Ora-28056 (Writing audit records to Windows Event Log failed) addressed ORA-28056 systems: windows XP Oracle version SQL> select * from v $ version; BANNER implements Oracle Database 11g Enterprise Edition Release 11.2.0.1.0-ProductionPL/SQL Release 11.2.0.1.0-ProductionCORE 11.2.0.1.0 ProductionTNS for 32-bit Windows: version 11.2.0.1.0-ProductionNLSRTL Version 11.2.0.1.0-Production logging into the database with SQL * plus received a ora-28056 error; Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. c: \ Documents ents and Settings \ Administrator> sqlplus/as sysdbaSQL * Plus: Release 11.2.0.1.0 Production on Wednesday August 7 17:05:19 2013 Copyright (c) 1982,201 0, Oracle. all rights reserved. ERROR: ORA-28056: Writing audit records to Windows Event Log failedORA-28056: Writing audit records to Windows Event Log failed enter user name: ERROR: ORA-01017: User Name/password invalid; login denied please enter username: ERROR: ORA-01017: username/password invalid; login denied SP2-0157: Unable to connect to ORACLE after 3 attempts, exit SQL * Plus check oracle service exists, also started; so the official website to view the error: ORA-28056: Writing audit records to Windows Event Log failedCause: Unable to write an audit entry to the Windows event log used as the audit trail. action: Check the error number for a possible operating system error. if there is no error, contact Oracle Support Services. so the system's "Event Viewer" log is cleared, OK, and done;