| 0x50000002 | Error |
Error |
| 0x50000003 | Warning |
Warning |
| 0x50000004 | Information |
Information |
| 0x70000001 | Blocking NTLM |
Blocking NTLM |
| 0x70000002 | Auditing NTLM |
Auditing NTLM |
| 0x70000003 | Max |
Max |
| 0x90000001 | Microsoft-Windows-NTLM |
Microsoft-Windows-NTLM |
| 0x90000002 | Microsoft-Windows-NTLM/Operational |
Microsoft-Windows-NTLM/Operational |
| 0xB0000064 | NTLM authentication failed because the account was a member of the Protected User group.%n%nAccount Name:%t%1%nDevice Name:%t%2%nError Code:%t%3 |
NTLM authentication failed because the account was a member of the Protected User group.%n%nAccount Name:%t%1%nDevice Name:%t%2%nError Code:%t%3 |
| 0xB0000065 | NTLM authentication failed because access control restrictions are required.%n%nAccount Name:%t%1%nDevice Name:%t%2%nError Code:%t%3%n%nAuthentication Policy Information:%n%tSilo Name:%t%4%n%tPolicyName:%t%5 |
NTLM authentication failed because access control restrictions are required.%n%nAccount Name:%t%1%nDevice Name:%t%2%nError Code:%t%3%n%nAuthentication Policy Information:%n%tSilo Name:%t%4%n%tPolicyName:%t%5 |
| 0xB0000FA1 | NTLM client blocked: Outgoing NTLM authentication traffic to remote servers that is blocked.%nTarget server: %1%nSupplied user: %2%nSupplied domain: %3%nPID of client process: %4%nName of client process: %5%nLUID of client process: %6%nUser identity of client process: %7%nDomain name of user identity of client process: %8%nMechanism OID: %9%n%nNTLM authentication requests from this computer are blocked.%n%nIf you want to allow this computer to use NTLM authentication, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Allow all.%n%nIf you want only the target server %1 to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Deny all and then set the security policy Network Security: Restrict NTLM: Add remote server exceptions and list the target server %1 as an exception to use NTLM authentication. |
NTLM client blocked: Outgoing NTLM authentication traffic to remote servers that is blocked.%nTarget server: %1%nSupplied user: %2%nSupplied domain: %3%nPID of client process: %4%nName of client process: %5%nLUID of client process: %6%nUser identity of client process: %7%nDomain name of user identity of client process: %8%nMechanism OID: %9%n%nNTLM authentication requests from this computer are blocked.%n%nIf you want to allow this computer to use NTLM authentication, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Allow all.%n%nIf you want only the target server %1 to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Deny all and then set the security policy Network Security: Restrict NTLM: Add remote server exceptions and list the target server %1 as an exception to use NTLM authentication. |
| 0xB0000FA2 | NTLM server blocked: Incoming NTLM traffic to servers that is blocked%nCalling process PID: %1%nCalling process name: %2%nCalling process LUID: %3%nCalling process user identity: %4%nCalling process domain identity: %5%nMechanism OID: %6%n%nNTLM authentication requests to this server have been blocked.%n%nIf you want this server to allow NTLM authentication, set the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic to Allow all. |
NTLM server blocked: Incoming NTLM traffic to servers that is blocked%nCalling process PID: %1%nCalling process name: %2%nCalling process LUID: %3%nCalling process user identity: %4%nCalling process domain identity: %5%nMechanism OID: %6%n%nNTLM authentication requests to this server have been blocked.%n%nIf you want this server to allow NTLM authentication, set the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic to Allow all. |
| 0xB0000FA3 | NTLM server blocked in the domain: NTLM authentication in this domain that is blocked%nUser: %1%nDomain: %2%nWorkstation: %3%nPID: %4%nProcess: %5%nLogon type: %6%nInProc: %7%nMechanism: %8%n%nNTLM authentication within the domain %2 is blocked.%n%nIf you want to allow NTLM authentication requests in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Disabled.%n%nIf you want to allow NTLM authentication requests only to specific servers in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Deny for domain servers or Deny domain accounts to domain servers, and then set the security policy Network Security: Restrict NTLM: Add server exceptions in this domain to define a list of servers in this domain as an exception to use NTLM authentication. |
NTLM server blocked in the domain: NTLM authentication in this domain that is blocked%nUser: %1%nDomain: %2%nWorkstation: %3%nPID: %4%nProcess: %5%nLogon type: %6%nInProc: %7%nMechanism: %8%n%nNTLM authentication within the domain %2 is blocked.%n%nIf you want to allow NTLM authentication requests in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Disabled.%n%nIf you want to allow NTLM authentication requests only to specific servers in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Deny for domain servers or Deny domain accounts to domain servers, and then set the security policy Network Security: Restrict NTLM: Add server exceptions in this domain to define a list of servers in this domain as an exception to use NTLM authentication. |
| 0xB0000FAA | NTLM Minimum Client Security Block:%nCalling process PID: %1%nCalling Process Name: %2%nNegotiated Security Flags: %3%nMinimum Security Flags: %4 |
NTLM Minimum Client Security Block:%nCalling process PID: %1%nCalling Process Name: %2%nNegotiated Security Flags: %3%nMinimum Security Flags: %4 |
| 0xB0000FAB | NTLM Minimum Server Security Block:%nCalling process PID: %1%nCalling Process Name: %2%nNegotiated Security Flags: %3%nMinimum Security Flags: %4 |
NTLM Minimum Server Security Block:%nCalling process PID: %1%nCalling Process Name: %2%nNegotiated Security Flags: %3%nMinimum Security Flags: %4 |
| 0xB0000FAC | NTLM client used the domain password. The attempt to use the DC-generated NTLM secret failed, and fallback to the domain password succeeded.%nAccount Name:%t%1%nDevice Name:%t%2%n |
NTLM client used the domain password. The attempt to use the DC-generated NTLM secret failed, and fallback to the domain password succeeded.%nAccount Name:%t%1%nDevice Name:%t%2%n |
| 0xB0001F41 | NTLM client blocked audit: Audit outgoing NTLM authentication traffic that would be blocked.%nTarget server: %1%nSupplied user: %2%nSupplied domain: %3%nPID of client process: %4%nName of client process: %5%nLUID of client process: %6%nUser identity of client process: %7%nDomain name of user identity of client process: %8%nMechanism OID: %9%n%nAudit the NTLM authentication requests from this computer that would be blocked by the target server %1 if the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers is set to Deny all.%n%nIf you want all servers to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Allow all.%n%nIf you want only the target server %1 to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Deny all, and then set the security policy Network Security: Restrict NTLM: Add remote server exceptions and list the target server %1 as an exception to use NTLM authentication. |
NTLM client blocked audit: Audit outgoing NTLM authentication traffic that would be blocked.%nTarget server: %1%nSupplied user: %2%nSupplied domain: %3%nPID of client process: %4%nName of client process: %5%nLUID of client process: %6%nUser identity of client process: %7%nDomain name of user identity of client process: %8%nMechanism OID: %9%n%nAudit the NTLM authentication requests from this computer that would be blocked by the target server %1 if the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers is set to Deny all.%n%nIf you want all servers to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Allow all.%n%nIf you want only the target server %1 to accept NTLM authentication requests from this computer, set the security policy Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers to Deny all, and then set the security policy Network Security: Restrict NTLM: Add remote server exceptions and list the target server %1 as an exception to use NTLM authentication. |
| 0xB0001F42 | NTLM server blocked audit: Audit Incoming NTLM Traffic that would be blocked%nCalling process PID: %1%nCalling process name: %2%nCalling process LUID: %3%nCalling process user identity: %4%nCalling process domain identity: %5%nMechanism OID: %6%n%nAudit NTLM authentication requests to this server that would be blocked if the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic is set to Deny all accounts or Deny all domain accounts.%n%nIf you want this server to allow NTLM authentication, set the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic to Allow all. |
NTLM server blocked audit: Audit Incoming NTLM Traffic that would be blocked%nCalling process PID: %1%nCalling process name: %2%nCalling process LUID: %3%nCalling process user identity: %4%nCalling process domain identity: %5%nMechanism OID: %6%n%nAudit NTLM authentication requests to this server that would be blocked if the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic is set to Deny all accounts or Deny all domain accounts.%n%nIf you want this server to allow NTLM authentication, set the security policy Network Security: Restrict NTLM: Incoming NTLM Traffic to Allow all. |
| 0xB0001F43 | NTLM server blocked in the domain audit: Audit NTLM authentication in this domain%nUser: %1%nDomain: %2%nWorkstation: %3%nPID: %4%nProcess: %5%nLogon type: %6%nInProc: %7%nMechanism: %8%n%nAudit NTLM authentication requests within this domain that would be blocked if the security policy Network Security: Restrict NTLM: NTLM authentication in this domain is set to Deny for domain servers or Deny domain accounts to domain servers.%n%nIf you want to allow NTLM authentication requests in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Disabled.%n%nIf you want to allow NTLM authentication requests to specific servers in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Deny for domain servers or Deny domain accounts to domain servers, and then set the security policy Network Security: Restrict NTLM: Add server exceptions in this domain to define a list of servers in this domain to use NTLM authentication. |
NTLM server blocked in the domain audit: Audit NTLM authentication in this domain%nUser: %1%nDomain: %2%nWorkstation: %3%nPID: %4%nProcess: %5%nLogon type: %6%nInProc: %7%nMechanism: %8%n%nAudit NTLM authentication requests within this domain that would be blocked if the security policy Network Security: Restrict NTLM: NTLM authentication in this domain is set to Deny for domain servers or Deny domain accounts to domain servers.%n%nIf you want to allow NTLM authentication requests in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Disabled.%n%nIf you want to allow NTLM authentication requests to specific servers in the domain %1, set the security policy Network Security: Restrict NTLM: NTLM authentication in this domain to Deny for domain servers or Deny domain accounts to domain servers, and then set the security policy Network Security: Restrict NTLM: Add server exceptions in this domain to define a list of servers in this domain to use NTLM authentication. |