Microsoft-Windows-MSDTC Client
137 events across 1 channel
Event ID 4098: Unable to translate the MS DTC error code to the appropriate MS DTC error message
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4099: You do not have permissions to manage the MS DTC on this system
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4101: The local MS DTC detected that the MS DTC on param1 has the same unique identity as the local MS DTC
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4137: Could not force transaction outcome
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4150: The transaction is not a child transaction
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4151: The MSDTC TM could not determine if an incoming connection request is from a remote machine
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4152: Either the transaction is not committed or there are resource managers or subordinate MS DTC Transaction Managers still connected
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4153: Could not resolve the transaction due to an unknown error
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4155: MS DTC encountered an internal error and is terminating
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4156: String message:
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4209: A critical error occurred in an MS DTC component therefore the process is terminating
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4211: Failed to convert the caller provided TIP Transaction URL into a valid MS DTC Transaction Id
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4212: Unable to get the file name for the OLE Transactions Proxy DLL
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4213: Failed to dynamically load the OLE Transactions Proxy DLL
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4214: The "DllGetTransactionManagerCore" function is missing from the OLE Transactions Proxy DLL
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4215: Failed to connection to the registry on the remote MS DTC Transaction Manager's system
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4216: Failed to open the registry key containing the list of transaction managers
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4217: Failed to read the name of the default transaction manager from the registry
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4224: Failed to open the registry key containing the name of the OLE Transactions Proxy DLL
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4225: Failed to read the name of the OLE Transactions Proxy DLL from the registry
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4226: Failed to start MS DTC via the MS DTC Proxy DLL
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4227: Unable to start MS DTC because initialization of cluster support failed
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4233: An MS DTC component was unable to allocate memory for a critical operation
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4356: Failed to initialize the MS DTC Communication Manager
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4357: MS DTC is unable to communicate with MS DTC on a remote system
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4358: The MS DTC Connection Manager is unable to register with RPC to use one of LRPC, TCP/IP, or UDP/IP
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4359: MS DTC is unable to communicate with MS DTC on a remote system
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4399: Could not establish connection to trace transaction
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4402: The version of the transaction manager is not compatible for this feature
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4403: The attempt to dump the transaction to a trace file failed
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4404: MS DTC Tracing infrastructure : the initialization of the tracing infrastructure failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4405: MS DTC Tracing infrastructure : the attempt to create a new trace session failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4406: MS DTC Tracing infrastructure : the attempt to stop the existing trace session failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4407: MS DTC Tracing infrastructure : the attempt to flush the existing trace data failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4408: MS DTC Tracing infrastructure : the attempt to update the maximum buffer count of the existing trace session failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4409: MS DTC Tracing infrastructure : the infrastructure has reported that the number of trace events that have been lost until now is equal to
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4410: MS DTC Tracing infrastructure : the thread launched to update the trace settings has failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4411: MS DTC Tracing infrastructure : the attempt to set the trace specific registry settings failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4412: Failed to create a new trace session
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4413: Failed to stop the existing trace session
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4414: Failed to flush the existing trace data
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4415: Failed to update the maximum buffer count of the existing trace session
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4416: Failed to update all the trace settings in the registry
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4417: Failed to load all the trace settings from the registry
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
param1 Binary |
Event ID 4424: MS DTC Tracing infrastructure : the attempt to create the trace directory failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4425: MS DTC Tracing infrastructure : the infrastructure has reported that an attempt to trace an event has failed cause of lack of enough buffer space
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4426: Failed to read the needed name objects from the registry
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4427: Failed to initialize the needed name objects
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4428: Failed to stop MSDTC service or one of its dependent services
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4429: Failed to set the security attributes on the MS DTC service
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4431: Failed to stop the MS DTC service
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4432: Failed to restart the MS DTC service
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4441: A MS DTC component has encountered an internal error
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4442: MS DTC was unable to start because this version of dtc is less than the least valid version allowable specified in the cluster database
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4443: MS DTC was unable to start because this version of dtc is not compatible with the version of MS DTC installed on another node of the cluster
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4454: Failed to prepare MSDTC for imaging
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4455: Unexpected error (param1) when connecting to the Kernel Transaction Manager
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4456: Unable to create a communication channel to the Kernel Transaction Manager
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4457: MSDTC was unable to migrate its log during Windows upgrade
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4458: MSDTC encountered an error during migration of contact identifiers
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 4459: MSDTC encountered an error during Windows upgrade
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 53284: During the MS DTC installation, the attempt to delete the dtclog directory failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 53320: During MS DTC installation, the attempt to preserve the old log file failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 53322: The connection manager in a MS DTC component has received an invalid message
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
__binLength UInt32 | |
param_bin1 Binary |
Event ID 1073745922: Unable to translate the MS DTC error code to the appropriate MS DTC error message.
#Event ID 1073745923: You do not have permissions to manage the MS DTC on this system.
#Event ID 1073745980: String message: StringMessage.
#Event ID 1073795108: During the MS DTC installation, the attempt to delete the dtclog directory failed.
#Description
During the MS DTC installation, the attempt to delete the dtclog directory failed. This was done since the location of the log directory has been changed to msdtc. This can happen if the dtclog directory is not empty. Internal Information : param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 2147487799: The MSDTC TM could not determine if an incoming connection request is from a remote machine.
#Description
The MSDTC TM could not determine if an incoming connection request is from a remote machine. For security reasons, it will treat this connection request as a remote connection request. If the NetworkClients security option is not enabled, this can cause it to reject this connection attempt. This can cause applications to report that the TM is not available. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 2147536968: During MS DTC installation, the attempt to preserve the old log file failed.
#Event ID 2147536970: The connection manager in a MS DTC component has received an invalid message.
#Event ID 3221229573: The local MS DTC detected that the MS DTC on param1 has the same unique identity as the local MS DTC.
#Description
The local MS DTC detected that the MS DTC on param1 has the same unique identity as the local MS DTC. This means that the two MS DTC will not be able to communicate with each other. This problem typically occurs if one of the systems were cloned using unsupported cloning tools. MS DTC requires that the systems be cloned using supported cloning tools such as SYSPREP. Running 'msdtc -uninstall' and then 'msdtc -install' from the command prompt will fix the problem. Note: Running 'msdtc -uninstall' will result in the system losing all MS DTC configuration information.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229585: MS DTC log path not found.
#Event ID 3221229609: Could not force transaction outcome.
#Event ID 3221229621: Transaction not found.
#Event ID 3221229622: The transaction is not a child transaction.
#Event ID 3221229623: The transaction cannot be forced to abort or commit because the transaction's state is not "In Doubt".
#Event ID 3221229624: Either the transaction is not committed or there are resource managers or subordinate MS DTC Transaction Managers still connected.
#Event ID 3221229625: Could not resolve the transaction due to an unknown error.
#Event ID 3221229627: MS DTC encountered an internal error and is terminating.
#Event ID 3221229681: A critical error occurred in an MS DTC component therefore the process is terminating.
#Description
A critical error occurred in an MS DTC component therefore the process is terminating. The category field identifies the component that encountered the error. Please contact Microsoft Product Support. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229683: Failed to convert the caller provided TIP Transaction URL into a valid MS DTC Transaction Id.
#Description
Failed to convert the caller provided TIP Transaction URL into a valid MS DTC Transaction Id. This error is unexpected because the TIP Transaction URL indicates that the transaction originated on this system. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229684: Unable to get the file name for the OLE Transactions Proxy DLL.
#Event ID 3221229685: Failed to dynamically load the OLE Transactions Proxy DLL.
#Event ID 3221229686: The "DllGetTransactionManagerCore" function is missing from the OLE Transactions Proxy DLL.
#Event ID 3221229687: Failed to connection to the registry on the remote MS DTC Transaction Manager's system.
#Event ID 3221229688: Failed to open the registry key containing the list of transaction managers.
#Event ID 3221229689: Failed to read the name of the default transaction manager from the registry.
#Event ID 3221229696: Failed to open the registry key containing the name of the OLE Transactions Proxy DLL.
#Event ID 3221229697: Failed to read the name of the OLE Transactions Proxy DLL from the registry.
#Event ID 3221229698: Failed to start MS DTC via the MS DTC Proxy DLL.
#Event ID 3221229699: Unable to start MS DTC because initialization of cluster support failed.
#Event ID 3221229705: An MS DTC component was unable to allocate memory for a critical operation.
#Description
An MS DTC component was unable to allocate memory for a critical operation. That component is terminating. The category field identifies the component that failed. Please restart MS DTC if it does not restart automatically. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229828: Failed to initialize the MS DTC Communication Manager.
#Event ID 3221229829: MS DTC is unable to communicate with MS DTC on a remote system.
#Description
MS DTC is unable to communicate with MS DTC on a remote system. No common RPC protocol is supported between the two systems. Please ensure that one or more of the following RPC protocols are common to both systems: TCP/IP, SPX, or NetBEUI. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229830: The MS DTC Connection Manager is unable to register with RPC to use one of LRPC, TCP/IP, or UDP/IP.
#Description
The MS DTC Connection Manager is unable to register with RPC to use one of LRPC, TCP/IP, or UDP/IP. Please ensure that RPC is configured properly. If "ServerTcpPort" registry key is configured(DWORD value under the HKEY_LOCAL_MACHINE\Software\Microsoft\MSDTC for local DTC instance or under cluster hive for clustered DTC instance), please verify if the configured port is valid and the port is not already in use by a different component. Error Specifics:param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229831: MS DTC is unable to communicate with MS DTC on a remote system.
#Description
MS DTC is unable to communicate with MS DTC on a remote system. MS DTC on the primary system established an RPC binding with MS DTC on the secondary system. However, the secondary system did not create the reverse RPC binding to the primary MS DTC system before the timeout period expired. Please ensure that there is network connectivity between the two systems. Error Specifics:param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229871: Could not establish connection to trace transaction.
#Event ID 3221229872: No transaction is selected.
#Event ID 3221229873: Transaction not found.
#Event ID 3221229874: The version of the transaction manager is not compatible for this feature.
#Event ID 3221229875: The attempt to dump the transaction to a trace file failed.
#Event ID 3221229876: MS DTC Tracing infrastructure : the initialization of the tracing infrastructure failed.
#Event ID 3221229877: MS DTC Tracing infrastructure : the attempt to create a new trace session failed.
#Event ID 3221229878: MS DTC Tracing infrastructure : the attempt to stop the existing trace session failed.
#Event ID 3221229879: MS DTC Tracing infrastructure : the attempt to flush the existing trace data failed.
#Event ID 3221229880: MS DTC Tracing infrastructure : the attempt to update the maximum buffer count of the existing trace session failed.
#Event ID 3221229881: MS DTC Tracing infrastructure : the infrastructure has reported that the number of trace events that have been lost until now is equal to param1.
#Event ID 3221229882: MS DTC Tracing infrastructure : the thread launched to update the trace settings has failed.
#Description
MS DTC Tracing infrastructure : the thread launched to update the trace settings has failed. Any changes to the trace settings made using the "Tracing Options" dialog box might not take the desired effect. Internal Information : param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229883: MS DTC Tracing infrastructure : the attempt to set the trace specific registry settings failed.
#Event ID 3221229884: Failed to create a new trace session.
#Event ID 3221229885: Failed to stop the existing trace session.
#Event ID 3221229886: Failed to flush the existing trace data.
#Event ID 3221229887: Failed to update the maximum buffer count of the existing trace session.
#Event ID 3221229888: Failed to update all the trace settings in the registry.
#Event ID 3221229889: Failed to load all the trace settings from the registry.
#Event ID 3221229896: MS DTC Tracing infrastructure : the attempt to create the trace directory failed.
#Event ID 3221229897: MS DTC Tracing infrastructure : the infrastructure has reported that an attempt to trace an event has failed cause of lack of enough buffer space.
#Description
MS DTC Tracing infrastructure : the infrastructure has reported that an attempt to trace an event has failed cause of lack of enough buffer space. The tracing infrastructure will retry tracing this event. The total number of times this has happened so far is equal to param1. Increasing the max number of memory buffers might rectify the situation.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229898: Failed to read the needed name objects from the registry.
#Event ID 3221229899: Failed to initialize the needed name objects.
#Event ID 3221229900: Failed to stop MSDTC service or one of its dependent services.
#Event ID 3221229901: Failed to set the security attributes on the MS DTC service.
#Event ID 3221229903: Failed to stop the MS DTC service.
#Event ID 3221229904: Failed to restart the MS DTC service.
#Event ID 3221229913: A MS DTC component has encountered an internal error.
#Event ID 3221229914: MS DTC was unable to start because this version of dtc is less than the least valid version allowable specified in the cluster database.
#Description
MS DTC was unable to start because this version of dtc is less than the least valid version allowable specified in the cluster database. This can happen if a higher incompatible version of MS DTC was installed on another node of the cluster. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229915: MS DTC was unable to start because this version of dtc is not compatible with the version of MS DTC installed on another node of the cluster.
#Description
MS DTC was unable to start because this version of dtc is not compatible with the version of MS DTC installed on another node of the cluster. This can happen if an incompatible version of MS DTC was installed on another node of the cluster. Error Specifics: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param_bin1 Binary |
Event ID 3221229926: Failed to prepare MSDTC for imaging.
#Event ID 3221229927: Unexpected error (param1) when connecting to the Kernel Transaction Manager.
#Event ID 3221229928: Unable to create a communication channel to the Kernel Transaction Manager.
#Event ID 3221229929: MSDTC was unable to migrate its log during Windows upgrade.
#Event ID 3221229930: MSDTC encountered an error during migration of contact identifiers.
#Event ID 3221229931: MSDTC encountered an error during Windows upgrade.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 7a67066e-193f-4d3a-82d3-322fee5259de
Defined in comres.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 2001.12.10941.16384, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 2001.12.10941.16384, captured 2026-06-02