
Guidance:
You should expect this event on a Windows Failover Cluster node during failover operations, at system startup, or during network configuration. No user action is required. | 1012 | 0 | | 4 | 1012 | 0 | 2305843009213693960 | 6 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 5 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:02 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-5T344G8GM1H
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 4 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 380 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:01:59 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-PD8DQPRRTAO
Domain Name: WORKGROUP
Transport Name: \Device\NetBT_Tcpip_{5C5D9A3A-40D7-47B4-B915-59C9831563DF}
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 3 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 2552 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:27 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Endpoint added.
Name: WIN-PD8DQPRRTAO
Domain Name: WORKGROUP
Transport Name: \Device\NetbiosSmb
Transport Flags: 0x1
Guidance:
You should expect this event when the server starts listening on an interface, such as during system restart or when enabling a network adaptor. No user action is required. | 1010 | 0 | | 4 | 1010 | 0 | 2305843009213693960 | 2 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 4 | 208 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:21 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The file and printer sharing firewall ports are currently closed. This is the default configuration for a system that is not sharing content or is on a Public network.
Guidance:
You should expect this event when Windows Firewall is not configured to enable the File and Printer Sharing rule, which allows inbound SMB traffic. This event occurs on a computer that does not have custom shares configured. Clients cannot access SMB shares on this computer until SMB traffic is allowed through the firewall. | 1027 | 0 | | 4 | 1027 | 0 | 2305843009213693960 | 1 | Microsoft-Windows-SMBServer | d48ce617-33a2-4bc3-a5c7-11aa4f29619e | Microsoft-Windows-SMBServer/Operational | 1036 | 1940 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:16 PM | | | microsoft-windows-smbserver/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |