Solved

I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

Posted on 2012-03-30
16
1,923 Views
Last Modified: 2013-12-02
I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
Comment
Question by:cllocc
  • 9
  • 7
16 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787703
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
0
 

Author Comment

by:cllocc
ID: 37787715
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787749
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
0
 

Author Comment

by:cllocc
ID: 37787789
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
0
 

Author Comment

by:cllocc
ID: 37787832
issue was not resolved after restart, event viewer still unable to open
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787842
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
0
 

Author Comment

by:cllocc
ID: 37787892
no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788037
What Username is attached to the service?
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:cllocc
ID: 37788076
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788252
Can you blank the password out? Does your username have Admin rights to this box?
0
 

Author Comment

by:cllocc
ID: 37788569
im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
0
 

Author Comment

by:cllocc
ID: 37788605
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788635
Check the very bottom post to see if this gets you going.

http://forums.techarena.in/windows-server-help/1173124.htm

Check permissions as well on folder.

http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788640
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
0
 

Accepted Solution

by:
cllocc earned 0 total points
ID: 37788822
well, after three failed attempts at system restore, the fourth attempt by the user seemed to finish successfully and fix the issue for him.  He is connected to our network with full internet connectivity.

Nonetheless, thanks very much for all your suggestions.
0
 

Author Closing Comment

by:cllocc
ID: 37805183
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now