Solved

I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

Posted on 2012-03-30
16
1,896 Views
Last Modified: 2013-12-02
I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
Comment
Question by:cllocc
  • 9
  • 7
16 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787703
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
0
 

Author Comment

by:cllocc
ID: 37787715
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787749
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
0
 

Author Comment

by:cllocc
ID: 37787789
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
0
 

Author Comment

by:cllocc
ID: 37787832
issue was not resolved after restart, event viewer still unable to open
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787842
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
0
 

Author Comment

by:cllocc
ID: 37787892
no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788037
What Username is attached to the service?
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 

Author Comment

by:cllocc
ID: 37788076
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788252
Can you blank the password out? Does your username have Admin rights to this box?
0
 

Author Comment

by:cllocc
ID: 37788569
im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
0
 

Author Comment

by:cllocc
ID: 37788605
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788635
Check the very bottom post to see if this gets you going.

http://forums.techarena.in/windows-server-help/1173124.htm

Check permissions as well on folder.

http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788640
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
0
 

Accepted Solution

by:
cllocc earned 0 total points
ID: 37788822
well, after three failed attempts at system restore, the fourth attempt by the user seemed to finish successfully and fix the issue for him.  He is connected to our network with full internet connectivity.

Nonetheless, thanks very much for all your suggestions.
0
 

Author Closing Comment

by:cllocc
ID: 37805183
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now