Consider the following scenario:

• You are running a Windows Server 2008-based computer or a Windows Vista-based computer.
• In Event Viewer, you click Save and Clear to create a .csv file, a .txt file, or an .xml file.

Although the file is created successfully, the event log is not cleared as expected. Additionally, you receive the following error message:

Event Viewer could not clear the log. The following error occurred: The parameter is incorrect.

Consider the following scenario. In an Active Directory domain environment, you configure the Windows Firewall with Advanced Security Group Policy setting. Specifically, you specify three firewall log files for these three profiles, respectively. Then, you apply this Group Policy setting to a Windows Vista-based client computer. However, when the network profile is changed in this scenario, you notice that the firewall information for the private profile is unexpectedly logged in the log file for the public profile.

Consider the following scenario:

• You are running a Windows Vista-based computer.
• You run the following command:
  

  Sysprep /generalize /oobe

In this scenario, Sysprep errors that resemble the following are logged in the Setuperr.log file:

SYSPRP MSS: Error 0×0 occurred while stopping service WSearch.
SYSPRP MSS: _StopService exits on timeout.
SYSPRP MSS: Plugin failed to stop Windows Search service, trying to kill it…
SYSPRP MSS: Error 0×425 occurred while stopping service WSearch.[gle=0x00000425]
SYSPRP MSS: _StopService exits on timeout.[gle=0x00000425]
SYSPRP MSS: Failed to kill Windows Search service![gle=0x00000425]

Additionally, you must now restart the Sysprep tool.

Note: The Setuperr.log file resides in the following location:

Windows\System32\Sysprep\Panther

Descriptions of security and auditing related events that appear in Vista’s security log. Keep reading →

• Description of security events in Windows Vista and in Windows Server 2008
  Descriptions of security and auditing related events that appear in Vista’s security log.
  (tags: Security Event Log )
• Windows Vista Service Pack 1 stand-alone packages do not contain the updated Windows Vista Service Pack 1 Help files
  In a few situations, you’ll need to download the specific help file for your language.
  (tags: Help SP1 )

Keep reading →

On a computer that is running Windows Vista or Microsoft Windows XP Service Pack 2 (SP2), an event that resembles the following may be logged in the System log:

Event Source: SCardSvr
Event Category: None
Event ID: 610
Date: date
Time: time
Type: Error
User: N/A
Computer: ComputerName
Description: Smart Card Reader ‘ReaderName’ rejected IOCTL

You experience this behavior if the following conditions are true:

• The computer has a smart card reader.
• You insert a smart card in the smart card reader.
• You remove the smart card from the smart card reader.

When you configure a custom location for the Windows Firewall log file in Windows Vista, information may not be written to the log file. For example, if you configure Windows Firewall logging settings to create the C:\Custom folder\Firewall.log file, information may not be written to that log file.

Note: By default, the Windows Firewall log is in the %windir%\System32\LogFiles\Firewall folder.

Consider the following scenario:

• You configure a Data Collector Set on a remote computer that is running a pre-Windows Vista version of Microsoft Windows.
• You are a member of only the Performance Log Users group on a Windows Vista-based computer and on the remote computer.

If you then run the logman query command from the Windows Vista-based computer to query the Data Collector Set on the remote computer, the command runs successfully. However, if you run the logman update command to change the credentials under which the Data Collector Set runs, you receive the following error message:
Error:

Collection already exists.

An error message that resembles the following may be logged in the System log every time that you start a Windows Vista-based computer:

Event Type: Error
Event Source: ACPI
Event Category: None
Event ID: 6
Date: Date
Time: Time
User: N/A
Computer: Computer_Name
Description:
IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot number, function number. Please contact your system vendor for technical assistance.