This event log entry is related to Distributed Component Object Model (DCOM) in Windows. It indicates that a DistributedCOM error occurred with event ID 10036.

The event log entry provides various details about the event:

  • The provider of the event is 'Microsoft-Windows-DistributedCOM' with a unique identifier (GUID).
  • The event ID is 10036, which signifies a specific type of event.
  • The version of the event is 0.
  • The level of the event is 2, indicating a warning.
  • The task associated with the event is 0.
  • The opcode associated with the event is 0.
  • The keywords associated with the event are 0x8080000000000000.
  • The event was created at a specific system time.
  • The event record ID is 9560197.
  • The event is not correlated with any other events.
  • The execution process ID and thread ID are provided.
  • The event is logged in the 'System' channel.
  • The event occurred on the computer named 'server002'.
  • The security user ID is provided, indicating the user associated with the event.

The event data contains additional information specific to the event:

  • The 'Domain Name' is 'SERVER002'.
  • The 'User Name' associated with the event is 'Guest'.
  • The 'SID' (Security Identifier) associated with the user is provided.
  • The 'Client IP Address' from which the event originated is 192.168.82.131.
DCOM Error 10036 on Server002: Event Log Analysis

原文地址: https://www.cveoy.top/t/topic/qqTB 著作权归作者所有。请勿转载和采集!

免费AI点我,无需注册和登录