Microsoft KB Archive/246912

From BetaArchive Wiki
Knowledge Base

Article ID: 246912

Article Last Modified on 3/2/2007


  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Datacenter Server

This article was previously published under Q246912


After all the events in the Windows 2000 Event Viewer Application log are cleared, users may see messages periodically displayed in the Application log similar to:

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 3006
Date: 11/21/1999
Time: 6:53:42 PM
User: N/A
Computer: Computer
Error reading log event record. Handle specified is 537928. Return code from ReadEventLog is 6.

NOTE: The handle specified may vary, but the return code should be 6.


This behavior occurs when an invalid handle is used to read from the Application log. This behavior may occur after the Application log has been cleared or when the log periodically experiences heavy logging activity after it has been cleared.


Microsoft has confirmed this to be a problem in Microsoft Windows 2000.


This event is only an informational message. Another handle to the event log is opened and the computer performs as expected.

Keywords: kbenv kberrmsg kbprb KB246912