Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 464
  • Last Modified:

Event Viewer ID Question

I am studying for my MCITP 70-622 and have a quick question on event ID's.  

The text says that when an event begins it is assigned a number for example

4000 for user start up.  Got that

Then it says that when the event completes it will have an event id that is exactly 4000 higher so Event ID 8000 would have a description of "completed computer boot policy...."  I understand that.

The problem is that in the very next line it says for events 5000-5299 indicate group policy processing has completed successfully....these events will always have an event id 1000 heigher than the corresponding scenario start event

That is exactly what they said about the 8000-8299 range.  

What is the difference between the 8000-8299 and 5000-5299 range?
Is one for the computer group policy configuration and one for user group policy configuration because the book doesn't make that distinction?

Any help would be much appreciated.  Thanks

Aaron
0
AJJ36
Asked:
AJJ36
1 Solution
 
Jerry MillerCommented:
Here is a link that explains the events that correspond to particular event ids:

http://technet.microsoft.com/en-us/library/cc749336%28WS.10%29.aspx

The difference is that some are events for Group Policy (4000–4007) and some are events for components of Group Policy (4016–4299, 500-5029).
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now