| Event Id | 5717 |
| Source | NETLOGON |
| Description | The full synchronization replication of the LSA database from the primary domain controller <PDCname> completed successfully. |
| Event Information | "According to Microsoft: CAUSE : This problem can be caused if the following three conditions exist: • ""File and Object Access"" auditing is enabled on the domain. • The Security Log on the PDC is full. The Security Log Settings on the primary domain controller default to ""Maximum log size of 512 Kilobytes"" and the Event Log Wrapping setting defaults to ""Overwrite Events Older than 7 Days."" The problem can also happen if the Event Log Wrapping setting is set to ""Do Not Overwrite Events (Clear Log Manually)."" • An application on the network is making multiple API calls in rapid succession to access SAM database information on the PDC. RESOLUTION : Disable ""File and Object Access"" auditing on the domain within User Manager or change the Event Log Settings, Event Log Wrapping to ""Overwrite Events as Needed"" on the PDC. " |
| Reference Links | "PDC Performs Only Full Synchronizations to BDCs Netlogon Synchronization Errors Verifying Domain Netlogon Synchronization " |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.