Matrixisrl

ERROR_WMI_INSTANCE_NOT_FOUND
4201 The instance name passed was not recognized as valid by a WMI data provider.

http://msdn2.microsoft.com/en-us/library/ms681387.aspx < this is the only error explanation I have found so far (it's really not very helpful)

I cannot start the event log service no matter what I try as a workaround. I really don't know what caused it to stop or what is causing the error above when I try to start it, but I have a hunch it is a compatibility issue. This is a serious security concern and I need it fixed ASAP. I hope MS addresses this issue in their next update...



Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

I haven't seen anything in the bug database on a similar problem or a repro.

If you are having issues with starting your event log it's probably best to contact the main support line. Try to give them as much info as possible.

Here's the link for general Vista Issues:

http://windowshelp.microsoft.com/Windows/en-US/techsupport/default.mspx

It's another link that might help you as well, it has links to news groups and technet.

http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=423586&SiteID=1

 






Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

MarkRennie

Matrixisrl wrote:

ERROR_WMI_INSTANCE_NOT_FOUND
4201 The instance name passed was not recognized as valid by a WMI data provider.

http://msdn2.microsoft.com/en-us/library/ms681387.aspx < this is the only error explanation I have found so far (it's really not very helpful)

I cannot start the event log service no matter what I try as a workaround. I really don't know what caused it to stop or what is causing the error above when I try to start it, but I have a hunch it is a compatibility issue. This is a serious security concern and I need it fixed ASAP. I hope MS addresses this issue in their next update...



I've only just rebuilt my PC with vista on and I am getting this... any idea what is stopping the event log service from starting




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

Bruce N. Baker - MSFT wrote:

I haven't seen anything in the bug database on a similar problem or a repro.

If you are having issues with starting your event log it's probably best to contact the main support line. Try to give them as much info as possible.

Here's the link for general Vista Issues:

http://windowshelp.microsoft.com/Windows/en-US/techsupport/default.mspx

It's another link that might help you as well, it has links to news groups and technet.

http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=423586&SiteID=1

I reported this problem to Microsoft Tech Support back in January or February (SRX070227600510) and it was escalated to upper level support, however a solution was never found!

I told them loud and clear that there are a lot of people having the issue and they could browse the Newsgroups to see all that are effected, and cannot believe that it still has not been fixed!

The system I am having trouble with is a development machine used with Visual Studio, and it is not practical for me to wipe and reload everything as Microsoft suggests!

I eventually ended up reloading everything back on in the above case, and everything worked fine until 5/18/2007.

This is when I lost my Event Viewer and my FAX service... there may be a couple of other services that are not functioning also.

One commonality I have discovered (though I am not sure this is the problem) is that in both instances, Windows DreamScene Content Pack was installed from Vista update, and then everything went south! I have uninstalled all of that and even went back as far as I could with System Restore to no avail.

I ran the WMIDiag, and send the logs to Microsoft Support, however they tell me there was nothing of any help in the logs even though the log has an entry that says there is a problem with WMI and it may not run correctly!

I wish someone from Microsoft would investigate this problem instead of arbitrarily telling me to wipe and reload!!!! Thats not always as simple as it seems, and obviously, the problem is going to come back as it did in my case.





Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

I am not in a loop to assist you with this and unfortunately I did not see another bug exactly related to this issue or a KB. If issue was stop after being escalated did you try to recontact them

What are in the dialogs for the event service properties, anything unusual in there






Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

Bruce N. Baker - MSFT wrote:

I am not in a loop to assist you with this and unfortunately I did not see another bug exactly related to this issue or a KB. If issue was stop after being escalated did you try to recontact them

What are in the dialogs for the event service properties, anything unusual in there

Bruce,

The only thing that I noticed was that when you go to the Logon tab of the Windows Event Log Service dialog, the login information on the entire tab is grayed out (even if I am on as administrator). I cannot change the logon for the service. The service is set to start automatically.

I have recontacted Microsoft support... The support engineer said that they are looking into it, but want me to reinstall, which I only want to do as an extreme last resort.

Here is the gentleman (below) helping me. I know it's not earth shattering or hazardous to my health, but I am sure that myself and the others that have this problem sure would like someone to take a serious look at the issue and fix it! If you do a Google search, there are a lot more folks running into this problem that are not part of the MS Newsgroups.

Nilesh Bhavsar

Microsoft Enterprise Support Engineer

* E-mail: v-11nibh@mssupport.microsoft.com

I cannot use my fax service as these are somehow connected... the Task Scheduler is not functioning either... if I look in Services.mmc the service is running, however if I attempt to open the Task Scheduler to see what is running, it says "The Task Scheduler Service is not available"

There are probably a couple more services that I am not aware of yet which are not functioning.





Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

Huge font you use.

Those other services depend on Event Service that is why they are also not functioning.






Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

All the better to see me with

Ok, so now if we can figure out why the event log service wont start, we'd be happy campers!

Is there some way to find out how the event log service is being called The error is saying that the "instance name passed was not recognized as valid by the WMI provider"... How is this parameter determined





Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

What are the properties of the Event Service. What account is it running under




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

Bruce,

The Event Viewer service is logged on with Local Service, it is set to Automatic, and the command line shows c:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted.

The Logon tab shows Local Service (with the second radio button checked), however the entire tab is grayed out.

Reading some of the other posts, I have tried the permissions angle, and checked the owner of the %windir%\system32\logfiles folder.

The frustrating part is this WAS working a couple of weeks ago... I am pretty sure the problem started on May 18th, and I used the System Restore to go back to the day before that (which was as far as they were available) but that did not change the problem.





Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

have you changed any system passwords since then




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

Bruce N. Baker - MSFT wrote:
have you changed any system passwords since then

No... It was business as usual... Actually, I was getting an error when trying to run a backup to a folder on my server, so I went to open the Event Logs to see if I could figure out the problem, and found this trouble too...

My backup still is not working correctly in that it says the drive is no longer available (which it is), but thats another issue (I hope).

I still have not heard back from MS Tech Support!




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

If you are a partner, let me know and we can create a case and have this case escalated.




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Gary Bouchard

Bruce N. Baker - MSFT wrote:
If you are a partner, let me know and we can create a case and have this case escalated.

Certified Partner Partner ID: ###### [Active]
I felt funny putting my partner ID in here, but I have one, of course.




Re: Application Compatibility for Windows Vista Serious security concern: event log error 4201

Bruce N. Baker - MSFT

Contact made, Sent Mail, Following up,Thanks, -Bruce