Microsoft-Windows-Dhcp-Nap-Enforcement-Client

Event	Title	Channel	Sample	Rule
52001	An error occurred in determining the LAN attributes.	Operational	N	N
52002	An error occurred in obtaining the SOH.	Operational	N	N
52003	An error occurred when DHPQEC tried to renew DHCP lease in the adapter …	Admin	N	N
52004	An error occurred in processing the SOH Response.	Operational	N	N
52005	An error occurred in obtaining the SOH Response in {InterfaceGUID}.	Operational	N	N
52006	An error occurred plumbing SOH for dhcp in the adapter {InterfaceGUID}.	Operational	N	N
52009	Media Connect happened in the adapter {InterfaceGUID}.	Operational	N	N
52010	Media Disconnect happened in the adapter {InterfaceGUID}.	Operational	N	N
52011	ACK-message received notification is received for the adapter {InterfaceGUID}.	Operational	N	N
52012	Plumbing of Non-Dhcp address notification is received for the adapter …	Operational	N	N
52016	The DHCP Quarantine Enforcement Client failed to start.	Operational	N	N
52018	The DHCP Quarantine Enforcement Client could not bind to the Quarantine Agent.	Admin	N	N
52019	The network connection corresponding to the Network Card with address …	Admin	N	N
52020	The network connection corresponding to the Network Card with address …	Admin	N	N

Event ID 52001: An error occurred in determining the LAN attributes.

Channel: Operational

Description

An error occurred in determining the LAN attributes. Error code is {StatusCode}.

Message #

An error occurred in determining the LAN attributes. Error code is {StatusCode}

Fields #

Name	Description
`StatusCode`	NTSTATUS reference

Event ID 52002: An error occurred in obtaining the SOH.

Channel: Operational

Description

An error occurred in obtaining the SOH. Error code is {HResult}.

Message #

An error occurred in obtaining the SOH. Error code is {HResult}

Fields #

Name	Description
`HResult`

Event ID 52003: An error occurred when DHPQEC tried to renew DHCP lease in the adapter {InterfaceGUID}.

Channel: Admin

Description

An error occurred when DHPQEC tried to renew DHCP lease in the adapter {InterfaceGUID}. Error code is {StatusCode}.

Message #

An error occurred when DHPQEC tried to renew DHCP lease in the adapter {InterfaceGUID}. Error code is {StatusCode}

Fields #

Name	Description
`InterfaceGUID`
`StatusCode`	NTSTATUS reference

Event ID 52004: An error occurred in processing the SOH Response.

Channel: Operational

Description

An error occurred in processing the SOH Response. Error code is {HResult}.

Message #

An error occurred in processing the SOH Response. Error code is {HResult}

Fields #

Name	Description
`HResult`

Event ID 52005: An error occurred in obtaining the SOH Response in {InterfaceGUID}.

Channel: Operational

Description

An error occurred in obtaining the SOH Response in {InterfaceGUID}. Error code is {HResult}.

Message #

An error occurred in obtaining the SOH Response in {InterfaceGUID}. Error code is {HResult}

Fields #

Name	Description
`InterfaceGUID`
`HResult`

Event ID 52006: An error occurred plumbing SOH for dhcp in the adapter {InterfaceGUID}.

Channel: Operational

Description

An error occurred plumbing SOH for dhcp in the adapter {InterfaceGUID}. Error code is {HResult}.

Message #

An error occurred plumbing SOH for dhcp in the adapter {InterfaceGUID}. Error code is {HResult}

Fields #

Name	Description
`InterfaceGUID`
`HResult`

Event ID 52009: Media Connect happened in the adapter {InterfaceGUID}.

Channel: Operational

Fields #

Name	Description
`InterfaceGUID`

Event ID 52010: Media Disconnect happened in the adapter {InterfaceGUID}.

Channel: Operational

Fields #

Name	Description
`InterfaceGUID`

Event ID 52011: ACK-message received notification is received for the adapter {InterfaceGUID}.

Channel: Operational

Fields #

Name	Description
`InterfaceGUID`

Event ID 52012: Plumbing of Non-Dhcp address notification is received for the adapter {InterfaceGUID}.

Channel: Operational

Fields #

Name	Description
`InterfaceGUID`

Event ID 52016: The DHCP Quarantine Enforcement Client failed to start.

Channel: Operational

Description

The DHCP Quarantine Enforcement Client failed to start. The following error occured {HRString}.

Message #

The DHCP Quarantine Enforcement Client failed to start. The following error occured {HRString}.

Fields #

Name	Description
`HRString`

Event ID 52018: The DHCP Quarantine Enforcement Client could not bind to the Quarantine Agent.

Channel: Admin

Description

The DHCP Quarantine Enforcement Client could not bind to the Quarantine Agent. The following error occured {HRString}.

Message #

The DHCP Quarantine Enforcement Client could not bind to the Quarantine Agent. The following error occured {HRString}.

Fields #

Name	Description
`HRString`

Event ID 52019: The network connection corresponding to the Network Card with address {InterfaceGUID} was assigned quarantine configuration by the DHCP Quarantine ...

Channel: Admin

Description

The network connection corresponding to the Network Card with address {InterfaceGUID} was assigned quarantine configuration by the DHCP Quarantine Enforcement Client.

Message #

The network connection corresponding to the Network Card with address {InterfaceGUID} was assigned quarantine configuration by the DHCP Quarantine Enforcement Client.

Fields #

Name	Description
`InterfaceGUID`

Event ID 52020: The network connection corresponding to the Network Card with address {InterfaceGUID} was removed from a previously assigned quarantine configurati...

Channel: Admin

Description

The network connection corresponding to the Network Card with address {InterfaceGUID} was removed from a previously assigned quarantine configuration by the DHCP Quarantine Enforcement Client.

Message #

The network connection corresponding to the Network Card with address {InterfaceGUID} was removed from a previously assigned quarantine configuration by the DHCP Quarantine Enforcement Client.

Fields #

Name	Description
`InterfaceGUID`