#define EVENT_FRS_ACCESS_CHECKS_FAILED_USER 0x800034CEL
MessageId: EVENT_FRS_ACCESS_CHECKS_FAILED_USER MessageText: The File Replication Service did not grant the user "%3" access to the API "%1". %n %nPermissions for "%1" can be changed by running regedt32. %n %nClick on Start, Run, and type regedt32. %n %nClick on the window entitled HKEY_LOCAL_MACHINE. Double click on SYSTEM, CurrentControlSet, Services, NtFrs, Parameters, Access Checks, and highlight "%1". Click on the toolbar option Security and then Permissions... %n %nAccess checks can be disabled for "%1". Double click on "%2" and change the string to Disabled.
Lanman Server Events (2000 - 2999)
    2000-2499 are generated by the server driver (kernel mode)
    2500-2999 are generated by the server service (user mode)
Server driver events, issued from kernel mode. 
 Values are 32 bit values laid out as follows:
  3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
  1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
 +---+-+-+-----------------------+-------------------------------+
 |Sev|C|R|     Facility          |               Code            |
 +---+-+-+-----------------------+-------------------------------+
 where
     Sev - is the severity code
         00 - Success
         01 - Informational
         10 - Warning
         11 - Error
     C - is the Customer code flag
     R - is a reserved bit
     Facility - is the facility code
     Code - is the facility's status code