Cannot start windows event log service on Windows 7. Error 4201.__

Anonymous
2009-11-15T05:12:47+00:00

Cannot start the Windows Event Log service on Local Computer.  Error 4201: The instance name passed was not recognized as valid by a WMI data provider.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2009-11-15T15:54:26+00:00

Hi Ramesh,

That did the trick.  For the record:

  1. Used msconfig to switch to safe mode boot
  2. Booted to safe mode
  3. ran cmd.exe as an administrator
  4. typed "cd C:\Windows\System32\LogFiles\WMI"
  5. typed "rename RtBackup RtBackup2"
  6. Used msconfig to switch to normal boot mode
  7. Reboot and found event viewer working

Thank you! 

Rung

Was this answer helpful?

40+ people found this answer helpful.
0 comments
Answer accepted by question author
Ramesh 181.7K Reputation points Volunteer Moderator
2009-11-15T06:53:44+00:00

Hi rung_windows7,

Renaming or deleting the following folder seems to work for some users:

C:\Windows\System32\LogFiles\WMI\RtBackup

REF: Event log error 4201 - ERROR_WMI_INSTANCE_NOT_FOUND (a helluva great thread)

Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]

Was this answer helpful?

3 people found this answer helpful.
0 comments

60 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. John Korchok 236K Reputation points Volunteer Moderator
    2014-09-14T03:20:02+00:00

    I know this is years later, but I was having the same problem, "access denied" when renaming RtBackup and also when trying to use the attrib command. In my case, the installation of Windows 7 was on the Bootcamp partition of a Mac laptop. I rebooted into OS X, opened the Bootcamp disk and was able to rename RtBackup with no problems, since Windows wasn't in control.

    As soon as I rebooted into Windows, my modem started working immediately. Problem solved.

    I'm sure that if all else fails, you could pull your system disk, temporarily attach it to another Windows, Linux or OS X system and do the same thing.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2014-07-28T20:32:12+00:00

    Well, some years later, but right now I had the same problem (Win7 SP1 64Bit)

    Couldn't delete the folder (crazy Win7-rights- I#m Admin but that seems to be nothing)

    But (without going into safemode) I could move it by cut and paste without any problems!

    Reboot- problem solved!

    I loved XP - Win7  makes so many problems- idiot-search-function and and and..

    S

    Was this answer helpful?

    0 comments
  3. Anonymous
    2014-06-14T03:15:02+00:00

    I had problem with Endicia Dymo Stamp printer program would not connect to server error, spent 2 hours on phone with tech support and narrowed it down to file permissions or this problem as the event logging service would not start. I tried renaming from file manager and it didn't work. Saw this way of renaming file and viola !!   It worked !!  Thanks so much for posting this !!

    Was this answer helpful?

    0 comments