Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Event ID 16 is logged by Automatic Updates in the Application log of your Windows Server 2003-based computer


View products that this article applies to.

Symptoms

An event that is similar to the following is logged in the Application log of your Microsoft Windows Server 2003-based computer:

Type: Warning
Source: Automatic Updates
Category: (1)
Event ID: 16
Description:
The description for Event ID (16) in Source (Automatic Updates) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.

Typically, events that are associated with the Automatic Updates event source are logged in the System log.

↑ Back to the top


Cause

This issue is caused by a timing problem that occurs where the RegisterEventSource function cannot locate the Automatic Updates event source.

Before an Automatic Updates event is logged for the first time in the System log, the location of the source file for the Automatic Updates event is added to the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\System\Automatic Updates
Immediately thereafter, the RegisterEventSource function obtains a handle to write events. If the location of the source file is not yet flushed to the registry when the RegisterEventSource function obtains a handle to write events, the RegisterEventSource function logs the event in the Application log instead of in the source file. Therefore, the event is incorrectly logged in the Application log instead of in the System log.

When the Automatic Updates log entry is logged in the Application log, the correct description is not displayed for the event because the RegisterEventSource function cannot locate the event source. That is, an event source that is named Automatic Updates does not exist in the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application
Therefore, the message that is mentioned in the "Symptoms" section is displayed for the event.

↑ Back to the top


Workaround

The event that is described in the "Symptoms" section does not affect the functionality of Windows Server 2003. You can safely ignore the event.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


Keywords: KB830750, kbprb, kbnofix, kbmgmtservices, kbwinservperf, kbtshoot

↑ Back to the top

Article Info
Article ID : 830750
Revision : 5
Created on : 10/30/2006
Published on : 10/30/2006
Exists online : False
Views : 182