Error 4201: The instance name passed was not recognized as valid by a WMI data provider

I was unable to start the Windows Event Log service on Local Computer. When i tried to start the windows event log service was getting  “Windows could not start the Windows Event Log service on Local Computer.    Error 4201: The instance name passed was not recognized as valid by a WMI data provider.”

This happened at the time of installing MOSS 2007 in my Windows Server 2008 R2 Server machine. Totally i was gone mad coz MOSS 2007 uninstallation crashes due to some reason and was unable to find out the error due to Eventlog crash (what a hell).

Finally figured it out it was due to some permission problem and i had to apply the  SYSTEM user with full control on the folder c:\windows\system32\logfiles\wmi\RTbackup. This solved my problem and the lovely event log was working fine as usual.

more details

Another alternative way is there to renaming the RTBackup file. I didnt try that method hence i have to start the machine in safe mode. It will be a headache at all. so for anyone needs to know about that solution please refer this link.