Event ID - 1301

Event Id1301
Sourcesecurity
DescriptionSome mapping between account names and security IDs was not done.
Event InformationAccording to Microsoft

Cause:
During the mapping of Unicode strings to Security IDs (or vice versa), some names could not be mapped. This is an informational message and typically means that either an account has been deleted or a domain controller could not be located to map some of the names.
Resolution:
Either ignore the message, or wait and retry when the domain controller will be available.
Reference LinksEvent ID 1301 of Source security

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.