topic Re: Windows Audit Failures on OpsMgr W2K8 system in Active IQ Unified Manager Discussions

Windows Audit Failures on OpsMgr W2K8 system

korns — Thu, 05 Jun 2025 07:14:50 GMT

The attached screen shot of event viewer is from a W2k8 server running OpsMgr, Prot/ProvMgr. I see these security audit message coming in every 15 seconds referencing dfmmonitor.exe. They sem to come in pairs (two at about he same time) and about 15 seconds apart. Also, if I click on each and look at the details It appears the "Port ID:" increments with each occurance. The recent ones were port ID: 56609, 56610, then 50745, 50746, then 50747, 50748.

Does anyone know what these events are indicating and if they should be of concern?

Re: Windows Audit Failures on OpsMgr W2K8 system

korns — Wed, 05 May 2010 22:20:33 GMT

Just meant to add that this is running OpsMgr v4.0

Re: Windows Audit Failures on OpsMgr W2K8 system

sanjyoth — Thu, 13 May 2010 05:55:26 GMT

Hi Korns,

>> Does anyone know what these events are indicating and if they should be of concern?

I guess these events are not from Operations manager instead from Microsoft windows server 2K8 itself. You might want to give a visit to this link: <http://msdn.microsoft.com/en-us/library/bb309058(VS.85).aspx> to get to know more about windows filtering platform.

Also you can go through this link to trouble shoot the current 5159 event you are hitting with -> http://support.microsoft.com/kb/969257

Regards

Sanjyoth

Re: Windows Audit Failures on OpsMgr W2K8 system

korns — Fri, 14 May 2010 15:09:31 GMT

Thanks Sanjyoth. I think that explains what we're seeing.

Dave