Return
-
Title
List of ARS Sync Password Sync events -
Description
There is a requirement to send Active Roles Sync service events to a SIEM system for analysis and reporting, can a list of these events be provided?. -
Resolution
List of ARS Sync Password Sync events:
Event ID Message Sync Service 10201 User password was set. 10202 User password was changed. 10203 User password set operation was failed. 10204 User password change operation was failed. 10205 Object password was successfully reset. 10206 Failed to reset the object password. Capture Agent 10301 Capture Agent service started. 10302 Capture Agent service stopped. 10303 Capture Agent service failed to start because of a critical error. 10304 Found connection point to be used for password synchronization. 10305 Connection point skipped. 10306 Information about changed user passwords is provided to Quick Connect Service. 10307 Failed to send information about changed user passwords to Quick Connect Service. 10308 Password hash operation. 10309 Password hash operation failed. 10310 SID History operation. 10311 SID History operation failed.