Using Event Viewer to find error states in the “Active Directory Domain Services” role can be a big pain. I have created a custom filter that only displays errors, warnings and criticals. <QueryList> <Query Id=”0″ Path=”Directory Service”> <Select Path=”Directory Service”>*[System[Provider[@Name=’Microsoft-Windows-ActiveDirectory_DomainService’] and (Level=1 or Level=2 or Level=3)]]</Select> <Select Path=”Directory Service”>*[System[Provider[@Name=’NTDS ISAM’] and (Level=1 […]