Event ID - 694

Event Id694
SourceMicrosoft-Windows-ActiveDirectory_DomainService
DescriptionThe remote configuration file for a claim transform module has changed. Because Microsoft .NET Remoting was already configured, these changes cannot be applied. The previous remoting configuration will remain in effect. User Action To use the new remoting configuration, restart Internet Information Services (IIS).
Event Information According to Microsoft :

Cause :

This event is logged when the remote configuration file for a claim transform module has changed.

Resolution :

Restart Internet Information Services

To use the new remoting configuration, restart Internet Information Services (IIS).

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To restart IIS:
  1. On the federation server, click Start , and then click Command Prompt .
  2. Type the following command, and then press ENTER: iisreset
  3. Close the command prompt.
Verify :

You use Active Directory Federation Services (AD FS) claim transform modules to modify claim names and values as they pass through the federation server. If you experience problems running a claim transform module, verify that the settings in the trust policy are configured appropriately.

To perform these procedures, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify trust policy settings for a claim transform module:
  1. On the federation server whose transform module you want to change, click Start , point to Administrative Tools , and then click Active Directory Federation Services .
  2. Double-click Federation Service , right-click Trust Policy , and then click Properties .
  3. In the Trust Policy Properties dialog box, click the right arrow to scroll to the Transform Module tab, and then click the Transform Module tab.
  4. In DLL file , verify that the path to the dynamic-link library (DLL) file is correct.
  5. In Class name , verify that the namespace-qualified class name that the transform module will use is correct.
Also, in your AD FS scenario, click the Uniform Resource Locator (URL) of the configured Web server from the client computer, and the use the following procedure to check certain particular events.

To verify event details for a claim transform module:
  1. On the account federation server, click Start , point to Administrative Tools , and then click Event Viewer .
  2. Click Security , and in the details pane of the Success Audit events, locate Event ID 10550.
    This event provides the details of the claims that have been sent by the account partner. Look for claims that are supposed to be modified by the custom claim transform module. If the modified claims are listed in the event, the claim transform module should work properly.
Reference LinksEvent ID 694 from Microsoft-Windows-ActiveDirectory_DomainService

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh