Unsolved
This post is more than 5 years old
49 Posts
0
5220
July 28th, 2008 16:00
Question for someone who knows XP Event ID codes
I had a computer that was restarting by itself, I think it is solved but I keep checking the logs and seeing "Event ID: 1704" in there. It is not my computer, so I'm wondering if it keeps restarting by itself still. So, my question is, at what point in the computer operating would this Event ID pop up, just by reading the description it seems like it would come up during the last steps of start up before you get to your desktop, so if anyone has any further insight it'd be greatly appreciated!
0 events found
No Events found!
zombieman101
49 Posts
0
July 28th, 2008 16:00
Larry R
2 Intern
•
1.7K Posts
0
July 28th, 2008 16:00
Larry R
2 Intern
•
1.7K Posts
0
July 28th, 2008 16:00
zombieman101
49 Posts
0
July 28th, 2008 17:00
JRosenfeld
2 Intern
•
4.4K Posts
0
July 28th, 2008 18:00
Just giving the Event ID is not all that helpful. We need to know the process and other info. Easiest is to copy the event info to the clipboard by clicking on the copy icon on the event properties window (below the up/down arrows). Then paste here.
You could also look through the articles in this list:
http://search.msdn.microsoft.com/?query=Event%20ID%201704%20XP&locale=en-us&ac=3
zombieman101
49 Posts
0
July 28th, 2008 20:00
I'm not computer inept but I'm still not sure what you want, but here's a screen shot of the log.
http://i25.photobucket.com/albums/c68/ZombieMan101/1704.jpg?t=1217278770
JRosenfeld
2 Intern
•
4.4K Posts
0
July 29th, 2008 00:00
I'd suggested that you copy/paste the info using the copy to clipbard button on that window, but your picture does just as well :-).
Ok, that is just telling you that the security policy has been applied successfully. So no problem there :-).
If you don't want successful security policy events logged in event viewer, click start, run, type
secpol.msc
click OK or press enter.
In the window that opens, in the left pane click on the + next to local policies, then click on Audit Policy. Then in the right hand pane, double click on Audit Policy Change. Local security setting tab, uncheck success, click apply, OK. (you can also read the explanation in the Explain this setting tab).
By default the secutity policies are checked at 16 hour intervals, and you will get that event logged then. You can read about that, and how to change the interval in
http://support.microsoft.com/kb/277543
(it says for Win2000, but as far as I know it applies to XP pro as well, I do have the registry item referred to there).