Re: SystemLog DhcpServer The description for Event ID ( 1037 ) in Source ( DhcpServe

After adding the two registry entries you suggested, I am
still unable to resolve the issue. The DHCPServer Events
are 1037,1038, and 1039.

Can someone with access to the registry of a windows 2000
server please tell me what registry entries belong in the
key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventl
og\System\DHCPServer

Thanks
Wayne

>-----Original Message-----
>Green Giant wrote in news:008201c33d2b$fc833090
$a001280a@phx.gbl:
>
>> Yeah that's what I that it was.
>>
>> So again, how do I repair the registry entries if I
don't
>> know what values are suppose to be in there? I wonder
how
>> these entries were deleted in the first place...
>>
>> The EventMessageFile string value should point to
the .dll
>> file which holds the correct descriptions, however I
dont
>> know what dll file this is. I also don't know any other
>> string/dword's that should be in the key.
>
>I have no access to server right now but in W2K Pro:
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Event
log\System
>\Dhcp\
>holdes two entries:
> EventMessageFile = %SystemRoot%\System32\dhcpcsvc.dll
> ParameterMessageFile = %SystemRoot%\System32\kernel32.dll
>both REG_EXPAND_SZ
>Perhaps that helps. IIRC the dhcpSsvc.dll is used for
server's
>mesasage file. But that's only from a foggy memory. :-)
>
>>
>>>-----Original Message-----
>>>Hi,
>>>
>>>This event occurs when the DHCP server cleans up the
>>>address lease database. It will try to free up
addresses
>>>that are beyond the lease expiration time (e.g. 48
hours)
>>>and return them to a state where they can be used by
>> other
>>>computers on the network, or the same computer should
it
>>>try to login and the address hasn't been taken. The
Event
>>>Viewer will then log the 2 messages 1037 and 1038
>>>You can disable Audit logging on the DHCP server but
this
>>>will NOT prevent the messages appearing in the Event
>>>Viewer.
>>>
>>>shubs
>>>>-----Original Message-----
>>>>Hi
>>>>
>>>>I am getting an information system event log on my
>>>Windows
>>>>2000 DC with the following description:
>>>>
>>>>The description for Event ID ( 1037 ) in Source (
>>>>DhcpServer ) cannot be found. The local computer may
not
>>>>have the necessary registry information or message DLL
>>>>files to display messages from a remote computer. The
>>>>following information is part of the event: %%0.
>>>>
>>>>
>>>>From what I have been able to gather on this, it seems
>>>>like the string value EventMessageFile for the
>> DhcpServer
>>>>System Eventlog is either incorrect or missing.
>>>>
>>>>Sure enough, I check the registry key:
>>>>
>>>
>>
[HCLM]/System/CurrentControlSet/Services/Eventlog/System/DH
>>>>CPServer and there is no EventMessageFile string
value.
>>>>EventMessageFile is suppose to point to a .dll file
>> which
>>>>contains the proper messages to display for the event.
>>>>
>>>>This is happening every 12 hours. I think it has
>>>something
>>>>to do with cleaning up the dhcp database.
>>>>
>>>>I do not know exactly which keys should be in
>>>>
>>>
>>
[HCLM]/System/CurrentControlSet/Services/Eventlog/System/DH
>>>>CPServer. Nor do I know which messagefiles they are
>>>>suppose to point to.
>>>>
>>>>How can I repair this?
>>>>
>>>>P.S. This seems to be a very common occurence with
many
>>>>other types of services, from what I've read.
>>>>
>>>>Thanks
>>>>Wayne
>>>>.
>>>>
>>>.
>>>
>>
>
>
>.
>