• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 470
  • Last Modified:

Event Viewer ID Question

I am studying for my MCITP 70-622 and have a quick question on event ID's.  

The text says that when an event begins it is assigned a number for example

4000 for user start up.  Got that

Then it says that when the event completes it will have an event id that is exactly 4000 higher so Event ID 8000 would have a description of "completed computer boot policy...."  I understand that.

The problem is that in the very next line it says for events 5000-5299 indicate group policy processing has completed successfully....these events will always have an event id 1000 heigher than the corresponding scenario start event

That is exactly what they said about the 8000-8299 range.  

What is the difference between the 8000-8299 and 5000-5299 range?
Is one for the computer group policy configuration and one for user group policy configuration because the book doesn't make that distinction?

Any help would be much appreciated.  Thanks

Aaron
0
AJJ36
Asked:
AJJ36
1 Solution
 
Jerry MillerCommented:
Here is a link that explains the events that correspond to particular event ids:

http://technet.microsoft.com/en-us/library/cc749336%28WS.10%29.aspx

The difference is that some are events for Group Policy (4000–4007) and some are events for components of Group Policy (4016–4299, 500-5029).
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now