I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
clloccAsked:
Who is Participating?
 
clloccConnect With a Mentor Author Commented:
well, after three failed attempts at system restore, the fourth attempt by the user seemed to finish successfully and fix the issue for him.  He is connected to our network with full internet connectivity.

Nonetheless, thanks very much for all your suggestions.
0
 
Darius GhassemCommented:
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
0
 
clloccAuthor Commented:
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Darius GhassemCommented:
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
0
 
clloccAuthor Commented:
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
0
 
clloccAuthor Commented:
issue was not resolved after restart, event viewer still unable to open
0
 
Darius GhassemCommented:
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
0
 
clloccAuthor Commented:
no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
 
Darius GhassemCommented:
What Username is attached to the service?
0
 
clloccAuthor Commented:
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
0
 
Darius GhassemCommented:
Can you blank the password out? Does your username have Admin rights to this box?
0
 
clloccAuthor Commented:
im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
0
 
clloccAuthor Commented:
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
0
 
Darius GhassemCommented:
Check the very bottom post to see if this gets you going.

http://forums.techarena.in/windows-server-help/1173124.htm

Check permissions as well on folder.

http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
0
 
Darius GhassemCommented:
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
0
 
clloccAuthor Commented:
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.