Missing Description Strings in Event Log

[Kelly]

I am getting repeated entries in the Application eventlog
for Source type "EventLog" with the following description

The description for Event ID ( 6005 ) in Source (
EventLog ) cannot be found. The local computer may not
have the necessary registry information or message DLL
files to display messages from a remote computer. You may
be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The
following information is part of the event:

I am seeing this exact message for Event ID 6005,
6006,6009 6011. Am I missing a resource file?

[KM]

Kelly,

To fix event descriptions either include %SystemRoot%\AppPatch\drvmain.sdb file in to your run time image manually

Or install this QFE http://www.microsoft.com/downloads/details.aspx?FamilyID=2fc450e7-a2d9-4e75-b6ba-9570653f0891&DisplayLang=en.

--
Regards,
KM, BSquare Corp.

[Kelly]

I already have the QFE installed and I am still missing
the strings. The date on the drvmain.sdb is 1/17/2003,
if this helps.

>.
>

[KM]

Kelly,

My latest drvmain.sdb in XPe Repository is 3/12/04. And I think it came with a QFE.

[anon...@discussions.microsoft.com]

The Published date of the Windows XP Embedded with
Service Pack 1 (824704)XPE QFE Rollup, Summer 2003
(referenced by your link) is 9/19/2003 so I don't think
it could come from this patch.

Hey... Thanks for your help though :)

>.
>

[KM]

Yes, the latest drvmain.sdb file on my machine came with SP2.
Sorry for any confusion created.

The fix was probably about sysmain.sdb.

You can try copying the files from your XP Pro machine to the XPe run time and see if it helps.
Or, even the entire AppPatch directory.

Also, try including "Software Installation Group Policy Extension" component as it brings in the appmgmts.dll file and
EventMessageFile reg value.