cllocc
asked on
I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
I have a client machine that behind a server. When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
ASKER
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
"windows resource protection found corrupt files but was unable to fix some of them."
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
ASKER
Go through this link.
http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/
Autotuning is most likely causing the problem
That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:
ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution
nbtstat -R
successful purge and preload of the nbt remote cache name table
nbtstat -RR
the netbios names registered by this computer have been refreshed
netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all
netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action
netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.
netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.
--------------------------
Im currently restarting the computer now
ASKER
issue was not resolved after restart, event viewer still unable to open
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.
Is the Event log Service running?
Is the Event log Service running?
ASKER
no its not running. when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
What Username is attached to the service?
ASKER
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed. Everything is grayed out on this page and I cant change anything.
Can you blank the password out? Does your username have Admin rights to this box?
ASKER
im logged on as a user with administrator rights but i cant blank the password out. everything is grayed out on that page
ASKER
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?
http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
Check the very bottom post to see if this gets you going.
http://forums.techarena.in/windows-server-help/1173124.htm
Check permissions as well on folder.
http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
http://forums.techarena.in/windows-server-help/1173124.htm
Check permissions as well on folder.
http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password
But go through links I posted first
But go through links I posted first
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/
Autotuning is most likely causing the problem