Link to home
Start Free TrialLog in
Avatar of Snowmizer00
Snowmizer00

asked on

The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I am getting the following error:
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I can't get any entries in the security log.  Thanks.
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

direct quote  http://www.wilderssecurity.com/showthread.php?p=1496630
This issue is typically caused by an invalid registry value in the Restore subkey for the DFSR service. Look at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfsr\Restore.

There will be a sub key named year-date-time the restore was done with two values. One of those

values will be the network name that was used to perform the remote restore.

- Backup and delete the restore subkey

- Restart DFSR (if it won't stop, restart machine).

- After the reg value is removed the service start and stop will be normal
ASKER CERTIFIED SOLUTION
Avatar of Snowmizer00
Snowmizer00

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What was the event ID that came with that Error?
Which Log was it logged in?
What Policy did you change?