Problems Using Event Viewer from Windows for Workgroups

ID: Q127821

The information in this article applies to:

Microsoft Windows for Workgroups version 3.11
Microsoft Windows NT Workstation version 3.5
Microsoft Windows NT Server version 3.5
Microsoft Windows NT Server Tools

SYMPTOMS

When you use the Windows NT Server Tools version of Event Viewer to access a backed up log file, located on a Windows NT 3.5 server, you may see the following problems:

The server service, workstation service, and RPC service fail. Other services may also stop.

You cannot run Control Panel and choose Services.

The following message appears:

The RPC service is unavailable.

The server can still be used, but all network services are stopped and cannot be restarted without shutting down and restarting Windows NT.

When you attempt to shutdown Windows NT, the computer stops responding (hangs).

CAUSE

Two problems cause these symptoms:

- Event Viewer assumes that the user has administrator privileges when it tries to convert the local drive to a UNC path. If this fails, a null log UNC name is passed to the server.

- The server does not perform argument checking on the log UNC name.

WORKAROUND

To work around this problem, run Event View from a computer running Windows NT Workstation or Windows NT Server.

STATUS

Microsoft has confirmed this to be a problem in Windows NT Server Tools version 1.0. This problem has been corrected in the latest U.S. Service Pack for Windows NT version 3.5. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: 3.50 prodnt compact disc cd-rom wfw wfwg log name

Keywords :
Version : winnt:3.5
Platform : winnt
Issue type :