Event Viewer errors

borgus

New Member
Member
Messages
110
What is generating these errors has been tracked down. What can eliminate them has not...

SChannel errors are seen after each Windows Update.

Distributed COM (lack of permission) errors pop up after clicking on certain start menu tiles.

Though several posts in forums suggest how to change permissions via Component Services
and the registry, none of those measures are available here. Greyed out or "access denied."

Despite the error, the clicked start menu items (weather and finance) do eventually appear.
 

My Computer

System One

  • OS
    W8
Please provide us with your Event Viewer administrative logs by following these steps:


Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file here.
 

My Computer

System One

  • OS
    WCP
    System Manufacturer/Model
    HP
    CPU
    2@ 4.9 Hz
    Memory
    64 gig
    Graphics Card(s)
    Nvidia 9600
    Sound Card
    integrated
    Monitor(s) Displays
    laptop
    Screen Resolution
    1440x900
    Hard Drives
    300gig internal and a bunch ext
    Cooling
    not much
    Keyboard
    Built-in
    Mouse
    Logitch Anywhere Mx wireless mouse
    Internet Speed
    50 down 1.5 up
My pleasure.

Not much to go on but... Basically a permissions issue. Have you changed anything in registry, permissions, or group policy, since the install?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 4/8/2012 5:28:18 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: S-1-5-21-2999115758-1730126537-2246688249-1001
Computer: Howard
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with

to the user Howard\hb SID (S-1-5-21-2999115758-1730126537-2246688249-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
 

My Computer

System One

  • OS
    WCP
    System Manufacturer/Model
    HP
    CPU
    2@ 4.9 Hz
    Memory
    64 gig
    Graphics Card(s)
    Nvidia 9600
    Sound Card
    integrated
    Monitor(s) Displays
    laptop
    Screen Resolution
    1440x900
    Hard Drives
    300gig internal and a bunch ext
    Cooling
    not much
    Keyboard
    Built-in
    Mouse
    Logitch Anywhere Mx wireless mouse
    Internet Speed
    50 down 1.5 up
No conscious permissions changes have been made...

As noted earlier, others are experiencing the same error (Windows SHELL). I followed proposed remedies seen in forums but was thwarted by greyed-out items under the security tab in Component Services and ACCESS DENIED messages in the registry.

Perhaps unrelated, the system also has a tendency to hang for 15-45 seconds - sometimes indicating "not responding". This occurs randomly with various apps and processes. For instance, I just invoked EVENT VIEWER, which popped up almost immediately a few hours ago. This time it took almost a minute.
 

My Computer

System One

  • OS
    W8
Could be helpful to us to run the tool in the top thread of this subforum then post the zip it makes here. Apologies if you've done this previously elsewhere.

There are quite a few ways around the access problems. The easiest is to follow Brink's tutorial on how to access the true Administrator account.
 

My Computer

System One

  • OS
    8250 x86 + 7 SP1 x86 + Ubuntu 12.04 LTS x86
    CPU
    P4 3.4 GHz HT
    Motherboard
    MSI-7211
    Memory
    OCZ 2 GB DDR @ 400 MHz
    Graphics Card(s)
    HIS AGP HD 3850 Turbo Ice-Q
    Sound Card
    MOTU Traveler firewire interface
    Monitor(s) Displays
    Acer x223w
    Screen Resolution
    1680x1050
    Hard Drives
    WD Caviar Black 1 TB Sata II, WD 400 GB Sata I, WD 120 GB Sata I
    PSU
    300W generic
    Case
    Cybertron
    Keyboard
    Logitech Classic Keyboard 200, Dell RT7D20
    Mouse
    Logitech M510
    Internet Speed
    2 MByte/sec Down, 250 KByte/sec Up
Yes, I uploaded info from that tool in the course of another thread. Nothing unusual found.

For this issue I have attempted to gain permissions via the true administrator account (per Brink).
Same result: ACCESS DENIED. ^_^ Perhaps the next W8 version will see the fix.

Thanks
 

My Computer

System One

  • OS
    W8
The event log you've posted shows you're getting a lot of device driver detection/start-up problems, which may indicate incorrect or outdated drivers. You're also showing event 1101 - Audit events have been dropped by the transport. 0 - which tends to indicate the system trying to write more log entries than it can deal with. Interestingly, several of the COM objects on the System channel are related to event services, so It's probable there's a link there to your DCOM errors. You could try disabling auditing, temporarily, see if these events diminish...
 

My Computer

System One

  • OS
    Windows 7 x64 Ultimate/Windows 8.1/Linux
    CPU
    FX-8350
    Motherboard
    GA-990XA-UD3
    Memory
    16GB DDR3 Corsair Vengeance
    Graphics Card(s)
    HD7860
    Sound Card
    Xonar Essence STX
    Monitor(s) Displays
    Benq
    Screen Resolution
    1920x1080
    Hard Drives
    Various
    PSU
    Corsair HX 850W
    Case
    Corsair Obsidian
    Cooling
    Thermalright
    Keyboard
    Logitech
    Mouse
    Logitech
    Internet Speed
    50/50
    Browser
    firefox
Interesting, if somewhat beyond my level of comprehension. Logically, it seems odd that W8 spews errors that Win 7 does not. Win 7, SSD, lists virtually no errors yet it runs precisely same hardware and software as does W8 on a SATA drive. Two optical drives are dated, but do function in both O/S.

That's not say that drivers for each O/S are identical. When various W8 peripherals are queried for updates they report "already using the best driver." A manufacturer's site might have a better driver, yet I have been unable to locate one.

But for a hang/NFTS corruption (widely reported) that may be tied to WMP - which seems to have abated here - and the occasional 15-45' freeze, Win 8 performs surprisingly well for an early release. I have reached the point where further sleuthing on the CPV likely isn't worth the effort. It would be if these errors appeared in the RTM version. Thanks for your contribution to the thread.
 
Last edited:

My Computer

System One

  • OS
    W8
Back
Top