Windows errors, decoded.
Windows Server event IDs, error codes and logon failures: what they mean and how to fix them.
Latest events
All events →- Event ID 7031: Service terminated unexpectedly
What you see System log shows 7031, sometimes followed by 7034 (terminated unexpectedly, no recovery) or 7000/7009 (failed to …
- Event ID 4740: A user account was locked out
What you see The user cannot sign in, and the helpdesk unlocks the account. Ten minutes later it locks again. The Security log on …
- Event ID 4625: An account failed to log on
What you see The Security log fills with 4625 events. Each one records a failed logon, but not every 4625 is an attack — service …
Tools
All tools →- PowerShell Event Log Query Builder
Why not just open Event Viewer Filtering in the GUI is fine for one event. The moment you need to compare a week of 4625s, or hand …