Event Log filling with Event ID 64 and 65
We have recently installed our certificate servers and issued certificates to all domain computers and users. We have noticed that the Application event logs on all the user systems and terminal servers are getting flooded with events 64 and 65 that are informational only. I am trying to find a way to eliminate these useless events. I have tried looking for a GPO or something, but so far have been unable to come up with a solution Any help would be greatly appreciated. ================ Log Name: Application Source: Microsoft-Windows-CertificateServicesClient-CertEnroll Date: 9/19/2011 1:07:36 AM Event ID: 65 Task Category: None Level: Information Keywords: Classic User: SYSTEM Computer: MY_COMPUTER.MY_DOMAIN.com Description: Certificate enrollment for Local system is successfully authenticated by policy server {AC59B4C0-922A-4EBB-A387-D29C34207A9C} Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CertificateServicesClient-CertEnroll" Guid="{54164045-7C50-4905-963F-E5BC1EEF0CCA}" EventSourceName="CertEnroll" /> <EventID Qualifiers="33370">65</EventID> <Version>0</Version> <Level>0</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-19T08:07:36.000000000Z" /> <EventRecordID>48478</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>MY_COMPUTER.MY_DOMAIN.com</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="Context">Local system</Data> <Data Name="ServerURL">{AC59B4C0-922A-4EBB-A387-D29C34207A9C}</Data> </EventData> </Event> ======================= Log Name: Application Source: Microsoft-Windows-CertificateServicesClient-CertEnroll Date: 9/19/2011 1:07:31 AM Event ID: 64 Task Category: None Level: Information Keywords: Classic User: MY_DOMAIN\MY_USERNAME Computer: MY_COMPUTER.MY_DOMAIN.com Description: Certificate enrollment for MY_DOMAIN\MY_USERNAME successfully load policy from policy server {AC59B4C0-922A-4EBB-A387-D29C34207A9C} Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CertificateServicesClient-CertEnroll" Guid="{54164045-7C50-4905-963F-E5BC1EEF0CCA}" EventSourceName="CertEnroll" /> <EventID Qualifiers="33370">64</EventID> <Version>0</Version> <Level>0</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-19T08:07:31.000000000Z" /> <EventRecordID>48477</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>MY_COMPUTER.MY_DOMAIN.com</Computer> <Security UserID="S-1-5-21-1085031214-1604221776-682003330-1193" /> </System> <EventData> <Data Name="Context">MY_DOMAIN\MY_USERNAME</Data> <Data Name="ServerID">{AC59B4C0-922A-4EBB-A387-D29C34207A9C}</Data> </EventData> </Event>
September 19th, 2011 7:29pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics