This event log entry is related to Distributed Component Object Model (DCOM) in Windows. It indicates that a DistributedCOM error occurred with event ID 10036.

The event log entry provides various details about the event:

  • The provider of the event is "Microsoft-Windows-DistributedCOM" with a unique identifier (GUID).
  • The event ID is 10036, which signifies a specific type of event.
  • The version of the event is 0.
  • The level of the event is 2, indicating a warning.
  • The task associated with the event is 0.
  • The opcode associated with the event is 0.
  • The keywords associated with the event are 0x8080000000000000.
  • The event was created at a specific system time.
  • The event record ID is 9560197.
  • The event is not correlated with any other events.
  • The execution process ID and thread ID are provided.
  • The event is logged in the "System" channel.
  • The event occurred on the computer named "server002".
  • The security user ID is provided, indicating the user associated with the event.

The event data contains additional information specific to the event:

  • The "Domain Name" is "SERVER002".
  • The "User Name" associated with the event is "Guest".
  • The "SID" (Security Identifier) associated with the user is provided.
  • The "Client IP Address" from which the event originated is 192.168.82.131
xmlns=httpschemasmicrosoftcomwin200408eventsevent- System Provider Name=Microsoft-Windows-DistributedCOM Guid=1B562E86-B7AA-4131-BADC-B6F3A001407E EventSourceName=DCOM EventID Qualifiers=010036Eve

原文地址: https://www.cveoy.top/t/topic/iKEg 著作权归作者所有。请勿转载和采集!

免费AI点我,无需注册和登录