Event Log Error 4201

zreynolds

After about week of research and trying numerous work-arounds, I fell
into a solution while correcting another unrelated issue. The short
version of what I did to get my Event Viewer working again goes
something like this.
1. Booted w/Vista CD, after entering my language I went to Repair
and opened the Command Prompt
2. Ran a pre-made cmd file with the following
C:\Windows\System32\takeown /f
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEve ntLog-System.etl /d y
icacls
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEve ntLog-System.etl
/grant administrators:F
ren
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEve ntLog-System.etl *.bak
pause
3. verified all went well
4. Re-booted and the event log service was working.


Hope this helps


--
zreynolds