• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2197
  • Last Modified:

I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
cllocc
Asked:
cllocc
  • 9
  • 7
1 Solution
 
Darius GhassemCommented:
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
0
 
clloccAuthor Commented:
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
0
 
Darius GhassemCommented:
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
clloccAuthor Commented:
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
0
 
clloccAuthor Commented:
issue was not resolved after restart, event viewer still unable to open
0
 
Darius GhassemCommented:
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
0
 
clloccAuthor Commented:
no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
 
Darius GhassemCommented:
What Username is attached to the service?
0
 
clloccAuthor Commented:
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
0
 
Darius GhassemCommented:
Can you blank the password out? Does your username have Admin rights to this box?
0
 
clloccAuthor Commented:
im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
0
 
clloccAuthor Commented:
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
0
 
Darius GhassemCommented:
Check the very bottom post to see if this gets you going.

http://forums.techarena.in/windows-server-help/1173124.htm

Check permissions as well on folder.

http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
0
 
Darius GhassemCommented:
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
0
 
clloccAuthor Commented:
well, after three failed attempts at system restore, the fourth attempt by the user seemed to finish successfully and fix the issue for him.  He is connected to our network with full internet connectivity.

Nonetheless, thanks very much for all your suggestions.
0
 
clloccAuthor Commented:
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 9
  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now