| Event Id | 1171 |
| Source | Active Directory |
| Description | The directory could not shut down successfully. It exited with active threads. Stop and restart this Windows Domain Controller and make sure that the Windows Directory Service database (NTDS) recovered successfully. |
| Event Information | Active Directory could not shut down successfully, threads are still active. Restart the domain controller and confirm that Active Directory is successfully running again. |
| Reference Links | Monitoring AD Changes: Article |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.