Discussion Locked

Event viewer service not started

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
When i view event viewer, NT says that the eventlog service is not started. In control panel when you try to start the eventlog service, it says "Error 2140 - internal WIN NT error has occured" Any clues?

2 replies

by rikrok66

You may have corrupted event logs. Try this :
delete these files Sysevent.evt, Appevent.evt, Secevent.evt After you do this;

NTFS Partition
Click the Start button, point to Settings, click Control Panel, and then double-click Services.

Select the EventLog service and click Startup. Change the Startup Type to Disabled, and then click OK. If you are unable to log on to the computer but can access the registry remotely, you can change the Startup value in the following registry key to 0x4:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

Restart Windows NT.

NOTE: When the system starts up, several services may fail; a message informing the user to use Event Viewer to review errors may appear.
Rename or move the corrupt *.evt file from the following location:

%SystemRoot%\system32\config

In Control Panel Services tool, reenable the EventLog service by setting it back to the default of Automatic startup, or change the registry Startup value back to 0x2

Q172156

This discussion is closed to new replies.