1.8.4 Error Codes
The EventLog Remoting Protocol Version 6.0 uses Win32 error codes, specifically, the subset designated as "NTSTATUS". These values are taken from the Windows error number space, as specified in [MS-ERREF] section 2.3. Vendors SHOULD reuse those values with their indicated meanings.<3> Choosing any other value runs the risk of a collision in the future. For a mapping of Windows NT operating system status error codes to Win32 error codes, see [MSKB-113996].