Turned out to be a group policy blocking the Windows eventvwr service to start. This was resolved by editing the group policy to stop disabling the service.
I have a same problem, but I didn't find a way to set group policy to disable the Windows eventvwr service.
Cloud you provide the setting steps?
Thank you very much!
If you want to disable event viewer on machines, you can create a software restriction policy with Path rule to deny below path:
"%systemroot%\system32\eventvwr.exe" under computer configuration> policies> windows settings,> security settings >software restriction policy
This will disable event vwr on machine.
You can also disable event viewer from appearing in MMC by going to User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/permitted snap-ins\Event Viewer