Event id 23 in System even log in Domain computer
Hello, I am getting a lot of Event ID 23 un my System Event Log: Log Name: system Source: Eventlog Event ID: 23 Level: Error User: LOCAL SERVICE The computer is joined to a Win2K3 R2 domain. The problem is in all Windows 7 computers joined in the domain. I think there is some issue with LOCAL SERVICE rights in the Windows 7 computers but I cannot find what is the error. Windows 7 computers cannot connect to network, start some services as "Diagnostic Policy Services" cannot be started because Access Denied error (Diagnostic Policy Service is started under LOCAL SERVICE ACCOUNT). Also I am having a lot of issues with network connections and certifiacte error when I am browsing in internet. Regards, Patricio
August 20th, 2009 7:21pm

Hi Patricio, Thank you for posting. For the internet connection issue, please check if this computer has obtained proper IP Address and other network settings. To make the issue clear, please let us know the following: 1. Since you have a lot of issues with network connections and certificate error, could you please let us know the detail information about the errors. 2. Could you share a full-copy of the Event Log for the ID 23? 1) You may right-click on the event and choose Event Properties. 2) Switch to the Details tab. 3) Select XML View, Click Copy and paste the information to this thread. Thanks.Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2009 12:31pm

Thanks for your reply! My responses: 1. I wasn't enable to get DHCP address from the DHCP server. I fixed this unjoining the computer form the domain, deleting the computer account, creating a new OU with blocked GPO inheritance, then creating a new computer account inside this OU and finally joining again the computer in the domain. It apear that there is something in the GPO that only affects to Windows 7 computers bt I didn't find what is. The certificate errors appears on Event log as event id 4110. The symptom is that every page that has certificates is showed as non trusted because the certificate cannot be verified in a root authority. This happens with every browser (I tested with IE 8, Firefox and Chrome). the event details are: - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" /> <EventID>23</EventID> <Version>0</Version> <Level>2</Level> <Task>100</Task> <Opcode>0</Opcode> <Keywords>0x8000000000020000</Keywords> <TimeCreated SystemTime="2009-08-27T13:36:19.726378700Z" /> <EventRecordID>191204</EventRecordID> <Correlation /> <Execution ProcessID="848" ThreadID="2620" /> <Channel>System</Channel> <Computer>PATRICIOWIN7.envision.cl</Computer> <Security UserID="S-1-5-19" /> </System> - <UserData> - <InitChannelLoggingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog"> <Error Code="5" /> <ChannelPath>Microsoft-Windows-WPD-MTPClassDriver/Operational</ChannelPath> </InitChannelLoggingFailure> </UserData> </Event> 2. This is the event id 23 detail information: - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" /> <EventID>23</EventID> <Version>0</Version> <Level>2</Level> <Task>100</Task> <Opcode>0</Opcode> <Keywords>0x8000000000020000</Keywords> <TimeCreated SystemTime="2009-08-27T13:36:19.726378700Z" /> <EventRecordID>191204</EventRecordID> <Correlation /> <Execution ProcessID="848" ThreadID="2620" /> <Channel>System</Channel> <Computer>PATRICIOWIN7.envision.cl</Computer> <Security UserID="S-1-5-19" /> </System> - <UserData> - <InitChannelLoggingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog"> <Error Code="5" /> <ChannelPath>Microsoft-Windows-WPD-MTPClassDriver/Operational</ChannelPath> </InitChannelLoggingFailure> </UserData> </Event> This event is repeated around 75 times daily with the same data (just changes the time) If you need more information please ask it. Thanks again for your support.
August 27th, 2009 4:43pm

Hi, Thank you for your update and providing the detail information. For the Event ID 23, please refer to the following: Event ID 23 Channel Initialization Hope this helps. Thanks.Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
August 31st, 2009 10:57am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics