| Event Id | 1172 |
| Source | Active Directory |
| Description | A client process connected to the directory with remote procedure call (RPC) string binding %1. |
| Event Information | A client process used the specified RPC binding to connect to Active Directory. No user action is required. |
| Reference Links | Monitoring AD Changes: Article |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.