Event ID 2025 — Shared Folders (SMB) Server Service Availability
Applies To: Windows Server 2008 R2
The Server Message Block (SMB) protocol is what Windows uses to share files, printers, serial ports, and communicate this information between computers. The service must be running for the server to identify and share resources.
|Product:||Windows Operating System|
|Message:||The server has detected an attempted Denial-Of-Service attack from client %2, and has disconnected the connection.|
Security Alert - Review client or network usage
Denial of service (DoS) attacks are network attacks that are aimed at making a computer or a particular service on a computer unavailable to network users. It is important that you determine if the server is experiencing a DoS attack. For more information to help you understand network security and DoS attacks, see the Microsoft Security Central website at http://www.microsoft.com/security.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To verify the Shared Folder (SMB) server is available:
- Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type net config server.
- Verify that NetbiosSmb appears under the Server is active on section in the results.