JSI Tip 10395. You receive 'The description for Event ID XXXX in Source DhcpServer cannot be found' after uninstalling RIS?

When you uninstall RIS (Remote Installation Services) from your DHCP (Dynamic Host Configuration Protocol) server, all DHCP event log messages contain the following Description:

The description for Event ID XXXX in Source DhcpServer cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:XXXX

This behavior occurs because uninstalling RIS removes the event source registration of the DHCP Service.

To correct this problem:

1. Open a CMD.EXE window.

2. Type the following commands, pressing Enter after each line:

REG ADD HKLMSYSTEMCurrentControlSetServicesEventlogSystemDHCPServer /V EventMessageFile /T REG_EXPAND_SZ /F /D "%SystemRoot%System32dhcpssvc.dll"REG ADD HKLMSYSTEMCurrentControlSetServicesEventlogSystemDHCPServer /V ParameterMessageFile /T REG_EXPAND_SZ /F /D "%SystemRoot%System32kernel32.dll"REG ADD HKLMSYSTEMCurrentControlSetServicesEventlogSystemDHCPServer /V TypesSupported /T REG_DWORD /F /D 7net stop dhcpservernet start dhcpserver

NOTE: REG.EXE is built into Windows XP, Windows Server 2003, and later operating systems, or installed from the Windows 2000 Support Tools.