cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
del019589
Engaged Sweeper
We are seeing a large quanity of this error:
GroupPolicy Event 1055 System NT AUTHORITY\SYSTEM
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).

We would like to be able to just a report to list all machines that have this error within the last 30 days.

Thank You


1 ACCEPTED SOLUTION
MikeMc
Champion Sweeper II
This report should fulfill your requirements.
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName
From tblAssets
Inner Join tblAssetCustom On tblAssetCustom.AssetID = tblAssets.AssetID
Where tblAssetCustom.State = 1 And Exists(Select tblNtlog.AssetID,
tblNtlog.Eventcode From tblNtlog
Where tblNtlog.AssetID = tblAssets.AssetID And tblNtlog.Eventcode = '1055' And
tblNtlog.TimeGenerated >= DateAdd(dd, -30, GetDate()))
Order By tblAssets.AssetName

View solution in original post

1 REPLY 1
MikeMc
Champion Sweeper II
This report should fulfill your requirements.
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName
From tblAssets
Inner Join tblAssetCustom On tblAssetCustom.AssetID = tblAssets.AssetID
Where tblAssetCustom.State = 1 And Exists(Select tblNtlog.AssetID,
tblNtlog.Eventcode From tblNtlog
Where tblNtlog.AssetID = tblAssets.AssetID And tblNtlog.Eventcode = '1055' And
tblNtlog.TimeGenerated >= DateAdd(dd, -30, GetDate()))
Order By tblAssets.AssetName