Event ID - 1216

Event Id1216
SourceActive Directory
DescriptionThe LDAP server closed a socket to a client because of an error condition- %1. (Internal ID %2::%3).
Event InformationThis is an Active Directory internal event. Internal events appear in the Event Viewer only when the default logging level is changed. Most internal events are for informational purposes only. This event is logged when an LDAP client connection closes because of an error. No user action is required.
Reference LinksMonitoring AD Changes: Article

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.