Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

Posted on 2012-03-30
16
1,969 Views
Last Modified: 2013-12-02
I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
Comment
Question by:cllocc
  • 9
  • 7
16 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787703
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
0
 

Author Comment

by:cllocc
ID: 37787715
fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787749
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:cllocc
ID: 37787789
Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
0
 

Author Comment

by:cllocc
ID: 37787832
issue was not resolved after restart, event viewer still unable to open
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37787842
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
0
 

Author Comment

by:cllocc
ID: 37787892
no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788037
What Username is attached to the service?
0
 

Author Comment

by:cllocc
ID: 37788076
i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788252
Can you blank the password out? Does your username have Admin rights to this box?
0
 

Author Comment

by:cllocc
ID: 37788569
im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
0
 

Author Comment

by:cllocc
ID: 37788605
btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788635
Check the very bottom post to see if this gets you going.

http://forums.techarena.in/windows-server-help/1173124.htm

Check permissions as well on folder.

http://vittoriop77.blogspot.com/2010/06/access-denied-on-eventlog-in-windows.html
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37788640
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
0
 

Accepted Solution

by:
cllocc earned 0 total points
ID: 37788822
well, after three failed attempts at system restore, the fourth attempt by the user seemed to finish successfully and fix the issue for him.  He is connected to our network with full internet connectivity.

Nonetheless, thanks very much for all your suggestions.
0
 

Author Closing Comment

by:cllocc
ID: 37805183
four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question