"Kerry Kincaid" <> wrote in message
news:2BB3E753-79D2-445A-B797-...
>I am not (intentionally) generating these events. Once I installed IE7, and
> new category arrived in the event viewer, and there are events there. Just
> without any useful information.
Well, if it is anything like the records being generated by the IE compatiblity
test tool you will be able to read them more easily with its viewer.
In that case they would all be XML doublebyte content. The viewer eliminates
the confusion from the doublebyte characters by presenting them as single letters
(without any of the hex values) and makes the XML aspect into just labels, etc.
Otherwise you could use the Event Properties window's Copy to Clipboard
button to copy the entire detail area of one of your records from the event viewer
into a Notepad window and try to read it there. Note then that you only get
4 readable characters per line in the interpreted portion of each line and most
of that will be from XML labels. I.e., you would have to extract the real values
of each record somewhere inside the the XML begin and end labels,
ignoring the doublebyte aspect then too.
Post such a copy of one of your records if you need more help.
FWIW here is some of one of my records to show you what I'm describing:
Description:
The description for Event ID ( 1040 ) in Source ( Internet Explorer ) cannot be found. The local computer may not have the necessary
registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to
retrieve this description; see Help and Support for details. The following information is part of the event: .
Data:
0000: 3c 00 4d 00 69 00 74 00 <.M.i.t.
0008: 69 00 67 00 61 00 74 00 i.g.a.t.
0010: 69 00 6f 00 6e 00 43 00 i.o.n.C.
0018: 6f 00 64 00 65 00 3e 00 o.d.e.>.
0020: 43 00 53 00 53 00 46 00 C.S.S.F.
0028: 69 00 78 00 65 00 73 00 i.x.e.s.
0030: 3c 00 2f 00 4d 00 69 00 <./.M.i.
0038: 74 00 69 00 67 00 61 00 t.i.g.a.
0040: 74 00 69 00 6f 00 6e 00 t.i.o.n.
0048: 43 00 6f 00 64 00 65 00 C.o.d.e.
0050: 3e 00 3c 00 55 00 72 00 >.<.U.r.
0058: 6c 00 50 00 61 00 74 00 l.P.a.t.
HTH
Robert
---
>
> "Robert Aldwinckle" wrote:
>
>> (cross-post added to App_Compatibility)
>> "Kerry Kincaid" <> wrote in message
>> news:AAB6B159-91EA-4BAC-AFD3-...
>> > Running on a domain with group policy, no machine seems able to display
>> > Internet Explorer events in the event viewer even thought they are listed
>> > there.
>>
>>
>> How are you generating these? The only examples that I have seen are
>> the ones that the Application Compatibility Toolkit's
>> Internet Explorer Compatibility Test tool, which has its own viewer.
>> Perhaps that viewer will allow you to see whatever records you are generating too?
>>
>> FWIW this post was my last foray into that other newsgroup
>> where you can find more information about that tool:
>>
>> http://www.microsoft.com/communities...51b&sloc=en-us
>>
>>
>> HTH
>>
>> Robert Aldwinckle
>> ---
>>
>>
>> > Once example is:
>> > The description for Event ID ( 1022 ) in Source ( Internet Explorer ) cannot
>> > be found. The local computer may not have the necessary registry information
>> > or message DLL files to display messages from a remote computer. You may be
>> > able to use the /AUXSOURCE= flag to retrieve this description; see Help and
>> > Support for details. The following information is part of the event: .
>> >
>> > specifying the computer in the Auxsource flag does not help. We also get
>> > this behavior on a terminal server with event 1040.
>> >
>> > All of our workstation are Windows XP, with IE7 installed via WSUS. Our
>> > Terminal Server is Windows Server 2003, SP1.
>>
>>
>>
Similar Threads
Linear Mode
