Windows 10: Directory-services-sam

I am on local acount. And my pc just had a clean install. And has wired connectionOn pc start i got the windows logs.Directory-services-samEvent 16983, 16977, 16962FiltermanagerEvent 6 and 1Dhcp-client51046, 50036, 50103, 50036HttpserviceMultiple 112 eventsThis happen before loginNow my question is, i somebody trying to get remote access. Or am i worried for no reason?

:)

 

Event 16953 Directory-Services SAM

Log Name: System

Source: Microsoft-Windows-Directory-Services-SAM

Date: 6/4/2018 2:03:48 PM

Event ID: 16953

Task Category: None

Level: Error

Keywords:

User: SYSTEM

Computer: CRM16.DC

Description:

The password notification DLL PGPpwflt failed to load with error 126. Please verify that the notification DLL path defined in the registry, HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages, refers to a correct and absolute path (<drive>:\<path>\<filename>.<ext>)
and not a relative or invalid path. If the DLL path is correct, please validate that any supporting files are located in the same directory, and that the system account has read access to both the DLL path and any supporting files. Contact the provider of
the notification DLL for additional support. Further details can be found on the web at

http://go.microsoft.com/fwlink/?LinkId=245898.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Directory-Services-SAM" Guid="{0D4FDC09-8C27-494A-BDA0-505E4FD8ADAE}" />

<EventID>16953</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2018-06-04T06:03:48.789492100Z" />

<EventRecordID>63601</EventRecordID>

<Correlation />

<Execution ProcessID="712" ThreadID="716" />

<Channel>System</Channel>

<Computer>CRM16.DC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData Name="SAMMSG_NOTIFICATION_PACKAGE_REGISTRATION_FAILED">

<Data Name="NotificationPackage:">PGPpwflt</Data>

<Data Name="Registry key:">HKLM\System\CurrentControlSet\Control\Lsa\</Data>

<Data Name="Registry value:">Notification Packages</Data>

<Data Name="Error code:">126</Data>

</EventData>

</Event>

Will this cause my CRM locked, which it use the kerberos authentication method sync from the Active Directory? May i know how to fix this?

 

User Profile Service Service failed! User profile cannot be loaded.

Brink:
I am using registry editor from command prompt. Drilled down to c:windows\system32\config inside the Load Hive dialog window. Have selected (checked box) the SAM file; clicking on Open opens error message that says:


SAM
This file is in use.
Enter a new name or close the file that's open in another program.

_______

I am at a loss, since I am not running any other program!

Any suggestions?

The SAM file is listed as being 64KB file size.

 

Directory Size Utility

First of all nice utility, Mindweaver!
Second of all, it's so nice to see that this section ain't dead.

I have a few questions/suggestions, maybe you'd want to see ...

• maybe you rename Get Folder button caption to something more intuitive? Add Folder, Get Folder Size, Check Folder Size or something like that?
  
• Could you add subfolder files to the right pane? (it can be a tickbox with include sub dirs)
  
• maybe you also add export list to excel?
  
• there's delete file button maybe you add delete folder button too?
  
• and finally maybe you can add UP button for directories?