Server 2022 ActiveDirectory_DomainService Event ID 1168,2841

Question

Hi,

I'm getting Event Id errors 1168 and 2841 on a DC everyday at the same time automatic Disk backup with 3rd Party backup software(EaseUS todo backup server), what could be causing this issue and what would be a solution?

Any help in resolving these issues would be greatly appreciated.

Event 1168 -

Internal error: An Active Directory Domain Services error has occurred.

Additional Data

Error value (decimal):

-1811

Error value (hex):

fffff8ed

Internal ID:

160207d1

 [ Name]  Microsoft-Windows-ActiveDirectory_DomainService 
   [ Guid]  {0e8478c5-3605-4e8c-8497-1e730c959516} 
   [ EventSourceName]  NTDS General 
 
  - EventID 1168 

   [ Qualifiers]  49152 
 
   Version 0 
 
   Level 2 
 
   Task 9 
 
   Opcode 0 
 
   Keywords 0x8080000000000000 
 
  - TimeCreated 

   [ SystemTime]  2023-09-06T23:00:32.3236291Z 
 
   EventRecordID 372 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  776 
   [ ThreadID]  8792 
 
   Channel Directory Service 
 
   Computer DC.name.local
 
   Security 
 

- EventData 

   -1811 
   fffff8ed 
   160207d1 

Event 2841 -

The Active Directory Domain Services backup will be failed, because the user requested the Active Directory Domain Services stop during the backup process. The invocation ID may be changed on AD DS startup.

User Action

Ensure this does not regularly occur. Check that scripts are not running an system state backup concurrently with stopping the AD DS service.

 [ Name]  Microsoft-Windows-ActiveDirectory_DomainService 
   [ Guid]  {0e8478c5-3605-4e8c-8497-1e730c959516} 
   [ EventSourceName]  NTDS General 
 
  - EventID 2841 

   [ Qualifiers]  32768 
 
   Version 0 
 
   Level 3 
 
   Task 14 
 
   Opcode 0 
 
   Keywords 0x8080000000000000 
 
  - TimeCreated 

   [ SystemTime]  2023-09-06T23:06:22.4876012Z 
 
   EventRecordID 373 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  776 
   [ ThreadID]  940 
 
   Channel Directory Service 
 
   Computer DC.name.local 
 

Answer 1

Hello there,

I would recommend checking the integrity of the AD database and perform semantic database check. Also run chkdsk in read only mode to check for any error on drive and exclude the ntds/sysvol/ntfrs folder from the AV scan.

Similar discussion here https://social.technet.microsoft.com/Forums/windowsserver/en-US/1a0d9633-c497-4cab-bbff-053e2a056f6d/event-id-1168-active-directory?forum=winserverDS

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 2

Thanks for the reply…yes I saw that post but it wasn’t updated with any success.

ran chkdsk and found no erorrs…will check the integrity of the AD database and perform semantic database check and update.