Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The DNS server could not open the file <file name>. Check that the file exists in the %SystemRoot%\\System32\\Dns directory and that it contains valid data. For the specific error code, you can click the Record Data tab.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What may cause a "file not found" error message?
What are the Windows error codes?
What is DNS?
What is the role of a DNS server?
According to Microsoft there is still a registry key for the file but the file is missing. See ME197146 to solve this problem.
I was getting this event and EventID 1004 whenever the DNS service was started. I noticed that a new “.temp” file is created each time the service starts. On opening this file, I noticed that it contained data about one of the secondary zones on this server. I deleted that zone, removed its “.dns” files, and then recreated the zone. All was well after that. I think that this was caused by corruption in one of the zone files.
As per Microsoft: "You might not have permission to open this file, or the file might be corrupted". See MSW2KDB for details on this event.
As per Microsoft, you might not have permission to open this file, or the file might be corrupted.
Check the permissions on the specified file:
1. In Windows Explorer, go to the Systemroot/System32/Dns folder.
2. Right-click the specified file, and then click Properties.
3. Click the Security tab, and then click Permissions.
4. Verify that you have the proper permissions for this file. If you continue to receive this message, the specified file might be corrupted. Restore a copy from the systemroot/System32/Dns/Backup folder.
|Private comment: Subscribers only. See example of private comment|
|Links: ME197146, EventID 1004 from source DNS, MSW2KDB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated