Sounds like the event log file is (or files are) corrupt.
Control Panel|Administrative Tools|Services|Event Log Service|General, set
the "Startup Type:" to "Disabled" restart the pc, then delete (or move)
the corrupt *.evt file(s) from %windir%\system32\config then set the Event
Log Service "Startup Type:" back to "Automatic", restart for effect.
You need to get this issue fixed before moving on. SP1 and some network
interfaces running at half duplex were causing event log file corruption.
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
Carl Hilton said:
Nothing in the EVENT logs. Tried running REGMON and FILEMON and they show
NO ACCESS DENIED while trying to start the DHCP Client service.