Cannot start windows event log service on Windows 7. Error 4201.__

Anonymous
2009-11-15T05:12:47+00:00

Cannot start the Windows Event Log service on Local Computer.  Error 4201: The instance name passed was not recognized as valid by a WMI data provider.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2009-11-15T15:54:26+00:00

Hi Ramesh,

That did the trick.  For the record:

  1. Used msconfig to switch to safe mode boot
  2. Booted to safe mode
  3. ran cmd.exe as an administrator
  4. typed "cd C:\Windows\System32\LogFiles\WMI"
  5. typed "rename RtBackup RtBackup2"
  6. Used msconfig to switch to normal boot mode
  7. Reboot and found event viewer working

Thank you! 

Rung

Was this answer helpful?

40+ people found this answer helpful.
0 comments
Answer accepted by question author
Ramesh 181.7K Reputation points Volunteer Moderator
2009-11-15T06:53:44+00:00

Hi rung_windows7,

Renaming or deleting the following folder seems to work for some users:

C:\Windows\System32\LogFiles\WMI\RtBackup

REF: Event log error 4201 - ERROR_WMI_INSTANCE_NOT_FOUND (a helluva great thread)

Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]

Was this answer helpful?

3 people found this answer helpful.
0 comments

60 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2014-09-22T08:18:48+00:00

    Excellent! Now My windows is working fine .Thanks for the update,

    Was this answer helpful?

    0 comments
  2. Anonymous
    2014-10-02T03:46:01+00:00

    I was having troubles with another service not starting and found the problem to be with Windows Event Log not starting.  I followed your advice in deleting/renaming the folder at the given location and rebooting, this did the trick and both services start up just fine now.  Thanks for your help.

    :)

    Was this answer helpful?

    0 comments
  3. Anonymous
    2015-03-14T01:44:56+00:00

    Dear Ramesh

    I would like to thank you very much for your hint

    I could not start Oracle on my client application test machine anymore, somehow I found out that there is a problem with the eventlog and then was led by my friend Google to this page which not only helped me to start the Windows Eventlog again but also (as a consequence) to be able to work with Oracle again.

    Renaming this folder was IT!!!

    I was afraid I would have to reinstall Windows over the weekend... which is not necessary anymore

    Instead I will fill a glass with a good wine and raise it in the direction of where I think you are and cheer to you.

    So let me repeat it:

    THANK YOU VERY MUCH !!!!!

    Was this answer helpful?

    0 comments