none
An LDAP client connection was closed because of an error

    Question

  • Hi,

    I'm getting frequent warning alert (Event ID-1216) in one of the DC server. I've checked MS articles and it's harmless alert only, but the article is applied for till server 2008. I'm getting the alert in server 2012 R2 Std.

     

    Log Name:      Directory Service
    Source:        Microsoft-Windows-ActiveDirectory_DomainService
    Event ID:      1216
    Task Category: LDAP Interface
    Level:         Warning
    Keywords:      Classic
    Description:
    Internal event: An LDAP client connection was closed because of an error. 

    Client IP: IP address of the client

    Additional Data 
    Error value:
    10038 An operation was attempted on something that is not a socket. 
    Internal ID:
    c060926

    Please let me know, what needs to be checked in that server to fix the above alert.



    vicky

    Thursday, December 15, 2016 7:58 AM

All replies

  • Hi vicky,
    Have you checked the following KB about this event?
    Numerous "Event ID 1216" Events in Directory Services Event Log
    https://support.microsoft.com/en-us/kb/246717
    Although it says “apply to windows server 2008R2”, we could try the suggested method manually on your windows server 2012R2:
    “To resolve this issue:
    1. Start Registry Editor (Regedt32.exe).
    2. Locate the LDAP Interface Events value in the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics
    3. Set the data value of the LDAP Interface Events value to a lower setting, and then click OK.
    4. Quit Registry Editor.
    The default value for this registry value is 0.”
    Please note: make sure  that you back up the registry before you modify it.
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Friday, December 16, 2016 3:34 AM
    Moderator