Using Windows Network Diagnostics event logs to solve network problems

You must be logged on as an administrator to perform these steps.

When you run Windows Network Diagnostics, any problem found, along with solutions, is displayed in the Windows Network Diagnostics dialog box. If more detailed or technical information about the problem and potential solutions is available, it is saved in one or more event logs. Network administrators and technical support personnel can use the information in the event logs to analyze connectivity problems or help interpret the conclusions.

You can see the Network Diagnostics event logs in Event Viewer. The event logs are saved as system events in the Windows Logs folder, and the Event ID is 6100.

  1. Open Event Viewer by clicking the Start button Picture of the Start button, clicking Control Panel, clicking System and Maintenance, clicking Administrative Tools, and then double-clicking Event Viewer.  Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

    The events should be filtered so that only events from Network Diagnostics are shown.

  2. To open an event, double-click it.

    In the Description box, problems are labeled as root causes and solutions are labeled as repair options.

Working with wireless diagnostics events

When Network Diagnostics identifies a problem with a wireless network, it saves information in the event logs as either helper class events or informational events. There can be one or more helper class events per diagnostics session, but only one informational event per session.

  • Helper class events. These events provide a summary of the diagnostics results and can repeat some information displayed in the Windows Network Diagnostics dialog box, but they can also provide additional information for troubleshooting, such as information about the connection that was diagnosed, diagnostics results, and the capabilities of the wireless network and the adapter being diagnosed.

  • Informational events. These events can include information about the connection that was diagnosed, the wireless network settings on the computer and the network, visible networks and routers or access points in range at the time of diagnosis, the computer's preferred wireless network list, connection history, and connection statistics such as packet statistics and roaming history. They also provide a summary of the connection attempts and their status, and what phases of the connection (such as pre-association, association, and security setup) succeeded, failed, or did not start.