Link to home
Start Free TrialLog in
Avatar of cllocc
cllocc

asked on

I'm getting the following error when trying to access event log on windows 7 pro 32bit: Event Log stopped working - Error 1747 : The Authentication Service is Unknown

I have a client machine that behind a server.  When trying to access the event log, i get the following message:
Event Log stopped working - Error 1747 : The Authentication Service is Unknown
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem
Avatar of cllocc
cllocc

ASKER

fyi, i ran sfc /scannow and i get to 100% verification then get the following message
"windows resource protection found corrupt files but was unable to fix some of them."
Well that means you have some corrupt files. Go through the link I posted. If that doesn't fix it you might have to reinstalled
Avatar of cllocc

ASKER

Go through this link.

http://pipecuts.wordpress.com/2011/03/06/error-1747-the-authentication-service-is-unknown/

Autotuning is most likely causing the problem

That post said to run the following commands, below each command is the output from cmd after running the command as an administrator:

ipconfig /flushdns
Windows IP Configuration
Could not flush the DNS resolver Cache: Function Failed during execution


nbtstat -R
successful purge and preload of the nbt remote cache name table

nbtstat -RR
the netbios names registered by this computer have been refreshed

netsh int reset all
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
the following command was not found: int reset all

netsh int ip reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
resetting interface, OK
restart the computer to complete this action

netsh winsock reset
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
successfully reset the winsock catalog.
you must restart the computer in order to compete the reset.

netsh interface tcp set global autotuninglevel=disabled
initialization function inithelperDll in NSHHTTP.DLL failed to start with error code 10107
OK.

-----------------------------------------------------
Im currently restarting the computer now
Avatar of cllocc

ASKER

issue was not resolved after restart, event viewer still unable to open
Hate to say you are going to have to do a reinstall if sfc /scannow is not fixing the problem then might be corruption.

Is the Event log Service running?
Avatar of cllocc

ASKER

no its not running.  when i try to start the service i get the following message: Event Log stopped working - Error 1747 : The Authentication Service is Unknown
What Username is attached to the service?
Avatar of cllocc

ASKER

i got to services.msc, navigate to windows event log service, right click, go to properties, go to the log on tab and i see log on as: this account is check and Local Service is listed.  Everything is grayed out on this page and I cant change anything.
Can you blank the password out? Does your username have Admin rights to this box?
Avatar of cllocc

ASKER

im logged on as a user with administrator rights but i cant blank the password out.  everything is grayed out on that page
Avatar of cllocc

ASKER

btw, i came across this, which says that page should be grayed out by default but there is a workaround in the registry, should i try this?

http://www.winhelponline.com/blog/fix-event-log-service-error-1079/
Yeah there is a workaround I started to think about it thought and I want to use that as the last resort. I think that fixed my problem I had by deleting the password and allowing the service to start again and populate the proper password

But go through links I posted first
ASKER CERTIFIED SOLUTION
Avatar of cllocc
cllocc

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of cllocc

ASKER

four attempts at system restore with the fourth one successful and bringing back the pc to its normal settings