Client-side auditing

The following Windows Event messages may be useful when investigating client-side errors. Event messages can be found in the Windows Application Event logs.

ID	Name	Type	Description
9800	Driver initialization failure	Error	An error occurs during driver initialization.
9801	Logging initialization failure	Error	An error occurs during logging initialization.
9802	Mapped drive processing failure	Error	An error occurs while processing mapped drive configuration.
9803	Dirty block information missing	Error	Conflicting dirty-block information has been detected for a file.
9804	Process parse tree failure	Error	An error occurs while generating the parse tree for a process.
9805	Conflict file fail	Error	CA user-defined conflict format string was detected as being invalid.
9806	Server-side deletion success	Information	A server-side deletion succeeds.
9807	Server-side deletion success with status	Information	A server-side deletion succeeds – provides some additional status information when available.
9808	PST link failure	Error	An unlinked PST file fails to re-link back to Outlook profile.
9809	PST link success	Information	An unlinked PST file is successfully re-linked back into Outlook profile.
9810	PST unlink failure	Error	A non-local PST file fails to unlink from an Outlook profile at logon.
9811	PST unlink success	Information	A non-local PST file is unlinked from an Outlook profile at logon.
9812	ILS configuration failure	Error	An error occurs while processing the ILS configuration.
9813	Delete request failure	Error	An error occurs while handling a delete request.
9814	Delete request success	Information	A file delete or move operation succeeds.
9815	Delete map point success	Information	A map point has been successfully deleted.
9816	Low disk space	Information	Low disk space has been reported for a download
9817	Cache cleanup failure	Error	Cache cleanup feature is enabled but failed to remove a file from the local cache.
9818	Cache cleanup success	Information	Cache cleanup feature has removed a file from the local cache.
9819	Logoff cache cleanup success	Information	Cache cleanup feature has removed a set of files from the local cache at logoff.
9820	Logoff cache sync timeout	Error	The specified timeout period for cached files to synchronize before logoff has been exceeded.
9821	Cache fully in-sync at logoff	Information	Cached files were fully synchronized at logoff.
9822	Logoff delay in milliseconds	Information	The timeout period specified (in milliseconds) to enable cached files to synchronize before logoff.
9823	Process blacklist too long	Error	The process blacklist has not been applied as it exceeds the maximum length of 4096 characters.
9824	Logon cache statistics	Information	Audit of the cache size and number of files at logon. The message is issued at the end of logon synchronization. Note, many minutes may elapse before synchronization completes and this message is issued.

Client-side auditing

Related topics