Microsoft KB Archive/127821

= Problems Using Event Viewer from Windows for Workgroups =

Article ID: 127821

Article Last Modified on 11/14/2003

-

APPLIES TO


 * Microsoft Windows for Workgroups 3.11
 * Microsoft Windows NT Workstation 3.5
 * Microsoft Windows NT Server 3.5

-



This article was previously published under Q127821



SYMPTOMS
When you use the Windows NT Server Tools version of Event Viewer to access a backed up log file, located on a Windows NT 3.5 server, you may see the following problems:


 * The server service, workstation service, and RPC service fail. Other services may also stop.
 * You cannot run Control Panel and choose Services.
 * The following message appears:

The RPC service is unavailable.
 * The server can still be used, but all network services are stopped and cannot be restarted without shutting down and restarting Windows NT.
 * When you attempt to shutdown Windows NT, the computer stops responding (hangs).



CAUSE
Two problems cause these symptoms:

- Event Viewer assumes that the user has administrator privileges when it tries to convert the local drive to a UNC path. If this fails, a null log UNC name is passed to the server.

- The server does not perform argument checking on the log UNC name.

WORKAROUND
To work around this problem, run Event View from a computer running Windows NT Workstation or Windows NT Server.

STATUS
Microsoft has confirmed this to be a problem in Windows NT Server Tools version 1.0. This problem has been corrected in the latest U.S. Service Pack for Windows NT version 3.5. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: 3.50 prodnt compact disc cd-rom wfw wfwg log name

Keywords: KB127821

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.