Microsoft KB Archive/830750

= Event ID 16 is logged by Automatic Updates in the Application log of your Windows Server 2003-based computer =

Article ID: 830750

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)

-





SYMPTOMS
An event that is similar to the following is logged in the Application log of your Microsoft Windows Server 2003-based computer: Type: Warning

Source: Automatic Updates

Category: (1)

Event ID: 16

Description:

The description for Event ID (16) in Source (Automatic Updates) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.

Typically, events that are associated with the Automatic Updates event source are logged in the System log.



CAUSE
This issue is caused by a timing problem that occurs where the RegisterEventSource function cannot locate the Automatic Updates event source.

Before an Automatic Updates event is logged for the first time in the System log, the location of the source file for the Automatic Updates event is added to the following registry subkey:

Immediately thereafter, the RegisterEventSource function obtains a handle to write events. If the location of the source file is not yet flushed to the registry when the RegisterEventSource function obtains a handle to write events, the RegisterEventSource function logs the event in the Application log instead of in the source file. Therefore, the event is incorrectly logged in the Application log instead of in the System log.

When the Automatic Updates log entry is logged in the Application log, the correct description is not displayed for the event because the RegisterEventSource function cannot locate the event source. That is, an event source that is named Automatic Updates does not exist in the following registry subkey:

Therefore, the message that is mentioned in the &quot;Symptoms&quot; section is displayed for the event.



WORKAROUND
The event that is described in the &quot;Symptoms&quot; section does not affect the functionality of Windows Server 2003. You can safely ignore the event.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

Additional query words: wuau windows update automatic update event application 16 log

Keywords: kbtshoot kbwinservperf kbmgmtservices kbnofix kbprb KB830750

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.