Knowledge Base

Problems Saving Event Viewer Log from Windows NT 4.0 to 3.51

Article ID: 156884

Article Last Modified on 11/1/2006

Microsoft Windows NT Workstation 3.5
Microsoft Windows NT Workstation 3.51
Microsoft Windows NT Workstation 4.0 Developer Edition
Microsoft Windows NT Server 3.5
Microsoft Windows NT Server 3.51
Microsoft Windows NT Server 4.0 Standard Edition

This article was previously published under Q156884

SYMPTOMS

It is not possible to remotely save the Event Viewer log from a Microsoft Windows NT 4.0 computer, to a Microsoft Windows NT 3.51 computer.

CAUSE

The way file names are referenced was changed in Windows NT 4.0. In Windows NT 4.0, file names are referenced internally as \??, instead of as \DosDevices, as they are referenced in Windows NT version 3.51.

RESOLUTION

Advapi32.dll was modified to retry saving the file using the Windows NT 3.51 method of referencing the file when it fails using the Windows NT 4.0 method.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Windows NT version 4.0. This problem was corrected in the latest Microsoft Windows NT 4.0 U.S. Service Pack. For information on obtaining the service pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: prodnt

Keywords: kbnetwork KB156884