Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hi Yesterday I rebooted my VMWare Virtual Machine Wndows Server 2008 unfortunately with the power off button... This morning the Windows Event Log service doesn't start with the message: "Windows could not start the Windows Event Log service on ... " Error 2: The system cannot find the file specified.

Any Idea? Thanks

share|improve this question
Please add the detailed information of the Windows Event Log. – Ricardo Polo Aug 27 '11 at 19:59
Please add a screenshot of the values under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog – gtirloni Sep 6 '14 at 20:56

A few things could have gone wrong from the viewer's setting becoming corrupt in some way to permission problems. With the lack of detail, I shall take a bit of a guess.

To check to make sure the service is actually configured to start-up properly; go to your services to ensure that service eventlog (Windows Event Log) is set to Automatic start-up type and that it is configured with the proper account. You might also need to tweak the recovery options.

To make sure the permissions are set properly for the service, go to %windir%\system32\winevt\Logs and ensure the proper permissions are set for the account that is running the eventlog service so that the process is actually able to use the directory.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.