Over 1 million tech questions and answers.

How to start Windows Event Viewer for a specific application/provider?

Q: How to start Windows Event Viewer for a specific application/provider?

My goal is to start Windows Event Viewer from a command line, with the Application node already selected, showing only entries for my specific application, or provider? In other words, I need to filter it by the Source column for the "Application X" using command line call:



So far I could figure out that I need to do this to show Application node:


Code:
eventvwr /c:Application
but I can't figure out how to specify provider in the /f: parameter, and the example given if I run "eventvwr /?" does not help much.

Any idea how to do it?

Read other answers
RELEVANCY SCORE 200
Preferred Solution: How to start Windows Event Viewer for a specific application/provider?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 83.2

Any clues as to what is Desktop History?

Event Type: Error
Event Source: Desktop History Queue Provider
Event Category: None
Event ID: 0
Date: 2/12/2007
Time: 6:02:49 PM
User: N/A
Computer: HARRY
Description:
Value is null

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 

Read other answers
RELEVANCY SCORE 80.8

Well, I tryed to manage page-file but unfortunataly it resulted in problems. Then I lost VAIO-CARE and 7 ZIP files too. When I open Event Viewer every single day I see this: event Id 2002, Souce: Eap Host, Log name: Application and number of Eventes: 84. As I am desparate about that, What sould I do? Reinstall VAIO-care or WHAT else? Please help me!!!!! Well, I can say that before of all, I tryed to install vopt, latest version but it was not freeware and I soon had to uninstall it but it was not getting to uninstall from programs and features and then I used register editor to delete the leftovers which desapered from program and features....but I can see several error in event viewr such as Event 11706, MsInstaller >>>> Product Vaio Media Plus -- Error 1706 - An instalation for the product Vaio Media Plus cannot be found. Try the installation again using a valid copy of the instalation package 'VMP VEPMMx64.msi'. So should I reinstall all vaio care or not................!!! By the way I tryed to install vopt in order to align files in hard drive but when I tryed to manage page file it did not work as should have so I lost vaio care..........................................What to do? can you figure out what going on.................!!!

A:Event Viewer Event Id 2002, Source: EapHost, Log Application

Welcome to the forums Marioo!

Have you tried a system restore to a point before these errors started? (Easiest things first) You could also try a sfc/scannow, to find and possibly repair any corrupted system files. We have many fine tutorials here at the forums, written by some very knowledgeable people, heres a link to one if you haven't did this before :

SFC /SCANNOW Command - System File Checker

Read other 5 answers
RELEVANCY SCORE 76

Hi all,

i tried loading the eventvwr.msc file from system32 folder directly as well as from the administrator tools, but i get:

"event log service is unavailable. verify that the service is running."

so i try to start the event log service, from the services.msc program;
whenever i try to start windows event log from services i get the message:

"Windows could not start the windows event log service on local computer.
Error 3: The system cannot find the path specified."

how can i specify the path?
or
how can i resolve the problem?

any help would be appreciated please---thanks

A:HELP need to solve this problem asap - Unable to start event viewer/event log service

Fire up regedit and find this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

With "Eventlog" highlighted on the left pane, you should be able to see a value called "ImagePath" on the right. ImagePath should be equal to this:

%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

If you can't see "ImagePath" in that location, or if it's not set to the text above, that's almost certainly your problem. If you're in the habit of using "registry cleaners", that might be the cause.

Read other 3 answers
RELEVANCY SCORE 75.6

Hi all,

i tried loading the eventvwr.msc file from system32 folder directly as well as from the administrator tools, but i get:

"event log service is unavailable. verify that the service is running."

so i try to start the event log service, from the services.msc program;
whenever i try to start windows event log from services i get the message:

"Windows could not start the windows event log service on local computer.
Error 3: The system cannot find the path specified."

how can i specify the path?
or
how can i resolve the problem?

any help would be appreciated please---thanks

A:Unable to start event viewer/event log service on vista

By the way the OS is a Vista Home Prem without SP1. and i have searched this problem extensively, finding no solutions.

If anyone has any advice it would be greatly appreciated.

Read other 19 answers
RELEVANCY SCORE 74.8

My event viewer/application log is listing many multiples of times an information source as ITSS. The properties of this event are as follows:

The description for Event ID (1) in Source (ITSS) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve the description; see Help an Support for details. The following information is part of the event: mhtml:C:\.mht!http://www.intertanko.com/ads/mm.jpg.
http://go.microsoft.com/fwlink?LinkID=45834

I am running ZA security suite 6.0 and have run Adaware SE Personal.
Intertanko is a web site dedicated to international shipping. What is this???
Should I be concerned?
 

A:Event Viewer/Application messages

Read other 9 answers
RELEVANCY SCORE 74.8

I took at look at my XP (SP3) Event Viewer today for the first time in awhile. The System log had the usual 2+ months of events -- about 2700 entires. But for some reason the Application log had only about 3 days of events (the 3 most recent days) -- about 40 entries.

I haven't made any changes to the settings. As usual, the properties for both the System and the Application logs were: Maximum log size 512k; and Overwrite events as needed.

Any ideas why this may have happened, and how I can remedy it? Or, on the latter point, do you think it will self-resolve (i.e., the Application log will start filling back up to normal length)?

Thanks.
 

A:XP Event Viewer Application Log Truncated

If there are no errors that you need to check - I'd clear all log files and start with a clean slate.

Click on System
Click the Action Tab - at the top.
Click - Clear All Events.
[Click No - if asked to save the logs]

Then Click on Applications.
And do the same as above - Clear All Events etc.
 

Read other 3 answers
RELEVANCY SCORE 74.8

Does anyone knows how to fix this: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.I locate this on eventviewer (local) application tab. Almost every minute, sometimes 10 min or 20 min.Kindly please help me, thanks in advance...

A:event viewer application error

Hi there! If you were not already welcomed, then to Bleeping Computer! I am glad to help you today!

I am seeing that you have an issue with Event viewer error messages about your current configuration of Windows. Please correct me if I am wrong, but this is a complicated error. If I have understood this correctly, then we shall continue!

Please get the event ID of this error message. In the same window, you will see the event ID listed, to where I can look it up on my Windows ID Database.

Once you have gave me the event ID, I can fully troubleshoot it for you! The reason this is difficult to troubleshoot is because the JARGON text in the brackets that you provided is a unique ID and makes it difficult to fully diagnose the issue you may be experiencing!

Read other 9 answers
RELEVANCY SCORE 74.4

I've recently installed Windows 7 on a new pc and am having 2 distinct issues.

The first is that I have found that I am unable to make many programs start with Windows. Avast will, as will AI Roboform and Open Office but other simply refuse to do so. My firewall (Look n Stop) for example has the option "Start with Windows". Checking the box has no effect, the program fails to start with Windows. This issue is repeated with a number of other programs e.g. Speedfan, Peerblock

In addition adding the programs to the Startup folder has variable success. The firewall for example does load on startup when added to the startup folder but neither Speedfan or Peerblock do.

The second problem is that I am registering the error "The following boot-start or system-start driver(s) failed to load: EIO_XP" in the Administrative Events section of Event Viewer.

I've searched everywhere and have been unable to find a copy of this driver. It appears to be associated with the ASUS Smartdoctor utility which I do not have. I did download and install it to see if that corrected the problem but it did not and I have since uninstalled it.

I am running Win 7 (64bit).

Any suggestions much appreciated.
 

A:2 issues: Programs fail to start with Windows, error in Event Viewer log

Are the programs with which you are having problems compatible with Windows 7 64-bit?
 

Read other 2 answers
RELEVANCY SCORE 74

I looked at the event viewer and realized that there were application error records and system error records. All the application files were missing--all of them and there were several errors in the system files. I don't know what to do now. pLEASE HELP ME.

A:Application & System Errors In Event Viewer

try running the system file checker..heres the instructions


Run the System File Checker = put in your windows disk

Go to the Run box on the Start Menu and type in:

sfc /scannow ( sfc if not recognized ) [ space between c and / ]

This command will immediately initiate the Windows File Protection service to scan all protected files and verify their integrity, replacing any files with which it finds a problem. You will need your Windows cd.

i would imagine you need to run a virus check, maybe ewido, and be careful with programs such as cleanup or beclean

post back

Read other 6 answers
RELEVANCY SCORE 74

I have Windows XP Pro, and I ran chkdisk in Safe Mode because I was getting the message that Windows could not complete the chkdsk.

Chkdisk took forever, so I left the computer running and went to work. I came home to find the process completed. I shut down, and restarted.

In the past, I've been able to find the chkdisk log file in Event Viewer, but suddenly, it doesn't exist anymore for me! Winlogon does not appear as a Source.

Why would this be? Is there any hope of finding the chkdsk log?

Thanks for your help, and for a great forum!
 

A:Winlogon doesn't appear in Event Viewer/Application

I'm bumping this, in the hopes that someone will have an answer.

Winlogon still doesn't appear as a Source in Event Viewer. It's supposed to, right? Why wouldn't it?
 

Read other 3 answers
RELEVANCY SCORE 74

I get the following error in Event Viewer






Log Name: Application
Source: Application Hang
Date: 11/6/2016 6:33:40 PM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-D0102O3
Description:The program mmc.exe version 10.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 11c4
Start Time: 01d2388619527145
Termination Time: 11
Application Path: C:\Windows\System32\mmc.exe
Report Id: 6de617d5-a479-11e6-9bec-853a0187e376
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</EventID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-11-06T23:33:40.395481100Z" />
<EventRecordID>2033</EventRecordID>
<Channel>Application</Channel>
<Computer>DESKTOP-D0102O3</Computer>
<Security />
</System>
<EventData>
<Data>mmc.exe</Data>
<Data>10.0.14393.0</Data>
... Read more

Read other answers
RELEVANCY SCORE 74

I get the following error in Event Viewer






Log Name: Application
Source: Application Hang
Date: 11/6/2016 6:33:40 PM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-D0102O3
Description:The program mmc.exe version 10.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 11c4
Start Time: 01d2388619527145
Termination Time: 11
Application Path: C:\Windows\System32\mmc.exe
Report Id: 6de617d5-a479-11e6-9bec-853a0187e376
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</EventID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-11-06T23:33:40.395481100Z" />
<EventRecordID>2033</EventRecordID>
<Channel>Application</Channel>
<Computer>DESKTOP-D0102O3</Computer>
<Security />
</System>
<EventData>
<Data>mmc.exe</Data>
<Data>10.0.14393.0</Data>
... Read more

Read other answers
RELEVANCY SCORE 74

when i went to the application folder in event viewer... it said it was corrupt and now have a red X on it.. what happened?
 

A:application folder in event viewer corrupt

We need for details and maybe a screenshot.
 

Read other 1 answers
RELEVANCY SCORE 74

Brand new pc (1 week old) and already had popups popping up. Used Spy Bot S&D and cleared up a bunch of stuff. Ran CCleaner and removed a bunch as well. Nortan AV 10 Corp Ed detected spyware/adware. Ran system scan and removed found items. Now I get a popup error that iexplorer errored out. In event viewer is the following info:Event Type: ErrorEvent Source: Application ErrorEvent Category: NoneEvent ID: 1000Date: 11/30/2005Time: 8:59:07 PMUser: N/AComputer: HP7210Description:Faulting application midodisc.exe, version 0.0.0.0, faulting module , version 0.0.0.0, fault address 0x00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 41 70 70 6c 69 63 61 74 Applicat0008: 69 6f 6e 20 46 61 69 6c ion Fail0010: 75 72 65 20 20 6d 69 64 ure mid0018: 6f 64 69 73 63 2e 65 78 odisc.ex0020: 65 20 30 2e 30 2e 30 2e e 0.0.0.0028: 30 20 69 6e 20 20 30 2e 0 in 0.0030: 30 2e 30 2e 30 20 61 74 0.0.0 at0038: 20 6f 66 66 73 65 74 20 offset 0040: 30 30 30 30 30 30 30 30 000000000048: 0d 0a .. Search on Google returns nothing for the exe file.Anything in this log that stands out?Appreciate your help.Logfile of HijackThis v1.99.1Scan saved at 8:59:20 PM, on 11/30/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS�... Read more

A:Faulting Application Midodisc.exe (event Viewer)

Hi Simple Man and Welcome to the Bleeping Computer!I dont see much from the HijackThis log so lets look a bit deeper!Download WinPFind: http://www.bleepingcomputer.com/files/winpfind.phpRight Click the Zip Folder and Select "Extract All"Don't use it yetReboot into SAFE MODE(Tap F8 when restarting)Here is a link on how to boot into Safe Mode:http://service1.symantec.com/SUPPORT/tsgen...src=sec_doc_namFrom the WinPFind folder-> Doubleclick WinPFind.exe and Click "Start Scan"It will scan the entire System, so please be patientOne you see "Scan Complete"-> a log (WinPFind.txt) will be automatically generated in the WinPFind folderRun MSCONFIG and enable everything in the startup area. To get to MSCONFIG, click on Start -> Run -> type in MSCONFIG -> click OK!Under the "General" TabMake Sure "Normal Startup-load all device drivers and services" has a green tick by itClick Apply->Close->Follow the Prompts to RestartRestart Normal and Download and Save Blacklight to your desktop:Double-click blbeta.exe then accept the agreement, leave [X]scan through Windows Explorer checked, click > scan then > nextYou'll see a list of all items found. There will also be a log on your desktop with the name fsbl.xxxxxxx.log (the xxxxxxx stand for numbers).Copy and paste this log in your next reply. Don't choose the rename option yet! I want to see the log first, because legitimate items can also be present th... Read more

Read other 1 answers
RELEVANCY SCORE 73.2

Well, the WinMgmt file is not my favorite this week. I have a Win2K prof. 450 MHz. 192 mb ram PC that has the followin in the application event viewer log...

Event Type: Error
Event Source: WinMgmt
Event Category: None
Event ID: 37
Date: 4/11/2001
Time: 8:55:49 PM
User: N/A
Computer: WIN2K-SERVER
Description:
WMI ADAP was unable to load the winspool.drv performance library due to an unknown problem within the library: 0x0

From searching this site - I found this link... http://support.microsoft.com/support/kb/articles/Q266/4/16.ASP

But, it speaks in a language I don't understand. Plus it is saying a lot of things that I know nothing about (counter). The site suggests several things, but I don't know which one to do to solve my problem.

Also, from searching this site - I found this link...
http://support.microsoft.com/support/kb/articles/Q259/7/96.ASP

I don't know which one relates to my problem.

I use this computer to share my cable modem with other computers on a network. I also have it as a file server and counter-strike (game) server. It also hosts serveral small web pages for me.

If this makes any difference - C: is NTFS and the rest are FAT32.

Please help.

Thanks,
Cory
 

A:Win2K Application Event Viewer log error - WinMgmt 37...

Read other 7 answers
RELEVANCY SCORE 71.6

Hi, this is in followup to a suggestion by Cookiegal @ http://forums.techguy.org/virus-oth...luggish-computer-hjt-error-7.html#post7986901

At the above site, Cookiegal tried to help on the software end, removing malware & such, but she said that I had what looks like hardware errors, possibly with the BIOS. Assistance here would be appreciated. Following are the errors within the Event Viewer...

==========

Event Viewer - Application

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 6/28/2011
Time: 8:49:23 AM
User: N/A
Computer: CPQ11071319824
Description:
Fault bucket 1831445148.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 38 33 31 34 34 35 31 18314451
0010: 34 38 0d 0a 48..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/27/2011
Time: 4:59:38 PM
User: N/A
Computer: CPQ11071319824
Description:
Faulting application explorer.exe, version 6.0.2900.5512, faulting module unknown, version 0.0.0.0, fault address 0x07419290.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 35 35 31 32 20 00.5512
0030: 69 6e 20 75 6e 6b 6e 6f in ... Read more

A:Event Viewer System & Application errors causing sluggish computer

Read other 16 answers
RELEVANCY SCORE 71.6

i keep receiving these errors in EV under application lots of them actually no idea what it is.  i only use Novabackup pro for backups. i am not using Windows 7 for backups. 

here are some examples:
2016-11-20 08:10:45,603] ERROR System.TimeoutException: The open operation did not complete within the allotted timeout of 00:00:00. The time allotted to this operation may have been a portion of a longer timeout. ---> System.TimeoutException: Open timed
out after 00:00:00 while establishing a transport session to net.tcp://www.mydomain.com:4502/AgentService. The time allotted to this operation may have been a portion of a longer timeout. ---> System.TimeoutException: Connecting to via net.tcp://www.mydomain.com:4502/AgentService
timed out after 00:00:00. Connection attempts were made to 0 of 1 available addresses (). Check the RemoteAddress of your channel and verify that the DNS records for this endpoint correspond to valid IP Addresses. The time allotted to this operation may have
been a portion of a longer timeout.
   at System.ServiceModel.Channels.SocketConnectionInitiator.CreateTimeoutException(Uri uri, TimeSpan timeout, IPAddress[] addresses, Int32 invalidAddressCount, SocketException innerException)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.... Read more

Read other answers
RELEVANCY SCORE 71.2

Faulting application name: taskeng.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d2c
Faulting module name: svrltmgr.dll, version: 0.0.0.0, time stamp: 0x584f2bca
Exception code: 0xc0000005
Fault offset: 0x000000000021f7d3
Faulting process id: 0x1860
Faulting application start time: 0x01d29e6dedebd9b9
Faulting application path: C:\Windows\system32\taskeng.exe
Faulting module path: C:\Windows\winipbin\svrltmgr.dll
Report Id: e0417759-0a61-11e7-9c07-0050569f7630

Task Scheduler crashes and the program closes. Need help

Read other answers
RELEVANCY SCORE 70

1. Every time I boot up the computer, the following error is generated in Event Viewer:
Source: DistributedCom, Event ID: 10010 

The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.

This key pertains to appID WinInetBrokerServer (CLSID WinInetBroker). I tried adding permissions to the key(s) but that didn't solve the problem. In the permissions for the key, the first user name listed is named Account Unknown (S-1-15-2-1).
I think maybe that may have something to do with it. I deleted the 6 registry keys associated with this key and everything worked but I was locked out of Windows XP Mode (Windows Virtual PC). I was wondering if anyone had any suggestions to fix this error?


2. ALSO, exactly once a day I receive the following warning in Event Viewer:
Source: DNS Client Events, Event ID: 1014 

Name resolution for the name imrk.net timed out after none of the configured DNS servers responded.


It would seem that there is an application on my computer that is trying to connect to this site for whatever reason. I have read about ties between this domain and hacking. Someone suggested to enable boot logging in Process Monitor to try to pinpoint the
app but there's so much going on in Process Monitor I'm not really sure where to look. All of the apps that run on a daily basis (including the ones that are set to run at startup) seem relatively safe to me. I've run the gamut of a... Read more

Read other answers
RELEVANCY SCORE 69.2

Hi,
keep getting the errors above every startup regarding;
11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.
Context: Application, SystemIndex Catalog
Details:
(HRESULT : 0x80004005) (0x80004005)"
I have 3 admin user profiles.
Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch event viewer or mouse customisation softwares, they freeze temporarily and ... Read more

A:Windows 7: Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

Read other 7 answers
RELEVANCY SCORE 68.8

Hi
I hope that I have put this in the correct forum ????, never had this before, each time after start up or restart when I open event viewer I get the message "add snap on console" then event viewer opens.

Is there a problem or can I do something so that event viewer open without message.

Win7/32 bit Toshiba laptop

Thanks in advance

Tony Miller

A:MMC message at start of event viewer

I fixed by reboot of computer

Read other 1 answers
RELEVANCY SCORE 67.2

I installed a free event viewer app and noticed that I sometimes get this error which is pointing to the search service - it IS disabled and thats why it probably fails, but what I cant work out is why its even trying to launch the service?

I went to uninstall Windows Desktop Search 4.0 and it said that it may have already been uninstalled and removed it from add&remove programs

I use XP SP3 32-Bit

I think its happening when I boot the computer, ive checked services and startup using Autoruns & HJT and theres nothing to say that Windows Search or anything using it is running at boot, ive ran MalwareBytes and SAS and gotten clean results..

if anyone could help with this it would be great - its not causing any problems, im just curious as to whats causing it too run?

thanks

Type : Error
Date : 24/09/2012
Time : 22:51:19
Event : 10005
Source : DCOM
Category : None
User : MOTHER\Paul
Computer : MOTHER
Description:
DCOM got error "%1058" attempting to start the service WSearch with arguments ""
in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 

Read other answers
RELEVANCY SCORE 67.2

Hi, *trying* to fix my dad's laptop. He's been receiving BSODs the past couple of days, but I haven't been able to get the crash code, I'll try to add it later. I've attached the .zip with the crashlogs/system data.

Before the BSOD, he gets some errors in the event viewer, where:

The [EXAMPLE] service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

He gets about 10 errors over about 10, maybe 15 minutes.
The BSODs started on the 11/08/16. No new hardware has been installed, nor software.

Specs:
Dell Inspiron 5547
Intel Core i7 4510U
Windows 10 Home
8GB RAM
AMD Radeon R7 M265
Intel HD Graphics

Help appreciated! :)
DELL-INSPIRON-16_08_2016_103324_38.zip

Read other answers
RELEVANCY SCORE 66.4

I'm having some issues with my computer and I'm not sure what caused it. I trying to open WordPad and I got a Microsoft Visual C++ runtime error that this application has requested the Runtime to terminate it in an unusual way. So I try to check the error in Event Viewer and I get the same error. I tried to go into Services, Computer Management, Device Manager, and I get the same error. There's no error codes or anything else that appears to pinpoint the error. No problems when in Safe Mode. Any ideas on how I can get this fixed without having to reinstall Windows 7? I have Windows 7 64-bit home edition.

A:Microsoft Visual C++ runtime error when trying to start Event Viewer

Welcome to our forum ledgema.

The first thing I would try is sfc /scannow to check Windows 7 system files.
Here is a tutorial by Brink to guide you.
Please post the results.

SFC /SCANNOW Command - System File Checker

Read other 4 answers
RELEVANCY SCORE 66.4

Hello,

 

I have several Win 7 machines that all have this same issue.


 

When you try to view the Event Log I get an error saying the service is not running.

 

The service is set to Automatic. When you try to start it you get the error below.

 

Windows could not start the Windows Event Log service on Local Computer.

Error 0x80007000e: Not enough storage is available to complete this operation.

 

I have tried everything I can to fix this and am now out of ideas. Not all Win 7 machines have this issue, but most in our network do.

 

Any thoughts.

A:Event Viewer will not start - Service not running - Not enough storage space

Hi,
 
According to the error message, there’s no enough storage on your drive.

 
How much feel space in your C drive? The default event log should be located in C:\Windows\System32\winevt\logs
 
Please replace these logs to other drive and restart the service to see if the same issue occurs.
 
Since the issue occur with many machines, the problem may related with the installation image. Did the image make by yourself? How did you deploy these Windows 7
PC? And did the issue appear in a new installed Windows 7 PC?
 
Furthermore, does your workaround is a domain? Please check if any GPOs were set to those PC.
 
Hope that helps.

 
 
Regards,
Leo  
Huang
 
 Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 5 answers
RELEVANCY SCORE 65.2

Hello there!

Just to let you know the context: I have recovered from a severe malware (Trojan.Vundo) infestation with the kind help of
SifuMike from this very forum.
Before I decided to turn myself towards a helping hand, I had to tackle with the infestation myself and namely had to dapple with/into services.msc and msconfig to disable some programs that would load at startup. This in order to try to prevent further spread of the infestation.

Though the infestation is gone my PC running under Windows XP Professional SP2 still has some malfunctions
- one of the most troubling facts is that if I put on the password protected screensaver, when it resumes to fast switching user welcome page, the password I type in to log in does not work... Note that I run an administrator account. I need to shut down and restart the computer to be able to log in...

- When I try to install/uninstall software, I have to start manually the Windows Installer Service and nonetheless receive he following error message "the RPC server is unavailable" although the Remote Procedure Call (RPC) service is started...

- in the System section of the Event Viewer, I can see numerous errors pointing to services that fail to start: e.g. and to name a few, Remote Access Connection Manager, Application Layer Gateway Service, Workstation service, Computer browser service, Routing and Remote Access, SSDPSRV service, SSDP Discovery Service, etc.

- ditto in the Application section of the Event Vie... Read more

A:System And Applications Failures (unable To Initialize) In The Event Viewer - Services Will Not Start

Hello,It sounds like that the system has been through a lot. Download advanced windows care, the free version http://www.iobit.com/advancedwindowscareper.html this should solve quite a few of the problems and provide a solid foundation to diagnose further problems.In services.msc you mention that the dependencies list are greyed out, how long have you left the list to populate? the list takes anything from a few seconds to a minute to usually load. open the dependencies tab of installer and leave it for a while.Let us know how it goes.

Read other 16 answers
RELEVANCY SCORE 64.8

My co-worker has Windows XP on her laptop. For the past few days, when she boots up her computer, a pop up box appears saying "Windows NT Provider Notification Application".
Can someone tells me what this means and what to do to prevent it from popping up every time she boots?

Thank you,
Rohes

Read other answers
RELEVANCY SCORE 62.4

Thanks for any help.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 28/11/2006
Time: 17:57:33
User: USER-2F62D3344E\user
Computer: USER-2F62D3344E
Description:
A provider, OffProv11, has been registered in the WMI namespace, Root\MSAPPS11, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

A:What's this event in event viewer? (event source WinMgmt)

http://support.microsoft.com/default...b;en-us;891642
this might help

Read other 1 answers
RELEVANCY SCORE 61.6

Hi All,

Things have largely settled down with my Windows 10 upgrade, however I still get a flurry of Errors and Warnings whenever I shutdown and start my system.

When I shutdown correctly there are always 4 instances of Error 7031 generated. They refer to Service Control Manager and relate to User Data Access, User Data Storage, Contact Data and Sync Host and always state that the services terminated unexpectedly even though the Start/Power/Shutdown process was followed. There is usually a 10010 Error as well, referring to NLInternal.Sharedrecoactivation.

On Start I also get a flurry of Warning 200, 201, 202 and 219 as well. The 200, 201 and 202 warnings seem to relate to Windows 10 phoning home to Microsoft and not being able to.

In spite of this the system is working ok.

Any suggestions would be appreciated.

Rob

Read other answers
RELEVANCY SCORE 61.6

EDIT: Moving this from 98 to XP as I believe you mis posted~~boopmeHey again -- I was looking through my config/driver/device files before doing a clean install w/Win 7. This Event Viewer shows many "Warning" entries about 2 months ago with messages like "Could not detect IIs installation module or IIS is disabled, skipping the Web Host script mappings component..." and "Your IP address xx.xxx etc. with Network Card xxxxxx is already in use on the network..." and under services (I think) it showed thing like "Remote registry editor enabled and started" along with my Alerter service having been disabled (says its to Alert Admin of any funny business). Are these normal errors or are they footprints of the intrusion I experienced? I'm trying to isolate where this might have come from. All entries before these were free of any Warnings. Thanks again!

A:Windows XP Pro Event Viewer

Hi,You're probably looking for the Windows XP Home and Professional board here, not the 95/98/ME one. IIS is the built-in webserver that comes with XP Pro. That's not too important. The warning with the IP address is only a problem if you're trying to allocate a static IP that's already used up and can't get into the internet. The "remote registry editor" thing is troublesome, as it allows anyone with your IP and admin password to edit your registry. I suggest you go into Administrative Tools -> Services and disable the Remote Registry service. I'm unsure of the Alerter problem, as I've never encountered it before.This may be linked to an intrusion, but you should disable the Remote Registry service ASAP.Cheers,--TroyEDIT: Thanks for the move, boop

Read other 3 answers
RELEVANCY SCORE 61.6

hello to anyone who can help...
unfortunately, i did a dumb thing...
inside the event viewer, then under custom views, there WERE two options

1) administrative events
2) summary bla bla .....

well i selected the summary one, and clicked DELETE over on the right hand side of the window there it says ACTIONS...

does anyone know how i can get this back? or restore it?

thanks for any help...

A:windows 7 event viewer

If another does not come by with another answer, try system restore.

System Restore

Read other 2 answers
RELEVANCY SCORE 61.2

I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both.

I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were basically the same, below is one. Neither of the OP's came back and said if this worked for them.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Re: LoadPerf 3011, 3012
Hi-
I had the same problem with LoadPerf and here is what I found out:
All performance counter names and explain text are maintained in string tables managed by the performance counter subsystem (Perflib).

The current contents of the performance counter string tables are corrupted and cannot be displayed. To correct the problem, rebuild the string tables.

User Action
To rebuild the string tables, on the computer that displayed the message, at the command prompt, type Lodctr /r
The contents of the string tables are automatically rebuilt.

I hope this helps
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Since this was from 2008 (XP?) and the other response was for Vista I wanted to see if the guru's at SevenForums thought that this was okay before I did this.

Here are the screenshoots of my two errors.

A:After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot

Rebuilding the string tables as outlined in my first post fixed the problem.

Read other 1 answers
RELEVANCY SCORE 61.2

Hi,

I was hoping somebody could offer an insight on the below, as searching around I've not found much to go on other than "overheating"

Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words) For example, see how hot the machine gets just by resuming from a sleep (this is all within a minute or so):



I have been seeing the following error in event viewer each time I start Windows (4 entries) for some time:



So today I bit the bullet and had the back cover off the laptop and noticed what a bad state the thermal compound was in, for both the CPU and the chipset chip, so wiped it off using TIM Cleaner, and then applied new thermal compound and put the laptop back together. I was actually shocked because for the first time since I can remember, I could feel cold air blowing from the vents of my laptop! I logged into Windows and noticed that my temperatures had fallen and were staying at around the below:



Not as low as I'd like but a massive improvement. Trouble is, I am still getting the WHEA-Logger event errors in Windows Event Viewer ('processor core') and wondered if this was not in regards to overheating after all?

The plus side is my laptop is now almost totally silent - the way it must have been when I bought it new 3 years ago! But I was wondering how to investigate these WHEA-Logger errors, if anyone has any advice that'd be great.

... Read more

A:WHEA-Logger event 18/19 errors in Event Viewer (W7 Home Premium)

First, well done on applying the thermal paste to the cpu/gpu. I assume you cleaned the vents as well. Did you use arctic silver 5 (just curious)?

I wonder if the processor could have been damaged from the heat. Are you experiencing any BSODs or other problems? You can run Prime95 to test your system. And Furmark for gpu.

Read other 2 answers
RELEVANCY SCORE 61.2

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

Read other answers
RELEVANCY SCORE 61.2

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

A:Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Hiya and welcome to SevenForums!
Please contact an admin to move this thread, because this isn't the appropriate section for these kinds of problems.

Read other 4 answers
RELEVANCY SCORE 61.2

Hello, I just had a few questions about Event Viewer. To start off, no, currently nothing is wrong with the operation of the computer, however, this is my third one of this particular computer.

1. So I get this stupid critical error in event viewer...

- System

- Provider

[ Name] AESMService
[ Guid] {CE6E83D3-A7D9-4A91-96E0-E018AD574610}

EventID 108

Version 0

Level 1

Task 0

Opcode 0

Keywords 0x8000000000000000

- TimeCreated

[ SystemTime] 2017-01-31T20:47:18.761185700Z

EventRecordID 7

Correlation

- Execution

[ ProcessID] 1752
[ ThreadID] 1688

Channel SGX/Admin

Computer DESKTOP-16B430V

- Security

[ UserID] S-1-5-18


- EventData

attrUnicodeString SGX is Disabled at AESM Service startup

I know this has something to do with the intel processor, something for devs? Not sure, just wondering how I can prevent this from creating logs.

2. The last one is just a kernel event tracer, how can I add more storage for these??

3. I lied, just one more, as this has happened across both previous computers, I do not really know any information regarding this?
- System

- Provider

[ Name] Microsoft-Windows-DistributedCOM
[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
[ EventSourceName] DCOM

- EventID 10010

[ Qualifiers] 0

Version 0

Level 2

Task 0

Opc... Read more

Read other answers
RELEVANCY SCORE 61.2

Hi,

I'm new on Windows 10 forum.

Could you have a look at my errors that appear in Event Viewer, are they bad do need fixing, are they affecting the OS in a negative way, what's your advice?

The errors below which you can't see are all 10010 and one is 10016.

Thank you

Read other answers
RELEVANCY SCORE 61.2

Hello
 
Everytime I turn my computer on after windows loads I would say about 5 minutes or so, this WindowsEvenViewer crap pops up in Internet Explorer window. It shows as a computer code? I cannot for the life of me get rid of it. I have run full scans with Malewarebytes and SuperAntiSpyware as well as a full CCleaner cleanup. Still shows up...how do I get rid of this crap and why is it showing up?
 
 
 
 
<?xml version="1.0" encoding="UTF-8"?>

<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
<!-- The indent for child nodes -->
<xsl:variable name="indent">15</xsl:variable>
<!-- The indent for attributes -->
<xsl:variable name="AttributeIndent">12</xsl:variable>
<!-- The font and font size to be used. -->
<xsl:variable name="FontFamily">Segoe UI</xsl:variable><xsl:variable name="FontFamily_FixWidth">Courier New</xsl:variable><xsl:variable name="FontSize">11</xsl:variable><xsl:variable name="FontStyle">font-family: 'Segoe UI';</xsl:variable>
<!-- Vertical align style of table items. -->
<xsl:variable name="VerticalAlignStyle">vertical-align: top;</xsl:variable>
<!-- The width for + and - sign column -->
<xsl:variable name="SignColumnWidth">15</xsl:variable>
<!-- The element name column width -->
<xsl:variable name="ElementNameColumnWidth">130</xsl:variable>
<!-- Th... Read more

A:Windows Event Viewer Popup

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis

Read other 17 answers
RELEVANCY SCORE 61.2

I am running windows xp on a pc I just recieved it's not new. a little background may be necessary please bear with me. physically there are two hdds connected to the mb they are sata. and I noticed in my computer that only one hdd was reported it was c and is roughly the same size as the two hdd combined, same in disk manager says c is ntfs and partition, same in bios says one hdd called C:\ is DVD-R. when I tried to install something it through out a registry write error, followed by bcc (bug check code) error I looked up the product # 256_1 (usually memory) followed by small mem dump) error, it did this several times outside of install as well. so my friend said to wipe the hdd and start over with a fresh copy of windows. we didn't know which hdd was "c" so we plugged one in at a time to find out. with the hdd on the top there was no response at all even after several attempts at the power button. with the bottom hdd only some gobbledeegook came up with a spinning line on the end then said something like "no boot record found" then we tried switching the ends of the cables in the hdds around and normal boot again. I guess I am old school b/c I am accustomed to both hdds connected to the mb by a single ribbon with the primary in the middle and the secondary on the end. and the primary being responsible for the boot process not both "simultaniously" so we thought the hdd were somehow "linked" so he told me it's not a goo... Read more

A:Windows XP event viewer errors

this has been a learning experience for me no doubt! I have discovered that the provider and hosting stuff is normal, yay! but now I have hdd failure may be imminent, and unfortunately, the raid is striped. but it's not failed yet...lol I am holding out hope that I can salvage the other hdd. They can't both have a bad block, physically, just because they are striped or partitioned, I think. so I want to take the other one out and then maybe I can adapt it into my dell. I don't see why I should have to lose both hdd. but that's my problem, I don't see... hahaha well, I get there eventually, at least close anyway. anyway the error is Harddisk 0\D RO has predicted it will fail. back up yadda yadda. Harddisk 0/D has a bad block. so I did a chkdisk on d and it says the file system is RAW. I wonder if that is why the top hdd would not boot up on its own, or it could be because they are striped idk. I can't recall a time when on an ide master slave set up that I unplugged the slave and booted up to see what would happen. so I don't know if they "need" each other even under "normal" circumstances. Now, "I" harddisk is 0, so a must be 1, c (removable disk with storage) must be 2, and d (cdrom-rw) must be 3 and e (dvd-rw must be 4 and so on. I think. In event viewer it says that cdrom 3 has a bad block, I don't want to see another event log for a long time once all this is done, and when I try to use it windows says ... Read more

Read other 1 answers
RELEVANCY SCORE 61.2

Getting Thousands of Errors 240 in Event Viewer under Application and Service Logs, Microsoft, Windows, Application Resource Management System. Have been pulling my hair out over this one Have tried everything I have found elsewhere. Anyone have the answer.

A:Windows 8 Pro Event Viewer error.

Event Viewer is there to let scammers phone you up and scare you into paying money. But seriously have you noticed anything wrong? What have you installed recently try uninstalling them.

Read other 1 answers
RELEVANCY SCORE 61.2

I really like 7, but I still remember some things in XP that I preferred.

That said, I can't find a way to clean out the Event Viewer in 7. Can it be done?
 

A:Solved: Event Viewer in Windows 7

Read other 10 answers
RELEVANCY SCORE 61.2

when I run reboot stress test at Intel platform with win10 Desktop RS1 version, after some cylces test, XHCI controller show yellow bang. Event viewer showed that event id is 14.  I want to know the indication of
StartDeviceFailReason equals 3. I cannot find more info about this failure from website.Thanks a lot!









-

Provider











[
Name]
Microsoft-Windows-USB-USBXHCI










[
Guid]
{30E1D284-5D88-459C-83FD-6345B39B19EC}




















EventID
14



















Version
0



















Level
2



















Task
0



















Opcode
0



















Keywords
0x8000400000000000

















-

TimeCreated











[
SystemTime]
2016-11-25T19:48:29.908393500Z




















EventRecordID
7099


















Correlation

















-

Execution











[
ProcessID]
4










[
ThreadID]
232




















Channel
System



















Computer
LAPTOP-QQEHB4HS

















-

Security











[
UserID]
S-1-5-18












-

EventData










fid_UcxController
0x187f9ddd64a8







... Read more

Read other answers
RELEVANCY SCORE 60.8

It's been a while since I've experienced a BSOD as I'm viewing a video on youtube. It would freeze as if the audio was caught in mid-stream then BSOD, then would restart automatically. I go to Event Viewer after windows as loaded and I see Event 41 Kernel-Power in there.

I had this issue before and we found out that the motherboard was causing the issue. I have also replaced my video card and added additional memory and expanded to 16gb. Before, I only have 8gb.

Ran sfc/scannow with no errors found. Going to do chkdsk as well.

It's strange because this does not happen at all when I'm playing online games or even just standard browsing. It's when I play videos on youtube that there would be instances where this would happen. There are other times where I can view them without any issue at all.

Any ideas would be great.

Also, how can I attach the windows DMP file to scale it down as it is just really large?

Thanks again guys.

A:BSOD when watching videos on youtube, Event 41 in Event Viewer

Hello Santos, and welcome to Seven Forums.

Please read the instructions here: Blue Screen of Death (BSOD) Posting Instructions, and post back with the needed information. One of our BSOD experts should be by later when able to further help.

Read other 9 answers
RELEVANCY SCORE 60.8

EDIT: ARGH, sorry, meant to post this in General Discussion forum, I have no idea if it is a network issue.

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

Read other answers
RELEVANCY SCORE 60.8

After too many unexplained problems, I decided to reinstall Windows 8.1 Pro x64, and migrate off of SBS 2011 Standard. In addition to the primary workstation that can't read any event logs, I built five Server 2012 R2 servers (Hyper-V host, Active Directory
VM, Exchange 2013 VM, SQL Server 2014 VM, and WSUS VM).

I was diagnosing why my workstation's Outlook cannot reach the local Exchange Server.   I tried to look at the event logs, and found the
Event Viewer cannot open the event log or custom view.  Verify that Event Log service is running (it is) or the query is too long (whatever that indicates).  The request is not supported (50)
Looking at the directory of the event logs folder.  It appears that most logs are empty, which is understandable since it's a rebuilt installation.  I found a small number of Applications and Services Logs and it appears nothing was logged since
six days ago on 4/4/2016.   On support forums, I found many have this exact problem on Win 7, Win 8, and Win 10.  Of the solutions posted none of them would even execute on my Win 8.1 Pro x64 machine.  I tried clearing the event logs (WEVTUTIL
CL logfilename) and am told Failed to clear log .... The request is not supported. 
It's very difficult to diagnose why Outlook 2013 cannot reach Exchange 2013, even if Outlook is installed on the Exchange server machine (just as a test).  The web-based Outlook owa, ecp, ... all work fine. ... Read more

Read other answers