Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Eventlog service failed NT Server

Posted on 1998-09-15
6
Medium Priority
?
285 Views
Last Modified: 2013-12-28

I have an NT Server (4.0+SP3) which, on startup, says a service failed to start. When I try to check the eventlog, it says the eventlog service is not running. When I try to start the eventlog service manually, it says the eventlog file cannot be found and fails to start the eventlog service. The error code is Error 1501.

Anyone know how to cure the problem and get the eventlog service started?
0
Comment
Question by:argo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 2

Expert Comment

by:gikam
ID: 1792486
U probably don't have these files:
appevent.evt
secevent.evt
sysevent.evt
in the \winnt\system32\config   directory
if u don't, try creting them manually with 0 length
0
 
LVL 5

Expert Comment

by:theh95
ID: 1792487
PSS ID Number: Q111720
Article last modified on 05-14-1997
 
3.1
 
WINDOWS
 

======================================================================
----------------------------------------------------------------------
The information in this article applies to:
 
 - Microsoft Windows NT operating system version 3.1
 - Microsoft Windows NT Advanced Server version 3.1
----------------------------------------------------------------------
 
SYMPTOMS
========
 
When you start Event Viewer, the following error appears:
 
   The Eventlog service on the local machine is not started.
 
Then, after you start the Eventlog service from the Services section of
Control Panel the following error message appears:
 
   Could not start the Eventlog service on \\<machine name>.
   Error 1501: No event log file could be opened,
   so the event logging service did not start.
 
CAUSE
=====
 
This error only occurs when the Windows NT system drive is formatted for
NTFS. When the Eventlog Service starts, it opens three log files in the
%SYSTEMROOT%\SYSTEM32\CONFIG directory. If the system does not have the
correct permissions, it cannot open and write the log files.
 
RESOLUTION
==========
 
For these files to be opened successfully, Read and Write permission in
this directory must be granted to the Administrators group, the System
account, or the Everyone group. Any one of these three enables the system
to function normally.
 
Additional query words: prodnt
======================================================================
Keywords            : kbtool ntutil
Version             : 3.1
Platform            : WINDOWS
=============================================================================
Copyright Microsoft Corporation 1997.


 

0
 

Author Comment

by:argo
ID: 1792488
This was odd!
Renaming the files didn't cure it.
Copying on a set of files from another server didn't cure it.
Deleting the files and rebooting cured it.

Since your (gikam) mention of the filenames was the clue I needed, resubmit your comment as an answer and I will accept it
Thanks


0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 2

Expert Comment

by:gikam
ID: 1792489
argo thanks, but first u have to reject theh95's answer
0
 

Author Comment

by:argo
ID: 1792490
Sorry, your answer appears to be correct, but someone helped me cure the problem before I saw it.
0
 
LVL 2

Accepted Solution

by:
gikam earned 300 total points
ID: 1792491
Good luck!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
By default Outlook 2016 displays only one time zone in the Calendar. The following article explains how to display two time zones in one calendar view.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question