Access Violation Error After Changing Event Viewer Log Location (226509)

The information in this article applies to:

Microsoft Windows NT Workstation 4.0
Microsoft Windows NT Workstation 4.0 SP1
Microsoft Windows NT Workstation 4.0 SP2
Microsoft Windows NT Workstation 4.0 SP3
Microsoft Windows NT Server 4.0
Microsoft Windows NT Server 4.0 SP1
Microsoft Windows NT Server 4.0 SP2
Microsoft Windows NT Server 4.0 SP3
Microsoft Windows NT Server, Enterprise Edition 4.0

This article was previously published under Q226509

SYMPTOMS

After you save the Event Viewer log file and modify the registry to use the saved event log file in a different location, an Access Violation error message may be displayed in the System log.

CAUSE

The Event Viewer tool can only write information to an event log file that is 64 KB in size (or any multiple of 64 KB). The Event Viewer Save As command does not save the Event log file in 64 KB increments.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed that this is a problem in Windows NT 4.0. This problem was first corrected in Windows NT 4.0 Service Pack 4.

MORE INFORMATION

For additional information about changing the default location of the Event Viewer log file, please see the following article in the Microsoft Knowledge Base:

216169 How to Change the Default Event Viewer Log File Location

Modification Type:	Major	Last Reviewed:	5/14/2003
Keywords:	kbbug kbfix KB226509