\registry\machine\system\currentcontrolset\services\eventlog\system\nwrdr
    EventMessageFile = REG_EXPAND_SZ %SystemRoot%\System32\nwevent.dll
    TypesSupported = REG_DWORD 0x00000007
\registry\machine\system\currentcontrolset\services\eventlog\system\netwareworkstation
    EventMessageFile = REG_EXPAND_SZ %SystemRoot%\System32\nwevent.dll
    TypesSupported = REG_DWORD 0x00000007