Event ID 100 — Provider configuration

Applies To: Windows Server 2008

An event provider usually corresponds one-to-one to a component or an application, although it is possible for a single application to register multiple providers. Each provider registration informs the system where the resources associated with the provider are found. The resources contain the set of events that the provider can publish, metadata related to these events, and readable descriptions of the events, which are localized to various languages (depending on the OS installation).

When the providers are not registered correctly, the Event Log service will not be able to find some of the resources associated with the provider. When this happens the provider will not be able to publish its events, or the description associated with the events will not display correctly when the event is viewed.

Each event contains the name of the provider that published the event. The registration information about that provider can be obtained by typing the following at the command line:

wevtuitl gp providerName

In the command above, providerName should be replaced by the name of the provider as it appears in the event.

Event Details

Product: Windows Operating System
ID: 100
Source: Microsoft-Windows-Eventlog
Version: 6.0
Message: The event logging service encountered an error while processing an incoming event published from %3.


Events 100, 102, 1107, and 1108 indicate that there is a problem with the event provider registration.

Event 100 and 1108 can be resolved by resinstalling the event provider. Contact the vendor that developed the event provider to reinstalling the provider does not fix the problem.

Events 102 and 1107 can only be fixed by contacting the vendor that developed the event provider and informing them of the problem.


To resolve this issue, use the resolution that corresponds to the cause you identified in the Diagnose section. After performing the resolution, see the Verify section to confirm that the feature is operating properly



Corrupted Provider Registration

Reinstall event publisher software

Incorrect Provider Registration

Contact the software vendor

Reinstall event publisher software

Reinstall the software that attempted to publish events.

Contact the software vendor

Contact the vendor of the program to report the problem. The new version of the software must be installed.


The problem can only be resolved by reinstalling the software that generates events (possibly after obtaining a new version from the vendor). The verification that the problem is solved involves causing the events to be published again and verifying that they have been published correctly in the event log. To do this, run the application that caused the events and using the Event Viewer to read the event log where the events are published.

Provider configuration

Management Infrastructure