← cd ~/events
// events/5719 · Netlogon
Event ID 5719Unable to set up a secure session with a domain controller
The computer could not build a Netlogon secure channel to a DC. With code 0xC00000E5 (STATUS_INTERNAL_ERROR) on Windows Server 2025 talking to 2022 or 2019 DCs, Microsoft says it is a one-off, harmless event at Netlogon start-up.
| Log | System |
|---|---|
| Source | NETLOGON |
| Area | Netlogon |
What to check
If the secure channel comes up afterwards, it can be ignored. If 5719 keeps recurring or carries other codes, troubleshoot DC connectivity and name resolution.
Codes you'll see in this event
| Code | Meaning |
|---|---|
0xC00000E5 | STATUS_INTERNAL_ERROR: expected when a Windows Server 2025 member talks to an older DC. |
Find it with PowerShell
Run on the machine that logs it.
Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 5719 } -MaxEvents 50 |
Format-List TimeCreated, Id, MessageHunt for it in Sentinel or Log Analytics
This works once a data collection rule sends the System log to your workspace, where it lands in the Event table.
Event
| where TimeGenerated > ago(7d)
| where EventLog == "System" and EventID == 5719
| project TimeGenerated, Computer, Source, RenderedDescription
| order by TimeGenerated desc