Posted on 2014-10-20
Last Modified: 2014-10-22
Hello, I am getting regular event ID 1309's in my SBS2011 server. When I take a close look at the log details, I notice that it references a server that is no longer active on the network. This is a server that was decommissioned a while back and was the primary AD and Exchange server. It was taken offline and migrated to the new server.

I've included an image of where it is referencing the old server. Does anyone have any ideas on where that is coming from and how to remove it? I'm guessing it's timing out because it's trying to access a server that doesn't exist anymore..

evend ID 1309

Thanks in advance
Question by:ChiIT
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 34

Expert Comment

ID: 40393192
Check group policy for any WSUS settings.  You might find the root cause there.


Author Comment

ID: 40393275
I think you are correct. I did find references to it in there. I'm going to wait overnight and if they go away I'll mark it as closed. Thank you
LVL 34

Expert Comment

ID: 40393278
Not a problem.


Author Comment

ID: 40393493
The decommissioned server is now not getting that error, but a currently active server is.
I have looked through group policy and as far as I can tell I've actually disabled all wsus references. The error is occurring every 10 minutes, or so..

 event ID
LVL 34

Accepted Solution

it_saige earned 500 total points
ID: 40393560
If you are not using WSUS, then you need to remove the WSUS registry entries from your current active server in order to stop these event log entries.

Stop-Service wuauserv
Remove-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\*' -recurse -force
Start-Service wuauserv

Open in new window


Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question