4
Vote

No capture of deletion info, no log info, Event 6875 error.

description

In SharePont 2010 multi server farm. I have installed the tool based on the User Guide (using PowerShell commands). Have created a directory on a non-system drive on each server (D:\SPSiteRecycleBackup) and have updated the configuration.xml files as instructed. I also created a directory for the log files (D:\SPSiteRecycleBackup\Logs).
 
I also added the following entry to the web.config files <safecontrols> <SafeControl Assembly="Microsoft.SharePoint.Site.RecycleBin, Version=1.0.0.0, Culture=neutral, PublicKeyToken=98e95e81f8e48206" Namespace="Microsoft.SharePoint.Site.RecycleBin" TypeName="*" Safe="True" />

The Site Collection and Sub Sites are still deleted fine. However there is no Capture of deletion information or Logs and I am getting the following error:
 
Event 6875, SharePoint Foundation
 
Error loading and running event receiver Microsoft.SharePoint.Site.RecycleBin.DeleteEventReceiver in Microsoft.SharePoint.Site.RecycleBin, Version=1.0.0.0, Culture=neutral, PublicKeyToken=98e95e81f8e48206. Additional information is below.
 
: The source was not found, but some or all event logs could not be searched. Inaccessible logs: Security.
 
Looks like the user for this event is NT AUTHORITY\IUSR
 
I validated that the the WSS_ADMIN_WPG, WSS_RESTRICTED_WPG, and WSS_WPG local groups on the server were correctly populated.
 
Any Ideas on how to resolve this? What App Pool does the tool use/impersonate when it runs?

comments

nichardrixon wrote Sep 2, 2010 at 3:59 PM

I got this error too..

The Event Log message states: ":The source was not found, but some or all event logs could not be searched. Inaccessible logs: Security".

I followed all the steps you took in your original post and got the same error message.

I fixed it in my case by logging in interactively on the WFE with the install account and deleting a site from there. once I'd done that I was subsequently able to create and delete sites from other machines with other accounts over the network, as a normal user would.

I think it does something with the event log the first time it runs, but not sure what, I haven't looked into it. Just glad it works - hope it works for you too.

wrote Sep 22, 2010 at 6:57 PM

wrote Sep 28, 2010 at 12:05 PM

wrote Sep 30, 2010 at 7:16 PM

wrote Feb 14, 2013 at 7:41 PM