Event ID - 12324

Event Id12324
Sourcesrmsvc
Description%1
Event Information According to Microsoft :

Resolution :

Review the event log message and take appropriate action

You can configure File Server Resource Manager (FSRM) to log an event when a user has reached a quota threshold or has exceeded the quota limit defined for a volume or folder that is under quota management. The event log message will report values specific to the user action, depending on the variables that are specified in File Server Resource Manager when the event notification is configured (for example, the name and e-mail address of the user, and the percentage of the quota used). You can use the information reported in the event log message to take appropriate action, according to the storage policies of your organization.

Note : If the quota limit is reached and the quota is a hard quota, the user will not be able to save any new data to the folder or volume. In this case, either ask the user to delete unnecessary files, or increase the quota limit.

If you would like to change when an event notification is logged, or change the text or the values that will be reported in the event log message, you must change the notification properties of the quota. If the quota derives from a quota template, and you want to change the event notification for all quotas that derive from that template, you can make the changes to the quota template and then apply the changes to all quotas that derive from it.

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To change the notification properties of a quota template or a specific quota:
  1. Open File Server Resource Manager. Click Start , point to All Programs , click Administrative Tools , and then click File Server Resource Manager .
  2. To list all currently configured quotas, in the console tree, under Quota Management , click Quotas .
  3. If you want to modify the template a quota derives from, and apply the changes to other quotas that derive from that template:
    a.Identify the template that was used to create the quota. The name of the template is listed in the Source Template column. If there is no template listed, you need to modify the specific quota instead.
    b.Ensure that the value in the Match Template column is Yes . If the value is No , you need to modify the specific quota instead.
    c.In the console tree, click Quota Templates , right-click the template that you identified, and then click Edit Template Properties .
    --Or--
    If you want to modify a specific quota (and not the template that it derives from), right-click the quota, and then click Edit Quota Properties .
  4. The notification thresholds that are currently configured will be listed under Notification thresholds . The Event Log column shows which thresholds have an event notification.
  5. To change the text and the variables in an event notification:
    a.Select the threshold that you want to modify, and click Edit .
    b.To change the text in the event log message, on the Event Log tab, edit the text under Log entry .
    c.To add a variable, place the cursor where you want the variable to be added to the text, select the variable from the drop-down list, and then click Insert Variable . If you want to remove a variable, delete it from the text.
    d.Click OK to save the new event notification text.
  6. If you want to remove the event notification for a threshold instead of changing it:
    a.Select the threshold that you want to modify, and click Edit .
    b.On the Event Log tab, unselect Send warning to event log.
    c.Click OK to save the changes to the threshold.
  7. Click OK to save the changes to the quota template or to the specific quota.
  8. If you modified a quota template, the Update Quotas Derived from Template dialog box will open. Select to apply the changes to all quotas that derive from the template, or only to those that still match the original template, and press OK .
Verify :

To verify that quota enforcement is working properly, you must verify that the File Server Resource Manager (FSRM) service (srmsvc) is running and that the quota minifilter driver is attached to the volume.

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the File Server Resource Manager service is running and that the quota minifilter driver is attached to the volume:
  1. Open an elevated command prompt. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Type sc query srmsvc , and press ENTER. The File Server Resource Manager service is running if the state reported for the service is 4 RUNNING .
  3. Type fltmc instances , and press ENTER. The quota minifilter driver is attached to the volume if there is a Quota instance listed for the volume.
Reference LinksEvent ID 12324 from srmsvc

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.