KnowledgeBase Archive

An Archive of Early Microsoft KnowledgeBase Articles

View on GitHub

Q127821: Problems Using Event Viewer from Windows for Workgroups

Article: Q127821
Product(s): Microsoft Windows 3.x Retail Product
Version(s): 3.11,3.5
Operating System(s): 
Keyword(s): 
Last Modified: 02-FEB-2002

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Windows for Workgroups version 3.11 
- Microsoft Windows NT Workstation version 3.5 
- Microsoft Windows NT Server version 3.5 
-------------------------------------------------------------------------------

SYMPTOMS
========

When you use the Windows NT Server Tools version of Event Viewer to access a
backed up log file, located on a Windows NT 3.5 server, you may see the
following problems:

- The server service, workstation service, and RPC service fail. Other services
  may also stop.

- You cannot run Control Panel and choose Services.

- The following message appears:

  The RPC service is unavailable.

- The server can still be used, but all network services are stopped and cannot
  be restarted without shutting down and restarting Windows NT.

- When you attempt to shutdown Windows NT, the computer stops responding
  (hangs).

CAUSE
=====

Two problems cause these symptoms:

- Event Viewer assumes that the user has administrator privileges when it tries
to convert the local drive to a UNC path. If this fails, a null log UNC name is
passed to the server.

- The server does not perform argument checking on the log UNC name.


WORKAROUND
----------

To work around this problem, run Event View from a computer running Windows NT
Workstation or Windows NT Server.

STATUS
------

Microsoft has confirmed this to be a problem in Windows NT Server Tools version
1.0. This problem has been corrected in the latest U.S. Service Pack for Windows
NT version 3.5. For information on obtaining the Service Pack, query on the
following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: 3.50 prodnt compact disc cd-rom wfw wfwg log name

======================================================================
Keywords          :  
Technology        : kbWinNTsearch kbWinNTWsearch kbWinNT350search kbWinNTW350 kbWinNTW350search kbWinNTSsearch kbWinNTS350 kbWinNTS350search kbAudDeveloper kbWFWSearch kbWFW311
Version           : :3.11,3.5

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.