A Service Control Manager (SCM) event cannot be logged in the System event log on a Windows Server 2003-based computer (917463)


The information in this article applies to:

  • Microsoft Windows Server 2003 SP1, when used with:
    • Microsoft Windows Server 2003, Enterprise Edition
    • Microsoft Windows Server 2003, Standard Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition
    • Microsoft Windows Server 2003, Standard x64 Edition
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

SYMPTOMS

A Service Control Manager (SCM) event cannot be logged in the System event log on a Windows Server 2003-based computer when the following conditions are true:
  • You apply Windows Server 2003 Service Pack 1 to this computer.
  • You run the Sysprep.exe command on this computer, or you run the Active Directory Installation Wizard (Dcpromo.exe) on this computer.

CAUSE

This issue occurs when the user who is logged on is not the user who is registered in the Windows Management Instrumentation (WMI) repository. WMI will not allow for events to be written to the System event log if the user who is logged on is not registered in the WMI repository.

WORKAROUND

To work around this issue, follow these steps:
  1. Click Start, click Run, type control panel, and then click OK.
  2. Double-click Scheduled Tasks, click Advanced, and then click AT Service Account.
  3. In the AT Service Account Configuration dialog box, select System Account.
  4. Click Start, click Run, type cmd, and then click OK.
  5. At the command prompt, type the following command:

    AT 12:00/i mofcomp %windir%\system32\wbem\scm.mof



    Note This step re-compiles the Scm.mof file.

    Note The AT command schedules commands and programs to run on a computer at a specified time and date, such as /every: date[2005:05:16:12:00:00]. You can run the /every: date[...] command on each specified day of the week or month. If the date is omitted, the current day of the month is assumed. The Schedule service must be running to use the AT command. The /i switch allows for the job to interact with the desktop of the user who is logged on when the job runs.
  6. Close the command prompt, and then restart the computer.

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed in the "Applies to" section.
Modification Type:MinorLast Reviewed:5/15/2006
Keywords:kbServer kbSCM kbtshoot kbBug KB917463 kbAudDeveloper kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.