The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I am getting the following error:
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I can't get any entries in the security log.  Thanks.
Snowmizer00Asked:
Who is Participating?
 
Snowmizer00Author Commented:
I finally figured it out.  By default security logging is not turned on in a Windows 2008 server environment.  I had to create a local/domain policy to turn on auditing.  After doing this all the information started to flow.
0
 
Pete LongTechnical ConsultantCommented:
direct quote  http://www.wilderssecurity.com/showthread.php?p=1496630
This issue is typically caused by an invalid registry value in the Restore subkey for the DFSR service. Look at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfsr\Restore.

There will be a sub key named year-date-time the restore was done with two values. One of those

values will be the network name that was used to perform the remote restore.

- Backup and delete the restore subkey

- Restart DFSR (if it won't stop, restart machine).

- After the reg value is removed the service start and stop will be normal
0
 
Pete LongTechnical ConsultantCommented:
What was the event ID that came with that Error?
Which Log was it logged in?
What Policy did you change?

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.