locked
Windows Server 2008 R2 Event Log will not start - Error 4201 RRS feed

  • Question

  • All,

    We've recently put a new Windows Server 2008 R2 Enterprise (64bit) machine in to our Active Directory Domain.  We ran the Adprep32 commands on our existing Windows Server 2003 forest/domain and that was successful. 

    After adding Active Directory Domain Services and DNS to the new Server and running DCPromo the new Windows Server 2008 machine was working ok.  We restarted the server about four days later and the Event Log service will no longer start.

    When you attempt to start the service we get "Error 4201: The instance name passed was not recognized as valid by a WMI data provider". 

    I've read a whole load of different suggested fixes, mainly to do with registry and file system permissions.  Also tried Netsh Winsock Reset. 

    Just wondering if anybody can suggest anything else please? We've transferred over to this as a live server so I'm reluctant to rebuild it.  As it is so new, and with a new build of Windows Server 2008 R2, I'm hoping maybe somebody else has come across this with Windows Server 2008. 

    The server also has SQL 2005 running on it, but that was installed and all working before Active Directory and DNS. 

    Thanks in advance.

    Dan

    Monday, April 12, 2010 10:50 PM

Answers

  • Many thanks for your reply.  We were unsuccessful in the end. 

    To resolve the issue, we ran the Windows Server 2008 Enterprise installation DVD in the server and selected to upgrade the existing instance.  That ran an installation over the top and it's now working again... thankfully!

     

    Thanks again for replying though.

    Dan

     

    Tuesday, April 13, 2010 7:09 PM

All replies

  • Hi Dan,

    Although you mentioned that you have tried some steps related to permission, please have a look on the steps provided by Gary Bouchard about reset permission in following thread.

    http://social.msdn.microsoft.com/forums/en-US/windowscompatibility/thread/c75ae899-d05b-411d-a7f2-00fdd33b8589/

    If issue still exists, try take ownership of the folder C:\Windows\System32\LogFiles\WMI\RtBackup and reboot the computer to see the result. This step is also mentioned in replies in above thread.

    Tuesday, April 13, 2010 2:37 AM
    Moderator
  • Many thanks for your reply.  We were unsuccessful in the end. 

    To resolve the issue, we ran the Windows Server 2008 Enterprise installation DVD in the server and selected to upgrade the existing instance.  That ran an installation over the top and it's now working again... thankfully!

     

    Thanks again for replying though.

    Dan

     

    Tuesday, April 13, 2010 7:09 PM
  • Hi,

    So the issue is fixed by an inplace upgrade. Thank you for taking time to post the result. Have a good day.

    Shaon

    Wednesday, April 14, 2010 7:57 AM
    Moderator