Can't start Event Log Service

[Andrew]

Hello,

I had some error or other and wanted to go look into the event logs to see
what I could see...

But I just got a message saying: "Event Log service is unavailable. Verify
that the service is running." - So of course I go to services, and see that
indeed, the service "Windows Event Log" is set to Automatic, but it is Not
running.

I right-click it and try to start it... But it just tries for a moment, and
then pops up with an error: "Error 4201: The instance name passed was not
recognized as valid by a WMI data provider."

A quick google search turns up a number of other people who have experienced
the same thing - including, like me, who's event log was previously working.

Any thoughts or suggestions to get this working would be much appreciated.

Thanks!

[chuck@cartiaconsulting.com]

Have you had any luck with this issue yet?

Thanks,
Chuck

[Mikej101]

I'm wondering the same - Has anyone got any idea how or why this happened. My
system was running the Event Logging OK until yesterday. Then suddenly it
won't run. Microsoft are a tad slow in responding to a problem that seems to
be fairly common.

[Squibbly]

can someone tell me which services i can disable, there seems to be so much
more in vista ultimate that i dont think i need all of them

[geircito]

Here's the solution:

Something (Vista itself ??) must have changed the ownership of the
LogFiles folder.

----

How to take ownership:

Open folder C:\Windows\System32
Rightclick folder "LogFiles" - open Properties
open Security-tab and click Advanced
open Owner-tab and click Edit
mark Administrator (or your user) under "Change owner to:"
mark "Replace owner on subcontainers and objects"
press OK and press "Continue" to all error messages
close all open windows

restart your PC, and the Event Log Service will restart automatically

[Mikej101]

Thanks for that - I have found the answer on TechNet but do appreciate the
response.