[Longhorn] getting error reading EventLog from Longhorn Machines

[Manoj Chanchawat]

Hey,

I am getting error while reading event log for a LONGHORN machine. I am
reading EventLog something in this sequence:

::OpenEventLog()
::ReadEventLog() – I read this event log in a buffer size equivalent to
“EVENTLOGRECORD”.

I am able to read the name of the event and Event ID’s correctly. But I am
getting error in reading the event Description. The method I am using is to
read the registry at following location to get path for the image file:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application

When we read description from this image file I am getting error: here is
one of the error messages for one of the event generated for “Desktop Window
Manager”:

The description for Event ID ( 9009 ) in Source ( Desktop Window Manager )
could not be found. It contains the following insertion string(s): 0x40010004

Error Message: The specified resource type cannot be found in the image
file. (0x00000715)

Message Dll(s): \\<Machine Name>\C$\Windows\system32\dwm.exe

Can anybody tell me what’s going wrong? I am able to read event log for
other OS machines.