An application that uses .NET Framework to monitor the event log does not read the descriptions from COM and DCOM sources on a computer that is running Windows Vista or Windows Server 2008

You run an application that uses .NET Framework to monitor the event log on a computer that is running Windows Vista or Windows Server 2008. However, the application does not read the descriptions from the COM and DCOM sources in the Application and System logs respectively.

This problem occurs because the common language runtime cannot find a valid EventMessageFile value in the following registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\DCOM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\COM

To have us fix this problem for you, go to the "Fix it for me" section. If you prefer to fix this problem yourself, go to the "Let me fix it myself" section.

Fix it for me

To fix this problem automatically, click the Fix this problem link. Then click Run in the File Download dialog box, and follow the steps in this wizard.

Note This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.

Note If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD so that you can run it on the computer that has the problem.

Let me fix it myself

For DCOM events, add the value EventMessageFile="%SystemRoot%\System32\oleres.dll" to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\DCOM

For COM events, add the same value to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\COM

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

971330  (http://support.microsoft.com/kb/971330) An application that uses legacy Windows event log APIs cannot get the event information in a readable format on a computer that is running Windows Vista or Windows Server 2008

961099  (http://support.microsoft.com/kb/961099) An application that uses Windows NT security event log APIs cannot read the description of an event log message from a computer that is running Windows Vista or Windows Server 2008

971334  (http://support.microsoft.com/kb/971334) The application which uses .NET Framework to monitor the event log cannot read the Application log descriptions from the Software Licensing Service source on a Windows Vista or Windows Server 2008-based computer

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.