Event ID: 1003 and Event ID: 1015 are added to the Application log every time that you restart Windows XP Service Pack 2

Article ID : 889082 
Last Review : November 19, 2004 
Revision : 1.0 

SYMPTOMS:

Every time that you restart a Microsoft Windows XP Service Pack 2 (SP2)-based computer, the following two Warning event entries are written in the Application log:  Event Type: Warning
  Event Source: EvntAgnt
  Event Category: None
  Event ID: 1003
  Date: date
  Time: time
  User: N/A
  Computer: servername
  Description: TraceFileName parameter not located in registry;
  Default trace file used is .

  Event Type: Warning
  Event Source: EvntAgnt
  Event Category: None
  Event ID: 1015
  Date: date
  Time: time
  User: N/A
  Computer: servername
  Description: TraceLevel parameter not located in registry;
  Default trace level used is 32.

CAUSE:

This issue occurs when you install the Simple Network Management Protocol (SNMP) service, but you do not also configure the service. When you restart the computer, the SNMP service starts, and it logs these Warning events if the Evntagnt.dll file is not configured for debug tracing.

WORKAROUND:

To work around this issue, use one of the following methods.

Method 1: Disable the SNMP service

If you do not use the SNMP service, disable the service. To do this, follow these steps:

1. Click Start, click Run, type services.msc and then click OK. 
2. In the Services list, right-click SNMP and then click Properties. 
3. In the Startup type list box, click Disabled. 
4. Click OK to close the SNMP Properties dialog box. 

Method 2: Add the TraceFileName and the TraceLevel parameters to the registry

To add the TraceFileName and TraceLevel parameters to the registry, follow these steps:
1. Click Start, click Run, type regedit, and then click OK. 
2. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\SNMP_EVENTS\EventLog\Parameters 
3. After you select the subkey that is specified in step 2, point to New on the Edit menu, and then click String Value. 
4. Type TraceFileName, and then press ENTER.

Note: Do not edit this string value. The Value data for the TraceFileName string value should be left blank (null). 

5. With the subkey that is specified in step 2 selected, point to New on the Edit menu, and then click DWORD Value. 
6. Type TraceLevel, and then press ENTER. 
7. Right-click TraceLevel, and then click Modify. 
8. In the Value data box, type 32, and then click OK. 
9. On the File menu, click Exit to quit Registry Editor. 

--------------------------------------------------------------------------------

APPLIES TO
• Microsoft Windows XP Service Pack 2

Keywords:  kbtshoot kbprb KB889082