Win32 error codes are reversed in Event Viewer in prerelease versions of Windows Server 2008

You use Event Viewer on a computer that is running a prerelease version of Windows Server 2008. When you click the Details tab of an event, any Win32 error code that may be logged is reversed. For example, hexadecimal error code 0000007E appears as 7E000000.

This issue occurs because Win32 errors that are logged in Event Viewer have the little Endian modes reversed. Therefore, a hexadecimal error code such as 0000007E appears as 7E000000.

Note Little Endian mode specifies that the low-order byte is stored at the lowest memory address. The high-order byte is stored at a higher memory address.

To work around this issue when you are troubleshooting, reverse the hexadecimal error code. For example, if error code 7E000000 is logged in Event Viewer, search on error code 0000007E instead.