IT-CMDS technician tool
Windows Event ID Database
Quick reference for common Windows Server, Active Directory, DNS, DHCP, DFS and Hyper-V event IDs.
Common event IDs
🪪
Logon events
Security log sign-in and authentication events.
4624 successful logon
4625 failed logon
4634 logoff
4648 explicit credentials
🧬
Active Directory
Directory service and domain controller troubleshooting.
1311 replication topology
2042 lingering objects
2889 unsigned LDAP binds
4740 account lockout
🌐
DNS / DHCP
Server role events for name resolution and leases.
4013 DNS waiting for AD
4000 DNS server start failure
1046 DHCP authorization issue
1059 DHCP AD error
🗃️
DFS / File Services
Replication and file server checks.
2213 DFSR dirty shutdown
4012 DFSR replication stale
2012 SMB server event
55 NTFS corruption
🖥️
Hyper-V
Virtualization operations and host health.
18560 VMMS start
14050 network config
12140 virtual switch
15300 integration services