MSExchange ADAccess

{
  "system": {
    "provider": "MSExchange ADAccess",
    "guid": "",
    "event_source_name": "",
    "event_id": 2080,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2026-05-09 21:23:43.807837+00:00",
    "event_record_id": 4822,
    "correlation": {
      "ActivityID": "",
      "RelatedActivityID": ""
    },
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "EX-DC01-2022.ludus.domain",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Data_0": "<string>Microsoft.Exchange.Directory.TopologyService.exe</string>\n<string>1960</string>\n<string>EX-DC01-2022.ludus.domain\tCDG 1 7 7 1 0 1 1 7 1</string>\n<string></string>\n",
    "Binary": ""
  },
  "message": ""
}

{
  "system": {
    "provider": "MSExchange ADAccess",
    "guid": "",
    "event_source_name": "",
    "event_id": 4027,
    "version": 0,
    "level": 2,
    "task": 1,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2026-05-08 18:09:49.326010+00:00",
    "event_record_id": 833,
    "correlation": {
      "ActivityID": "",
      "RelatedActivityID": ""
    },
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "tel2-DC01-2022.ludus.domain",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Data_0": "<string>ExSetup.exe</string>\n<string>7292</string>\n<string>Get Servers for ludus.domain</string>\n<string>TopologyClientTcpEndpoint (localhost)</string>\n<string>3</string>\n<string>System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService. The connection attempt lasted for a time span of 00:00:04.0492850. TCP error code 10061: No connection could be made because the target machine actively refused it 127.0.0.1:890.  ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:890\n   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)\n   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)\n   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)\n   --- End of inner exception stack trace ---\n\nServer stack trace: \n   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)\n   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)\n   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)\n   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)\n   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)\n   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)\n   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)\n\nException rethrown at [0]: \n   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)\n   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)\n   at System.ServiceModel.ICommunicationObject.Open()\n   at Microsoft.Exchange.Net.ServiceProxyPool`1.GetClient(Int32 retry, Boolean& doNotReturnProxyAfterRetry, Boolean useCache)\n   at Microsoft.Exchange.Net.ServiceProxyPool`1.TryCallServiceWithRetry(Action`1 action, String debugMessage, WCFConnectionStateTuple proxyToUse, Int32 numberOfRetries, Boolean doNotReturnProxyOnSuccess, Exception& exception)</string>\n",
    "Binary": ""
  },
  "message": ""
}