This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 62%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECK%3C/text%3E%3C/svg%3E)
Log Name: Security Source: Security Date: 2021-03-04 6:24:29 AM Event ID: 521 Task Category: System Event Level: Information Keywords: Classic,Audit Success User: SYSTEM Computer: system Description: Unable to log events to security log: Status code: 0x80000005 Value of CrashOnAuditFail: 0 Number of failed audits: 1 <Provider Name="Security" /> <EventID Qualifiers="0">521</EventID> <Level>0</Level> <Task>1</Task> <Keywords>0xa0000000000000</Keywords> <TimeCreated SystemTime="2021-03-04T13:24:29.000000000Z" /> <EventRecordID>200543</EventRecordID> <Channel>Security</Channel> <Computer>system</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data>0x80000005</Data> <Data>0</Data> <Data>1</Data> </EventData> </Event>
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 96%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFF%3C/text%3E%3C/svg%3E)
Hi,
Just want to confirm the current situations.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 73%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
We are having the same issue, and it's a bugger to track down...
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Might try clearing the log or its also possible the ETVX is corrupt. In this case set the Event Log service startup to Disabled, reboot, delete corrupt EVTX from \Windows\System32\winevt\Logs then set the set the Event Log service startup to Automatic, reboot
--please don't forget to Accept as answer if the reply is helpful--
Clearing the logs did not help in our case.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 90%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Jamie, did you ever find the solution to this? I have 18 out of 40 DCs recording this error.
@Kkoop Nope. I feel like it's something internal to the DCs though as we've cut internet connections and the errors persist. We've dug into the detailed logs and I haven't found any silver bullets, so we've white flagged the troubleshooting for now.
thanks for the quick reply. I've read your threads on various forums about this and tried most everything suggested; still working through to ensure I haven't missed anything.
This was added to my tasklist so I need to find a resolution. Happy to share what I find.
Perfect, I'm all ears!