Event Logs/Net Helpmsg

[ChelseaGirl]

If a Error in the event log has a binary/DWORD description you can translate the error to dec and then display the error text with net helpmsg -

Question : Which field in the DWORD do I need to translate into dec ?

I've looked all over the place and none of the documentation I've read says exactly which field it is.....

 

[richgill]

All of it, eg from the Data field of an error in my event log:

0000: 000000e9

e9 is 233 DEC. Then...

C:\>net helpmsg 233

No process is on the other end of the pipe.

(btw - I have never done this before - so I could be completely wrong, but the error description above does seem to fit my event log error message!) Thanks for this tip!!

 

[ChelseaGirl]

So its the last four bytes in the first field ?

"The description for Event ID (7) in Source ( dlttape-VRTS ) could not be found. It contains the following insertion string(s): \Device\Tape0.

0000: 00180003 00760001 etc......

net helpmsg 3

"The system cannot find the path specified"

Correct ?


I only give the above as an example - I'm not trying to sort out that specfic error.

 

[richgill]

Is that a DWORD error? Here is one of mine:

Description: Unable to open the job object Winlogon Job 0-304cff for query access. The calling process may not have permission to open this Job. The status returned is data DWORD 0.

Data: 0000: 00000005

net helpmsg 5 = Access is Denied.

 

[ChelseaGirl]

ummmm what other thing ? could it be apart from a DWORD - you only get Bytes or DWORD displayed.......