Error 'Unable to parse Event Data given XPath Query, //WmiMgmtObject//Win32_NTLogEvent/EventType' (NETIQKB37236)

  • 7737236
  • 02-Feb-2007
  • 15-Mar-2013

Environment


NetIQ Group Policy Guardian 1.6
NetIQ Group Policy Guardian 2.0

Resolution

fact
NetIQ Group Policy Guardian 1.6 

fact
NetIQ Group Policy Guardian 2.0

symptom

Error 'Unable to parse Event Data given XPath Query, //WmiMgmtObject//Win32_NTLogEvent/EventType'



symptom
GPG is not generating 8888 or 9999 events in the GPG server Application logs

symptom
Application log on GPG server contains Event ID 7775 errors

cause
This error is caused by a Microsoft issue where audit events (event ID 565) for directory service access may contain truncated distinguished names for the Object Name entries.

fix
Obtain the latest service pack for Microsoft Windows 2000.  For more information about this issue, see the Microsoft Knowledge Base article 319672 "Directory Service Access Audits for a SAM Object Server Have Incomplete Object Names"  http://support.microsoft.com/default.aspx?kbid=319672.

Additional Information

Formerly known as NETIQKB37236