description for Event cannot be found

  • Thread starter Thread starter Ivan Skiridomov
  • Start date Start date
I

Ivan Skiridomov

We try access event log on DC2003 from remote Win2k3 SP2 with next PowerShell
script:
$strcomputer = Read-Host "Please Enter the Server Name"
$source = Read-Host "Please Enter the Event Source"
$Evelog = new-object system.diagnostics.eventlog("$source", "$strComputer")
$Evelog.entries
----------------
Events are coming, but description information are empty.
1 Ñнв 13 18:16 SuccessA... Security 612 The
description for Event ID '612' in Source 'Security' cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display the message, or you may not have permission to access them.
The following information is part of the event:'-', '-', '+', '-', '-', '-',
'-', '-', '-', '-', '-', '-', '-', '-', '-', '-', '+', '-', 'MACHINENAME$',
'', '(0x0,0x3E7)'
2 Ñнв 13 15:18 SuccessA... Security 528 The
description for Event ID '528' in Source 'Security' cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display the message, or you may not have permission to access them.
The following information is part of the event:'LOCAL SERVICE', 'NT
AUTHORITY', '(0x0,0x3E5)', '5', 'Advapi ', 'Negotiate', '', '-',
'MACHINENAME$', '', '(0x0,0x3E7)', '284', '-', '-', '-'
3 Ñнв 13 15:18 SuccessA... Security 576 The
description for Event ID '576' in Source 'Security' cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display the message, or you may not have permission to access them.
The following information is part of the event:'LOCAL SERVICE', 'NT
AUTHORITY', '(0x0,0x3E5)', 'SeAuditPrivilege...
 
Back
Top