• Management Pack:  Windows Server AD CS
  • MP Version:  7.1.10100.0 for 2012
  • Released:  10/18/2013
  • Publisher:  Microsoft

Rules

Name Enabled Target Class Description
  Collection Rule for event with source CertificationAuthority and ID 10 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot verify revocation status.
  Collection Rule for event with source CertificationAuthority and ID 10 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot verify revocation status.
  Collection Rule for event with source CertificationAuthority and ID 100 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: CA certificate.
  Collection Rule for event with source CertificationAuthority and ID 100 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: CA certificate.
  Collection Rule for event with source CertificationAuthority and ID 101 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services created CA cross certificate.
  Collection Rule for event with source CertificationAuthority and ID 101 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services created CA cross certificate.
  Collection Rule for event with source CertificationAuthority and ID 102 onEssentialMonitoring Certificate Service (2012) Certificate Services could not create a cross certificate.
  Collection Rule for event with source CertificationAuthority and ID 102 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not create a cross certificate.
  Collection Rule for event with source CertificationAuthority and ID 103 onEssentialMonitoring Certificate Service (2012) A root CA certificate was added to the local enterprise root store.
  Collection Rule for event with source CertificationAuthority and ID 103 onEssentialMonitoring Certificate Service (2012 R2) A root CA certificate was added to the local enterprise root store.
  Collection Rule for event with source CertificationAuthority and ID 104 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services published certificate.
  Collection Rule for event with source CertificationAuthority and ID 104 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services published certificate.
  Collection Rule for event with source CertificationAuthority and ID 105 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services deleted invalid certificate.
  Collection Rule for event with source CertificationAuthority and ID 105 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services deleted invalid certificate.
  Collection Rule for event with source CertificationAuthority and ID 106 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot add a CA certificate to Active Directory
  Collection Rule for event with source CertificationAuthority and ID 106 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot add a CA certificate to Active Directory
  Collection Rule for event with source CertificationAuthority and ID 107 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot delete a CA certificate from Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 107 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot delete a CA certificate from Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 108 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services could not delete a Certificate for request from specified location.
  Collection Rule for event with source CertificationAuthority and ID 108 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services could not delete a Certificate for request from specified location.
  Collection Rule for event with source CertificationAuthority and ID 109 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services could not delete a Certificate for request from the specified location and server.
  Collection Rule for event with source CertificationAuthority and ID 109 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services could not delete a Certificate for request from the specified location and server.
  Collection Rule for event with source CertificationAuthority and ID 110 onEssentialMonitoring Certificate Service (2012) Certificate Services could not initialize performance counters.
  Collection Rule for event with source CertificationAuthority and ID 110 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not initialize performance counters.
  Collection Rule for event with source CertificationAuthority and ID 127 onEssentialMonitoring Certificate Service (2012) Key recovery agent certificate is about to expire.
  Collection Rule for event with source CertificationAuthority and ID 127 onEssentialMonitoring Certificate Service (2012 R2) Key recovery agent certificate is about to expire.
  Collection Rule for event with source CertificationAuthority and ID 128 onEssentialMonitoring Certificate Service (2012) Certificate Services may not be configured to enable revocation checking for all issued certificates
  Collection Rule for event with source CertificationAuthority and ID 128 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services may not be configured to enable revocation checking for all issued certificates
  Collection Rule for event with source CertificationAuthority and ID 129 onEssentialMonitoring Certificate Service (2012) An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting.
  Collection Rule for event with source CertificationAuthority and ID 129 onEssentialMonitoring Certificate Service (2012 R2) An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting.
  Collection Rule for event with source CertificationAuthority and ID 130 onEssentialMonitoring Certificate Service (2012) Certificate Services could not create a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 130 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not create a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 131 onEssentialMonitoring Certificate Service (2012) An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting.
  Collection Rule for event with source CertificationAuthority and ID 131 onEssentialMonitoring Certificate Service (2012 R2) An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting.
  Collection Rule for event with source CertificationAuthority and ID 132 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to decrypt
  Collection Rule for event with source CertificationAuthority and ID 132 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to decrypt
  Collection Rule for event with source CertificationAuthority and ID 16 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: OLE.
  Collection Rule for event with source CertificationAuthority and ID 16 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: OLE.
  Collection Rule for event with source CertificationAuthority and ID 17 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: database connection.
  Collection Rule for event with source CertificationAuthority and ID 17 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: database connection.
  Collection Rule for event with source CertificationAuthority and ID 19 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 19 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 20 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 20 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 21 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 21 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 22 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 22 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 23 onEssentialMonitoring Certificate Service (2012) A certificate request could not be processed because of bad certificate input data.
  Collection Rule for event with source CertificationAuthority and ID 23 onEssentialMonitoring Certificate Service (2012 R2) A certificate request could not be processed because of bad certificate input data.
  Collection Rule for event with source CertificationAuthority and ID 25 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services revoked the certificate.
  Collection Rule for event with source CertificationAuthority and ID 25 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services revoked the certificate.
  Collection Rule for event with source CertificationAuthority and ID 26 onEssentialMonitoring Certificate Service (2012) Certificate Services service started
  Collection Rule for event with source CertificationAuthority and ID 26 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services service started
  Collection Rule for event with source CertificationAuthority and ID 27 onEssentialMonitoring Certificate Service (2012) CA installation incomplete.
  Collection Rule for event with source CertificationAuthority and ID 27 onEssentialMonitoring Certificate Service (2012 R2) CA installation incomplete.
  Collection Rule for event with source CertificationAuthority and ID 28 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 28 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: registry problem.
  Collection Rule for event with source CertificationAuthority and ID 29 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services issued a new Certificate Revocation List.
  Collection Rule for event with source CertificationAuthority and ID 29 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services issued a new Certificate Revocation List.
  Collection Rule for event with source CertificationAuthority and ID 3 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 3 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to process a request.
  Collection Rule for event with source CertificationAuthority and ID 33 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: service thread.
  Collection Rule for event with source CertificationAuthority and ID 33 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: service thread.
  Collection Rule for event with source CertificationAuthority and ID 34 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: RPC
  Collection Rule for event with source CertificationAuthority and ID 34 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: RPC
  Collection Rule for event with source CertificationAuthority and ID 35 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: OLE.
  Collection Rule for event with source CertificationAuthority and ID 35 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: OLE.
  Collection Rule for event with source CertificationAuthority and ID 38 onEssentialMonitoring Certificate Service (2012) Certificate Services service was stopped
  Collection Rule for event with source CertificationAuthority and ID 38 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services service was stopped
  Collection Rule for event with source CertificationAuthority and ID 39 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: DCOM registration
  Collection Rule for event with source CertificationAuthority and ID 39 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: DCOM registration
  Collection Rule for event with source CertificationAuthority and ID 40 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: class factories failed to start.
  Collection Rule for event with source CertificationAuthority and ID 40 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: class factories failed to start.
  Collection Rule for event with source CertificationAuthority and ID 42 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: CA certificate.
  Collection Rule for event with source CertificationAuthority and ID 42 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: CA certificate.
  Collection Rule for event with source CertificationAuthority and ID 43 onEssentialMonitoring Certificate Service (2012) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 43 onEssentialMonitoring Certificate Service (2012 R2) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 44 onEssentialMonitoring Certificate Service (2012) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 44 onEssentialMonitoring Certificate Service (2012 R2) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 45 onEssentialMonitoring Certificate Service (2012) An exit module has returned a severe error.
  Collection Rule for event with source CertificationAuthority and ID 45 onEssentialMonitoring Certificate Service (2012 R2) An exit module has returned a severe error.
  Collection Rule for event with source CertificationAuthority and ID 46 onEssentialMonitoring Certificate Service (2012) An exit module has returned a severe error.
  Collection Rule for event with source CertificationAuthority and ID 46 onEssentialMonitoring Certificate Service (2012 R2) An exit module has returned a severe error.
  Collection Rule for event with source CertificationAuthority and ID 48 onEssentialMonitoring Certificate Service (2012) Revocation cannot be checked
  Collection Rule for event with source CertificationAuthority and ID 48 onEssentialMonitoring Certificate Service (2012 R2) Revocation cannot be checked
  Collection Rule for event with source CertificationAuthority and ID 49 onEssentialMonitoring Certificate Service (2012) Revocation cannot be checked
  Collection Rule for event with source CertificationAuthority and ID 49 onEssentialMonitoring Certificate Service (2012 R2) Revocation cannot be checked
  Collection Rule for event with source CertificationAuthority and ID 5 onEssentialMonitoring Certificate Service (2012) Certificate Services could not find essential registry information.
  Collection Rule for event with source CertificationAuthority and ID 5 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not find essential registry information.
  Collection Rule for event with source CertificationAuthority and ID 51 onEssentialMonitoring Certificate Service (2012) A certificate in the chain for the CA certificate has been revoked.
  Collection Rule for event with source CertificationAuthority and ID 51 onEssentialMonitoring Certificate Service (2012 R2) A certificate in the chain for the CA certificate has been revoked.
  Collection Rule for event with source CertificationAuthority and ID 52 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services issued a certificate.
  Collection Rule for event with source CertificationAuthority and ID 52 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services issued a certificate.
  Collection Rule for event with source CertificationAuthority and ID 53 onEssentialMonitoring Certificate Service (2012) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 53 onEssentialMonitoring Certificate Service (2012 R2) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 54 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services left request pending in the queue.
  Collection Rule for event with source CertificationAuthority and ID 54 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services left request pending in the queue.
  Collection Rule for event with source CertificationAuthority and ID 55 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services unrevoked the certificate.
  Collection Rule for event with source CertificationAuthority and ID 55 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services unrevoked the certificate.
  Collection Rule for event with source CertificationAuthority and ID 56 onEssentialMonitoring Certificate Service (2012) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 56 onEssentialMonitoring Certificate Service (2012 R2) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 57 onEssentialMonitoring Certificate Service (2012) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 57 onEssentialMonitoring Certificate Service (2012 R2) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 58 onEssentialMonitoring Certificate Service (2012) A certificate in the chain for the CA certificate has expired.
  Collection Rule for event with source CertificationAuthority and ID 58 onEssentialMonitoring Certificate Service (2012) A certificate in the chain for the CA certificate has expired.
  Collection Rule for event with source CertificationAuthority and ID 58 onEssentialMonitoring Certificate Service (2012 R2) A certificate in the chain for the CA certificate has expired.
  Collection Rule for event with source CertificationAuthority and ID 58 onEssentialMonitoring Certificate Service (2012 R2) A certificate in the chain for the CA certificate has expired.
  Collection Rule for event with source CertificationAuthority and ID 59 onEssentialMonitoring Certificate Service (2012) Certificate Services could not connect to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 59 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not connect to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 6 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services issued a certificate.
  Collection Rule for event with source CertificationAuthority and ID 6 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services issued a certificate.
  Collection Rule for event with source CertificationAuthority and ID 60 onEssentialMonitoring Certificate Service (2012) Certificate Services refused to process an extremely long certificate request.
  Collection Rule for event with source CertificationAuthority and ID 60 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services refused to process an extremely long certificate request.
  Collection Rule for event with source CertificationAuthority and ID 62 onEssentialMonitoring Certificate Service (2012) Certificate Services has reverted to default certificate revocation list (CRL) publication values.
  Collection Rule for event with source CertificationAuthority and ID 62 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services has reverted to default certificate revocation list (CRL) publication values.
  Collection Rule for event with source CertificationAuthority and ID 63 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start.
  Collection Rule for event with source CertificationAuthority and ID 63 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start.
  Collection Rule for event with source CertificationAuthority and ID 64 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot publish enrollment access changes to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 64 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot publish enrollment access changes to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 65 onEssentialMonitoring Certificate Service (2012) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 65 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 66 onEssentialMonitoring Certificate Service (2012) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 66 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 67 onEssentialMonitoring Certificate Service (2012) Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued.
  Collection Rule for event with source CertificationAuthority and ID 67 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services will not publish a certificate revocation list (CRL) until the next CRL is issued.
  Collection Rule for event with source CertificationAuthority and ID 68 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services successfully published Base CRL(s).
  Collection Rule for event with source CertificationAuthority and ID 68 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services successfully published Base CRL(s).
  Collection Rule for event with source CertificationAuthority and ID 69 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services successfully published Delta CRL(s).
  Collection Rule for event with source CertificationAuthority and ID 69 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services successfully published Delta CRL(s).
  Collection Rule for event with source CertificationAuthority and ID 7 onEssentialMonitoring Certificate Service (2012) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 7 onEssentialMonitoring Certificate Service (2012 R2) A certificate request has been denied.
  Collection Rule for event with source CertificationAuthority and ID 71 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services successfully published Base CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 71 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services successfully published Base CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 72 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services successfully published Delta CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 72 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services successfully published Delta CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 73 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services successfully published Base and Delta CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 73 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services successfully published Base and Delta CRL(s) to server.
  Collection Rule for event with source CertificationAuthority and ID 74 onEssentialMonitoring Certificate Service (2012) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 74 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 75 onEssentialMonitoring Certificate Service (2012) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 75 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not publish a certificate revocation list (CRL).
  Collection Rule for event with source CertificationAuthority and ID 76 onEssentialMonitoring Certificate Service (2012) The Policy Module logged information.
  Collection Rule for event with source CertificationAuthority and ID 76 onEssentialMonitoring Certificate Service (2012 R2) The Policy Module logged information.
  Collection Rule for event with source CertificationAuthority and ID 77 onEssentialMonitoring Certificate Service (2012) The policy module encountered a warning.
  Collection Rule for event with source CertificationAuthority and ID 77 onEssentialMonitoring Certificate Service (2012 R2) The policy module encountered a warning.
  Collection Rule for event with source CertificationAuthority and ID 78 onEssentialMonitoring Certificate Service (2012) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 78 onEssentialMonitoring Certificate Service (2012 R2) The policy module encountered an error.
  Collection Rule for event with source CertificationAuthority and ID 79 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to publish an end-entity certificate.
  Collection Rule for event with source CertificationAuthority and ID 79 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to publish an end-entity certificate.
  Collection Rule for event with source CertificationAuthority and ID 8 onEssentialMonitoring Certificate Service (2012) Active Directory Certificate Services left request pending in the queue.
  Collection Rule for event with source CertificationAuthority and ID 8 onEssentialMonitoring Certificate Service (2012 R2) Active Directory Certificate Services left request pending in the queue.
  Collection Rule for event with source CertificationAuthority and ID 80 onEssentialMonitoring Certificate Service (2012) Certificate Services failed to publish an end-entity certificate.
  Collection Rule for event with source CertificationAuthority and ID 80 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services failed to publish an end-entity certificate.
  Collection Rule for event with source CertificationAuthority and ID 81 onEssentialMonitoring Certificate Service (2012) Certificate Services key archival is not supported on this version of Windows Server.
  Collection Rule for event with source CertificationAuthority and ID 81 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services key archival is not supported on this version of Windows Server.
  Collection Rule for event with source CertificationAuthority and ID 82 onEssentialMonitoring Certificate Service (2012) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 82 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 83 onEssentialMonitoring Certificate Service (2012) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 83 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 84 onEssentialMonitoring Certificate Service (2012) Certificate Services could not use a key recovery agent certificate.
  Collection Rule for event with source CertificationAuthority and ID 84 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not use a key recovery agent certificate.
  Collection Rule for event with source CertificationAuthority and ID 85 onEssentialMonitoring Certificate Service (2012) Certificate Services could not use a key recovery agent certificate.
  Collection Rule for event with source CertificationAuthority and ID 85 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not use a key recovery agent certificate.
  Collection Rule for event with source CertificationAuthority and ID 86 onEssentialMonitoring Certificate Service (2012) Certificate Services could not use the specified provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 86 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not use the specified provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 87 onEssentialMonitoring Certificate Service (2012) Certificate Services could not use the specified provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 87 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not use the specified provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 88 onEssentialMonitoring Certificate Service (2012) Certificate Services switched to the default provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 88 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services switched to the default provider for encryption keys.
  Collection Rule for event with source CertificationAuthority and ID 9 onEssentialMonitoring Certificate Service (2012) Certificate Services did not start: external policy module.
  Collection Rule for event with source CertificationAuthority and ID 9 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services did not start: external policy module.
  Collection Rule for event with source CertificationAuthority and ID 90 onEssentialMonitoring Certificate Service (2012) Certificate Services detected an exception.
  Collection Rule for event with source CertificationAuthority and ID 90 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services detected an exception.
  Collection Rule for event with source CertificationAuthority and ID 91 onEssentialMonitoring Certificate Service (2012) Certificate Services could not connect to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 91 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not connect to Active Directory.
  Collection Rule for event with source CertificationAuthority and ID 92 onEssentialMonitoring Certificate Service (2012) Certificate Services could not update security permissions.
  Collection Rule for event with source CertificationAuthority and ID 92 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not update security permissions.
  Collection Rule for event with source CertificationAuthority and ID 93 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot find the CA certificate in the NTAuth store.
  Collection Rule for event with source CertificationAuthority and ID 93 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot find the CA certificate in the NTAuth store.
  Collection Rule for event with source CertificationAuthority and ID 94 onEssentialMonitoring Certificate Service (2012) Certificate Services cannot open the NTAuth store.
  Collection Rule for event with source CertificationAuthority and ID 94 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services cannot open the NTAuth store.
  Collection Rule for event with source CertificationAuthority and ID 95 onEssentialMonitoring Certificate Service (2012) Certificate Services could not start: security permissions have been corrupted.
  Collection Rule for event with source CertificationAuthority and ID 95 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not start: security permissions have been corrupted.
  Collection Rule for event with source CertificationAuthority and ID 96 onEssentialMonitoring Certificate Service (2012) Certificate Services could not create an encryption certificate.
  Collection Rule for event with source CertificationAuthority and ID 96 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not create an encryption certificate.
  Collection Rule for event with source CertificationAuthority and ID 98 onEssentialMonitoring Certificate Service (2012) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 98 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services encountered an error loading key recovery agent certificates.
  Collection Rule for event with source CertificationAuthority and ID 99 onEssentialMonitoring Certificate Service (2012) Certificate Services could not create a cross certificate.
  Collection Rule for event with source CertificationAuthority and ID 99 onEssentialMonitoring Certificate Service (2012 R2) Certificate Services could not create a cross certificate.
  Collection Rule for event with source OnlineResponder and ID 17 onEssentialMonitoring Certificate Service (2012) Online Responder service started
  Collection Rule for event with source OnlineResponder and ID 17 onEssentialMonitoring Certificate Service (2012 R2) Online Responder service started
  Collection Rule for event with source OnlineResponder and ID 18 onEssentialMonitoring Certificate Service (2012) The Online Responder service was stopped
  Collection Rule for event with source OnlineResponder and ID 18 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service was stopped
  Collection Rule for event with source OnlineResponder and ID 20 onEssentialMonitoring Certificate Service (2012) The Online Responder service failed to start.
  Collection Rule for event with source OnlineResponder and ID 20 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service failed to start.
  Collection Rule for event with source OnlineResponder and ID 22 onEssentialMonitoring Certificate Service (2012) The Online Responder service did not process a very long request.
  Collection Rule for event with source OnlineResponder and ID 22 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service did not process a very long request.
  Collection Rule for event with source OnlineResponder and ID 23 onEssentialMonitoring Certificate Service (2012) An Online Responder service signing certificate cannot be found.
  Collection Rule for event with source OnlineResponder and ID 23 onEssentialMonitoring Certificate Service (2012 R2) An Online Responder service signing certificate cannot be found.
  Collection Rule for event with source OnlineResponder and ID 25 onEssentialMonitoring Certificate Service (2012) The Online Responder service signing certificate is about to expire.
  Collection Rule for event with source OnlineResponder and ID 25 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service signing certificate is about to expire.
  Collection Rule for event with source OnlineResponder and ID 26 onEssentialMonitoring Certificate Service (2012) The Online Responder service certificate has expired.
  Collection Rule for event with source OnlineResponder and ID 26 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service certificate has expired.
  Collection Rule for event with source OnlineResponder and ID 27 onEssentialMonitoring Certificate Service (2012) The Online Responder failed to renew a signing certificate
  Collection Rule for event with source OnlineResponder and ID 27 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder failed to renew a signing certificate
  Collection Rule for event with source OnlineResponder and ID 29 onEssentialMonitoring Certificate Service (2012) Online Responder service configuration problem.
  Collection Rule for event with source OnlineResponder and ID 29 onEssentialMonitoring Certificate Service (2012 R2) Online Responder service configuration problem.
  Collection Rule for event with source OnlineResponder and ID 31 onEssentialMonitoring Certificate Service (2012) Online Responder service performance counters failed to initialize.
  Collection Rule for event with source OnlineResponder and ID 31 onEssentialMonitoring Certificate Service (2012 R2) Online Responder service performance counters failed to initialize.
  Collection Rule for event with source OnlineResponder and ID 33 onEssentialMonitoring Certificate Service (2012) The Online Responder service encountered an error generating an enrollment request for a signing certificate.
  Collection Rule for event with source OnlineResponder and ID 33 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service encountered an error generating an enrollment request for a signing certificate.
  Collection Rule for event with source OnlineResponder and ID 34 onEssentialMonitoring Certificate Service (2012) The Online Responder service encountered an error submitting an enrollment request for a signing certificate.
  Collection Rule for event with source OnlineResponder and ID 34 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service encountered an error submitting an enrollment request for a signing certificate.
  Collection Rule for event with source OnlineResponder and ID 35 onEssentialMonitoring Certificate Service (2012) The Online Responder service encountered an error while installing a signing certificate.
  Collection Rule for event with source OnlineResponder and ID 35 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service encountered an error while installing a signing certificate.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 16 onEssentialMonitoring Certificate Service (2012) The Online Responder service could not access a certificate revocation list.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 16 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service could not access a certificate revocation list.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 17 onEssentialMonitoring Certificate Service (2012) The Online Responder service could not access a certificate revocation list.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 17 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service could not access a certificate revocation list.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 18 onEssentialMonitoring Certificate Service (2012) The Online Responder service is attempting to use an invalid delta CRL.
  Collection Rule for event with source OnlineResponderRevocationProvider and ID 18 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder service is attempting to use an invalid delta CRL.
  Collection Rule for event with source OnlineResponderWebProxy and ID 17 onEssentialMonitoring Certificate Service (2012) Online Responder web proxy failed to start
  Collection Rule for event with source OnlineResponderWebProxy and ID 17 onEssentialMonitoring Certificate Service (2012 R2) Online Responder web proxy failed to start
  Collection Rule for event with source OnlineResponderWebProxy and ID 18 onEssentialMonitoring Certificate Service (2012) Online Responder web proxy started
  Collection Rule for event with source OnlineResponderWebProxy and ID 18 onEssentialMonitoring Certificate Service (2012 R2) Online Responder web proxy started
  Collection Rule for event with source OnlineResponderWebProxy and ID 19 onEssentialMonitoring Certificate Service (2012) The Online Responder web proxy was stopped.
  Collection Rule for event with source OnlineResponderWebProxy and ID 19 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder web proxy was stopped.
  Collection Rule for event with source OnlineResponderWebProxy and ID 20 onEssentialMonitoring Certificate Service (2012) The Online Responder web proxy corrected an invalid configuration.
  Collection Rule for event with source OnlineResponderWebProxy and ID 20 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder web proxy corrected an invalid configuration.
  Collection Rule for event with source OnlineResponderWebProxy and ID 21 onEssentialMonitoring Certificate Service (2012) The Online Responder web proxy did not process a very long request.
  Collection Rule for event with source OnlineResponderWebProxy and ID 21 onEssentialMonitoring Certificate Service (2012 R2) The Online Responder web proxy did not process a very long request.

See Also for Windows Server AD CS Management Pack


Downloads for Windows Server AD CS Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED