Shared Folders (SMB) Server Service Availability

Applies To: Windows Server 2008

The Server Message Block (SMB) protocol is what Windows uses to share files, printers, serial ports, and communicate this information between computers. The service must be running for the server to identify and share resources.

Events

Event ID Source Message

2025

Server

The server has detected an attempted Denial-Of-Service attack from client %2, and has disconnected the connection.

2026

Server

The server has detected too many Denial-Of-Service attacks and will stop logging events for any more of them. Be advised it is likely someone is actively attacking your machine.

2027

Server

The server has detected a potential Denial-of-Service attack caused by consuming all the work-items. Some connections were disconnected to protect against this. If this is not the case, please raise the MaxWorkItems for the server or disable DoS detection. This event will not be logged again for 24 hours.

Shared Folders (SMB) Server

File Services