DOCUMENT:Q127821 02-FEB-2002 [win3x] TITLE :Problems Using Event Viewer from Windows for Workgroups PRODUCT :Microsoft Windows 3.x Retail Product PROD/VER::3.11,3.5 OPER/SYS: KEYWORDS: ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Windows for Workgroups version 3.11 - Microsoft Windows NT Workstation version 3.5 - Microsoft Windows NT Server version 3.5 ------------------------------------------------------------------------------- SYMPTOMS ======== When you use the Windows NT Server Tools version of Event Viewer to access a backed up log file, located on a Windows NT 3.5 server, you may see the following problems: - The server service, workstation service, and RPC service fail. Other services may also stop. - You cannot run Control Panel and choose Services. - The following message appears: The RPC service is unavailable. - The server can still be used, but all network services are stopped and cannot be restarted without shutting down and restarting Windows NT. - When you attempt to shutdown Windows NT, the computer stops responding (hangs). CAUSE ===== Two problems cause these symptoms: - Event Viewer assumes that the user has administrator privileges when it tries to convert the local drive to a UNC path. If this fails, a null log UNC name is passed to the server. - The server does not perform argument checking on the log UNC name. WORKAROUND ---------- To work around this problem, run Event View from a computer running Windows NT Workstation or Windows NT Server. STATUS ------ Microsoft has confirmed this to be a problem in Windows NT Server Tools version 1.0. This problem has been corrected in the latest U.S. Service Pack for Windows NT version 3.5. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces): S E R V P A C K Additional query words: 3.50 prodnt compact disc cd-rom wfw wfwg log name ====================================================================== Keywords : Technology : kbWinNTsearch kbWinNTWsearch kbWinNT350search kbWinNTW350 kbWinNTW350search kbWinNTSsearch kbWinNTS350 kbWinNTS350search kbAudDeveloper kbWFWSearch kbWFW311 Version : :3.11,3.5 ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2002.