Event ID: 1003 and Event ID: 1015 are added to the Application log every time that you restart Windows XP Service Pack 2 (889082)


The information in this article applies to:

  • Microsoft Windows XP Professional Service Pack 2 (SP2)
Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

Every time that you restart a Microsoft Windows XP Service Pack 2 (SP2)-based computer, the following two Warning event entries are written in the Application log:
  Event Type: Warning
  Event Source: EvntAgnt 
  Event Category: None 
  Event ID: 1003 
  Date: date 
  Time: time 
  User: N/A 
  Computer: servername 
  Description: TraceFileName parameter not located in registry; 
  Default trace file used is . 

  Event Type: Warning 
  Event Source: EvntAgnt 
  Event Category: None 
  Event ID: 1015 
  Date: date 
  Time: time 
  User: N/A 
  Computer: servername 
  Description: TraceLevel parameter not located in registry; 
  Default trace level used is 32.

CAUSE

This issue occurs when you install the Simple Network Management Protocol (SNMP) service, but you do not also configure the service. When you restart the computer, the SNMP service starts, and it logs these Warning events if the Evntagnt.dll file is not configured for debug tracing.

WORKAROUND

To work around this issue, use one of the following methods.

Method 1: Disable the SNMP service

If you do not use the SNMP service, disable the service. To do this, follow these steps:
  1. Click Start, click Run, type services.msc and then click OK.
  2. In the Services list, right-click SNMP and then click Properties.
  3. In the Startup type list box, click Disabled.
  4. Click OK to close the SNMP Properties dialog box.

Method 2: Add the TraceFileName and the TraceLevel parameters to the registry

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To add the TraceFileName and TraceLevel parameters to the registry, follow these steps:
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\SNMP_EVENTS\EventLog\Parameters
  3. After you select the subkey that is specified in step 2, point to New on the Edit menu, and then click String Value.
  4. Type TraceFileName, and then press ENTER.

    NoteDo not edit this string value. The Value data for the TraceFileName string value should be left blank (null).
  5. With the subkey that is specified in step 2 selected, point to New on the Edit menu, and then click DWORD Value.
  6. Type TraceLevel, and then press ENTER.
  7. Right-click TraceLevel, and then click Modify.
  8. In the Value data box, type 32, and then click OK.
  9. On the File menu, click Exit to quit Registry Editor.
Modification Type:MajorLast Reviewed:11/19/2004
Keywords:kbtshoot kbprb KB889082 kbAudEndUser kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.