Event ID - 4361

Event Id	4361
Source	Microsoft-Windows-MSDTC
Description	An incompletely initialized MS DTC log file was detected. After ensuring that all Resource Managers coordinated by MS DTC have no indoubt transactions, please run msdtc -resetlog to reset the log file.%0
Event Information	According to Microsoft : Cause : This event is logged when an incompletely initialized MS DTC log file was detected. Resolution : Run the MSDTC Resetlog utility The system indicates that the problem in the log file for the Microsoft Distributed Transaction Coordinator service (MSDTC) may be resolved by running the Resetlog utility. Before you run this utility, ensure that there are no transactions in the Transaction List with a status of In Doubt . A status of In Doubt means that there is no information available about the outcome of this transaction. This can happen if the connection was lost between the MSDTC proxy and the transaction manager that is acting as the commit coordinator. The transaction may have committed or not. MSDTC lost communication with that transaction manager after preparing, but before receiving, the information about the transaction's outcome. The transaction remains prepared and in doubt until communication is restored with the superior transaction manager. The system administrator can force an In Doubt transaction to commit manually by using the Component Services administrative tool. Verify that all Resource Managers (RMs) that enlist in MSDTC transactions are consistent. RMs operate with relational databases, Message Queuing, transactional files, and object-oriented databases. After you are sure that all RMs are consistent, you can force an In Doubt transaction to commit manually. To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify the status of transactions and commit In Doubt transactions manually: Click Start , and then click Run . Type comexp.msc , and then click OK . If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue . Click Component Services , click Computers , click My Computer , and then click Distributed Transaction Coordinator . Click Local DTC , and then click Transaction List . In the Transaction List , look for any transactions with a status of In Doubt . Right-click a transaction with the status of In Doubt , point to Resolve, and then click Commit . When a transaction's Commit outcome is forced (that is, the transaction is committed manually), the transaction is designated as Forced Commit . To run the Reset utility: Click Start , and then click Command Prompt . At the command prompt, type msdtc -resetlog , and then press ENTER. Verify : Use the Component Services administrative tool to verify that the log file for the Microsoft Distributed Transaction Coordinator service (MSDTC) is created in the appropriate location. To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To open Component Services and verify the location of the MSDTC log file: Click Start , and then click Run . Type comexp.msc , and then click OK . If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue . Click Component Services , click Computers , click My Computer , and then click Distributed Transaction Coordinator , and then click Local DTC . Right-click the Local DTC , and then click Properties . In the Local DTC properties dialog box, click the Logging tab. Under Log Information ,verify that the location of the log file is appropriate for the MSDTC.
Reference Links	Event ID 4361 from Source Microsoft-Windows-MSDTC

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught