New
#21
thank you for your help and Patience do you mean what i have highlighted ?
You have to remove all subkeys not only this one string
you have to remove
HKLM\...\Schedule\Aliases
HKLM\....\Schedule\CompatbilityAdapter
HKLM\...\Schedule\Configuration
HKLM\...\Schedule\CredWom
HKLM\...\Schedule\Handlers
HKLM\...\Schedule\Handshake
HKLM\...\Schedule\Taskcache
you will need takeownership each key with it's subkeys Take Ownership of file - Vista Forums
My special technical warning:go to advanced options in permissions and check "replace all child object permissions with with inheritable permissions from this object"
Attachment 90528
to apply changes to all subkeys with each key -in this way you do this must quicker.
As I said - first creating system health report will take more time than usually,next times will be in mormal times
Good luck!
because its the registry i have to get it right. so if i right click on schedule and delete?
And what about reseting Schedule key?
If you have problem to apply permissions to all subkeys,alternatively you can try this method:
1.Download SetACL tool Download SetACL: Windows ACL management from SourceForge.net,extract from ZIP file SetACL.exe and place it in C:\Windows\System32
2.Run cmd.exe with elevated previlliges (right click on cmd.exe as admin) and type (or better copy from post and past to console):
setacl -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule" -ot reg -rec yes -actn setowner -ownr "n:Administrators;"
press ENTER
setacl -on "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule" -ot reg -rec yes -actn ace -ace "n:Administrators;p:full"
press ENTER
REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule"
press ENTER
REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule"
press ENTER
//as you can see all command give Administrators group full acces to Schedule key and its subkey,remove Schedule key and next recreate empty Schedule key//
Next try again to create system health report..
Last edited by Flavius; 11 Aug 2010 at 04:14. Reason: Small corrections
This is the error in event logs when i run system health
Log Name: Microsoft-Windows-Diagnosis-PLA/Operational
Source: Microsoft-Windows-Diagnosis-PLA
Date: 11/08/2010 17:20:41
Event ID: 1006
Task Category: None
Level: Error
Keywords:
User: BRY\bry
Computer: bry
Description:
Data collector set system\System Diagnostics stopped because of error 0x80300112.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnosis-PLA" Guid="{E4D53F84-7DE3-11D8-9435-505054503030}" />
<EventID>1006</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-08-11T16:20:41.195089500Z" />
<EventRecordID>1582</EventRecordID>
<Correlation />
<Execution ProcessID="2368" ThreadID="4676" />
<Channel>Microsoft-Windows-Diagnosis-PLA/Operational</Channel>
<Computer>bry</Computer>
<Security UserID="S-1-5-21-164233742-720641153-1818478397-1000" />
</System>
<UserData>
<DataCollectorSetStopFailure xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/Windows/Diagnosis/PLA/events">
<Name>system\System Diagnostics</Name>
<Error>2150629650</Error>
</DataCollectorSetStopFailure>
</UserData>
</Event>
i found these log errors on microsoft>Errors (030) FACILITY_PLA - Software Sleuthing - Site Home - MSDN Blogs
and this is when i follow microsofts link for the error>Event ID 1006 — PLA Data Collection Status
and a link for the error codes>>http://msdn.microsoft.com/en-us/library/ms681381.aspx
Last edited by brianzion; 11 Aug 2010 at 12:02. Reason: update
both your errors
from post 8
and from post 28<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
both relate to Application and System section in event viewer,exactly both keys are in<Provider Name="Microsoft-Windows-Diagnosis-PLA" Guid="{E4D53F84-7DE3-11D8-9435-505054503030}" />
HKLM\System\CurrentControlSet\Control\WMI\Autologger
I think it's any WMI error
Try below
1.Run cmd.exe with elevated previlliges (right click on cmd.exe as admin) and type:
sfc /scannow
2.Again in cmd.exe with elevated previlliges type:
winmgmt /resetrepository
show also message which this command return
+ restart
3.In cmd.exe also with elevated previlliges type
wevtutil cl Application
press ENTER
wevtutil cl System
press ENTER
If nothing help as one of your links suggest make this command in elevated command prompt
typeperf -qx >%userprofile%\Desktop\log.txt
On your desktop appear log.txt file -attache this file to post...and I'll answer tomorrow or day after tomorrow because in such sophistacated case I have to consult with one my friend which is an expert from WMI...