Event viewer event 4201


Zardoc

Zardoc

Dazed & Confused
Power User
VIP
Local time
1:51 AM
Posts
760
Location
In a van down by the river
Visit site
OS
Windows 11 Enterprise
Hey all,

Just wanted to check with you guys. Has anyone gotten an error message for event viewer windows-USB video/Analytic?

Windows could not start the Windows Event Log service on Local Computer.

Error 4201: The instance name passed was not recognized as valid by a WMI data provider.

I haven't changed permissions in WMI to see if it fixes the issue but I wanted to check if others got this issue also.

Thanks


Event 4201 Viewer 2021-08-28_14-45-23.png
 
Windows Build/Version
22000.168

My Computer

System One

  • OS
    Windows 11 Enterprise
    Computer type
    PC/Desktop
    CPU
    Intel® Core™ i7-12700K Processor 25M Cache, up to 5.00
    Motherboard
    Asus TUF Gaming Z690-PLUS WIFI D4
    Memory
    G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3200mhz
    Graphics Card(s)
    Asus Dual Geforce Rtx™ 2070 Oc Edition 8gb Gddr6
    Monitor(s) Displays
    BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 250GB
    Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
    Crucial MX500 2TB 3D NAND SATA Internal SSD
    PSU
    Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
    Case
    Corsair 275R ATX Mid Tower Case
    Keyboard
    Logi MX Keys
    Mouse
    Logi M705
    Internet Speed
    400 mbs
    Browser
    Firefox
    Antivirus
    Eset NOD32
    Other Info
    Love fast boots

My Computers

System One System Two

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 5600
    Motherboard
    MSI B550-A Pro
    Memory
    16 GB
    Graphics Card(s)
    Sapphire Radeon RX 6500XT (8 GB version)
  • Operating System
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    Acer A114
    CPU
    Intel Celeron N4020

My Computer

System One

  • OS
    Windows 11 Enterprise
    Computer type
    PC/Desktop
    CPU
    Intel® Core™ i7-12700K Processor 25M Cache, up to 5.00
    Motherboard
    Asus TUF Gaming Z690-PLUS WIFI D4
    Memory
    G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3200mhz
    Graphics Card(s)
    Asus Dual Geforce Rtx™ 2070 Oc Edition 8gb Gddr6
    Monitor(s) Displays
    BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 250GB
    Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
    Crucial MX500 2TB 3D NAND SATA Internal SSD
    PSU
    Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
    Case
    Corsair 275R ATX Mid Tower Case
    Keyboard
    Logi MX Keys
    Mouse
    Logi M705
    Internet Speed
    400 mbs
    Browser
    Firefox
    Antivirus
    Eset NOD32
    Other Info
    Love fast boots
Ok friends,

Here is the fix I tested.

If you want to apply this fix:
1) Save a copy of your registry
2) Copy this reg command in a text file and save as Fix for WMI Viewer USB Video Analytic.reg

Code: 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic\ChannelAccess]
"Owners"=hex(7):75,00,73,00,62,00,76,00,69,00,64,00,65,00,6f,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic\Enabled]
"Owners"=hex(7):75,00,73,00,62,00,76,00,69,00,64,00,65,00,6f,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic\Isolation]
"Owners"=hex(7):75,00,73,00,62,00,76,00,69,00,64,00,65,00,6f,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic\OwningPublisher]
"Owners"=hex(7):75,00,73,00,62,00,76,00,69,00,64,00,65,00,6f,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic\Type]
"Owners"=hex(7):75,00,73,00,62,00,76,00,69,00,64,00,65,00,6f,00,2e,00,69,00,6e,\
  00,66,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic]
"OwningPublisher"="{da1d1dbd-3186-4fa2-bc2d-075efd9e43e2}"
"Enabled"=dword:00000001
"Isolation"=dword:00000001
"ChannelAccess"="O:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x3;;;BO)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x3;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)"
"Type"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{da1d1dbd-3186-4fa2-bc2d-075efd9e43e2}]
@="Microsoft-Windows-USB-Video"
"ResourceFileName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,\
  00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\
  5c,00,64,00,72,00,69,00,76,00,65,00,72,00,73,00,5c,00,75,00,73,00,62,00,76,\
  00,69,00,64,00,65,00,6f,00,2e,00,73,00,79,00,73,00,00,00
"MessageFileName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
  00,64,00,72,00,69,00,76,00,65,00,72,00,73,00,5c,00,75,00,73,00,62,00,76,00,\
  69,00,64,00,65,00,6f,00,2e,00,73,00,79,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{da1d1dbd-3186-4fa2-bc2d-075efd9e43e2}\ChannelReferences]
"Count"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{da1d1dbd-3186-4fa2-bc2d-075efd9e43e2}\ChannelReferences\0]
@="Microsoft-Windows-USB-Video/Analytic"
"Id"=dword:00000010
"Flags"=dword:00000000

Reboot and try the viewer again, should work (well until next update and MS will mess it up again :rolleyes: :wink:
 

My Computer

System One

  • OS
    Windows 11 Enterprise
    Computer type
    PC/Desktop
    CPU
    Intel® Core™ i7-12700K Processor 25M Cache, up to 5.00
    Motherboard
    Asus TUF Gaming Z690-PLUS WIFI D4
    Memory
    G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3200mhz
    Graphics Card(s)
    Asus Dual Geforce Rtx™ 2070 Oc Edition 8gb Gddr6
    Monitor(s) Displays
    BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 250GB
    Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
    Crucial MX500 2TB 3D NAND SATA Internal SSD
    PSU
    Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
    Case
    Corsair 275R ATX Mid Tower Case
    Keyboard
    Logi MX Keys
    Mouse
    Logi M705
    Internet Speed
    400 mbs
    Browser
    Firefox
    Antivirus
    Eset NOD32
    Other Info
    Love fast boots
Hi,
thank you so much for helping me solve the problem.
The solution you proposed worked wonders.
I would just add that for the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ PnpResources\ Registry\HKLM \SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic" you must change the permissions, otherwise the change will not you are allowed.
Thanks again.
 

My Computer

System One

  • OS
    Windows 11
UGian said:
Hi,
thank you so much for helping me solve the problem.
The solution you proposed worked wonders.
I would just add that for the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ PnpResources\ Registry\HKLM \SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-USB-Video/Analytic" you must change the permissions, otherwise the change will not you are allowed.
Thanks again.
Click to expand...
Thanks for adding the info ;-)
(y)
 

My Computer

System One

  • OS
    Windows 11 Enterprise
    Computer type
    PC/Desktop
    CPU
    Intel® Core™ i7-12700K Processor 25M Cache, up to 5.00
    Motherboard
    Asus TUF Gaming Z690-PLUS WIFI D4
    Memory
    G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3200mhz
    Graphics Card(s)
    Asus Dual Geforce Rtx™ 2070 Oc Edition 8gb Gddr6
    Monitor(s) Displays
    BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 250GB
    Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
    Crucial MX500 2TB 3D NAND SATA Internal SSD
    PSU
    Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
    Case
    Corsair 275R ATX Mid Tower Case
    Keyboard
    Logi MX Keys
    Mouse
    Logi M705
    Internet Speed
    400 mbs
    Browser
    Firefox
    Antivirus
    Eset NOD32
    Other Info
    Love fast boots
mike54545457444 said:
Does not work. Cannot add that registry to the key.
Click to expand...
To which user did you change Ownership of the parent Registry Key?
To which user / user group did you give change Permission for the parent Registry Key?


Denis
 

My Computer

System One

  • OS
    Windows 11 Home x64 Version 22H2 Build 22621.2283
first i tried to set it all to administrator. Then I used the run as software to run as trusted installer. The keys installed...but they did nothing. The WMI error in the log persists, and unable to delete the logs.
 

My Computer

System One

  • OS
    win11
If you set it to Administrator then you set it to the normally-disabled Built-in Admin account.
A more common & effective step would be to set it to Administrators [plural] because that is a User group to which all your Admin accounts belong.

If you change the ownership & permissions then you do not need to use that utility to run as TrustedInstaller.

I cannot advise you about your WMI error, I know nothing about that topic.
I only posted to help you with the Ownership & Permissions changes.


best of luck,
Denis
 

My Computer

System One

  • OS
    Windows 11 Home x64 Version 22H2 Build 22621.2283
mike54545457444 said:
Does not work. Cannot add that registry to the key.
Click to expand...
Don't bother adding the key. It gets overridden eventually. Besides, that error only appears if the journal is empty and not every time. I don't bother because it has no impact on the O/S
 

My Computer

System One

  • OS
    Windows 11 Enterprise
    Computer type
    PC/Desktop
    CPU
    Intel® Core™ i7-12700K Processor 25M Cache, up to 5.00
    Motherboard
    Asus TUF Gaming Z690-PLUS WIFI D4
    Memory
    G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3200mhz
    Graphics Card(s)
    Asus Dual Geforce Rtx™ 2070 Oc Edition 8gb Gddr6
    Monitor(s) Displays
    BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
    Samsung 980 PRO PCIe 4.0 Gen 4 NVMe® SSD 250GB
    Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
    Crucial MX500 2TB 3D NAND SATA Internal SSD
    PSU
    Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
    Case
    Corsair 275R ATX Mid Tower Case
    Keyboard
    Logi MX Keys
    Mouse
    Logi M705
    Internet Speed
    400 mbs
    Browser
    Firefox
    Antivirus
    Eset NOD32
    Other Info
    Love fast boots
That's fine but in the event viewer it pops up with this dialog when viewing the administrative summary custom log at the top. I suppose ignoring it is the only way but it didn't pop up a few days ago so something happened which can't be fixed.
 

My Computer

System One

  • OS
    win11
You must log in or register to reply here.

Similar threads

Microsoft CoPilot Errors In Event Log
Replies
4
Views
490
snerd
snerd
Solved NetMsmqActivator Error in Event Viewer
Replies
1
Views
263
lafargeotte
lafargeotte
Help with Windows 11 Event viewer error from Killer Analytics Service
Replies
2
Views
460
TraderGary
TraderGary
Event ID 1000 - How to debug
Replies
3
Views
2K
WebMaximus
W
Event id 10005 DCOM got error "1115" attempting to start the service wuauserv.....
Replies
1
Views
5K
kazik1946
K

Latest Support Threads

Latest Tutorials

Back
Top Bottom