Michelle Posted January 17, 2004 Report Share Posted January 17, 2004 I've just run sfc and after went to see what had been done in the log (RUN? typed eventvwr.msc) and up popped Event Viewer. But nothing's there in any of the left-hand options - all blank. Quote Link to comment Share on other sites More sharing options...
bvw Posted January 17, 2004 Report Share Posted January 17, 2004 In Admin Tools/Services check that Event Log is set to automatic, it may be disabled. Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 17, 2004 Author Report Share Posted January 17, 2004 Thanks for suggestion. It's set to auto. Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 17, 2004 Report Share Posted January 17, 2004 Ignore the Dr Watson errors etc: and Click here Just recreate the files, you cant do it real-mode though as there in use and the article doesn't say so but you could try "net stop winmgmt" into a command prompt, this will stop Windows management then delete the files.......could/should work. Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 18, 2004 Author Report Share Posted January 18, 2004 Thanks. I think I'm getting in a bit of a pickle now. I stopped the windows management instrumentation service, booted into dos, followed the instructions (Boot to a MS-DOS prompt using a DOS bootable disk. Rename or move the corrupt *.evt file from the following location: %SystemRoot%\System32\Config) but it came up as bad command.Now when I try and run sfc after session it says 'session encountered errors - no route to host'. I disabled kerio firewall thinking it may be that, but no. So I then ran sfc /quiet (which does it on reboot but doesn't make a song and dance about it) and it said 'windows file protection could not initiate a scan of protected files. Error code 0X000006bg (The RPC server is unavailable).I may have led you astray on my 1st post. The contents of Event Viewer are there in left pane, but there's nothing in right pane. Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 18, 2004 Report Share Posted January 18, 2004 Sorry Michelle, you will need to type "net start winmgmt" to restart Windows management...Very sorry, I forgot to put that in. Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 18, 2004 Author Report Share Posted January 18, 2004 No probs, I just appreciate the help. I've restarted windows management, run sfc again, but still nothing in r/h pane.I've also unchecked Power users group in all policy items (in Local Policies) which have option and rebooted but still nowt. It's not a huge prob but it's nice to know why the logs have simply disappeared from event viewer. Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 18, 2004 Report Share Posted January 18, 2004 If you double click system on the left does *nothing* appear in the right pane? Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 18, 2004 Report Share Posted January 18, 2004 There is a fix available from M$ Click hereHave you right clicked on Application from Console tree View > Customize.. make sure all check boxes are ticked. Right click on application again Click on Properties Check Log size are not 0 Check Filter, make sure you checked what you need. do same thing with Security and System Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 18, 2004 Author Report Share Posted January 18, 2004 Nothing appears when I d-click any of the 4; Application log, Security log, System log or Antivirus. It says 2902 event(s) at top, but it's blank. Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 18, 2004 Report Share Posted January 18, 2004 Have you tried highlighting one on the left and hitting view then filter as well as customize? Quote Link to comment Share on other sites More sharing options...
bvw Posted January 18, 2004 Report Share Posted January 18, 2004 http://support.microsoft.com/?kbid=216169Only googling, ignore it if it's no help :blink: Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 18, 2004 Author Report Share Posted January 18, 2004 I think I've sussed it out thanks to all your help. Apparently I haven't cleared out my logs (I'm just as bad with my emails), and there's a memory cache allocation problem with w2k. This will be sorted out in sp5. I emptied all my logs (saving them) and now it's ok. Cheers. Quote Link to comment Share on other sites More sharing options...
spikeychris Posted January 18, 2004 Report Share Posted January 18, 2004 Gum drops :) Quote Link to comment Share on other sites More sharing options...
Michelle Posted January 18, 2004 Author Report Share Posted January 18, 2004 Cheeky young pup ;0) Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.