Eventlog Event ID 1108 - What's The Solution?

On Vista SP2 I get this error: Eventlog Event ID 1108

The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

I can't find any fix for this online or at Microsoft, anyone know a fix for this?

THANKS

 

Yes, lots of it being mention but no solution. Are there any other errors in event viewer logs?

 

Appears to be yet another MS time sink. Take it from Alasdair's first comment. *Posted on social.technet.microsoft.com as well folks.

 

Looks like this is the fix:

This issue is typically caused by an invalid registry value in the Restore subkey for the DFSR service. Look at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfsr\Restore.

There will be a sub key named year-date-time the restore was done with two values. One of those

values will be the network name that was used to perform the remote restore.

- Backup and delete the restore subkey

- Restart DFSR (if it won't stop, restart machine).

- After the reg value is removed the service start and stop will be normal


How do you restart DFSR?

THANKS

 

Considering it's "grey" web condition, what if, according to BV, you remove the service? Do you even have a subkey?
Perhaps like the support guy said to Alasdair, a bug. Think I'll stick to my opening comment - another MS time sink.

 

What the heck is grey web conditon and a time sink? (I take it a bug...)

 

Comments withdrawn ....