Event viewer subscriptions error code 0x32

I’m using windows 7 home premium trying to configure event viewer subscriptions.
But getting error code (0x32) .
[hadi-TOSH] -
Error - Last retry time: 4/9/2014 6:28:35 PM. Code (0x32): <f:ProviderFault provider="Event Forwarding Plugin" path="%systemroot%\system32\wevtfwd.dll" xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault"><t:ProviderError
xmlns:t="http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog">Windows Event Forward Plugin failed to create subscription.</t:ProviderError></f:ProviderFault>
Next retry time: 4/9/2014 7:08:35 PM.

Hi,
Please make sure the Windows Event Collector service is started. You must be a member of the Administrators group to start this service.
http://technet.microsoft.com/en-us/library/cc748890.aspx
Kate Li
TechNet Community Support

Similar Messages

Errors for excel - excel service unavailable. Event Viewer has error event ids - 5239 and 5231.

Errors for excel - excel service unavailable. Event Viewer has error event ids - 5239 and 5231.
We restart the excel service app and it solves. Looking for permanent solution.
Regards,
Kunal

To resolved the issue do a simple restart.
Restart the server
Before restarting, verify that this problem occurs often. It may be an intermittent problem that is automatically corrected and does not require you to restart the server.
If the problem occurs often, restart the server running Excel Services Application.
If the problem continues to occur often, and restarting the server did not correct the problem, confirm that the hardware of the server is functioning correctly, or reinstall Excel Services Application and re-add the server to the server farm.
Here's the article with the explanation: Error communicating with Excel Services
Application - Events 5231 5239 5240
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

Event Viewer ACPI error MBP mid09

Hi, I have installed Win 7 on my MBP 5.5 mid 2009 and although its running well I am getting an error message in event viewer saying:
Error
25/09/2014 00:00:32
ACPI
13
None
something about the embedded controller failed to start in a reasonable time. Would anyone with the same mac please check their event logs to see if they have this error please?
I had this and a HAL error under Win 7 ultimate x64 (used this as a test os) so I installed Win 7 Pro from a Genuine Disc (I do not condone piracy) and I am getting the ACPI error (only after all the drivers were installed, the error message didnt show prior to boot camp 4 install). So before I spend £100 on a Genuine Windows disc (I already purchased Windows 8 at £106 but it seems apple dont support it on this mac :-(...) I'd like to know if its a failing logic board or driver related.
Thanks in advance
Darren

I have been running OSX for around 1 hour and then I rebooted into windows 7, loaded the event logs immediately and found the ACPI error had been recorded precisely 1 hour before windows had booted, I am wondering if this could be a bug between Mac/Windows time feature. after more restarts the ACPI isn't being recorded and other events times are correct.
edit:
I have just disabled the Synchronise with internet time feature in windows. I'll keep a look out.

Event ID 1058 Error Code 1326 Logon Failure; unknown user name or bad password

I am attempting to apply a group policy to a group of computers and I will get this event ID and error code generated. I can unc to the gpt.ini file. What can I do to resolve this problem? My structure is like this: I have a 2003
R2 DC located at site A (and this computer WIN7 is also located at site A) and I also have other 2003 DC's located at remote offices (across WAN links). This computer seems to be wanting to apply the GPO from one of the remote office DC's as opposed
to the local DC that is much closer - how can I change how GPO is processed on this computer?

I have two Domain Controllers Main ( Main DC Win 2012) and Second DC Win 2008.
the date of some policies is not out of date....
please check these files to know the problem.
dcdiag.txt output:
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   * Verifying that the local machine ASMDC, is a Directory Server.
   Home Server = ASMDC
   * Connecting to directory service on server ASMDC.
   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=buc,DC=edu,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
   Getting ISTG and options for the site
   * Identifying all servers.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=buc,DC=edu,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.
   * Found 2 DC(s). Testing 2 of them.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\ASMDC
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         Determining IP4 connectivity
         Determining IP6 connectivity
         * Active Directory RPC Services Check
         ......................... ASMDC passed test Connectivity
   Testing server: Default-First-Site-Name\BSMDC
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         Determining IP4 connectivity
         Determining IP6 connectivity
         * Active Directory RPC Services Check
         ......................... BSMDC passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\ASMDC
      Starting test: Advertising
         The DC ASMDC is advertising itself as a DC and having a DS.
         The DC ASMDC is advertising as an LDAP server
         The DC ASMDC is advertising as having a writeable directory
         The DC ASMDC is advertising as a Key Distribution Center
         The DC ASMDC is advertising as a time server
         The DS ASMDC is advertising as a GC.
         ......................... ASMDC passed test Advertising
      Test omitted by user request: CheckSecurityError
      Test omitted by user request: CutoffServers
      Starting test: FrsEvent
         * The File Replication Service Event log test
         ......................... ASMDC passed test FrsEvent
      Starting test: DFSREvent
         The DFS Replication Event Log.
         ......................... ASMDC passed test DFSREvent
      Starting test: SysVolCheck
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... ASMDC passed test SysVolCheck
      Starting test: KccEvent
         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... ASMDC passed test KccEvent
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Domain Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role PDC Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Rid Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         ......................... ASMDC passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         Checking machine account for DC ASMDC on DC ASMDC.
         * SPN found :LDAP/ASMDC.buc.edu/buc.edu
         * SPN found :LDAP/ASMDC.buc.edu
         * SPN found :LDAP/ASMDC
         * SPN found :LDAP/ASMDC.buc.edu/BUC
         * SPN found :LDAP/5e88f85b-15a6-4ff5-b0fd-6df748df06fd._msdcs.buc.edu
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5e88f85b-15a6-4ff5-b0fd-6df748df06fd/buc.edu
         * SPN found :HOST/ASMDC.buc.edu/buc.edu
         * SPN found :HOST/ASMDC.buc.edu
         * SPN found :HOST/ASMDC
         * SPN found :HOST/ASMDC.buc.edu/BUC
         * SPN found :GC/ASMDC.buc.edu/buc.edu
         ......................... ASMDC passed test MachineAccount
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC ASMDC.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=buc,DC=edu
            (NDNC,Version 3)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=buc,DC=edu
            (NDNC,Version 3)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=buc,DC=edu
            (Schema,Version 3)
         * Security Permissions Check for
           CN=Configuration,DC=buc,DC=edu
            (Configuration,Version 3)
         * Security Permissions Check for
           DC=buc,DC=edu
            (Domain,Version 3)
         ......................... ASMDC passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share \\ASMDC\netlogon
         Verified share \\ASMDC\sysvol
         ......................... ASMDC passed test NetLogons
      Starting test: ObjectsReplicated
         ASMDC is in domain DC=buc,DC=edu
         Checking for CN=ASMDC,OU=Domain Controllers,DC=buc,DC=edu in domain DC=buc,DC=edu on 2 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu in domain CN=Configuration,DC=buc,DC=edu on 2 servers
            Object is up-to-date on all servers.
         ......................... ASMDC passed test ObjectsReplicated
      Test omitted by user request: OutboundSecureChannels
      Starting test: Replications
         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=buc,DC=edu
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            DC=DomainDnsZones,DC=buc,DC=edu
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            CN=Schema,CN=Configuration,DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            CN=Configuration,DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
         * Replication Site Latency Check
         ......................... ASMDC passed test Replications
      Starting test: RidManager
         * Available RID Pool for the Domain is 8604 to 1073741823
         * ASMDC.buc.edu is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 7604 to 8103
         * rIDPreviousAllocationPool is 7604 to 8103
         * rIDNextRID: 7640
         ......................... ASMDC passed test RidManager
      Starting test: Services
         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... ASMDC passed test Services
      Starting test: SystemLog
         * The System Event log test
         An Warning Event occurred. EventID: 0x825A0024
            Time Generated: 08/21/2014   00:22:16
            Event String:
            The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system
time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources.
Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.
         An Warning Event occurred. EventID: 0x8000000E
            Time Generated: 08/21/2014   00:32:29
            Event String:
            There were password errors using the Credential Manager. To remedy, launch the Stored User Names and Passwords control panel applet, and reenter the password for the credential BUC.EDU\administrator.
         An Error Event occurred. EventID: 0x00000422
            Time Generated: 08/21/2014   00:32:29
            Event String:
            The processing of Group Policy failed. Windows attempted to read the file \\buc.edu\sysvol\buc.edu\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not
successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
            a) Name Resolution/Network Connectivity to the current domain controller.
            b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
            c) The Distributed File System (DFS) client has been disabled.
         ......................... ASMDC failed test SystemLog
      Test omitted by user request: Topology
      Test omitted by user request: VerifyEnterpriseReferences
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=ASMDC,OU=Domain Controllers,DC=buc,DC=edu and backlink on
         CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         are correct.
         The system object reference (serverReferenceBL)
         CN=ASMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=buc,DC=edu
         and backlink on
         CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         are correct.
         ......................... ASMDC passed test VerifyReferences
      Test omitted by user request: VerifyReplicas
   Testing server: Default-First-Site-Name\BSMDC
      Starting test: Advertising
         The DC BSMDC is advertising itself as a DC and having a DS.
         The DC BSMDC is advertising as an LDAP server
         The DC BSMDC is advertising as having a writeable directory
         The DC BSMDC is advertising as a Key Distribution Center
         The DC BSMDC is advertising as a time server
         The DS BSMDC is advertising as a GC.
         ......................... BSMDC passed test Advertising
      Test omitted by user request: CheckSecurityError
      Test omitted by user request: CutoffServers
      Starting test: FrsEvent
         * The File Replication Service Event log test
         ......................... BSMDC passed test FrsEvent
      Starting test: DFSREvent
         The DFS Replication Event Log.
         ......................... BSMDC passed test DFSREvent
      Starting test: SysVolCheck
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... BSMDC passed test SysVolCheck
      Starting test: KccEvent
         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... BSMDC passed test KccEvent
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Domain Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role PDC Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Rid Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         ......................... BSMDC passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         Checking machine account for DC BSMDC on DC BSMDC.
         * SPN found :LDAP/BSMDC.buc.edu/buc.edu
         * SPN found :LDAP/BSMDC.buc.edu
         * SPN found :LDAP/BSMDC
         * SPN found :LDAP/BSMDC.buc.edu/BUC
         * SPN found :LDAP/93561cab-4fb3-421f-9a67-af6b4c280eca._msdcs.buc.edu
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/93561cab-4fb3-421f-9a67-af6b4c280eca/buc.edu
         * SPN found :HOST/BSMDC.buc.edu/buc.edu
         * SPN found :HOST/BSMDC.buc.edu
         * SPN found :HOST/BSMDC
         * SPN found :HOST/BSMDC.buc.edu/BUC
         * SPN found :GC/BSMDC.buc.edu/buc.edu
         ......................... BSMDC passed test MachineAccount
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC BSMDC.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=buc,DC=edu
            (NDNC,Version 3)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=buc,DC=edu
            (NDNC,Version 3)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=buc,DC=edu
            (Schema,Version 3)
         * Security Permissions Check for
           CN=Configuration,DC=buc,DC=edu
            (Configuration,Version 3)
         * Security Permissions Check for
           DC=buc,DC=edu
            (Domain,Version 3)
         ......................... BSMDC passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share \\BSMDC\netlogon
         Verified share \\BSMDC\sysvol
         ......................... BSMDC passed test NetLogons
      Starting test: ObjectsReplicated
         BSMDC is in domain DC=buc,DC=edu
         Checking for CN=BSMDC,OU=Domain Controllers,DC=buc,DC=edu in domain DC=buc,DC=edu on 2 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu in domain CN=Configuration,DC=buc,DC=edu on 2 servers
            Object is up-to-date on all servers.
         ......................... BSMDC passed test ObjectsReplicated
      Test omitted by user request: OutboundSecureChannels
      Starting test: Replications
         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=buc,DC=edu
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            DC=DomainDnsZones,DC=buc,DC=edu
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            CN=Schema,CN=Configuration,DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            CN=Configuration,DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
            DC=buc,DC=edu
               Latency information for 5 entries in the vector were ignored.
                  5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
         * Replication Site Latency Check
         ......................... BSMDC passed test Replications
      Starting test: RidManager
         * Available RID Pool for the Domain is 8604 to 1073741823
         * ASMDC.buc.edu is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 8104 to 8603
         * rIDPreviousAllocationPool is 8104 to 8603
         * rIDNextRID: 8106
         ......................... BSMDC passed test RidManager
      Starting test: Services
         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... BSMDC passed test Services
      Starting test: SystemLog
         * The System Event log test
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:15
            Event String:
            Driver Send To Microsoft OneNote Driver required for printer Send To OneNote 2007 is unknown. Contact the administrator to install the driver before you log in again.
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:18
            Event String:
            Driver SolidPDF XChange required for printer SolidPDF XChange is unknown. Contact the administrator to install the driver before you log in again.
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:18
            Event String:
            Driver NRG SP 3400N PCL 6 required for printer !!net_pc5!NRG SP 3400N PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:19
            Event String:
            Driver Send To Microsoft OneNote Driver required for printer !!BUCLAPTOP1!Send To OneNote 2007 is unknown. Contact the administrator to install the driver before you log in again.
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:20
            Event String:
            Driver NRG SP 3400N PCL 6 required for printer !!BUCLAPTOP1!NRG SP 3400N PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
         An Warning Event occurred. EventID: 0x80000008
            Time Generated: 08/20/2014   23:52:20
            Event String:
            The jobs in the print queue for printer Microsoft XPS Document Writer (redirected 2) were deleted. No user action is required.
            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the
Advanced tab, and then clear the Log spooler warning events check box.
         An Warning Event occurred. EventID: 0x80000004
            Time Generated: 08/20/2014   23:52:20
            Event String:
            Printer Microsoft XPS Document Writer (redirected 2) will be deleted. No user action is required.
            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the
Advanced tab, and then clear the Log spooler warning events check box.
         An Warning Event occurred. EventID: 0x80000003
            Time Generated: 08/20/2014   23:52:20
            Event String:
            Printer Microsoft XPS Document Writer (redirected 2) was deleted, and users will no longer be able to print to this printer. No user action is required.
            To stop logging information events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click
the Advanced tab, and then clear the Log spooler information events check box.
         An Error Event occurred. EventID: 0x00000457
            Time Generated: 08/20/2014   23:52:22
            Event String:
            Driver NRG SP 3400N PCL 6 required for printer !!BUCLAPTOP1!NRG SP 3400N PCL 6 (Copy 1) is unknown. Contact the administrator to install the driver before you log in again.
         ......................... BSMDC failed test SystemLog
      Test omitted by user request: Topology
      Test omitted by user request: VerifyEnterpriseReferences
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=BSMDC,OU=Domain Controllers,DC=buc,DC=edu and backlink on
         CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         are correct.
         The system object reference (serverReferenceBL)
         CN=BSMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=buc,DC=edu
         and backlink on
         CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
         are correct.
         ......................... BSMDC passed test VerifyReferences
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: DNS
      Test omitted by user request: DNS
      Test omitted by user request: DNS
      Test omitted by user request: DNS
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
   Running partition tests on : buc
      Starting test: CheckSDRefDom
         ......................... buc passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... buc passed test CrossRefValidation
   Running enterprise tests on : buc.edu
      Test omitted by user request: DNS
      Test omitted by user request: DNS
      Starting test: LocatorCheck
         GC Name: \\ASMDC.buc.edu
         Locator Flags: 0xe00013fd
         PDC Name: \\ASMDC.buc.edu
         Locator Flags: 0xe00013fd
         Time Server Name: \\ASMDC.buc.edu
         Locator Flags: 0xe00013fd
         Preferred Time Server Name: \\ASMDC.buc.edu
         Locator Flags: 0xe00013fd
         KDC Name: \\ASMDC.buc.edu
         Locator Flags: 0xe00013fd
         ......................... buc.edu passed test LocatorCheck
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... buc.edu passed test Intersite
====================================================================
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\ASMDC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 5e88f85b-15a6-4ff5-b0fd-6df748df06fd
DSA invocationID: 1355f657-cd24-4ad4-b890-f04f5c624acd
==== INBOUND NEIGHBORS ======================================
DC=buc,DC=edu
    Default-First-Site-Name\BSMDC via RPC
        DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
        Last attempt @ 2014-08-21 00:43:56 was successful.
CN=Configuration,DC=buc,DC=edu
    Default-First-Site-Name\BSMDC via RPC
        DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
        Last attempt @ 2014-08-21 00:41:11 was successful.
CN=Schema,CN=Configuration,DC=buc,DC=edu
    Default-First-Site-Name\BSMDC via RPC
        DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
        Last attempt @ 2014-08-20 23:51:37 was successful.
DC=DomainDnsZones,DC=buc,DC=edu
    Default-First-Site-Name\BSMDC via RPC
        DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
        Last attempt @ 2014-08-21 00:45:39 was successful.
DC=ForestDnsZones,DC=buc,DC=edu
    Default-First-Site-Name\BSMDC via RPC
        DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
        Last attempt @ 2014-08-20 23:51:37 was successful.
Regards and thanks in advance
Mhiar

Event viewer Issues "Error 0x80070005"

Hello this is the severity: warning i keep getting for a user in event viewer
"Error 0x80070005 occurred while creating known folder {3EB685DB-65F9-4CF6-A03A-E3EF65729F3D} with path 'C:\Windows\system32\config\systemprofile\AppData\Roaming'."
Is someone familiar with this warning/error message and how to stop it from coming up. Also if it helps the user pc is on a domain and im the admin for it.

Hi,
How is the current situation? Have you check its permission?
Please run chkdsk /f /r command to fix and recover the disk error:
Run Check Disk from a Command Line to Check for and fix Disk Errors
https://technet.microsoft.com/en-us/magazine/ee872425.aspx
Meanwhile, please refer to this familiar thread:
https://social.technet.microsoft.com/Forums/windows/en-US/047bdb94-9958-4e8e-a112-4555e1ee3ad4/known-folders-errors-in-event-viewer?forum=w7itproperf
Karen Hu
TechNet Community Support

IPod 5G freezes iTunes, Event Viewer System Error

iPod 5G not playing nicely with iTunes, syncs iPod then freezes PC, unable to exit iTunes or disconnect iPod w/o rebooting system.
In Event Viewer>System, I found this:
Event Source: PlugPlayManager
Event ID: 256
Description: Timed out sending notification of device interface change to window of "program or service name and/or GUID."
thx-
c.

cronish
Have you been able to verify that your iPod is functioning properly by hooking it up to another computer?
If so, then here's a REAL shot in the dark.
Restart your computer and go into the Bios and turn off Hyperthreading if it's enabled.
If that doesn't work then re-enable it.
Jim

Windows 8 Event Viewer reports errors

1) Error: Source DistributedCOM; The server {....} did not register with DCOM within the required timeout.
I have changed the service startup to Automatic with delay with no result.
2) Error: Source Service Control Manager; The HP Network Devices Support service terminated with the following error: The specified module could not be found.
I am unable to find a way to reinstall this module. Granted this may be an HP support issue.

Hello @OrygunGuy ,
Thanks for posting on the HP Forums!
I'm sorry to hear about your errors. To resolve all your issues, I would like you to reinstall the operating system. It will clear up any software conflicts and allow you to start fresh, likely on Windows 8.
First, please ensure you backup your files. Here is information on how to do this: Backing Up Your Files (Windows 8)
Once this is done, it is safe to reinstall the operating system. Performing an HP System Recovery (Windows 8)
Please let me know your results. Thanks!
Mario
I worked on behalf of HP.

Backup failed for Windows 2008 R2 error code 2147755009 event id 19

Hi Guys,
I'm doing Windows server backup to a NAS drive via iSCSI target, and everything works fine until a few weeks back where my backup started to fail with the above event ID and error code. Description provided by Microsoft doesn't help either as it simply doesn't
explain much at all. (http://technet.microsoft.com/en-us/library/cc734218%28v=ws.10%29.aspx)
I updated the firmware of the NAS drive, make sure iSCSI connection wasn't dropping, and i even manage to do a backup manually via the "Backup Once" action. But when it comes to scheduled backup, it keeps on failing. I'm pretty sure the NAS drive
is working fine as well as iSCSI connection since i can do a backup manually.
Any idea guys?

Hi,
Could you please provide more detailed information about the error? You could refer to the article below to check if it helps:
Event ID 19: The backup operation attempted at '‎specific date' has failed to start, error code '2155348032'
https://bluesolutions.zendesk.com/entries/23345746-Event-ID-19-The-backup-operation-attempted-at-specific-date-has-failed-to-start-error-code-215534803
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Unable to refresh the schema of FIM MA.Getting an error in Event viewer ""the current version of database is not compatible with the one expected by Forefront Identity Manager service. The current version of database is : 1116. The expected version is :1"

Hi,
We have installed FIM MA with an account that have all the sufficient rights.It got created successfully and worked for Full Import and Full Sync. But, due to some version incompatabilities, we have installed a patch.PFB link for the patch.
http://support.microsoft.com/en-us/kb/2969673/en-us
Now, we are trying to refresh the schema of FIM MA. While doing that we are facing an error "Failed to connect to database". The user account with which we are connecting has read and write permissions on DB.In the event viewer some errors are
logged like "the current version of database is not compatible with the one expected by Forefront Identity Manager service. The current version of database is : 1116. The expected version is :1122" with event ID 3. PFB images for more detailed
view.
Please advice how to fix the issue.
Thanks
Prasanthi.

Hello,
seems to me that you maybe only updated the syncengine but not portal/webservice.
I had that error once after an recovery from scratch and forgot one of the hotfixes to apply to all services.
-Peter
Peter Stapf - ExpertCircle GmbH - My blog:
JustIDM.wordpress.com

Ati2Mtag error into event viewer

Hi,
each time the system start I found into the event viewer 5 error message.
Source: ati2mtag
Category: DAL
Type: Error
Event ID: 43034
Description: Unknown EDID version
My System is IBM ThinkPad T43p with 2gb RAM Windows XP sp2
I have recently updated the system using Lenovo System update.
I have also uninstalled and reinstalled the video driver but the problem is still here.
Thanks in advance for help

I have the same problem. I have a R52 with WindowsXP Sp2. I have installed/reinstalled all of the latests Windows & Lenovo updates including ATI MOBILITY RADEON X300, 8.383.1.1.3-070621a2-0510 2007/09/04 from Lenovo. If I uninstall the latter and allow Windows to install the driver, the error goes away.
Can anyone help?
Petert
ThinkPad T520 (4240-4EU)
i7-2620M(2.70GHz),4GB RAM,500GB 7200rpm HD,15.6in 1366x768 LCD,Intel HD Graphics,CDRW/DVDRW,Intel 802.11agn wireless,Bluetooth,Modem,1Gb Ethernet,UltraNav,Secure Chip,Fingerprint reader,Camera,6c Li-Ion,Win7 Pro 64

I am facing problem in starting ShellHWDetection service Error code 1075,please help

I am facing problem in starting ShellHWDetection service Error code 1075,please help

Shellhwdetection is a Windows service which stands for Shell Hardware Detection Service.
It provides notifications for AutoPlay hardware events.
System error code 1075 means "The dependency service does not exist or has been marked for deletion."
Please run services.msc, then find Shell Hardware Detection Service, view its dependencies
Make sure the three services are set to running "automatic" in Services.
If this doesn't help, then run sfc to check if there're some missing or corrupted files in system.
Yolanda Zhu
TechNet Community Support

Sharepoint- Error Code 52068

Hi,
I am at a client site trying to create a dashboard in Sharepoint PPS. I have configured Performance Point Service Application and Secure Store Service, so that I can use unattended service to connect to my SSAS cube.
I could create a site and run dashboard for it, but when I try to connect to my Analysis Server it throws an Error "An unexpected error occurred".
Event Log says: Error Code: 52068
Error occurred while receiving the HTTP response, could be due to the service end point binding not using the HTTP protocol. An HTTP request context being aborted by the server.
Could any one possibly have an idea to overcome this issue?
Inputs Appreciated!
Thanks,
Sneha.

Hi sneha19,
According to the error code ‘52068’, it seems to be the “Secured Store Service” issue.
please try to re-provision the service using the powershell command below:
http://blogs.msdn.com/b/sowmyancs/archive/2010/07/16/sharepoint-2010-service-applications-bcs-metadata-access-service-are-not-working.aspx
PS C:\Users\sowmyans> $sts = Get-SPServiceApplication | ?{$_ -match
"Security"}
PS C:\Users\sowmyans> $sts
DisplayName
TypeName
Id
Security Token Se... Security Token Se... 033b6266-261d-4318-9a9a-36f0e390d346
PS C:\Users\sowmyans> $sts.Status
Online
PS C:\Users\sowmyans> $sts.Provision()
Wayne Fan
TechNet Community Support

CRITICAL EVENT VIEWER ERROR CODES IN WINDOWS 8 OS HELP!!!!!

URGENT HELP NEEDED!! HP PAVILION G7 LAPTOP, PRE-INSTALLED OS: WINDOWS 8 UPGRADED TO 8.1 DOWNLOADED FROM WINDOWS. EVENT VIEWER SHOWING NUMEROUS ERROR ID'S #1 SOURCE: ESENT, EVENT ID: 532, WITH LEVEL:WARNING ON 1/11/14.
+
System
Provider
Name]
ESENT
EventID
532
Qualifiers]
0
Level
3
Task
1
Keywords
0x80000000000000
TimeCreated
SystemTime]
2014-01-11T21:09:31.000000000Z
EventRecordID
6382
Channel
Application
Computer
5CD3182MR2
Security
EventData
LiveComm
5976
C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\f3234cb42b8f428e\120712-0049\:
C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\f3234cb42b8f428e\120712-0049\DBStore\livecomm.edb
3907584
(0x00000000003ba000)
8192
(0x00002000)
36
STATES FAULTY HARDWARE, AND THIS IS A NEW LAPTOP! THERE ARE OTHER ID'S LISTED: EVENT ID:1530, SOURCE: USER PROFILE SERVICE, LOG NAME: APPLICATION, LEVEL:WARNING, 3 USER REGISTRY HANDLES LEAKED FROM WINDOWS\SYSTEM 32, I DONT
KNOW WHATS GOING ON?? IT IS MY NORTON 360? I SEE IT SHOWS :3 user registry handles leaked from
\Registry\User\S-1-5-21-3960481396-744839641-3680832521-500: Process 312
(\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key
\REGISTRY\USER\S-1-5-21-3960481396-744839641-3680832521-500 Process 752
(\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key
\REGISTRY\USER\S-1-5-21-3960481396-744839641-3680832521-500\Software\Microsoft\Windows\CurrentVersion\Uninstall
Process 312 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened
key
\REGISTRY\USER\S-1-5-21-3960481396-744839641-3680832521-500\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Connections
PLEASE HELP OR GIVE ME ADVICE, THANK YOU!!

Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file to skydrive or a file sharing service and put a link to it in your next post
If you have updated to win 8.1 and you get the error message "the system cannot find the file specified" it is a known problem.
The work around is to edit the registry. If you are not comfortable doing this DONT. If you are, backup the key before you do
Press Win+"R" and input regedit
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels. Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"
Did you ask this on another site??? It looks very familiar.
Wanikiya and Dyami--Team Zigzag

How to: subscribe for the viewer's Error event

I am running a third party report tool and am trying to understand how to comply with their request. My report works fine in all export modes with the exception of export to word at which time it throws a "Index was outside the bounds of the array"
error. This does not occur in any other export mode (i.e., Excel, RTF, TIFF, yada, yada.)
The request from the vendor is " subscribe for the viewer's Error event and the report's Error event to get the exception."
I run Win8.1 and would like to create a subscription to the View Event log to trap the occurrence of this error. I have tried to locate some documentation online as to how I can accomplish this.
Where can I find this information as well as an example?
Tom Mann MCSD C#

They seem to be suggesting that the control will raise an error event which you can subscribe to.
myViewer.Error += SomeHandler;
and presumably
private void SomeHandler(object sender, EventArgs a)
// Do some error handling.
If there turns out to be no actual error event then..,..
Can you put a try catch block round code does the export?
I'm guessing maybe not and it's an internal thing in the viewer.
Plan C , let's see now.
Try to find a way to override that button click on the viewer.
Hope that helps.
Recent Technet articles:
Property List Editing ;
Dynamic XAML

Multiple Event Viewer Error Ids, Corrupt Catalogs, System not working right. Please help.

Since I could not find a list of the Event Ids that was accurate at all or not too general as to be useless and Microsoft won't let us know how to fix these ourselves without having a programming degree, I am begging for help from anyone who can help
me get my computer working right again. I have some important things to get done which I can't do without my computer working. I have tried to get what I could get but I am blocked from many files which makes it difficult to get info. Please help. I appreciate
any help I can get. Thank you,
WhiteFox42
I am not sure which one is more important.
Event id 20
Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008, Windows Server 2008 R2 for x64-based Systems
(KB2468871).
Event id 11
Possible Memory Leak. Application (C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 476) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always
reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3f31c91e-2545-4b7b-9311-9529e8bffef6}), Method number (20). User Action: Contact your application
vendor for an updated version of the application.
Event id 455
taskhost (1348) WebCacheLocal: Error -1811 (0xfffff8ed) occurred while opening logfile R:\User\App Data\Roaming\Microsoft\Templates\Local\Microsoft\Windows\WebCache\V01.log.
Event Xml:
Event id 505
wuaueng.dll (1012) SUS20ClientDataStore: An attempt to open the compressed file "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb" for read / write access failed because it could not be converted to a normal file. The open file operation
will fail with error -4005 (0xfffff05b). To prevent this error in the future you can manually decompress the file and change the compression state of the containing folder to uncompressed. Writing to this file when it is compressed is not supported.
Event id 513
Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object
Event id 1000
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.16428, time stamp: 0x525b664c
Faulting module name: IEFRAME.dll, version: 11.0.9600.16476, time stamp: 0x52944cf2
Exception code: 0xc0000005
Fault offset: 0x00025f1d
Faulting process id: 0x1854
Faulting application start time: 0x01cf0735f0e5f0c7
Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Faulting module path: C:\Windows\system32\IEFRAME.dll
Report Id: e3dc1e9a-733f-11e3-b920-00215a2af202
Event id 1000
Faulting application name: msiexec.exe, version: 5.0.7601.17514, time stamp: 0x4ce79d93
Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeb033f
Exception code: 0xc0000005
Fault offset: 0x00000000000035e1
Faulting process id: 0x1030
Faulting application start time: 0x01cf01b77867a358
Faulting application path: C:\Windows\system32\msiexec.exe
Faulting module path: C:\Windows\system32\msvcrt.dll
Report Id: f7253b17-6daa-11e3-b944-00215a2af202
Event id 1002
Computer:      w7mar-64 "I don't know why it has computer as this when it should not be."
Description:
The IP address lease 192.168.200.195 for the Network Card with network address 0x08002742F261 has been denied by the DHCP server 192.168.200.1 (The DHCP Server sent a DHCPNACK message).
Event id 1008
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Index Corruption}.
Event id 1008
Computer:      w7mar-64
Description:
An errorUser:          LOCAL SERVICE
occurred in initializing the interface. The error code is: 0x2.
Event id 1014
User:          NETWORK SERVICE
Computer:
Description:
Name resolution for the name wpad.westell.com timed out after none of the configured DNS servers responded.
Event id 1015
User:          N/A
Computer:      w7mar-64
Description:
Event ID 1013 for the Windows Search Service has been suppressed 7 time(s) since 12:04:10 PM. This event is used to suppress Windows Search Service events that have occurred frequently within a short period of time. See Event ID 1013 for further details
on this event.
Event id 1015
Failed to connect to server. Error: 0x8007043C
Event id 1018
The description for Event ID 1018 from source EvntAgnt cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
Event id 1020
Updates to the IIS metabase were aborted because IIS is either not installed or is disabled on this machine. To configure ASP.NET to run in IIS, please install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.
Event id 1028
Windows Installer has determined that its configuration data cache folder was not secured properly. The owner of the key must be either Local System or Builtin\Administrators. The existing folder will be deleted and re-created with the appropriate security
settings.
Event id 1101
.NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: System.Web.Entity.Design, Version=3.5.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil . Error code = 0x80010108
Event id 1500
The description for Event ID 1500 from source SNMP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
Event id 1530
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
Event id 1530
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
6 user registry handles leaked from \Registry\User\S-1-5-21-2959539970-205720217-4182857889-1000:
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software\Microsoft\Internet Explorer\Main
Process 1020 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2959539970-205720217-4182857889-1000\Software\Policies
Event id 3028
Context: Windows Application, SystemIndex Catalog
Details:
   The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Event id 3029
Context: Windows Application, SystemIndex Catalog
Details:
   The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Event id 3036
The content source <csc://{S-1-5-21-2959539970-205720217-4182857889-1001}/> cannot be accessed.
Event id 3036
No protocol handler is available. Install a protocol handler that can process this URL type. (HRESULT : 0x80040d37) (0x80040d37)
Event id 4104
Description:
The backup was not successful. The error is: Access is denied. (0x80070005).
Event id 4228
TCP/IP has chosen to restrict the scale factor due to a network condition. This could be related to a problem in a network device and will cause degraded throughput.
Event id 4321
The name "WHITEFOXPC     :0" could not be registered on the interface with IP address 192.168.1.21. The computer with the IP address 192.168.1.19 did not allow the name to be claimed by this computer.
Event id 4373
The description for Event ID 4373 from source NtServicePack cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
Event id 4879
MSDTC encountered an error (HR=0x80000171) while attempting to establish a secure connection with system WHITEFOXPC.
Event id 6000
The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.
Event id 6006
The winlogon notification subscriber <TrustedInstaller> took 186 second(s) to handle the notification event (CreateSession).
Event id 7000
The Windows Audio service failed to start due to the following error:
A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view
the service configuration and the account configuration.
Event id 7001
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event id 7010
The index cannot be initialized.
Details:
   The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Event id 7023
The Block Level Backup Engine Service service terminated with the following error:
%%-2147024713
Event id 7024
The Windows Search service terminated with service-specific error %%-1073473535.
Event id 7026
The following boot-start or system-start driver(s) failed to load:
aswKbd
aswRvrt
aswSnx
aswSP
aswTdi
aswVmm
discache
spldr
Wanarpv6
Event id 7030 & 7031
The dldw_device service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Event id 7032
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Installer service, but this action failed with the following error:
An instance of the service is already running.
Event id 7040
The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index.
Event id 7042
The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
Details:
   The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)
Event id 8210
An unspecified error occurred during System Restore: (Installed Java 7 Update 45). Additional information: 0x80070003.
Event id 9000
The Windows Search Service cannot open the Jet property store.
Details:
   0x%08x (0xc0041800 - The content index database is corrupt. (HRESULT : 0xc0041800))
Event id 10005
DCOM got error "1084" attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}
Event id 10010
15 of these with different server codes which I can't copy unless I copy all the details.
The server {3EEF301F-B596-4C0B-BD92-013BEAFCE793} did not register with DCOM within the required timeout.
Event id 12348
Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{8e79517c-6c41-11e3-b621-cb03f0618d54}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning
properly. Check security on the volume, and try the operation again.
Event id 15006
9 of these.
Description:
Owner of the log file or directory \SystemRoot\System32\LogFiles\HTTPERR\httperr1.log is invalid. This could be because another user has already created the log file or the directory.
Event id 31004
33 of tese.
The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
The End.
Kimberly D. White-Fox

Please provide a copy of your System Information file. Type System Information in the Search Box above the start Button and press the ENTER key
(alternative is Select Start, All Programs, Accessories, System Tools, System Information). Select File, Export and give the file a name noting where it is located. The system creates a new System Information file each time system information is accessed.
You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload to your Sky Drive, share with everyone and post a link here. Please say if the report has been obtained in safe mode.
Please upload and share with everyone copies of your System and Application logs from your Event Viewer to your Sky Drive and post a link here.
To access the System log select Start, Control Panel, Administrative Tools, Event Viewer, from the list in the left side of the window select Windows
Logs and System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do the same for the Applications log. Do not provide filtered files.
For help with Sky Drive see paragraph 9.3:
http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm
Some Event Viewer reports are generated solely because the computer is in safe mode or safe mode with networking. You have at least one example of this in your long list. If you do not see the same report for a time when
the computer was in normal mode then it can be disregarded.
You will find some general advice on interpreting Event Viewer reports here:
http://www.gerryscomputertips.co.uk/syserrors5.htm
Hope this helps, Gerry

Event viewer subscriptions error code 0x32

Similar Messages

Maybe you are looking for