Microsoft Operating System Forum

OriVlk

The "Service control manager" logs no events to the "System Event Log" on
some Active Directory Domain Controllers (DCs) running the Windows Server
2003. The Event Logs on the others (in the same AD forest) contain the right
records when (any) service is being started, stopped or accidentally fails.
In addition, some DCs affected by this issue are experiencing an additional
problem, that some services (no relationship found) are stopped several times
per day without any evident reason (and without any event recorded into the
"Event Log").

Could anyone help me please how to "enable" the logging for the "Service
control manager" and, in the best case, how to detect, why some services are
randomly terminated?

Note: The system is protected by the latest version of the Symantec
Antivirus software claiming that no infection is detected...

Dave Patrick

This one may apply.

http://support.microsoft.com/kb/899416


If not the file may be corrupt. Control Panel|Administrative
Tools|Services|Event Log Service|General, set the "Startup Type:" to
"Disabled" restart the pc, then delete (or move) the corrupt *.evt file(s)
from %systemroot%\system32\config then set the Event Log Service "Startup
Type:" back to "Automatic", restart for effect.


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


"OriVlk" wrote:
> The "Service control manager" logs no events to the "System Event Log" on
> some Active Directory Domain Controllers (DCs) running the Windows Server
> 2003. The Event Logs on the others (in the same AD forest) contain the
> right
> records when (any) service is being started, stopped or accidentally
> fails.
> In addition, some DCs affected by this issue are experiencing an
> additional
> problem, that some services (no relationship found) are stopped several
> times
> per day without any evident reason (and without any event recorded into
> the
> "Event Log").
>
> Could anyone help me please how to "enable" the logging for the "Service
> control manager" and, in the best case, how to detect, why some services
> are
> randomly terminated?
>
> Note: The system is protected by the latest version of the Symantec
> Antivirus software claiming that no infection is detected...
>

OriVlk

Thank you for the hint.
Unfortunately, it's not the case. The Event Log files seem to be healthy.
The other event sources are able to record their events as needed. The only
events missing are those from the "Service control manager". In addition, the
referenced KB article suggests to install the SP2, but some of the affected
servers are running the SP2 already...

Dave Patrick

Sorry, I misread. This should sort it.

http://support.microsoft.com/kb/917463



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


"OriVlk" wrote:
> Thank you for the hint.
> Unfortunately, it's not the case. The Event Log files seem to be healthy.
> The other event sources are able to record their events as needed. The
> only
> events missing are those from the "Service control manager". In addition,
> the
> referenced KB article suggests to install the SP2, but some of the
> affected
> servers are running the SP2 already...
>

OriVlk

Great! It's a horrible workaround, but it works!
Thanks a lot!
The only remaining task now is to find out why the services are terminated
unexpectedly. Let's hope the "Event Log" will provide some clue...

Dave Patrick

Good to hear. You're welcome.


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


"OriVlk" wrote:
> Great! It's a horrible workaround, but it works!
> Thanks a lot!
> The only remaining task now is to find out why the services are terminated
> unexpectedly. Let's hope the "Event Log" will provide some clue...
>