Windows 10: Event Viewer error after installing KB4503293 and KB4503327

0
180

by Martin Brinkmann on June 12, 2019 in Windows – No comments

Windows administrators who open the local Even Viewer after installation of KB4503293 or KB4503327 may receive an error message when they select Custom Views in the Event Viewer.

Microsoft released cumulative updates for all supported versions of Windows 10 (and other Microsoft operating systems) on yesterday’s Patch Day.

KB4503293 for Windows 10 version 1903 and KB4503327 for Windows 10 version 1809 were among those patches. The cumulative updates closed several security vulnerabilities — some of which rated with a critical severity — and introduced other changes on devices running these versions of Windows.

Updates may introduce errors and issues, and that appears to be the case with KB4503293 and KB4503327.

event viewer error windows 10

Windows users who open the Event Viewer, e.g. by using the Windows-X menu or searching for Event Viewer in the Start Menu, may receive the error “MMC has detected an error in a snap-in and will unload it” on start when custom views are selected.

The only options provided by the dialog are to “report this error to Microsoft, and then shut down MMC”, or to “Unload the snap-in and continue running”.

unhandled exception

Selecting the latter throws an “unhandled exception in Managed Code Snap-In” which causes quite the chaos in the Event Viewer.

event viewer error

The only option left at that point is to restart the Event Viewer. Problem is: the error is thrown again once you select custom views in the application.

Our colleagues over at Deskmodder found a solution that fixes the issue. Here is what you need to do:

  1. Open File Explorer on the device.
  2. Navigate to the following path: C:ProgramDataMicrosoftEvent ViewerViews
  3. Backup the content of the folder.
  4. Delete all View_X.xml files in the folder (it starts with View_0.xml and increments the number by 1 for each file).
  5. Start the Event Viewer after deleting the files.

delete event viewer views

The error should be gone after the deletion. A restart is not required to fix the issue.