DNS Server entries within Event Viewer is empty

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

On my 2000 DC, also the DNS server, the Event Viewer is empty. No items,
even DNS server startup, etc..
I've checked the registry, DNS logging has not been disabled or restricted
via "Errorloglevel" \HKLM\system\currentcontrolset\services\dns\parameters.

Any ideas?
 
Hi,

Thanks for posting here.

From your post, my understanding of this issue is: The event log of your
DNS server is empty. If this is not correct, please feel free to let me
know.

Based on my experience, you may run the following command in the server:

dnscmd /config /EventlogLevel 4

Then restart the server to test this issue.

For more information about event log of DNS server, you may see:

EventLogLevel
<http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit
/en-us/regentry/46745.asp>

Hope this helps!

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
 
Thanks for your suggestion. It didn't work but it's providing more
information. When I entered the command: dnscmd /config /eventloglevel 4

I got back:

DNS Server failed to reset registry property.
Status = 9553 (0x00002551)
Command failed: DNS_ERROR_INVALID_PROPTERY 9553 (00002551)

Additional help would really be appreciated.
 
Hi,

Thanks for posting here.

Sorry I should explain that the /EventlogLevel switch is case sensitive.
For more information, please see:

Windows Support Tools feature does not work correctly when you use the
syntax described in Support Tools Help file
http://support.microsoft.com/KB/818717

Hope this helps!

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Thread-Topic: DNS Server entries within Event Viewer is empty
thread-index: AcXaZcLCWi8M+h5wTs+fq8isHOqzcw==
X-WBNR-Posting-Host: 209.195.187.107
From: =?Utf-8?B?Tmljay1NYXJz?= <[email protected]>
References: <[email protected]>
Click to expand...
 
Thanks. The command entered successfully. After entering the command I
restarted the DNS server on the system. Still no entries in the DNS Server
event viewer section.

Next step?
 
Hi,

Thanks for your reply.

The issue sounds weird, however, let's check the related items one by one:

1. Please check the size and the permission of the DNS server event log
file "DnsEvent.Evt" which can be located from the following folder:
%SystemRoot%\System32\Config

If the size is zero, you may delete the file and then restart the DNS
server for a test. If the size is not zero, please make sure that
Administrators and System have Full Control permissions on this file. If
the size is not zero and the permissions have no problem, please go to the
next step.

2. Open eventvwr.exe, can you see other event logs, such as Application
Log, System Log and so on? If you cannot see any log, please click Action
-> Refresh, can you see the logs now? If you can see the logs after
refresh, please refer to the following method to resolve the issue:

Rebuild the event log files
===================
NOTE:
- The following method assume you have 8 common event log files on your
server, if they are different from your log files, please check the
%SystemRoot%\System32\Config first to make sure what logs you have to
overwrite.
- If you have only one or a few problematic logs (such as DNS log), you
may leave the other normal logs on.

1. Open services.msc, and then Disable the Event Log service (right click
the service, select Disabled for the
Startup type)
2. Create 8 text files (be sure you can see the extension, as it will need
changed)
3. Rename the files as follows (type it exactly as it appears here, if
there is a space between words, put the space):
SysEvent.evt
SecEvent.Evt
File Rep.Evt
DnsEvent.Evt
Director.Evt
AppEvent.Evt
NTDS.Evt
NtFrs.Evt
4. Reboot the computer
5. Cut and paste the files into the %SystemRoot%\System32\Config directory
and overwrite the current files
6. Change the Startup type of Event Log service back to Automatic
7. Reboot the box and see if your problem persists

Hope this helps!

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
Thread-Topic: DNS Server entries within Event Viewer is empty
thread-index: AcXa7+wzmVrgvV5qSVeL/8bZecgeAw==
X-WBNR-Posting-Host: 209.195.152.108
From: =?Utf-8?B?Tmljay1NYXJz?= <[email protected]>
References: <[email protected]>
Click to expand...
<[email protected]>
 
Back
Top