Hey Dave, I think I found something that causing event log error
Could you tell me your registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog as my Registry permission is Authenticated Users, System and Administrators and the owner is SYSTEM, is it the correct or there is something missing ?
Because the properties C:\Windows\System32\winevt\Logs shown there is EventLog user with full control
Thank you