locked
Windows Server 2008 R2 Standard - Event ID 7034 and 7031 RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello all, 

    I have problem with one server. 

    Windows Server 2008 R2 Standard running only HP Data Protector.

    I have a lot of errors in eventlog about faulty services.

     

     

     

    Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Application Experience service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25881</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Application Experience</Data>
 <Data Name="param2">1</Data>
 <Data Name="param3">60000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>







Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Certificate Propagation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25882</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Certificate Propagation</Data>
 <Data Name="param2">1</Data>
 <Data Name="param3">120000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>




Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Group Policy Client service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25883</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
     <Security />
 </System>
 <EventData>
 <Data Name="param1">Group Policy Client</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The IKE and AuthIP IPsec Keying Modules service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25884</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer>t</Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">IKE and AuthIP IPsec Keying Modules</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The IP Helper service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25885</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">IP Helper</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>

Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Server service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25886</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Server</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">120000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The User Profile Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25887</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">User Profile Service</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Task Scheduler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25888</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Task Scheduler</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">60000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The System Event Notification Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25889</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">System Event Notification Service</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Remote Desktop Configuration service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25890</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Remote Desktop Configuration</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">60000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Windows Management Instrumentation service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7031</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25891</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Windows Management Instrumentation</Data>
 <Data Name="param2">2</Data>
 <Data Name="param3">300000</Data>
 <Data Name="param4">1</Data>
 <Data Name="param5">Restart the service</Data>
 </EventData>
</Event>


Log Name:  System
Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7034
Task Category: None
Level:   Error
Keywords:  Classic
User:   N/A
Computer:  
Description:
The Windows Update service terminated unexpectedly. It has done this 2 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 <System>
 <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
 <EventID Qualifiers="49152">7034</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x8080000000000000</Keywords>
 <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" />
 <EventRecordID>25892</EventRecordID>
 <Correlation />
 <Execution ProcessID="496" ThreadID="1988" />
 <Channel>System</Channel>
 <Computer></Computer>
 <Security />
 </System>
 <EventData>
 <Data Name="param1">Windows Update</Data>
 <Data Name="param2">2</Data>
 </EventData>
</Event>

     

    Any ideas what is causing that issue? I am blind and I don't know where to start in order to fix that issue.

    Any help is appreciated. 


    Thursday, May 5, 2011 7:52 AM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote

    Ok I found solution.

    http://support.microsoft.com/kb/982293

    On a computer that is running Windows Server 2008 R2 or Windows 7, the Svchost.exe process that hosts Windows Management Instrumentation (WMI) service may crash. Additionally, an event entry that includes the following message is added to the Application log:

    Faulting application name: svchost.exe, version: version, time stamp: time stamp
    Faulting module name: ntdll.dll, version: version, time stamp: time stamp
    Exception code: 0xc000071f
    Fault offse: 0x55ac0
    Faulting process id: svchost.exe
    Faulting application start time: start time
    Faulting application path: C:\Windows\system32\svchost.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: report id


    Also, the following other services that run in the same Svchost.exe process also fail:
    • Certificate Propagation service
    • Group Policy Client service
    • IKE and AuthIP IPsec Keying Modules service
    • IP Helper service
    • Server service
    • User Profile Service
    • Task Scheduler service
    • System Event Notification Service
    • Remote Desktop Configuration service
    • Windows Update service
    • Background Intelligent Transfer Service (BITS)

    Thursday, May 5, 2011 9:45 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

     

    Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7031

     

    Have a look to this Microsoft article for resolution: http://technet.microsoft.com/en-us/library/cc756337(v=WS.10).aspx

    Source:  Service Control Manager
Date:   04.05.2011 09:31:12
Event ID:  7034

    Have a look to this Microsoft article: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=7034&EvtSrc=Service+Control+Manager&LCID=1033

     

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    Thursday, May 5, 2011 8:01 AM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Ok I found solution.

    http://support.microsoft.com/kb/982293

    On a computer that is running Windows Server 2008 R2 or Windows 7, the Svchost.exe process that hosts Windows Management Instrumentation (WMI) service may crash. Additionally, an event entry that includes the following message is added to the Application log:

    Faulting application name: svchost.exe, version: version, time stamp: time stamp
    Faulting module name: ntdll.dll, version: version, time stamp: time stamp
    Exception code: 0xc000071f
    Fault offse: 0x55ac0
    Faulting process id: svchost.exe
    Faulting application start time: start time
    Faulting application path: C:\Windows\system32\svchost.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: report id


    Also, the following other services that run in the same Svchost.exe process also fail:
    • Certificate Propagation service
    • Group Policy Client service
    • IKE and AuthIP IPsec Keying Modules service
    • IP Helper service
    • Server service
    • User Profile Service
    • Task Scheduler service
    • System Event Notification Service
    • Remote Desktop Configuration service
    • Windows Update service
    • Background Intelligent Transfer Service (BITS)

    Thursday, May 5, 2011 9:45 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Was this solved already when applying a Service Pack 1 instead of the hotfix? Thanks!

    Thursday, March 1, 2012 2:13 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Dear Wojciech marusiak,

    problem printer spool service automatic stop error (event id 7034 the print spooler service terminated unexpectedly)

    Correct answer ...

    - Service: Print Spooler - The following steps helped me to remove a driver, which was causing the issue:
    1. Open regedit (e.g. click Start, key regedit and press Enter)
    2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers
    3. Under this key, there will be the keys Version-2 and Version-3 (one or the other of these may be absent - not a problem)
    4. The sub-keys under these contain the printer driver configuration information
    5. Delete all the sub-keys inside Version-2 and Version-3, but not these keys themselves

    Regard,

    Shafique




    Monday, June 17, 2013 7:34 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Not solution with both the articles. Issues is on Windows Server 2008 R2
    Thursday, June 8, 2017 12:36 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    It says hotfix doesnot apply to your system. I am using Windows Server 2008 R2 64 bit. Version 6.00 Build 4521
    • Edited by Ashish2707 Thursday, June 8, 2017 12:38 PM
    Thursday, June 8, 2017 12:37 PM