Missing help component??

Posted: 11-29-2004, 11:25 AM
Hi!

When looking in eventviewer, in security i see the following:

The description for Event ID ( <####> ) in Source (<application name>) could
not be found. It contains the following insertion string(s): <the text of
the message logged by ReportEvent>.


Any idea of what dlls or components I'm missing to get the it to display the
event correctly??


Thanks
Lucas


Reply With Quote

Responses to "Missing help component??"

Lucas
Guest
Posts: n/a
 
Event viewer missing component???
Posted: 11-29-2004, 03:09 PM
Hi!

I did some more research....this is ths problem:

When I open event viewer I go to the Security Evenlog and click on one of
the Audits and see the following message:
----------
The description for Event ID ( 577 ) in Source ( Security ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: NT
Local Security Authority / Authentication Service;
LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$; WORKGROUP;
(0x0,0x3E7); SeTcbPrivilege.
----------
Okie, hmm, so I go to the registry
HKLM\System\CurrentControlSet\Services\Eventlog\Se curity

and its empty, I check the Application subkey and it contains resources.
Then I check the same keys in a XP Pro and the security subkey also contains
resources.

So my question is: is there a component that activates the security evenlog?
Any other suggestions??

Thanks for your help...
Lucas





Reply With Quote
KM
Guest
Posts: n/a
 
Re: Event viewer missing component???
Posted: 11-29-2004, 06:56 PM
Lucas,

Please search NG archive for drvmain.sdb:
http://groups.google.com/groups?hl=e...sxp.embedded.*

Basically, you would need to copy this file to the run time manually (or though your component).
IIRC, there have been a QFE that fixed the problem.

--
Regards,
KM, BSquare Corp.

> Hi!
>
> I did some more research....this is ths problem:
>
> When I open event viewer I go to the Security Evenlog and click on one of
> the Audits and see the following message:
> ----------
> The description for Event ID ( 577 ) in Source ( Security ) cannot be found.
> The local computer may not have the necessary registry information or
> message DLL files to display messages from a remote computer. You may be
> able to use the /AUXSOURCE= flag to retrieve this description; see Help and
> Support for details. The following information is part of the event: NT
> Local Security Authority / Authentication Service;
> LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$; WORKGROUP;
> (0x0,0x3E7); SeTcbPrivilege.
> ----------
> Okie, hmm, so I go to the registry
> HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
>
> and its empty, I check the Application subkey and it contains resources.
> Then I check the same keys in a XP Pro and the security subkey also contains
> resources.
>
> So my question is: is there a component that activates the security evenlog?
> Any other suggestions??
>
> Thanks for your help...
> Lucas
>
>
>
>
>

Reply With Quote
Lucas
Guest
Posts: n/a
 
Re: Event viewer missing component???
Posted: 11-30-2004, 03:00 PM
Hi KM and all other readers....

I checked my image and I have already applied the QFE that you mentioned in
the newsgroup, I also already have drvmain.sdb in my image.
I added the component "Software Installation Group Policy Extension" and
rebuilt my image.

Still the same problem. I should mention that I'm not using winlogon.

Still Can't find EventID. Any other suggestions? This is a headache...

Thanks for all your help
Lucas


"KM" <konstmor@nospam_yahoo.com> wrote in message
news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> Lucas,
>
> Please search NG archive for drvmain.sdb:
>
http://groups.google.com/groups?hl=e...sxp.embedded.*
>
> Basically, you would need to copy this file to the run time manually (or
though your component).
> IIRC, there have been a QFE that fixed the problem.
>
> --
> Regards,
> KM, BSquare Corp.
>
>
> > Hi!
> >
> > I did some more research....this is ths problem:
> >
> > When I open event viewer I go to the Security Evenlog and click on one
of
> > the Audits and see the following message:
> > ----------
> > The description for Event ID ( 577 ) in Source ( Security ) cannot be
found.
> > The local computer may not have the necessary registry information or
> > message DLL files to display messages from a remote computer. You may be
> > able to use the /AUXSOURCE= flag to retrieve this description; see Help
and
> > Support for details. The following information is part of the event: NT
> > Local Security Authority / Authentication Service;
> > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;
WORKGROUP;
> > (0x0,0x3E7); SeTcbPrivilege.
> > ----------
> > Okie, hmm, so I go to the registry
> > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> >
> > and its empty, I check the Application subkey and it contains resources.
> > Then I check the same keys in a XP Pro and the security subkey also
contains
> > resources.
> >
> > So my question is: is there a component that activates the security
evenlog?
> > Any other suggestions??
> >
> > Thanks for your help...
> > Lucas
> >
> >
> >
> >
> >
>
>

Reply With Quote
Doug Hoeffel
Guest
Posts: n/a
 
Re: Event viewer missing component???
Posted: 11-30-2004, 05:14 PM
Lucas:

Try adding the following to your registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\EventLog\Security\Secu
rity]
"CategoryCount"=dword:00000009
"CategoryMessageFile"=hex(2):25,53,79,73,74,65,6d, 52,6f,6f,74,25,5c,53,79,73
,\
74,65,6d,33,32,5c,4d,73,41,75,64,69,74,45,2e,64,6c ,6c,00
"GuidMessageFile"=hex(2):25,53,79,73,74,65,6d,52,6 f,6f,74,25,5c,53,79,73,74,
65,\
6d,33,32,5c,4e,74,4d,61,72,74,61,2e,64,6c,6c,00
"EventMessageFile"=hex(2):25,53,79,73,74,65,6d,52, 6f,6f,74,25,5c,53,79,73,74
,\
65,6d,33,32,5c,4d,73,41,75,64,69,74,45,2e,64,6c,6c ,00
"ParameterMessageFile"=hex(2):25,53,79,73,74,65,6d ,52,6f,6f,74,25,5c,53,79,7
3,\
74,65,6d,33,32,5c,4d,73,4f,62,6a,73,2e,64,6c,6c,00
"TypesSupported"=dword:0000001c

HTH... Doug
"Lucas" <lucas.khan@saabsystems.se> wrote in message
news:uPS7C1u1EHA.1860@TK2MSFTNGP15.phx.gbl...
> Hi KM and all other readers....
>
> I checked my image and I have already applied the QFE that you mentioned
in
> the newsgroup, I also already have drvmain.sdb in my image.
> I added the component "Software Installation Group Policy Extension" and
> rebuilt my image.
>
> Still the same problem. I should mention that I'm not using winlogon.
>
> Still Can't find EventID. Any other suggestions? This is a headache...
>
> Thanks for all your help
> Lucas
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> > Lucas,
> >
> > Please search NG archive for drvmain.sdb:
> >
>
http://groups.google.com/groups?hl=e...sxp.embedded.*
> >
> > Basically, you would need to copy this file to the run time manually (or
> though your component).
> > IIRC, there have been a QFE that fixed the problem.
> >
> > --
> > Regards,
> > KM, BSquare Corp.
> >
> >
> > > Hi!
> > >
> > > I did some more research....this is ths problem:
> > >
> > > When I open event viewer I go to the Security Evenlog and click on one
> of
> > > the Audits and see the following message:
> > > ----------
> > > The description for Event ID ( 577 ) in Source ( Security ) cannot be
> found.
> > > The local computer may not have the necessary registry information or
> > > message DLL files to display messages from a remote computer. You may
be
> > > able to use the /AUXSOURCE= flag to retrieve this description; see
Help
> and
> > > Support for details. The following information is part of the event:
NT
> > > Local Security Authority / Authentication Service;
> > > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;
> WORKGROUP;
> > > (0x0,0x3E7); SeTcbPrivilege.
> > > ----------
> > > Okie, hmm, so I go to the registry
> > > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> > >
> > > and its empty, I check the Application subkey and it contains
resources.
> > > Then I check the same keys in a XP Pro and the security subkey also
> contains
> > > resources.
> > >
> > > So my question is: is there a component that activates the security
> evenlog?
> > > Any other suggestions??
> > >
> > > Thanks for your help...
> > > Lucas
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>

Reply With Quote
KM
Guest
Posts: n/a
 
Re: Event viewer missing component???
Posted: 12-02-2004, 08:41 PM
Lucas,

I have been out for a while and couldn't reply you.
Anyway, I think Doug's reply helped you already. Please let us know the result for future reference.

Also, here is a good article for you that I ran across a long while ago to get more familiar with Event Viewer registry and etc.:
http://www.codeproject.com/dotnet/evtvwr.asp

--
Regards,
KM, BSquare Corp.

> Hi KM and all other readers....
>
> I checked my image and I have already applied the QFE that you mentioned in
> the newsgroup, I also already have drvmain.sdb in my image.
> I added the component "Software Installation Group Policy Extension" and
> rebuilt my image.
>
> Still the same problem. I should mention that I'm not using winlogon.
>
> Still Can't find EventID. Any other suggestions? This is a headache...
>
> Thanks for all your help
> Lucas
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> > Lucas,
> >
> > Please search NG archive for drvmain.sdb:
> >
> http://groups.google.com/groups?hl=e...sxp.embedded.*
> >
> > Basically, you would need to copy this file to the run time manually (or
> though your component).
> > IIRC, there have been a QFE that fixed the problem.
> >
> > --
> > Regards,
> > KM, BSquare Corp.
> >
> >
> > > Hi!
> > >
> > > I did some more research....this is ths problem:
> > >
> > > When I open event viewer I go to the Security Evenlog and click on one
> of
> > > the Audits and see the following message:
> > > ----------
> > > The description for Event ID ( 577 ) in Source ( Security ) cannot be
> found.
> > > The local computer may not have the necessary registry information or
> > > message DLL files to display messages from a remote computer. You may be
> > > able to use the /AUXSOURCE= flag to retrieve this description; see Help
> and
> > > Support for details. The following information is part of the event: NT
> > > Local Security Authority / Authentication Service;
> > > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;
> WORKGROUP;
> > > (0x0,0x3E7); SeTcbPrivilege.
> > > ----------
> > > Okie, hmm, so I go to the registry
> > > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> > >
> > > and its empty, I check the Application subkey and it contains resources.
> > > Then I check the same keys in a XP Pro and the security subkey also
> contains
> > > resources.
> > >
> > > So my question is: is there a component that activates the security
> evenlog?
> > > Any other suggestions??
> > >
> > > Thanks for your help...
> > > Lucas
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>

Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
ERROR - A necessary component of Windows Media Center is missing ML_S Windows Vista Performance & Maintenance 1 03-31-2007 07:02 PM
Primitive: MPRUI - Missing Component AnonymousPost@hotmail.com Windows XP Embedded 1 11-01-2004 02:53 PM
Component Null Device Driver is missing Rosemarie Windows XP Embedded 1 02-27-2004 12:10 PM
Missing Accessories Component KM Windows XP Embedded 3 02-13-2004 09:06 PM
Missing system component: sysengr John Pelissero Windows XP Performance & Maintenance 1 08-13-2003 06:30 PM


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90