Missing help component??

Posted: 11-29-2004, 11:25 AM

Lucas

Guest
Posts: n/a

Hi!

When looking in eventviewer, in security i see the following:

The description for Event ID ( <####> ) in Source (<application name>) could
not be found. It contains the following insertion string(s): <the text of
the message logged by ReportEvent>.

Any idea of what dlls or components I'm missing to get the it to display the
event correctly??

Thanks
Lucas

Responses to "Missing help component??"

Lucas

Guest
Posts: n/a

Event viewer missing component???

Posted: 11-29-2004, 03:09 PM

Hi!

I did some more research....this is ths problem:

When I open event viewer I go to the Security Evenlog and click on one of
the Audits and see the following message:
----------
The description for Event ID ( 577 ) in Source ( Security ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: NT
Local Security Authority / Authentication Service;
LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$; WORKGROUP;
(0x0,0x3E7); SeTcbPrivilege.
----------
Okie, hmm, so I go to the registry
HKLM\System\CurrentControlSet\Services\Eventlog\Se curity

and its empty, I check the Application subkey and it contains resources.
Then I check the same keys in a XP Pro and the security subkey also contains
resources.

So my question is: is there a component that activates the security evenlog?
Any other suggestions??

Thanks for your help...
Lucas

Guest
Posts: n/a

Re: Event viewer missing component???

Posted: 11-29-2004, 06:56 PM

Lucas,

Please search NG archive for drvmain.sdb:
http://groups.google.com/groups?hl=e...sxp.embedded.*

Basically, you would need to copy this file to the run time manually (or though your component).
IIRC, there have been a QFE that fixed the problem.

--
Regards,
KM, BSquare Corp.

> Hi!
>
> I did some more research....this is ths problem:
>
> When I open event viewer I go to the Security Evenlog and click on one of
> the Audits and see the following message:
> ----------
> The description for Event ID ( 577 ) in Source ( Security ) cannot be found.
> The local computer may not have the necessary registry information or
> message DLL files to display messages from a remote computer. You may be
> able to use the /AUXSOURCE= flag to retrieve this description; see Help and
> Support for details. The following information is part of the event: NT
> Local Security Authority / Authentication Service;
> LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$; WORKGROUP;
> (0x0,0x3E7); SeTcbPrivilege.
> ----------
> Okie, hmm, so I go to the registry
> HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
>
> and its empty, I check the Application subkey and it contains resources.
> Then I check the same keys in a XP Pro and the security subkey also contains
> resources.
>
> So my question is: is there a component that activates the security evenlog?
> Any other suggestions??
>
> Thanks for your help...
> Lucas
>
>
>
>
>

Lucas

Guest
Posts: n/a

Re: Event viewer missing component???

Posted: 11-30-2004, 03:00 PM

Hi KM and all other readers....

I checked my image and I have already applied the QFE that you mentioned in
the newsgroup, I also already have drvmain.sdb in my image.
I added the component "Software Installation Group Policy Extension" and
rebuilt my image.

Still the same problem. I should mention that I'm not using winlogon.

Still Can't find EventID. Any other suggestions? This is a headache...

Thanks for all your help
Lucas

"KM" <konstmor@nospam_yahoo.com> wrote in message
news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...

> Lucas,
>
> Please search NG archive for drvmain.sdb:
>

http://groups.google.com/groups?hl=e...sxp.embedded.*

>
> Basically, you would need to copy this file to the run time manually (or

though your component).

> IIRC, there have been a QFE that fixed the problem.
>
> --
> Regards,
> KM, BSquare Corp.
>
>
> > Hi!
> >
> > I did some more research....this is ths problem:
> >
> > When I open event viewer I go to the Security Evenlog and click on one

> > the Audits and see the following message:
> > ----------
> > The description for Event ID ( 577 ) in Source ( Security ) cannot be

found.

> > The local computer may not have the necessary registry information or
> > message DLL files to display messages from a remote computer. You may be
> > able to use the /AUXSOURCE= flag to retrieve this description; see Help

and

> > Support for details. The following information is part of the event: NT
> > Local Security Authority / Authentication Service;
> > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;

WORKGROUP;

> > (0x0,0x3E7); SeTcbPrivilege.
> > ----------
> > Okie, hmm, so I go to the registry
> > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> >
> > and its empty, I check the Application subkey and it contains resources.
> > Then I check the same keys in a XP Pro and the security subkey also

contains

> > resources.
> >
> > So my question is: is there a component that activates the security

evenlog?

> > Any other suggestions??
> >
> > Thanks for your help...
> > Lucas
> >
> >
> >
> >
> >
>
>

Doug Hoeffel

Guest
Posts: n/a

Re: Event viewer missing component???

Posted: 11-30-2004, 05:14 PM

Lucas:

Try adding the following to your registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\EventLog\Security\Secu
rity]
"CategoryCount"=dword:00000009
"CategoryMessageFile"=hex(2):25,53,79,73,74,65,6d, 52,6f,6f,74,25,5c,53,79,73
,\
74,65,6d,33,32,5c,4d,73,41,75,64,69,74,45,2e,64,6c ,6c,00
"GuidMessageFile"=hex(2):25,53,79,73,74,65,6d,52,6 f,6f,74,25,5c,53,79,73,74,
65,\
6d,33,32,5c,4e,74,4d,61,72,74,61,2e,64,6c,6c,00
"EventMessageFile"=hex(2):25,53,79,73,74,65,6d,52, 6f,6f,74,25,5c,53,79,73,74
,\
65,6d,33,32,5c,4d,73,41,75,64,69,74,45,2e,64,6c,6c ,00
"ParameterMessageFile"=hex(2):25,53,79,73,74,65,6d ,52,6f,6f,74,25,5c,53,79,7
3,\
74,65,6d,33,32,5c,4d,73,4f,62,6a,73,2e,64,6c,6c,00
"TypesSupported"=dword:0000001c

HTH... Doug
"Lucas" <lucas.khan@saabsystems.se> wrote in message
news:uPS7C1u1EHA.1860@TK2MSFTNGP15.phx.gbl...

> Hi KM and all other readers....
>
> I checked my image and I have already applied the QFE that you mentioned

> the newsgroup, I also already have drvmain.sdb in my image.
> I added the component "Software Installation Group Policy Extension" and
> rebuilt my image.
>
> Still the same problem. I should mention that I'm not using winlogon.
>
> Still Can't find EventID. Any other suggestions? This is a headache...
>
> Thanks for all your help
> Lucas
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> > Lucas,
> >
> > Please search NG archive for drvmain.sdb:
> >
>

http://groups.google.com/groups?hl=e...sxp.embedded.*

> >
> > Basically, you would need to copy this file to the run time manually (or
> though your component).
> > IIRC, there have been a QFE that fixed the problem.
> >
> > --
> > Regards,
> > KM, BSquare Corp.
> >
> >
> > > Hi!
> > >
> > > I did some more research....this is ths problem:
> > >
> > > When I open event viewer I go to the Security Evenlog and click on one

> of

> > > the Audits and see the following message:
> > > ----------
> > > The description for Event ID ( 577 ) in Source ( Security ) cannot be

> found.

> > > The local computer may not have the necessary registry information or
> > > message DLL files to display messages from a remote computer. You may

> > > able to use the /AUXSOURCE= flag to retrieve this description; see

Help

> and

> > > Support for details. The following information is part of the event:

> > > Local Security Authority / Authentication Service;
> > > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;

> WORKGROUP;

> > > (0x0,0x3E7); SeTcbPrivilege.
> > > ----------
> > > Okie, hmm, so I go to the registry
> > > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> > >
> > > and its empty, I check the Application subkey and it contains

resources.

> > > Then I check the same keys in a XP Pro and the security subkey also

> contains

> > > resources.
> > >
> > > So my question is: is there a component that activates the security

> evenlog?

> > > Any other suggestions??
> > >
> > > Thanks for your help...
> > > Lucas
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>

Guest
Posts: n/a

Re: Event viewer missing component???

Posted: 12-02-2004, 08:41 PM

Lucas,

I have been out for a while and couldn't reply you.
Anyway, I think Doug's reply helped you already. Please let us know the result for future reference.

Also, here is a good article for you that I ran across a long while ago to get more familiar with Event Viewer registry and etc.:
http://www.codeproject.com/dotnet/evtvwr.asp

--
Regards,
KM, BSquare Corp.

> Hi KM and all other readers....
>
> I checked my image and I have already applied the QFE that you mentioned in
> the newsgroup, I also already have drvmain.sdb in my image.
> I added the component "Software Installation Group Policy Extension" and
> rebuilt my image.
>
> Still the same problem. I should mention that I'm not using winlogon.
>
> Still Can't find EventID. Any other suggestions? This is a headache...
>
> Thanks for all your help
> Lucas
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message
> news:%23YfMjSk1EHA.2192@TK2MSFTNGP14.phx.gbl...
> > Lucas,
> >
> > Please search NG archive for drvmain.sdb:
> >
> http://groups.google.com/groups?hl=e...sxp.embedded.*
> >
> > Basically, you would need to copy this file to the run time manually (or
> though your component).
> > IIRC, there have been a QFE that fixed the problem.
> >
> > --
> > Regards,
> > KM, BSquare Corp.
> >
> >
> > > Hi!
> > >
> > > I did some more research....this is ths problem:
> > >
> > > When I open event viewer I go to the Security Evenlog and click on one

> of

> > > the Audits and see the following message:
> > > ----------
> > > The description for Event ID ( 577 ) in Source ( Security ) cannot be

> found.

> > > The local computer may not have the necessary registry information or
> > > message DLL files to display messages from a remote computer. You may be
> > > able to use the /AUXSOURCE= flag to retrieve this description; see Help

> and

> > > Support for details. The following information is part of the event: NT
> > > Local Security Authority / Authentication Service;
> > > LsaRegisterLogonProcess(); MPC3$; WORKGROUP; (0x0,0x3E7); MPC3$;

> WORKGROUP;

> > > (0x0,0x3E7); SeTcbPrivilege.
> > > ----------
> > > Okie, hmm, so I go to the registry
> > > HKLM\System\CurrentControlSet\Services\Eventlog\Se curity
> > >
> > > and its empty, I check the Application subkey and it contains resources.
> > > Then I check the same keys in a XP Pro and the security subkey also

> contains

> > > resources.
> > >
> > > So my question is: is there a component that activates the security

> evenlog?

> > > Any other suggestions??
> > >
> > > Thanks for your help...
> > > Lucas
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>

LinkBack

Thread Tools

Display Modes

« Sandisk Ultra II CF | El-Torito ???!!! »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
ERROR - A necessary component of Windows Media Center is missing	ML_S	Windows Vista Performance & Maintenance	1	03-31-2007 07:02 PM
Primitive: MPRUI - Missing Component	AnonymousPost@hotmail.com	Windows XP Embedded	1	11-01-2004 02:53 PM
Component Null Device Driver is missing	Rosemarie	Windows XP Embedded	1	02-27-2004 12:10 PM
Missing Accessories Component	KM	Windows XP Embedded	3	02-13-2004 09:06 PM
Missing system component: sysengr	John Pelissero	Windows XP Performance & Maintenance	1	08-13-2003 06:30 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90