I'm having several servers (but also clients) where whole day the eventlogs are filled with eventid's like 7036 (stopping/starting services) and on servers I also see eventid 7040 (startup type changes from demand to auto and back).
What is causing these stopping and starting of services? What is changing the startup type of these services?
Windows Module installer service
Windows Error Reporting Service
Multimedia Class Scheduler service
WinHTTP Web Proxy Auto-Discovery Service
Adobe Flash Player Update Service
Windows Installer service
Software Protection service
I checked GPO's, LGPO, scheduled tasks, WDI, checked windows internals book 6th ed, google, etc... I found a scheduled task with upnp service but that's it...
any one any idea's?
with kind regards,
Some services are started only when they are required to do an operation. That is why they start and stop.
Just check that there no failure that is forcing the restart of the service in the event viewer.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Get Active Directory User Last Logon Create an Active Directory test domain similar to the production one Management of test accounts in an Active Directory production domain - Part I Management of test accounts in an Active Directory production domain - Part II Management of test accounts in an Active Directory production domain - Part III Reset Active Directory user password
I read this ... and would believe this ... if not for the fact I see several hundreds of event messages a day about these services
-their not that interesting
-can I change this behavior? e.g. I found that every service had a sacl and combined with (advanced) audit policy I might be able to reduce these events...
-can a service change its own startup type when being stopped? I do not think so...
-I found one scheduled task to change the startup type of a particular service when the task started. and change it back when stopping the task.
Service Control Manager - auditing start/stop events - Event ID 7035 or similar missing
Set permissions on a specific service (Windows)
This scheduled task runs the sc.exe config upnphost start= auto command to configure the UPnPHost service to start automatically.
Therefore I'm interested in if there is a common mechanism which changed the startup type... for e.g. changing the startup type of services,
with kind regards,