This seems to be not complete truth. Are there any other traces in event logs? Even the message is not complete. Look here for similar problem
Without any reference to other cases I would use Process Monitor to find dependences.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.
Would you like to participate?