Skip to content

Event ID 11: The driver detected a controller error on

Windows Event ID Lookup: What Windows event IDs mean: 4625, 4624, 4740, 6008, 41, 7045, 1102 and 3,000 more, with Windows' own message text, the fields and what to check.

Look up a Windows event ID from Event Viewer, a SIEM alert or a log export: what it means, the fields it records, and what to check. Many IDs are used by more than one source (event 41 is both a Kernel-Power crash and a boot error), so every definition is shown, the one people usually mean first. The message text is Windows' own, read from the event providers of Windows 10.0.26200.0, 2026-10-28; the notes are ours, based on Microsoft's security auditing reference.

Try: 4625, 4624, 4740, 6008, 41, 1074, 7045, 1102, 4104, 1149

The driver detected a controller error on

Event 11
disk
System log
Error

The driver detected a controller error on a disk.

What to check: Cabling, controller or drive problems; on servers, check the RAID controller's own log.

Related: 7, 51, 153

Message and fields (as Event Viewer shows them) 
The driver detected a controller error on ….

TxR init phase for hive … (TM: …, RM: …) finished with result=… (Internal code

Event 11
Kernel-General
System log
Information
Message and fields (as Event Viewer shows them) 
TxR init phase for hive … (TM: …, RM: …) finished with result=… (Internal code=…).

The time elapsed before Bootmgr, based on the TSC, is … ms.

Event 11
Kernel-Boot
System log
Information
Message and fields (as Event Viewer shows them) 
The time elapsed before Bootmgr, based on the TSC, is … ms.

Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is not a member of a domain.

Event 11
Time-Service
System log
Warning
Message and fields (as Event Viewer shows them) 
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is not a member of a domain. NtpClient will attempt to use an alternate configured external time source if available. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.

NTFS KSR data prepared successfully.

Event 11
Ntfs
System log
Information
Message and fields (as Event Viewer shows them) 
NTFS KSR data prepared successfully.

           Volume GUID: …
           Device Name: …

           NTFS KSR version: …
           Number of runs prepared: …
           Time to prepare (ms): …

Port resume device

Event 11
StorPort
System log
Information
Message and fields (as Event Viewer shows them) 
Port resume device

An error occurred while decrypting a message using the inserted smart card

Event 11
Security-Kerberos
System log
Information
Message and fields (as Event Viewer shows them) 
An error occurred while decrypting a message using the inserted smart card: …

CorrelationId = …; GroupOperationId = …; OperationId = …; Operation = …; ClientMachine = …; User = …; ClientProcessId = …; NamespaceName

Event 11
WMI-Activity
WMI-Activity/Operational log
Information
Message and fields (as Event Viewer shows them) 
CorrelationId = …; GroupOperationId = …; OperationId = …; Operation = …; ClientMachine = …; User = …; ClientProcessId = …; NamespaceName = …

SMB2 Request Read

Event 11
SMBServer
SMBServer/Operational log
Information
Message and fields (as Event Viewer shows them) 
SMB2 Request Read

BITS was not able to listen for peer-client requests.

Event 11
Bits-Client
Bits-Client/Operational log
Error
Message and fields (as Event Viewer shows them) 
BITS was not able to listen for peer-client requests.  The error code was ….  BITS jobs from other machines will not be able to use this machine as a peer server.  To fix this problem, try stopping the BITS service and restarting it.