Event log stopped

[JoeJoe2]

Hi guys,
While fixing 1 problem for a friend, I noticed one of my own. My event log stopped working. It was working yesterday. When I try to look at it in the console, I get an unavailable, check the service. The service is running. I rebooted and same error. I checked the registry, started, deleted logs, restarted at elevated cmd line, still no luck. I did some ownership changes quite a while back to fix another problem (as recommended here) and that fixed the problem and there were no other errors. Is there a script to set all permissions to default? Should I do that?
Edit: actually, not started error 4201 will do more research
The problem on my friends computer is that the system restore task in the scheduler was totally deleted. I want her to have this option, but when I tried to create the task, it asked for a script. She is running v32 home basic. Any thoughts.

Thanks as usual
Joe

 

[JoeJoe2]

Hi All,
I tried Brink's fix, sfc, winsock rebuild, all the permission ideas etc and had no luck. Was about to make the call to MS level 1 (hit or miss for me) and ran across one last idea. I turned on UAC, no luck. I then added Local Service to the WMI\rtbackup folder, and it worked!!!. Turned off UAC and it still worked.
Hope this helps someone
Joe

 

[richc46]

Thank you for taking the time to inform us of the solution. Your thoughtfulness will help many.