Cause 1:
MACC does not have system access to Windows Event logs.
To verify that no system access is the cause, run the attached Event test tool from the command prompt as an administrator.
The attachment is password protected. The password is
mcafee123. The Event test app checks to see if the event service was registered to the following location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog
There is no proprietary MACC coding in this tool. If the test fails, there is a permissions issue in Windows.
Expected results when the proper access exists:
Registering event....OK
Reporting event....OK
Deregistering event source....OK
Registering event ANSI....OK
Reporting event ANSI....OK
Deregistering event source ANSI....OK
Cause 2:
The
Windows Event Log service is set to
DISABLED or is not in a
RUNNING state.
