Over 1 million tech questions and answers.

How does one clear Custom Views (Administrative Events) in the Event Viewer?

Q: How does one clear Custom Views (Administrative Events) in the Event Viewer?

Windows Logs and Applications and Services Logs have a "clear log" option; however, I am puzzled how to edit/delete Administrative Events?Eighter from Decatur, county seat of Wise (of course it's in Texas)

Preferred Solution: How does one clear Custom Views (Administrative Events) in the Event Viewer?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: How does one clear Custom Views (Administrative Events) in the Event Viewer?

Ronnie Vernon said: Hi p010neThe Custom View / Administrative Events is a compilation of all the other event logs in the Event Viewer. Entries in this log will be removed when the log where the event originated from is cleared.Hope this helps.

Ronnie Vernon MVPI thought that was the case; however, I cleared all the other logs! This is an example of an entry in this log: Log Name:      Microsoft-Windows-Dhcpv6-Client/AdminSource:        Microsoft-Windows-DHCPv6-ClientDate:          1/17/2009 7:52:33 AMEvent ID:      1001Task Category: Address Configuration State EventLevel:         ErrorKeywords:      User:          LOCAL SERVICEComputer:      Windows7Description:Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x000129F558C5.  The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">  <System>    <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />    <EventID>1001</EventID>    <Version>0</Version>    <Level>2</Level>    <Task>3</Task>    <Opcode>74</Opcode>    <Keywords>0x8000000000000000</Keywords>    <TimeCreated SystemTime="2009-01-17T13:52:33.858398400Z" />    <EventRecordID>202</EventRecordID>    <Correlation />    <Execution ProcessID="1088" ThreadID="864" />    <Channel>Microsoft-Windows-Dhcpv6-Client/Admin</Channel>    <Computer>Windows7</Computer>    <Security UserID="S-1-5-19" />  </System>  <EventData>    <Data Name="HWLength">6</Data>    <Data Name="HWAddress">000129F558C5</Data>    <Data Name="StatusCode">121</Data>  </EventData></Event>When I search for "Microsoft-Windows-DHCPv6-Client" I do not find that file?OK, I found the entrys in the Microsoft section (DHCPv6-Client) and am able to clear them there! Eighter from Decatur, county seat of Wise (of course it's in Texas)

Read other 9 answers

How does one clear these? pls view attachment, thanks.

A:How to clear Administrative Events under Custom Views?

Select a log
Menu Bar - Action

Clear Log (it might say Clear Events - I'm not looking at it niw).

Read other 5 answers


Does anyone know how to clear the Administrative Events log listed under Custom Views in the Event Viewer?

All the logs listed under the Windows logs have options to clear, but the above does not.



A:How To Clear Administrative Events Log - Event Viewer

Thats just a filter. I dont know of any way to clear it other than clearing all events that appear in it under: System, Security and Application event logs.

Read other 9 answers

Hi, I recieved a phone call today from someone claiming to be from Windows who wanted to walk me thru an issue on our computer. We had been alerted by them before because of a virus on computers at our IP address or something like (I was not the one to talk to them at that time) and we did find two trojans on one of the laptops in our household (now taken care of). However today he asked me to go to Event Viewer and look at the administrative events there. I have heard of event viewer, but I know next to nothing about what it does. He asked me to look at how many administrative events I had and when he heard the answer he asked me to download Ammyy for remote access to my computer. Because we have had phone calls about actual issues on our computers before I downloaded it and allowed him to do what he needed. He commented on how my computer is running slower and such which I have noticed, however I do know that I am using it a lot heavier now and doing some gaming on it so it is getting more use which I have attributed some of the slowness issues to. (Though that may or may not be true). When he quoted me on prices to remove the issues with my computer I told him I would phone him back because I needed to discuss with other members in my household as his offers were applicable to their computers as well. However when I went to find out more about Event Viewer and what he was trying to offer to remove I got some notices about scams.

Therefore I was wondering if I could get s... Read more

A:Event Viewer and Administrative Events

No one will ever call or email you so that tells you it's a SCAM.

Wait for a tech that knows more on what to do help you check your PC.

Read other 1 answers

Hello Everyone, I have a bit of an odd thing going on in event viewer. I click on custom views, then click
on administrative events. A box comes up, forwarded events the specified channel could not be found. Check channel configuration. The events displayed are partial results. I click ok on that box, and then
the usual WMI event 10 error comes up 0x00041003. I ignore this error, but am just curious about the
rest of what is going on.

Read other answers

Hi, I have Windows 7 Home premium.My question is regarding the "events log" found in Administrative tools.I can clear every log in events under "WINDOWS LOGS", however the one I cant find a way to reset or clear is the one known as "CUSTOM VIEWS" (the one that looks like a folder with a funnel on it. This folder has a drop down icon, that looks like a funnel with the name "ADMINISTRATIVE EVENTS" next to it.When I click this it shows all the warnings and errors going way back to the day I origionally installed windows 7 which was four months ago!No one has come up with an answer to my question or clearly understands which log I am refering to.How do I clear this part of the log? Nothing I do shows any clear or delete options to remove those old way out of date error messages.Is there a way to clear this part of the log and if so, how is it done?Thanks in advance!

A:Windows 7 "custom views" how to clear admin events log?

HiThe Administrative Events is a custom view and compilation of all the critical, warning, and other important events, from certain other logs in the Event Viewer. You would need to clear all of those other logs to clear the Administrative Events list.The easiest way to do this is to note the Source name of the event in the Administrative Events, expand the Applications and Service Logs\Microsoft\Windows Logs.Look for the folder with the Source name. Expand that folder, right click each of the logs under that folder and select the Clear option.Hope this helps.
Thank You for using Windows 7

Ronnie Vernon MVP

Read other 16 answers

How, in W7, does one clear the events? In vista, I went to actions and clear events. On W7, I do not see a clear events.



A:How to clear events in viewer?

Right click and clear

Read other 3 answers

I have an event in the Event Viewer in the Administrative Events that started at the end of October. I've been having problems with my laptop, and found this while digging for a clue as to what is wrong. It refers to computer MATT. This is my sons computer on my network. We have been networked for years and I've never seen this problem before. He also has an XBox that he uses. This laptop with the error message is wireless if that matters.

I tried to research this but have had no luck. Any advice on this would be appreciated.

Thank you in advance.

Event 8003, bowser
The master browser has received a server announcement from the computer MATT that believes that it is the master browser for the domain on transport NetBT_Tcpip_{FA9EB726-8E72-4BDF-89C3-03D06240ABA0}. The master browser is stopping or an election is being forced.

Read other answers

I haven't been able to find a way to clear all event logs without saving. In Win 7 and vista (I only tested this in win 7) I like to occassionaly clear the administrator alerts without having to go in to each event log area to do so. Sometimes I just want
to wipe the all clean do a reboot and see what happens. There doesn't seem an easy way to clear out everything, so I wrote a simple batch file that does this. If there is another way, please let me know. It's a real simple script, just time consuming to write
it. I used a lot of copy/paste and a macro utility to insert the wevtutil command.

For more info on wevtutil, open a cmd prompt and type wevtutil /?
You can edit this script to save each event log too if you need to. Good luck editing each line though...

Otherwise, maybe others will find this useful. Simply copy and paste the text below in to a batch file (text file with extension bat) then right click and run as administrator to clean out all events in all event logs...

REM - Will clear all event logs in Windows 7 Ultimate without prompting or saving.
REM - Created by Leonard Rivera
wevtutil.exe cl Analytic
wevtutil.exe cl Application
wevtutil.exe cl DirectShowFilterGraph
wevtutil.exe cl DirectShowPluginControl
wevtutil.exe cl EndpointMapper
wevtutil.exe cl ForwardedEvents
wevtutil.exe cl HardwareEvents
wevtutil.exe cl Internet Explorer
wevtutil.exe cl Key Management Service
wevtutil.exe cl MF_MediaFoundationDeviceProxy
wevtutil.exe cl "... Read more

Read other answers

is there a way to delete all events in event viewer//// nevermind found the clear path for them

Read other answers

good day,

My event viewer is full of events such as security audit - special logon (special privileges assigned to new user) user account management (security enabled local group membership enumerated). They show as originating on the Builtin/administrators id. I am not part of a group; this is my home laptop.
I never used to see these events but some of them now originate every 15 minutes or so.
Does anyone know what this is?

A:Strange events in event viewer

Please list the Event ID associated with each event.

Read other 2 answers

I have Been getting bsod xd1 from iastora.sys I have come to the conclusion that I want it gone and want to switch to ahci and get rid of irst. Only problem is I heard you have to reinstall to do that and I don't want to. I really need this done and I'm scared because I get bsod in the middle of dayz and writing papers and its annoying.

A:45,120 events in event viewer, I have a keylogger

Hi Amingst

See if the tutorial below will help

AHCI : Enable in Windows 7 / Vista

Read other 9 answers

Hello, thanks for taking the time to read this and attempt to help me it is greatly appreciated! So I have an ASUS ROG Strix laptop PC with Nvidia GTX 970m, 16gb RAM, 500gb SSD, intel i7 6700HQ. I've been using it for a few months or so now constantly doing all the normal routine things I can to keep it running smoothly. I use Kaspersky and Malwarebytes both paid versions. I did a system reset a couple weeks back because I felt like there was SOMETHING running in the background that I could NOT find after countless hours of researching. Anyways my PC was running a little slow and I needed more space so I thought a fresh install was best. I'm noticing that my PC isn't performing smoothly anymore and in the event viewer I saw dwm.exe, AUDIODG.exe, Microsoft.photos.exe and zeroconfigservices.exe critical events. Also something that I find weird but not necessarily problematic is that after doing the reset when I come to the logon screen I always am trying to change it to the PIN entry and sometimes it will stay that way but it always resets after a couple times back to entering the password only. I can't figure out why..... Sometime Steam won't start and I can't open it along with a couple of other select programs.... I just don't know what's going on. I attached a Diagnostic report. I tried uploading the reliability history too but it wouldn't allow an XML file so I tried to convert it to .txt..... didn't work out too well but i... Read more

Read other answers

I see there is a way to delete or clean out all events that build up over time in Event Viewer.
Is that necessary or should it be left alone?
Will any harm be done by cleaning?

A:Cleaning/deleting events in Event Viewer

Leave Windows event logs alone. There's absolutely nothing to be gained by trying to "clean" them out.

Read other 2 answers

There are a lot of errors in Event Viewer related to Windows Search (Event ID:3013, Search). They started to appear last 7-8 days without any reason. No such errors before.All of them seem to be related to Firefox:Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f)C:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-PHISH-SHAVAR.CACHEC:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-MALWARE-SHAVAR.SBSTOREC:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-MALWARE-SHAVAR.PSETC:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-MALWARE-SHAVAR.CACHEC:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-DOWNLOADWHITE DIGEST256.SBSTOREC:\USERS\XX\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\35D2WEW0.DEFAULT-1447234321783\SAFEBROWSING\GOOG-BADBINURL-SHAVAR.CACHE.......Etc. etc. What mean these entries? I've never got them before.Thanks in advance.Edit: Moved topic from Web Browsing/Email and Other Internet Applications to the more appropriate forum, as suggested by member helping OP. ~ Animal

A:Suddenly strange events in Event Viewer

After disabling indexing option for some drives, I rebuilt the index (System and maintenance/Indexing Options/Advanced/Rebuild). I let it run for a while only. Didn't wait until the end of process.
The errors seem to be stopped for now. I hope it doesn't occur again.

Read other 6 answers

I don't really know what they are about, they seem to be related to msn/windows messenger, but im not sure that they occur every time i go on msn. They are coming up as errors, but does anyone know what they are about?

Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 101
Date: 23/10/2006
Time: 20:03:52
User: N/A
Computer: USER-2F62D3344E
msnmsgr (2896) The database engine stopped.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 102
Date: 23/10/2006
Time: 19:32:23
User: N/A
Computer: USER-2F62D3344E
msnmsgr (2896) \\.\C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_22E8_B00E_E8AF_DDF3\dfsr.db: The database engine started a new instance (0).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Read other answers

Win8 Pro with Media Center. 
I have a Custom View in Event Viewer which collects status reports from my UPS.  The Custom View contains over 3000 events.  When I use the "Save All Events in Custom View As..." Action I don't get all the event records in my save file.

If I use .xml, .txt (tab-delimited) or .csv format I get only about 300 records. Only the proprietary .evtx format seems to retain all the records.

How do I get save _ALL_ the events in my view to a .csv format?

I've tried "Save All Events As..." from other views and get similar results.  The number of records saved varies, but I don't get all of them.

A:How do I save more events from event viewer to a text file?

I'd still like an answer, but I found a work-around.  First save all events from the Custom view as an evtx file.  When it's done, load the file.  Open the loaded entry in the Saved Logs folder tree.  Now select "Save All Events As..."
and choose the format of your choice.  The file will now contain all the entries.

Read other 3 answers

I've unfortunately caught this once before:

Today, as I finished up doing some bill paying, my computer rebooted. As soon as it came back up, I ran a virus scan, and it came up positive for JAVA Payload.D

C:\Documents and Settings\Michelle\Application Data\Sun\Java\Deployment\cache\6.0\42\7aad51aa-6c4ee9cc
[0] Archive type: ZIP
[DETECTION] Contains recognition pattern of the JAVA/PayLoad.D Java virus
--> dk/komogvind/games/egyptianpyramids2/c/y.class
[DETECTION] Contains recognition pattern of the JAVA/PayLoad.D Java virus

(I've emailed Playtopia, the site I play Egyptian Pyramids on, to let them know that the game seems to be infected.)

Avira removed it. Last time I was infected, Avira's removal was complete. I've run MalwareBytes and it didn't find anything, but I'm really concerned because Event Viewer has some really troubling entries in it and some things on my system have been changed. For one, Windows Firewall has been re-activated, seemingly by itself, and Event Viewer's logs appear to indicate that it has been tampered with. This did NOT happen last time I was infected with this virus. EDIT: I've gone back through and it seems the firewall was probably re-enabled when I did my last set of Windows updates. The logon/logoffs, including periodical anonymous logons, seem to have been happening over the last month. They may be valid?

I'm ... Read more

Read other answers

In the Event Viewer help, it says that in order to clear events, go to the Action menu and click 'Clear'. I have already saved everything in an external file but in the Action menu there is no option to clear. What am I missing?

Richard Rein

A:How do I clear Event Viewer

Let me Google that for you...

Read other 4 answers

When exactly is it a good time to clear the event viewer logs in Windows XP? My computer is having problems recently you see. If I take it a repair shop would I be doing a disservice to myself by clearing the event viewer? Is it something that would at all help the repairman diagnose what's wrong with my computer? Any help would be greatly appreciated.

A:Help. When to clear the event viewer.

Event Viewer can be very useful because it can provide more detailed information on error messages that appear during Windows operations. It can also log events that you don't see elsewhere.

I would say that a good time to clear event logs is when you are not having any issues. That's not to say a repair tech would necessarily even use Event Viewer to help diagnose and solve your problem, because it depends on the problem. Why do you want to clear it?

Read other 6 answers

The is another attempt at getting this answered.
Previous replies noted that the Administrative Events under the Custom view was just a compilation of all the other logs.
I do not belive this is entirely correct as all the events in this log concern the operating system and do NOT appear in the other logs such as Application, Security, etc.
Below is an example of what is showing up on my system after all the individual logs shown under Event Viewer are cleared:


Date and Time


Event ID

Task Category


8/27/2015 13:59





8/27/2015 12:56





8/27/2015 12:56



Address Configuration State Event


8/27/2015 12:54



Sharing a printer


8/24/2015 9:15



Address Configuration State Event


8/24/2015 9:13



Sharing a printer


8/20/2015 3:19



Address Configuration State Event


8/20/2015 3:17



Sharing a printer


8/17/2015 10:24

Microsoft-Windows-... Read more

Read other answers

i have noticed that my computer has been taking longer to start up and shut down lately. i have used all my resources to see and control what i am running on startup, from msconfig to spybot's startup manager, there's not a lot running there so i went to check the event viewer and it's full of errors, critical events and warnings.

I tried using MS's websites for help but they are a nightmare to use, posted this same entry in their forums but no answer yet. I'll appreciate if you can help me understand what's going on with my computer. Thanks in advance

the last critical event reads as follows (the OS is in spanish so i'll translate to what i think it should be):

Windows has started up:

Boot duration : 135986ms
IsDegradation : true
Incident Time (UTC) : 27/04/2008 05:35:27 p.m.

Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Diagnostics-Performance
Date: 27/04/2008 12:38:01 p.m.
Event ID: 100
Task Category: Boot Performance Monitoring
Level: Critical
Keywords: Event Log
Computer: (name deleted by me)


BootTsVersion 2
BootStartTime 2008-04-27T17:35:27.656Z
BootEndTime 2008-04-27T17:37:54.087Z
SystemBootInstance 512
UserBootInstance 493
BootTime 135986
MainPathBootTime 53423
BootKernelInitTime 15
BootDriverInitTime 3316
BootDevicesInitTime 5470
BootPrefetchInitTime 90685
BootPrefetchBytes 446992384
BootAutoChkTime 0
BootSm... Read more

A:Event viewer reports errors and critical events on boot and shutdown

the system specs in case t hey are useful at all:

DELL vostro 400
Intel core 2 Duo E6750 @ 2.66 ghz

i tried to edit the previous post and there was a time limit, sorry for bumping this

Read other 1 answers

Continuously during use, for Standby Performance Monitoring, Boot Performance Monitoring, and Desktop Window Manager Monitoring; should I be concerned?

A:Windows Event Viewer Shows Critical, Error, and Warning Events

Read other 6 answers

Hi Everyone,

Been using this code for a while to clear out event logs

@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo goto theEnd
echo clearing %1
wevtutil.exe cl %1
goto :eof

Since I'm not a coder I would appreciate someone to take a look at this. What happens is I run this .bat file as an admin and the box opens then closes. Normally I get a scrolling list of everything that it clears, but thats no longer the case.

Help is appreciated.

A:Solved: Clear Event Viewer.bat

Read other 16 answers


Having issues with the Windows Event Log. It won't show. Even tried to clear it with this error. Even if I try to clear it using PowerShell I always end up in "Failed to clear log xxx. The request is not supported.".

Already tried sfc /scannow, of course restarting...


Running Windows 8.1 x64

Read other answers

I am getting many events in Windows Event Viewer under the Application log, even though Dolby Settings is set to Off in Lenovo Vantage under Hardware Settings tab. The events come with the following description "The description for Event ID 0 from source Dolby DAX3 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event: [DSPVLLDP]: CPPAPIHelper:olbyModuleExist: fInstantiated is false."    Dolby DAX3 Event Viewer

Read other answers

When I start MS build-in Event Viewer, then go to Custom Views--->Adminstrative Events and right click and select "Properties" then all the parameters are disabled resp. read-only.
See attached snapshot


As far as I remember they were editable in the past. I could (de-)select e.g. "Warnings" checkbox.
Recently I wiped all event logs by the often recommended command


It worked. But it could have the side effect that now all the existing customs views are not editable again.
On other computers they are! And I can create new custom views which are editable as well.

But how can I make the existing customs view editable back again?


Read other answers

Good evening. I've got something weird going on I'd like to ask for help with. Every time I close the Event Viewer or Task Scheduler I get a new "Administrative Tools" folder on the desktop. As far as I know, no other programs cause it, at least none of the ones I tested. I'm not exactly sure when it started but I know it hasn't always done it. I've already got Administrative Tools folders in my Start Menu. Anyone know what could be causing it? Thanks.

A:"Administrative Tools" folder created on desktop every time I close Event Viewer

Sounds like a change in your settings. To be sure
Run a full anti virus scan
Download and run a full scan with Malwarebytes to be sure we are not talkling about a virus
If all are negative, go back with System Restore to a week before the problem began.
System Restore - How to

Read other 7 answers

Hi, I have one machine that never records any security events in the Events Viewer, while all the other machines here do, not that I can make sense of them - but - should i be worried that this machine is never recording any security activity? They are all XP SP2 pro machines...

Read other answers

1. Every time I boot up the computer, the following error is generated in Event Viewer:
Source: DistributedCom, Event ID: 10010 

The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.

This key pertains to appID WinInetBrokerServer (CLSID WinInetBroker). I tried adding permissions to the key(s) but that didn't solve the problem. In the permissions for the key, the first user name listed is named Account Unknown (S-1-15-2-1).
I think maybe that may have something to do with it. I deleted the 6 registry keys associated with this key and everything worked but I was locked out of Windows XP Mode (Windows Virtual PC). I was wondering if anyone had any suggestions to fix this error?

2. ALSO, exactly once a day I receive the following warning in Event Viewer:
Source: DNS Client Events, Event ID: 1014 

Name resolution for the name imrk.net timed out after none of the configured DNS servers responded.

It would seem that there is an application on my computer that is trying to connect to this site for whatever reason. I have read about ties between this domain and hacking. Someone suggested to enable boot logging in Process Monitor to try to pinpoint the
app but there's so much going on in Process Monitor I'm not really sure where to look. All of the apps that run on a daily basis (including the ones that are set to run at startup) seem relatively safe to me. I've run the gamut of a... Read more

Read other answers

Tech Support Guy System Info Utility version
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, x64 Family 15 Model 75 Stepping 2
Processor Count: 2
RAM: 1917 Mb
Graphics Card: NVIDIA GeForce 6150 LE, 128 Mb
Hard Drives: C: Total - 295258 MB, Free - 235757 MB; D: Total - 9985 MB, Free - 4627 MB;
Motherboard: ELITEGROUP, C51PVGM-M
Antivirus: Lavasoft Ad-Aware, Updated and Enabled

How do I clear a ton of Administrative Events - errors and warnings

A:administrative events

Read other 6 answers

How do I clear Administrative Events logs? I can clear the other logs but not the admin. logs...

A:Administrative Events

Quote: Originally Posted by M YANCEY

How do I clear Administrative Events logs? I can clear the other logs but not the admin. logs...

Hello M Yancey & welcome,
Check out this Tutorial to see if can help you.
Event Viewer One Click Clear

Read other 5 answers

This shows up in my log at least once a day under DNS Client Events, Event ID 1014. Name Resolution for the name www.jameswolcott.com timed out after none of the configured DNS servers responded.

A:Administrative Events Log

Quote: Originally Posted by squid13

This shows up in my log at least once a day under DNS Client Events, Event ID 1014. Name Resolution for the name www.jameswolcott.com timed out after none of the configured DNS servers responded.

Hi squid and welcome

Thats a fairly common event. Just means that the DNS server didnt respond quickly enough and the event was logged. Not an error maybe informational


Read other 2 answers

This one has been bugging me for sometime now.
In Administrative Tools of Windows 7 Home premium 32 bit.
There is Event Viewer. Within Event Viewer there is Custom Views, when that folder is clicked an Icon appears called Administrative Events, to which the middle pane shows a list of ERRORS.
Ok for the life of me I can not figure out how to clear or delete those error events from the log. I want to get rid of any error logs older than a week and some of these date back to December 2009.
I have checked every where within event viewer to clear, remove or delete these old entries.
What am I over looking here?

Thanks in advance for any help you people can provide.

A:Administrative Events-Windows 7

Custom Views -> Administrative Logs are combination of various logs combined together using a filter. Normally it contains Application, System, Security, and many more so that an administrator does not have to jump from one log to another log. It is just a filtered log view and not the actual log.- If you want to clear a log then select an individual log like Application and then right click on it, select Clear log. - You can also set the size limitation to smaller one like 1024 KB (which is 1MB) (by default it is 20MB). 1024 KB should be able to contain events of past 7 days or so. To set log size, right click on a log and select Properties and there you would see options.As soon as you limit the size, or clear the log, you would see the changes reflected in the filter (Custom Views -> Administrative Logs)You can identify a filter by a funnel like icon. The actual logs have a word pad like icon. You can also create your own filtered log views.

Read other 7 answers

Hi Everyone!
I know you'll figure this out by my questions, I'm not what you'd call technically inclined. Despite using a PC daily since 1999, I only know the basics, like email, browsing, streaming media, games, etc. I've always kept everything up-to-date, I run Malwarebytes, CCleaner & my AV program weekly, defrag occasionally & I never visit any questionable sites, nor do I open attachments in emails unless I know the sender. So I guess you can say I'm a cautious, semi-experienced home user with game-playing addiction who knows absolutely nothing about how a PC works. I AM, however, very bright & I can follow detailed instructions, so I know I can do whatever anyone who IS technically-inclined advises me to do, so if you give me instructions, I know I'll finish the task successfully. How's that for a disclaimer!

I'm running Windows 8.1 on a Lenovo G585 & I've been having noticeable problems related to viewing streaming media, (I view bald eagle nest cams & keep detailed records for research), & I was told that my router, (a 5 yr. old Belkin 802.11 G), was too old & slow to handle the speed necessary for what I'm doing, especially since I have a broadband connection. I followed their suggestion because it made sense, & I bought & installed a Linksys E2500 'N' Dual Band router & I expected the video streaming to at least triple, (because that's what everyone told me would happen). That was a month ago, & things have deteri... Read more

A:5,000+ 'Administrative Events' found!--what's the cause?

Have you ever run dism &sfc ?

Here they are in a batch file---
2 hours or so to complete---


Read other 13 answers


Recently I noticed my Events Log and I found out some Errors and Warnings in the Custom View => Administrative Events Section that pretty upset me. They are about 31.000 errors and I think that they may slow down my computer. I asked some techs from a tech support what these errors were. They connected to my computer, saw the errors and told me that the errors were caused due to malware and potentially unwanted applications and that they must be fixed immediately, otherwise the problem might get worse. They also told me that they can only be fixed manually and the price is 250 dollars, but I cannot afford this.
Here is a picture : http://imageshack.us/photo/my-images/62/0azp.png/

Please, can you elaborate on this and explain me what these errors are and maybe how to fix them? I would really appreciate it!

Thank you.

A:Administrative Events : Errors!

Read other 7 answers

My computer keeps getting error messages while trying to go to internet sites like hulu.com, facebook.com, msn.com, etc saying "___ is not working properly, will try to see what is the problem ".  After this kept happening, my speed decreased to a snails pace.  I tried to increase the speed and memory in my PC by deleting all unnecessary files and photos.  I  also scanned my computer for viruses with Avasti Premier and tried a defrag of each drive (could not get defrag to work on the hard drive-"needs optimization" message stays next to  the hard drive item).  Then I checked Event Manager and it showed that I had over 524 events some critical and with warnings.  I again tried to get Windows 10 online to help me address one event at a time by assigning tasks to a few of them.  This happened 2 days ago and I still have these events listed and nothing happened.  Please tell me what can be done that isn't so complicated?  I'm not very computer savvy.

Read other answers

I am trying to create 4 custom views in a large workbook involving about 12 sheets, with different columns hidden, and different print settings - a monthly view, quarterly view, annual view, and view all.

I had it working at one time, and went to demonstrate my wonderful creation and bummer: When I run the macro I've attached, absolutely nothing happens. When I manually select the view I get the error message "Some Settings Could Not be Applied". I've deleted all my views and set up again, but still get the error. There seems to be no help associated with it. Any ideas how to troubleshoot which settings Excel is not liking here?

Thanks for any suggestions.

A:Excel Custom Views

if you have macros, you can always press CTRL + F11 to take you to the VBA screen.

From here, by clicking once inside a macro (in code form) you can press F8 to 'step' through the code one line at a time.
If you keep this screen visible at the same time as keeping the spreadsheet visible, you can see what is going on at the same time!

Read other 3 answers

I am new to Microsoft Message Analyzer and just downloaded version 1.4 and installed on my Windows 10 laptop
I saved my Windows System Event log as an .evtx file to have some data to start looking at. I note the column entitled 'summary' appears to show the body of the event message. However I see many rows which state "unable to retrieve the event description"
in this column, what do I need to do to fix this issues please? could it of been the way that I saved the .evtx file in the first instance (I accepted the defaults) or do I need to install some additional files/components so the messages are displayed

Thanks all

Read other answers

Thanks for any help.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 28/11/2006
Time: 17:57:33
User: USER-2F62D3344E\user
Computer: USER-2F62D3344E
A provider, OffProv11, has been registered in the WMI namespace, Root\MSAPPS11, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

A:What's this event in event viewer? (event source WinMgmt)

this might help

Read other 1 answers

I am running Win 7 Pro, 32 bits

I was trying to run down a problem with Windows Explorer crashing and wanted to check the Events Log. When I went to check it it I got this:

Attachment 95544

I then check Services and got this:

Attachment 95545

There is no Events Viewer service shown, or I don't know how it is listed.

I need a little help to get Events Viewer running.

Thank you

A:Events Viewer

Quote: Originally Posted by huffman

I am running Win 7 Pro, 32 bits

I was trying to run down a problem with Windows Explorer crashing and wanted to check the Events Log. When I went to check it it I got this:

Attachment 95544

I then check Services and got this:

Attachment 95545

There is no Events Viewer service shown, or I don't know how it is listed.

I need a little help to get Events Viewer running.

Thank you

where did you get your win 77 image from?

do you have a backup from before the problem?

Read other 6 answers

I have a file server that has hundreds of files. To make sorting faster I have applied custom folder views to many of them. Simply by rt clicking - customize - and choose picture. This way I can quickly see the file content w/o reading all the text.

I know that when the files are moved, this view does not move with it. I have increased my windows "remember views" from default of 400 to 50,000 using TwealUI. It seems that the custom view does not transfer with the folder bacause the path changes.

I have all of these folders on drive M,N on my home server. I have also mapped these locations to my home computer as M,N. With this in mind I SHOULD be able to copy whatever location these custom settings are placed and not have to duplicate all of the custom views on my home PC. This should work because the same folder will be seen as M:\folder1\a\a1 (for example) on both machines

I am sure I made it sound more complicated than it is, sorry. Does anyone know where these views are stored and how to copy or export them?

Thank you

Read other answers

I've been sat here recently wondering if I was to build my own state of the art PC what hardware would I go for...

What case would I purchase, what motherboard, what graphics card etc. I just want to know what others think and if they had the money what would they go for...?

I went for a PC on one of these sites where you list the hardware you want in your tower and the total price when finished came to well over ?5,000.00 and then and there thought No Way!!

A:Custom Built PC & Choosen Hardware Views...?


Read other 9 answers

I can not get a log saved in Events/Windows Logs/Applications.

Have run chkdsk/f from Administrator CMD prompt...chkdsk runs at reboot...but no log is created in Events Viewer as it always had been previously ?

Any ideas on why and/or where the reboot chkdsk/f logs are ?
jpg is after a reboot and running at startuup of chkdsk/f

A:Can not get a chkdsk log in Events Viewer

If the chkdsk is run on a reboot, as it would for a C drive, the results should be under a “wininit” listing in the source column, rather than under chkdsk.

Read other 5 answers

I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both.

I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were basically the same, below is one. Neither of the OP's came back and said if this worked for them.

Re: LoadPerf 3011, 3012
I had the same problem with LoadPerf and here is what I found out:
All performance counter names and explain text are maintained in string tables managed by the performance counter subsystem (Perflib).

The current contents of the performance counter string tables are corrupted and cannot be displayed. To correct the problem, rebuild the string tables.

User Action
To rebuild the string tables, on the computer that displayed the message, at the command prompt, type Lodctr /r
The contents of the string tables are automatically rebuilt.

I hope this helps

Since this was from 2008 (XP?) and the other response was for Vista I wanted to see if the guru's at SevenForums thought that this was okay before I did this.

Here are the screenshoots of my two errors.

A:After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot

Rebuilding the string tables as outlined in my first post fixed the problem.

Read other 1 answers

keep getting the errors above every startup regarding;
11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.
Context: Application, SystemIndex Catalog
(HRESULT : 0x80004005) (0x80004005)"
I have 3 admin user profiles.
Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch event viewer or mouse customisation softwares, they freeze temporarily and ... Read more

A:Windows 7: Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 

Read other 7 answers