Event ID 1003, Event ID 1015 (EvntAgnt)

I noticed on my Windows 2003 servers that everytime I had a restart, the following events were placed in the eventviewer.

EventID : 1015
Source : EvntAgnt
TraceLevel parameter not located in registry; Default trace level used is 32.

EventID : 1003
Source : EvntAgnt
TraceFileName parameter not located in registry; Default trace file used is.


This problem occurs if you installed the Simple Network Management Protocol (SNMP) service, but you did not also configure this service. These error events are logged by the SNMP service when you restart the computer. If the Evntagnt.dll file is not configured for debug tracing when the SNMP service starts, these two warning events are logged.

To stop these events from occuring, add the TraceFileName and the TraceLevel values to the following registry subkey:


Type: REG_SZ
Value: null (blank)

You can also fill in a filename (eg. snmp.log) to log SNMP information. The logfile will be created under “%systemroot%system32”. This registry key removes event ID 1003

Value: 32 (0x20)
This registry key removes event ID 1015

For more info: Kb 832790

Hans Sleurink

Hans Sleurink works as a Consultant at Wortell in the Netherlands where he designs and deploys Unified Communications solutions. His main focus is on, but not limited to, Microsoft Teams (migrations), including Enterprise Voice, contact center solutions, AudioCodes, Direct Routing, Exchange, Office 365, Active Directory and other UC related topics.

More Posts - Website

Follow Me:

Leave a Reply




This site uses Akismet to reduce spam. Learn how your comment data is processed.