Event ID 10317 PnP event is logged in Event Viewer

Network device on Win 2012R2 OEM server loses connectivity.
Event Viewer's general info:
Miniport had event Fatal error: The miniport has detected an internal error.
Only reset helps and the problem doesn't occur in WIN7.
Someone maybe have an idea about this problem?
Thanks.

Hi,
Just addition. Please also refer to following KB and check if can help you.
Event ID 10317 is logged when you turn on a mobile broadband
device or resume it from sleep
Hope this helps.
Best regards,
Justin Gu

Similar Messages

How to enable the Exchange 2010 Admin Audit logs in Event Viewer

How to enable the Exchange 2010 Admin Audit(Mailbox Auditing) logs in Event Viewer.
- Sivashankar. Please mark as answer/useful if my contribution is helpful

Hi Siva,
We could execute the command below to view Administrator Audit Logging settings:
Get-AdminAuditLogConfig
If it is not enabled, please run the command below:
Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
In addition, here are some references for you to utilize this feature:
Configure Administrator Audit Logging :
http://technet.microsoft.com/en-us/library/dd335109(v=exchg.141).aspx
Search the Administrator Audit Log :
http://technet.microsoft.com/en-us/library/ff459262(v=exchg.141).aspx
Regards,
Rebecca Tu
TechNet Community Support

Event viewer filtered log not exported correctly

Hi all,
I have a very strange problem, or better, I'm missing something.
I can open the event viewer and there are many events in there (45'000). I can filter for the last 7 days and this shows me only 1925 events which is correct.
Now, if I click on SAVE FILTERED LOG FILE AS, I can save the file in XML or TXT format (or others). It's not important the format because the export is incorrect! What I mean is that once the file has been exported to a TXT or others file's format, it contains
just some events, in this case maybe 50-60 events, not more! The strange thing is that in that file I can see ONLY the events from the most recent day in the filter (right now the 14 of june).
Now the funny part: if I save THE SAME LOG as .XML, it doesn't show all the events, but more than the TXT file (in this case, it shows until the 2nd of june), but the last event on the filtered event viewer, is on 13 may.
I hope somebody can help me, and excuse me for my explanation.

Hi ripp3r,
Thank you for your post.
I test to save event log following your description with same result. When I save log to evtx format file, the log show correctly.
Then I find KB2417105 (for Windows 2008) to express that logs are truncated because the saving event log operation is not synchronized appropriately with the fetching-event operation.
When I installed the KB2417105, event log saved to txt file successful.
If your server OS is Windows 2008 R2, please install
KB981466.
If there are more inquiries on this issue, please feel free to let us know.
Regards,
Rick Tan

Event Viewer cannot open the event Log or Custom view. Verify that the Event log service is running or query is too long. The instance name passed was not recognized as valid by a WMI data provider(4201).

"Event Viewer cannot open the event Log or Custom view. Verify that the Event log service is running or query is too long. The instance name passed was not recognized as valid by a WMI data provider(4201)"
This error keeps cropping up now and again on most of our domain controllers (OS-2008 AND 2008R2)...Usually a restart fixes the issue however the issue repeats and security logs don't generate.
Any advice on how to fix this issue permanently would be greatly appreciated.

Please see this: https://social.technet.microsoft.com/Forums/windows/en-US/95987ca3-a1b2-4da6-95b7-d825d06cdac7/error-code-4201-the-instance-name-passed-was-not-recognized-as-valid-by-a-wmi-data-provider?forum=w7itprosecurity
You can also try rebuilding the WMI repository: http://blogs.technet.com/b/askperf/archive/2009/04/13/wmi-rebuilding-the-wmi-repository.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Typographical error found in Event Viewer log for Event 8003. The source is "bowser" not browser.

I found a typographical error in the Event Viewer log.
Error 5/19/2014 1:07:52 AM bowser 8003 None
The body of the message is typical of the NetBIOS messages regarding master browser network control...
The master browser has received a server announcement from the computer...
Even though this is not critical, it should be updated at some point.
John

I found a typographical error in the Event Viewer log.
Error 5/19/2014 1:07:52 AM bowser 8003 None
The body of the message is typical of the NetBIOS messages regarding master browser network control...
The master browser has received a server announcement from the computer...
Even though this is not critical, it should be updated at some point.
John
it is deliberate, and, has been so, for 20years...
http://blogs.msdn.com/b/larryosterman/archive/2006/03/14/551368.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Error about the dll crdb_dao.dll - In Event Viewer - Application log

We have classic ASP application and we are using Crystal XI for reports viewing and printing. We are keep getting the following error logged in the event view application log.
Faulting application dllhost.exe, version 5.2.3790.3959, faulting module crdb_dao.dll, version 11.0.0.1282, fault address 0x0001b130.
What is Causing this error. When this happens, the components stops responding and we have re-start the server.

Hi ABC,
CR XI is past it's patch life cycle so all I can suggest is you download the last Service Pack and test again. If it still happens then you can update to XI R2 and try again.
You can get to downloads from here: http://service.sap.com/sap/bc/bsp/spn/bobj_download/main.htm
And to upgrade go to this link: http://www.sdn.sap.com/irj/boc and download the trial version of CR XI R2 and use your XI keycode, then apply the patches which you can get to by clicking on the BusinessObjects tab above, then Downloads.
Direct link to the Trial version: http://www.sap.com/solutions/sapbusinessobjects/sme/freetrials/index.epx
Thank you
Don

Kereros error in event viewer logs.

Hi All,
We have configure Vintella SSO on XI3.1 previously and for some reasons now we have changed to NTLM SSO but still we are observing kerberos error in event viewer logs.
Error1 : Kerberos error was received on log on session , client time and server time etc.
Error 2: Kerberos client received KRB_AP_Error_Modified server host/fully qualified name .THis indicate that password encrypts the kerberos service ticket different than that on target server commonly this is due to identically named machine account in the target realm and the client releams.Please contact your adimistrator.
Please help.
THanks....

That's a Microsoft Error coming from a Microsoft log, I can't be sure what's causing it, you need to consult Microsoft.
Usually in their errors the service account that generated it (if by a service account) is one of the details or in the error message. You may need to stop running something with a service account...
Regards,
Tim

Missing Event Viewer VM Manager Log after ugrade from SCVMM 2012 SP1 to R2

We recently upgraded from SCVMM 2012 SP1 to SCVMM 2012 R2. After the upgrade, I noticed that the VM Manager log, in the Event Viewer, is missing. I've tried to peruse all of the logs to see if it has been moved/renamed, with no luck. I highly doubt an important
log would be removed without a replacement being available, so I'm curious if it was something that had to be enabled (isn't turned on by default).
I had scripts which relied on the log for VM status changes, Event ID 821 (shut down/running/etc), to keep a last-used database for all of the VMs on our cloud.
Has anyone run in to this problem, or have any idea how I can get get the information that was available in the VM Manager log?
Thank you.

I have a similar problem when migrating VMs from Windows 2008 R2 (Non Clustered) Hyper-V to Windows 2012 Hyper Cluster. I had previously migrated about 100 VMs like this with no problem. It appears since upgrading from VMM SP1 Rollup 4 to Rollup 5 this problem
is happening. All Agents are up to date.
I can migrate VMs in the cluster no problem.
I removed the Windows 2008 R2 Hyper-V host and added it back which allowed the job to at least start but when it gets to the final steps of importing the VM it fails with the same error and references the VMM server.
Others suggest this is a VMM Certificate problem and you can remove the Cluster node and add it back again but I can't do that in a production Cluster with hundreds of VMs. That is not an acceptable solution.
How can we fix this?

Essential event viewer bugs with "Forwarded Events" log in Windows Server 2008 R2 and Windows 7

To my general experience, Windows event viewer is one of the most problematic, faulty management tools in the case of extensive use of its more sophisticated capabilities. The sole description as well as reproduction of some entangled failures would require
remarkable effort.
With the "Forwarded Events" log however, the situation becomes particularly worse in that even simple functionality fails and workarounds are difficult to find. That’s what I’ll describe here in order to share my experience with interested users.
For precision: I’ve extensively used event viewer on a German Windows Server 2008 R2 SP1 (Windows SBS 2011 Standard SP1). The bugs I found on that system, I could reproduce on a German Windows 7 Professional 64-Bit SP1, too.
Problem 1: Failure of even simple event filtering
To reproduce this problem, execute these steps on a test machine with any of the two OS mentioned above:
(i) To prepare log contents, do either of the following:
(a) populate some events to your local "Forwarded Events" log (most simply by subscribing events from other logs of the same machine; stop subscription if you have collected some events)
Or
(b) copy a non-empty log file "ForwardedEvents.evtx" from another machine (with any of the two OS mentioned above) to your test machine and open the file in event viewer.
(ii) Navigate to your "Forwarded Events" test log and open the filtering dialog. In the "Includes/Excludes Event IDs" field, type: 1-9000. Click OK.
(iii) Look at the results pane: Surprise, 0 Events! Do you really have no event IDs between 1 and 9000 in your test log?
(iv) Another example, if you have forwarded security events in your test log: Clear filter, if any previous filter is in place. Open the filtering dialog. In "Keywords" sub-dialog, choose "Audit Success". Click OK.
(v) Look at the results pane: Surprise, 0 Events! Do you really have no successful security monitoring events in your test log?
I’ll finish here. If you have a rich variety of events in your test log available, let your imagination run wild to test around. Finally include some simple manually created or modified XPath filters on the XML tab of the filtering dialog. I promise, you’ll
find a lot of additional strange results.
Problem 2: Cannot save manually selected events to .evtx file
Navigate to your "Forwarded Events" test log. In the results pane, select one or more events by highlighting them by mouse clicks. In context menu, choose "Save selected events". In the "save as" dialog, choose file type *.evtx
and save your file. Open the newly created file in event viewer. Result: Surprise, no events inside the new file!
Have more fun with forwarded events
Helmut

Did you mean that right click Forwarded Event and select "Filter Current Log..."? Since I can filter correct event vai the "Filter Current Log..." in my Lab environment.
Hi Justin,
yes, I mean "Filter Current Log ... " (in my German systems: "Aktuelles Protokoll filtern ... ").
What do you mean with "my Lab environment" exactly?
In the meantime, I performed additional tests. I copied the "ForwardedEvents.evtx" test file from Server 2008 R2 resp. Windows 7 to
(i) German Windows 8 Pro 64-Bit RTM
(ii) German Windows 8.1 Pro 64-Bit, up-to-date
in order to view and filter the file there.
Results: Same event viewer problem on Windows 8 RTM, but correct behavior on Windows 8.1!
Best regards, Helmut

I can no longer use all of the "Computer Management" tools against a remote computer. "Local Users and Groups", "Event Viewer", "Performance Logs and Alerts" and "Device Manager"

Hello All,
I can no longer use all of the "Computer Management" tools against a remote
computer. "Local Users and Groups", "Event Viewer", "Performance Logs and
Alerts" and "Device Manager"
kindly see the below snapshot for assistance
REGARDS DANISH DANIE

This link may help....
http://windowsxp.mvps.org/admintools.htm
Freeman

How to save all event viewer log files in Windows 7 Professional

Hello,
I would like to save all Event Viewer logs from my Windows 7 Professional computer and be able to view them from another computer. Currently I can only save one log at a time. Please let me know how I can save all Event Viewer logs
(Windows Logs, Applications and Service Logs, etc.).
Thanks,
Jason

Hi Jason,
There is no idea to save all categories log.
It's recommend you ask in Official Scripting Guys forum for further help:
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG
Besides that, this thread could be referred:
http://social.technet.microsoft.com/Forums/en-US/d66c1bd7-0e61-4839-a5f6-cbe29661dccb/how-to-use-script-saving-log-from-event-viewer-into-csv-file?forum=ITCG
Karen Hu
TechNet Community Support

Create an Event log entry in Event Viewer in Windows 7, when processor exceeds a set percentage of usage

Hi, I am trying to create an Event log entry in Event viewer in Windows 7 when the processor exceeds a set percentage of usage. I have unsuccessfully tried doing this through a Data Collection Set in the User Defined folder to monitor CPU usage
and to trigger an Alert and log an entry when the CPU exceeds a set percentage of usage. Any suggestions, and please if possible keep them simple and easy to follow, I am not to familar with Windows 7.

Hi, I am trying to create an Event log entry in Event viewer in Windows 7 when the processor exceeds a set percentage of usage. I have unsuccessfully tried doing this through a Data Collection Set in the User Defined folder to monitor CPU usage
and to trigger an Alert and log an entry when the CPU exceeds a set percentage of usage. Any suggestions, and please if possible keep them simple and easy to follow, I am not to familar with Windows 7.

Log Entries for Terminal Services in Event Viewer?

Hello
I wasn't sure exactly where to post this. Answers.microsoft.com directed me here for an answer.
I'm running Windows 7 Professional 32 bit. It's a standalone PC, not joined to a domain, never configured as a server. I'm puzzled. When I review entries in the Event Viewer, all logon and logoff entries are located in Event Viewer/Applications and Services
Logs/Microsoft/ Windows/Terminal Server/Local Session Manager/Operational. Every logon/logoff event is recorded here, although I have always had Remote Desktop Services disabled in Services. I would think that logon/logoff events would be recorded in
Applications and Services Logs/Microsoft/Windows/Winlogon. That makes more sense to me. Some of these user entries have Address: LOCAL and some are blank. No major hardware or software changes that might have caused this. The Event Viewer only goes back
6 months (1 Mb) and then it's overwritten. Can anyone explain this to me? Thanks for your help.

Hi,
The path of Event Viewer/Applications and Services Logs/Microsoft/ Windows/Terminal Server/Local Session Manager is used to record Remote Desktop Services activity even through it's disabled.
Windows logon and logoff activity is recorded in another path: Windows Logs/Security.
Karen Hu
TechNet Community Support

Windows 8.1 event viewer logs.

I am looking for the windows 8.1 event viewer logs and settings, online search fails to produce answer, and suggested .msc commands are not valid.

Hi @butface ,
Thank you for visiting the HP Support Forums and Welcome. I have looked into your issue with your Windows 8.1 and the event viewer. Here is how to open Event Viewer by clicking the Start button, clicking Control Panel, clicking System and Security, clicking Administrative Tools, and then double-clicking Event Viewer.
I would be happy to assist if needed as there are many models of HP Notebook ,
I would need the model number. How Do I Find My Model Number or Product Number?
Please let me know.
Thanks.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the bottom to say “Thanks” for helping!

Interpreting event viewer logs

what's the best approach to interpret event viewer error logs?
I'm having problems and they seem to get worse. I can't quite get my head around the best way to diagnose.
I have seen these errors:
Power Kernel
Open gl error
hard disk has a bad block
It's quite dizzying to decipher things.

Whew .... I think issue(s) are resolved.
I suspect initially I had an audio driver conflict causing freeze ups.
http://www.evga.com/support/knowledgebase/
Next I got confused on my onboard Marvel raid needs and installed an extra driver.
I uninstalled but crapola remained and I used Driveseeper to clean things.
So far so good! Wow ... I can actually edit today!
-NAN
Nan Toskey
651.206.4659
www.MEDIAtoRemember.com

Event ID 10317 PnP event is logged in Event Viewer

Similar Messages

Maybe you are looking for