| Event Id | 18 |
| Source | Microsoft-Windows-HttpEvent |
| Description | Attempted to reserve URL (%1). Status %2. This event can be benign or yellow, depending on whether the status is Succeed or Failed. |
| Event Information | According to Microsoft : Cause This event is logged when user made an attempt to reserve URL.. Resolution Add a URL reservation To add a URL reservation for your server application: 1.Click Start, point to All Programs, click Accessories, right-click Command Prompt, click Run as administrator, and then click Continue. 2.Type netsh http add urlacl. add urlacl Reserves the specified URL for non-administrator users and accounts. The discretionary access control list (DACL) can be specified by using a Windows NT account name with the listen and delegate parameters, or by using a security descriptor definition language (SDDL) string. Verify To verify the ACLs for your server application's URL exist: 1.Click Start, point to All Programs, click Accessories, right-click Command Prompt, click Run as administrator, and then click Continue. 2.Type netsh http show urlacl, and verify that the ACLs for the application's URL exist. To see which applications are listening on the same port as your server application: 1.Click Start, point to All Programs, click Accessories, right-click Command Prompt, click Run as administrator, and then click Continue. 2.Type netstat -ba and verify that the IP Listen List exists. |
| Reference Links | Event ID 18 from Source Microsoft-Windows-HttpEvent |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.