Disable Event Viewer calls

[Clint]

I have theese two events popping upp in my eventviewer and are trying to find the specific keys for disabling them.

Event Type: Error

Event Source: Userenv

Event Category: None

Event ID: 1090

Date: 2005-06-23

Time: 19:37:10

User: NT AUTHORITY\SYSTEM

Computer: CBD96F8DF455437

Description:

Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Event Type: Error

Event Source: Application Popup

Event Category: None

Event ID: 877

Date: 2005-06-23

Time: 10:34:48

User: N/A

Computer: CBD96F8DF455437

Description:

There was error [DATABASE NOT LOADED] processing the driver database.

Data:

0000: 00 00 00 00 02 00 64 00 ......d.

0008: 00 00 00 00 6d 03 00 c0 ....m..À

0010: 00 00 00 00 6d 03 00 c0 ....m..À

0018: 00 00 00 00 00 00 00 00 ........

0020: 00 00 00 00 00 00 00 00 ........

I have read somewhere that setting a DWORD value name EventLog with a Value Data: (0 = disable)

would stop that from reporting to eventviewer.

Problem is that I have searched high and low and found a few related entries but adding those keys had no effect.

Anyone that has a clue?

Edited June 23, 2005 by Clint

[Zxian]

As for the first one... in Group Policy Editor you can find the setting you want.

Computer Configuration->Administrative Templates->System->Group Policy

Set "Turn off Resultant Set of Policy logging" to Enabled.

I got this error as well after removing WMI from following Bold_Fortune's guide.

The second problem seems to be a driver issue though...not sure if you want to ignore that one.

[Clint]

Thanx!

As for the second it's coz all ODBC components is gone, sure I wanna disable that too

Do you know where?

[Zxian]

Sorry dood... no idea about that.

[Clint]

I made a useful key instead :

for disable that RSOP log entry in Event Viewer :

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RSoPLogging"=dword:00000000

for enable it again:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]

Can't find the proper key for that [DATABASE NOT LOADED] popup though

Edited June 24, 2005 by Clint

[GrofLuigi]

for enable it again:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]

That's a very dangerous way of doing it. System key usualy contains more entries than just this one. Better would be:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RSoPLogging"=-

GL