Re: Event viewer missing component???

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: KM (konstmor_at_nospam_yahoo.com)
Date: 12/02/04 

Date: Thu, 2 Dec 2004 12:41:44 -0800

Lucas,

I have been out for a while and couldn't reply you.
Anyway, I think Doug's reply helped you already. Please let us know the result for future reference.

Also, here is a good article for you that I ran across a long while ago to get more familiar with Event Viewer registry and etc.:
http://www.codeproject.com/dotnet/evtvwr.asp 

-- 
 Regards,
        KM, BSquare Corp.
> Hi KM and all other readers....
>
> I checked my image and I have already applied the QFE that you mentioned in
> the newsgroup, I also already have drvmain.sdb in my image.
> I added the component "Software Installation Group Policy Extension" and
> rebuilt my image.
>
> Still the same problem. I should mention that I'm not using winlogon.
>
> Still Can't find EventID. Any other suggestions? This is a headache...
>
> Thanks for all your help
> Lucas
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> > Lucas,
> >
> > Please search NG archive for drvmain.sdb:
> >
> http://groups.google.com/groups?hl=en&lr=&c2coff=1&q=drvmain.sdb&meta=group%3Dmicrosoft.public.windowsxp.embedded.*
> >
> > Basically, you would need to copy this file to the run time manually (or
> though your component).
> > IIRC, there have been a QFE that fixed the problem.
> >
> > -- 
> >  Regards,
> >         KM, BSquare Corp.
> >
> >
> > > Hi!
> > >
> > > I did some more research....this is ths problem:
> > >
> > > When I open event viewer I go to the Security Evenlog and click on one
> of
> > > the Audits and see the following message:
> > > ----------
> > > The description for Event ID ( 577 ) in Source ( Security ) cannot be
> found.
> > > The local computer may not have the necessary registry information or
> > > message DLL files to display messages from a remote computer. You may be
> > > able to use the /AUXSOURCE= flag to retrieve this description; see Help
> and
> > > Support for details. The following information is part of the event: NT
> > > Local Security Authority / Authentication Service;
> > > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;
> WORKGROUP;
> > > (0x0,0x3E7); SeTcbPrivilege.
> > > ----------
> > > Okie, hmm, so I go to the registry
> > > HKLM\System\CurrentControlSet\Services\Eventlog\Security
> > >
> > > and its empty, I check the Application subkey and it contains resources.
> > > Then I check the same keys in a XP Pro and the security subkey also
> contains
> > > resources.
> > >
> > > So my question is: is there a component that activates the security
> evenlog?
> > > Any other suggestions??
> > >
> > > Thanks for your help...
> > > Lucas
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Virus - downloaded Uniblue Registry Booster
    ... What level of Security do you have in Internet Explorer? ... Was the restore point dated before installing Registry Booster 2009? ... What errors, if any, are appearing in Event Viewer? ... If you want to pursue Malware try malwarebytes. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Extracting NT password hashes from registry export file
    ... Extracting NT password hashes from registry export file ... This list is provided by the SecurityFocus Security Intelligence Alert Service. ...
    (Pen-Test)
  • Re: System very slow, very difficult to access server, cpu usage l
    ... Windows saved user MARK4017DESKTOP\Owner registry while an ... application or service was still using the registry during log off. ... You need to post copies of the Error Reports from Event Viewer if I ...
    (microsoft.public.windowsxp.general)
  • [NT] Exchange 2000 System Attendant Incorrectly Sets Remote Registry Permissions
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Microsoft Management Console snap in, the System Attendant makes ... changes to the permissions on the Windows Registry to allow Exchange ... There is a flaw in how the System Attendant makes these Registry ...
    (Securiteam)
  • Re: Registry problem
    ... TraceFileName parameter not located in registry; ... The Windows Security Center Service was unable to establish event queries ... the System and Application logs in Event Viewer for the last boot. ... casual user wrote: ...
    (microsoft.public.windowsxp.basics)