Link to home
Start Free TrialLog in
Avatar of StickyWicket
StickyWicketFlag for United States of America

asked on

Win 2008 - Windows Eventlog Service will not start

On a Windows 2008 R2 Server, the Windows Event Log Service is failing when it tries to start with "0x8007000e - Not enough storage space is available to complete this operation"

Of course, with no event log this is much harder to determine the issue. I suspect it is permissions related.

Scenario:

1. Windows 2003 Domain (with X86 DC's)
2. Run Adprep32 /forestprep
3. Run adprep32 /domainprep /gpprep
4. Install Win2008 R2 (X64)
5. Win2008 R2 Server Join Domain and Reboot
6. Everything is good and getting "Default Domain Policy" from "Computers" OU.
7. Run "dcpromo /adv"...runs with no problems and syncs topology.
8. Server is converted to DC and reboot
9. Windows Event Log Service will not start with this error

Other notables:

1. If you open dcomcnfg, The computer has a red down arrow. Crashes frequently and typically comes up with only "Com security" and "MSDTC" tabs. Permissions in Com Security are identical to a functioning Win2008 R2 DC in another domain I have.

2. After the first time opening dcomcnfg, if you click OK  to close it and open it again it will show you all of the typical tabs you expect to see (General, Options, Default Properties, Default protocols, COM Security and MSDTC).

3. If you goto the "default properties" tab now, "enable dcom on this computer " is NOt selected. If you select it, the "default authentication level" and "default impersonation level" drop-downs are blank. If you try to just enable dcom with drop-downs blank, the dcomcnfg GUI Mgr crashes.

4. MSDSTC is running.

Thx
Avatar of Tony Giangreco
Tony Giangreco
Flag of United States of America image

I would restart the server and install the appropriate Windows server best practices analyzer. Run a scan and it should provide a good report of items to correct.

http://technet.microsoft.com/en-us/library/dd759206.aspx
Avatar of StickyWicket

ASKER

The scan did not help.

I feel that this is strongly related to DCOM, but need to figure out how to get DCOM back in its default state (save for reloading).

In the catch-22 here.
As a follow up, it appears that MSDTC is what is broke here. Both MSDTC and Com+ Services are running, but connection seems broke.

How do you reinstall MSDTC on win2008?
I have reinstalled MSDTC and it appears to be running fine (the service has always been running).  But I still get this error with COM+ when I try to "refresh all components" in the Component Service Manager GUI (the computer shows a down red arrow).

refresh all components ->  0x8004e00f  - COM+ is unable to talk to the Microsoft Distributed Transaction Coordinator

And of course, still no windows event log service running.
ASKER CERTIFIED SOLUTION
Avatar of StickyWicket
StickyWicket
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I figured it out.