Eventlog Event ID 1108 - What's The Solution?

[DasFox]

On Vista SP2 I get this error: Eventlog Event ID 1108

The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I can't find any fix for this online or at Microsoft, anyone know a fix for this?

THANKS

[Cudni]

Yes, lots of it being mention but no solution. Are there any other errors in event viewer logs?

[GlobalForce]

Appears to be yet another MS time sink. Take it from Alasdair's first comment (http://blogs.technet.com/askds/archive/2007/10/05/top-10-common-causes-of-slow-replication-with-dfsr.aspx). *Posted on social.technet.microsoft.com (http://social.technet.microsoft.com/Forums/en-US/itprovistasp/thread/93e37c24-c7cf-42cb-be56-0f7782c49f64) as well folks.

[DasFox]

Looks like this is the fix:

This issue is typically caused by an invalid registry value in the Restore subkey for the DFSR service. Look at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfsr\Restore.

There will be a sub key named year-date-time the restore was done with two values. One of those

values will be the network name that was used to perform the remote restore.

- Backup and delete the restore subkey

- Restart DFSR (if it won't stop, restart machine).

- After the reg value is removed the service start and stop will be normal


How do you restart DFSR?

THANKS

[GlobalForce]

Considering it's "grey" web condition, what if, according to BV, you remove the service? Do you even have a subkey?
Perhaps like the support guy said to Alasdair, a bug. Think I'll stick to my opening comment - another MS time sink.

[DasFox]

-{ Quote: "Considering it's "grey" web condition, what if, according to BV, you remove the service? Do you even have a subkey?
Perhaps like the support guy said to Alasdair, a bug. Think I'll stick to my opening comment - another MS time sink." }-


What the heck is grey web conditon and a time sink? (I take it a bug...)

[GlobalForce]

Comments withdrawn ....