Cannot start windows event log service on Windows 7. Error 4201.__

Anonymous
2009-11-15T05:12:47+00:00

Cannot start the Windows Event Log service on Local Computer.  Error 4201: The instance name passed was not recognized as valid by a WMI data provider.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2009-11-15T15:54:26+00:00

Hi Ramesh,

That did the trick.  For the record:

  1. Used msconfig to switch to safe mode boot
  2. Booted to safe mode
  3. ran cmd.exe as an administrator
  4. typed "cd C:\Windows\System32\LogFiles\WMI"
  5. typed "rename RtBackup RtBackup2"
  6. Used msconfig to switch to normal boot mode
  7. Reboot and found event viewer working

Thank you! 

Rung

Was this answer helpful?

40+ people found this answer helpful.
0 comments
Answer accepted by question author
Ramesh 181.7K Reputation points Volunteer Moderator
2009-11-15T06:53:44+00:00

Hi rung_windows7,

Renaming or deleting the following folder seems to work for some users:

C:\Windows\System32\LogFiles\WMI\RtBackup

REF: Event log error 4201 - ERROR_WMI_INSTANCE_NOT_FOUND (a helluva great thread)

Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]

Was this answer helpful?

3 people found this answer helpful.
0 comments

60 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2011-07-03T19:29:47+00:00

    I can't believe that one has to go through all these steps to get a basic service like event viewer to work. Microsoft engineers can't figure it out and come up with a hotfix for the problem? Doesn't anyone have a clue as to what caused this to happen to so many people for so many years in the first place? I'd think it was one of the numerous updates but how far back could that go? This solution, while typical of the geeky world of computer workarounds makes me nauseous. I'm trying to troubleshoot a system freeze and can't see any of the possible events that could have caused it. How is it that Windows 7 and it's usually superior troubleshooter not catch this problem?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2011-07-23T01:42:21+00:00

    thank u Ramesh 

    i was having the same problem

    what a great idea

    thanks a lot

    Was this answer helpful?

    0 comments
  3. Anonymous
    2011-09-15T05:54:23+00:00

    Hello Ramesh,

    I followed your steps above, but I got error "access denieled" when I tried to rename the folder .

    I ran cmd.ext as an administrator, using admin account in safe mode.

    thank you

    Cheers

    Jace

    Was this answer helpful?

    0 comments