Windows Event Log: Error 1747: The authentication service is unknown

[Mohamed Abdelhamid]

Hello,

Recently, I Event viewer is unable to start because Windows Event Log service is stopped, when I try to start the service I got the following error:



I followed some articles but with no luck.

First, These two folders were inaccessible:

C:\Windows\System32\winevt\Logs

C:\Windows\System32\winevt\TraceFormat

I changed the ownership of them to SYSTEM, and gave EventLog Full Control permission.

Also Sfc /scannow shows that there no errors found.

also when I try to RDP to this VM, I receive "An internal error has occurred."


Any idea?

Continue reading...