An application can no longer log events in the Security event log by using the ReportEvent function in Windows XP with Service Pack 2 (891749)


The information in this article applies to:

  • Microsoft Windows XP Service Pack 2

SYMPTOMS

After you upgrade a Microsoft Windows XP-based computer to Windows XP with Service Pack 2 (SP2), an application can no longer log events in the Security event log by using the ReportEvent function.

CAUSE

This problem occurs because of a change in Windows XP with Service Pack 2 (SP2). To help protect the computer, the ReportEvent function no longer logs events in the Security event log. Only the Lsass.exe process can log events in the Security event log.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

In Microsoft Windows Server 2003, the AuthzReportSecurityEvent function was added to enable applications to log events in the Security event log.

For more information about the AuthzReportSecurityEvent function, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn.microsoft.com/library/en-us/security/security/authzreportsecurityevent.asp

For more information about the ReportEvent function, visit the following MSDN Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/debug/base/reportevent.asp

Modification Type:MajorLast Reviewed:7/18/2005
Keywords:kbWinXPsp2fix kbProgramming kbEventLog kbtshoot kbinfo kbprb KB891749 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.