Hello,

I performed a clean install of Windows Vista Business and after running all
the updates I relized my Event Log Stopped working. When executing the Event
Log I was greeted with the error service not started, please start.

Upon manually trying to execute it from the Services.msc I am greeted with
this error:

Windows could not start the event service on the local computer
Error 4201: The instance passed was not recognized as valid by a WMI data
provider.

This is quite frustrating as I really need this service installed.

As a side note, another engineer I work with installed Vista Business on his
laptop (Compaq NC6120) the same exact model as mine, and his event viewer
works but he hasn't installed any updates I am curious to see if the event
vieweer will work when the updates are installed. I cannot confirm the event
viewer was working fro mthe beginning I only tried it a hour or so again.

I believe this is an on going problems as I have seen many people have
complained about the same problem but none have found any retification for it.

Thanks,

Hello,

Push the windows key + R, and type "services.msc", then, scroll down till
you find the Event Log service, Windows Error Reporting, and right click,
and select "Start"

--

Have a nice day,

Jonathan Yaniv
Microsoft Windows Live™ Butterfly Expert

Visit the ButterflySays Blog at
[url]http://spaces.msn.com/ButterflySays/[/url]

"AU" <AU@discussions.microsoft.com> wrote in message
news:4681FCD7-F028-4CC9-9C31-F0EBF89ABADB@microsoft.com...[color=blue]
> Hello,
>
> I performed a clean install of Windows Vista Business and after running
> all
> the updates I relized my Event Log Stopped working. When executing the
> Event
> Log I was greeted with the error service not started, please start.
>
> Upon manually trying to execute it from the Services.msc I am greeted with
> this error:
>
> Windows could not start the event service on the local computer
> Error 4201: The instance passed was not recognized as valid by a WMI data
> provider.
>
> This is quite frustrating as I really need this service installed.
>
> As a side note, another engineer I work with installed Vista Business on
> his
> laptop (Compaq NC6120) the same exact model as mine, and his event viewer
> works but he hasn't installed any updates I am curious to see if the event
> vieweer will work when the updates are installed. I cannot confirm the
> event
> viewer was working fro mthe beginning I only tried it a hour or so again.
>
> I believe this is an on going problems as I have seen many people have
> complained about the same problem but none have found any retification for
> it.
>
> Thanks,
>[/color]

That will, unfortunately, result in the same error message:
"Error 4201: The instance passed was not recognized as valid by a WMI data
provider."

I, for one, have found neither a cause nor a cure for this.


--
Maxwell Bluemeanie
------

"Jonathan Yaniv" <yaniv.jonathan******.com> wrote in message
news:u5LB3PGVHHA.5108@TK2MSFTNGP06.phx.gbl...[color=blue]
> Hello,
>
> Push the windows key + R, and type "services.msc", then, scroll down till
> you find the Event Log service, Windows Error Reporting, and right click,
> and select "Start"
>
> --
>
> Have a nice day,
>
> Jonathan Yaniv
> Microsoft Windows Live™ Butterfly Expert
>
> Visit the ButterflySays Blog at
> [url]http://spaces.msn.com/ButterflySays/[/url]
>
> "AU" <AU@discussions.microsoft.com> wrote in message
> news:4681FCD7-F028-4CC9-9C31-F0EBF89ABADB@microsoft.com...[color=green]
>> Hello,
>>
>> I performed a clean install of Windows Vista Business and after running
>> all
>> the updates I relized my Event Log Stopped working. When executing the
>> Event
>> Log I was greeted with the error service not started, please start.
>>
>> Upon manually trying to execute it from the Services.msc I am greeted
>> with
>> this error:
>>
>> Windows could not start the event service on the local computer
>> Error 4201: The instance passed was not recognized as valid by a WMI data
>> provider.
>>
>> This is quite frustrating as I really need this service installed.[/color][/color]

Hello,

This results in the same error I mentioned below :
[color=blue][color=green]
> > Windows could not start the event service on the local computer
> > Error 4201: The instance passed was not recognized as valid by a WMI data
> > provider.[/color][/color]

Can you please provide furhter assistance?

Max, are you experiencing this error as well?


"Jonathan Yaniv" wrote:
[color=blue]
> Hello,
>
> Push the windows key + R, and type "services.msc", then, scroll down till
> you find the Event Log service, Windows Error Reporting, and right click,
> and select "Start"
>
> --
>
> Have a nice day,
>
> Jonathan Yaniv
> Microsoft Windows Live™ Butterfly Expert
>
> Visit the ButterflySays Blog at
> [url]http://spaces.msn.com/ButterflySays/[/url]
>
> "AU" <AU@discussions.microsoft.com> wrote in message
> news:4681FCD7-F028-4CC9-9C31-F0EBF89ABADB@microsoft.com...[color=green]
> > Hello,
> >
> > I performed a clean install of Windows Vista Business and after running
> > all
> > the updates I relized my Event Log Stopped working. When executing the
> > Event
> > Log I was greeted with the error service not started, please start.
> >
> > Upon manually trying to execute it from the Services.msc I am greeted with
> > this error:
> >
> > Windows could not start the event service on the local computer
> > Error 4201: The instance passed was not recognized as valid by a WMI data
> > provider.
> >
> > This is quite frustrating as I really need this service installed.
> >
> > As a side note, another engineer I work with installed Vista Business on
> > his
> > laptop (Compaq NC6120) the same exact model as mine, and his event viewer
> > works but he hasn't installed any updates I am curious to see if the event
> > vieweer will work when the updates are installed. I cannot confirm the
> > event
> > viewer was working fro mthe beginning I only tried it a hour or so again.
> >
> > I believe this is an on going problems as I have seen many people have
> > complained about the same problem but none have found any retification for
> > it.
> >
> > Thanks,
> >[/color]
>[/color]

On Mon, 19 Feb 2007 14:23:00 -0800, AU <AU@discussions.microsoft.com>
wrote:
[color=blue]
>Hello,
>
>This results in the same error I mentioned below :
>[color=green][color=darkred]
>> > Windows could not start the event service on the local computer
>> > Error 4201: The instance passed was not recognized as valid by a WMI data
>> > provider.[/color][/color]
>
>Can you please provide furhter assistance?
>
>Max, are you experiencing this error as well?[/color]

Me too, all the time, according the the Event Log, almost daily. But
regardless it DOES write to the Event Log as witness I already have a
couple hundred entries and Vista is just a week old. Thankfully most
"events" are just informational in nature.

Seems this is a problem quite a few people are experiencing in Vista, can
anyone else possibly shed some light on resloving it?

"Adam Albright" wrote:
[color=blue]
> On Mon, 19 Feb 2007 14:23:00 -0800, AU <AU@discussions.microsoft.com>
> wrote:
>[color=green]
> >Hello,
> >
> >This results in the same error I mentioned below :
> >[color=darkred]
> >> > Windows could not start the event service on the local computer
> >> > Error 4201: The instance passed was not recognized as valid by a WMI data
> >> > provider.[/color]
> >
> >Can you please provide furhter assistance?
> >
> >Max, are you experiencing this error as well?[/color]
>
> Me too, all the time, according the the Event Log, almost daily. But
> regardless it DOES write to the Event Log as witness I already have a
> couple hundred entries and Vista is just a week old. Thankfully most
> "events" are just informational in nature.
>
>
>[/color]

I have it as well, and seems to be since the Tues patch updates. Happened
right after it.


"AU" <AU@discussions.microsoft.com> wrote in message
news:08874BAA-E553-462D-8FDD-394D450E34B7@microsoft.com...[color=blue]
> Seems this is a problem quite a few people are experiencing in Vista, can
> anyone else possibly shed some light on resloving it?
>
> "Adam Albright" wrote:
>[color=green]
>> On Mon, 19 Feb 2007 14:23:00 -0800, AU <AU@discussions.microsoft.com>
>> wrote:
>>[color=darkred]
>> >Hello,
>> >
>> >This results in the same error I mentioned below :
>> >
>> >> > Windows could not start the event service on the local computer
>> >> > Error 4201: The instance passed was not recognized as valid by a WMI
>> >> > data
>> >> > provider.
>> >
>> >Can you please provide furhter assistance?
>> >
>> >Max, are you experiencing this error as well?[/color]
>>
>> Me too, all the time, according the the Event Log, almost daily. But
>> regardless it DOES write to the Event Log as witness I already have a
>> couple hundred entries and Vista is just a week old. Thankfully most
>> "events" are just informational in nature.
>>
>>
>>[/color][/color]

Yes, and after much trial and error troubleshooting, I just gave up on it,
disabled event viewer and scheduled tasks (which go hand in hand) in
Services, and use a third party task scheduler instead. It showed up early
for me after a fresh Vista installation--seemingly related to the install
(or at least around the time) of either Office 2007 or WMDC.

--
Maxwell Bluemeanie
------

"AU" <AU@discussions.microsoft.com> wrote in message
news:4060A0F7-96B9-407D-8687-A5D2C3DE0239@microsoft.com...[color=blue]
>
> Max, are you experiencing this error as well?
>[color=green][color=darkred]
>> >
>> > Windows could not start the event service on the local computer
>> > Error 4201: The instance passed was not recognized as valid by a WMI
>> > data
>> > provider.
>> >
>> > This is quite frustrating as I really need this service installed.[/color][/color][/color]

I relized to after the updates, but this is crazy. You mean MS updates their
products and stops another product from working sigh. Come on I've heard so
many good things about the new Event Viewer and I am quite axious to try it.

What's your take on this guys? I'd like to use the native event logging
software along with the task scheduler, without having to download 3rd party
applications.

Has Microsoft advised that this is an issue or fault ontheir part as a
result of updating ?

"Max" wrote:
[color=blue]
> Yes, and after much trial and error troubleshooting, I just gave up on it,
> disabled event viewer and scheduled tasks (which go hand in hand) in
> Services, and use a third party task scheduler instead. It showed up early
> for me after a fresh Vista installation--seemingly related to the install
> (or at least around the time) of either Office 2007 or WMDC.
>
> --
> Maxwell Bluemeanie
> ------
>
> "AU" <AU@discussions.microsoft.com> wrote in message
> news:4060A0F7-96B9-407D-8687-A5D2C3DE0239@microsoft.com...[color=green]
> >
> > Max, are you experiencing this error as well?
> >[color=darkred]
> >> >
> >> > Windows could not start the event service on the local computer
> >> > Error 4201: The instance passed was not recognized as valid by a WMI
> >> > data
> >> > provider.
> >> >
> >> > This is quite frustrating as I really need this service installed.[/color][/color]
>
>[/color]

Have you run System Restore?

My event log ran fine after all the windows updates, but began to return
"error 4201" immediately after I ran System Restore.

Nope, event log still screwed.... alot of people are expericing this tho

"HerbFr" wrote:
[color=blue]
> Have you run System Restore?
>
> My event log ran fine after all the windows updates, but began to return
> "error 4201" immediately after I ran System Restore.[/color]

"AU" wrote:
[color=blue]
> Nope, event log still screwed.... alot of people are expericing this tho
>[/color]
Just to clarify . . .

I am suggesting that System Restore is causing this problem, not that you
can correct the problem by using System Restore.