Re: Who or What is Stopping a Service?

Hmm yeah! i tht ur services was stoppin on boot or soon after. check
eventvwr.msc (event viewer) as to which program or service is triggering
this!

Also check if ur recent changes are effecting depend services as to which ur
service stop is triggered, + see timestamps and so on. also is your
application a web based (internet) or an intranet / wan / etc just to rule
out few things.

"Joe User" <userj@xxxxxxx> wrote in message
news:07lp421m5vor3h4kqkklnfc5br4dfke33d@xxxxxxxxxx
Process Explorer is a really, really cool program, but unless I'm
missing something it has no way of logging activity - it appears to be
realtime only.

If I get into the office at 9am and find that the service was shut
down at 7am it does not look like it will help me.

-Brad


On Sun, 23 Apr 2006 10:11:20 +0530, "Thota Umesh" <thotaumesh@xxxxxxx>
wrote:

Hii, Use process explorer
[http://www.sysinternals.com/Utilities/ProcessExplorer.html] to view &
diagnose the services and other active programs and which programs are
using
which files resources n services. so viewing on few program shd help u
find
out which program is trying to stop the service.

Hope this helps..,
Umesh Thota.

"Brad Berson" <userj@xxxxxxx> wrote in message
news:dvhi42ptvq5d3cf2g5bl0ud47r9gigjokp@xxxxxxxxxx
I'm an admin for some Windows Server 2003 boxes and after some recent
changes (which backing out really is not an option), I'm finding that
on /some/ mornings one of the services mission-critical to the boxes
has been stopped.

The event log reveals that the service is being stopped on request, so
the feature for automatically restarting services does not help us.

I'm looking for a way to figure out what process - hopefully by EXE
name (and account if possible) is requesting this service to stop.

Any suggestions to help with this detective work?


Thanks,
-Brad




.

Relevant Pages

  • RE: Event Viewer Monitoring Tool
    ... you request. ... On the other hand, if cost is a factor, then a vbs script ... Has anyone got any suggestion for a reasonably priced Event Viewer ... Promote security and make money with the Hushmail Affiliate Program: ...
    (Security-Basics)
  • Re: Event Viewer Question
    ... Something WAS triggering the open event, ... I find no search capabilities in Event Viewer unless I've missed it. ...
    (microsoft.public.windows.vista.general)
  • The reason for disconnecting was administrators request.
    ... I have one user only that shows up in the event viewer with event ID 20048 ... for Remote Access with The reason for disconnecting was administrator's ... I am the administrator and I didn't request ... it and do not have policy with a connection time limit. ...
    (microsoft.public.windows.server.networking)
  • Re: the instruction at 0x 00000019 referenced memory at 0x00000019
    ... '_ISUS' failed during request for component ... Please check Event Viewer for Warning / Error Reports in the System and ... You can access Event Viewer by selecting Start, Administrative Tools, and ...
    (microsoft.public.windowsxp.general)
  • Re: ReadProcessMemory / WriteProcessMemory
    ... instructions but when I clicked on the event viewer icon I ... Only part of a ReadProcessMemory or WriteProcessMemory ... request was completed. ...
    (microsoft.public.windowsxp.perform_maintain)