JSI Tip 2519. Multiple Event ID 1216 in the Directory Service event log?.

If you have multiple instances of:

Event Type: WarningEvent Source: NTDS LDAPEvent Category: LDAP Interface Event ID: 1216Date: 11/19/2000Time: 9:12:58 PMUser: N/AComputer: ComputerDescription: The LDAP server closed a socket to a client because of an error condition, 1234. (Internal ID xxxxx::xxxxxx).

aLightweight Directory Access Protocol (LDAP) client has sent a request using UDP (User Datagram Protocol) but closed its' socket before the server could send a response.

The event is harmless and only occurs if the diagnostic logging level for LDAP is greater than 1.

To stop the event from being generated, use Regedt32 to navigate to:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSDiagnostics

Double-click nn LDAP Interface Events and set the data value to 1 or 0, the default.