M100722: Event viewer message: Event ID 4356


A description of a scenario where the Event ID 4356 can get generated in the Application Event Viewer.

Entries for event ID 4356 may appear in the Application section of the Event Viewer on computers with the ManageSoft for Managed Devices software installed.

The "Description" of the event will contain text similar to:

The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{128EC798-ADC6-4F75-9569-3E81D6092559}. CoGetObject returned HRESULT 8000401A. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

When this occurs, it does not have any harmful impact on the machine. It may be undesirable for these events to occur if the machine is being used to create a Build image.


These events are generated when a managed device boots up, and is left at the Windows logon screen for a period of time. Once the machine is in this state, any ManageSoft Schedule events with an "At Startup / Logon" trigger may attempt to execute. ManageSoft Schedule events may generate the event ID 4356 as described above when they try to execute prior to a user logging on to the machine. 

There are no specific changes that can be made to the device to prevent this event getting logged in the Application Event Viewer. It may be possible to prevent the scenario occurring in the first place.

  • Avoid the use of "At Startup / Logon" triggers in your ManageSoft Schedules.

If you are using a device specifically to create a build image, and wish to avoid the event getting generated:

Additional Information

For details on this same event ID getting generated by another Windows component, refer the the Microsoft KB article http://support.microsoft.com/default.aspx?scid=kb;en-us;305761

For assistance in setting up the "autologon" feature, refer to the Microsoft KB article http://support.microsoft.com/?kbid=315231


Powered by Zendesk