Re: Who or What is Stopping a Service?

2003 is nice in that it does log all the service activities, but Event
Viewer was useful only to the point of verifying that the process
stoppage was not an abend, but a requested stop. No evidence of what
requested the service to stop, which is why I'm in a bind. I need
something at which to point a finger.

Picky details...

It's a Citrix Metaframe (Terminal Server) box. The service that's
stopping is IMAService, so if you know anything about Citrix you'll
know that's something of a show-stopper.

IMAService has the following dependencies:
RPCSS
LanmanServer
LanmanWorkstation
WMI

IMAService is a dependency of CitrixWMIService only.

Event Viewer showed no stoppage of any related services before the
stoppage of IMAService.

-Brad


On Mon, 24 Apr 2006 19:29:35 +0530, "Thota Umesh" <thotaumesh@xxxxxxx>
wrote:

Hmm yeah! i tht ur services was stoppin on boot or soon after. check
eventvwr.msc (event viewer) as to which program or service is triggering
this!

Also check if ur recent changes are effecting depend services as to which ur
service stop is triggered, + see timestamps and so on. also is your
application a web based (internet) or an intranet / wan / etc just to rule
out few things.

"Joe User" <userj@xxxxxxx> wrote in message
news:07lp421m5vor3h4kqkklnfc5br4dfke33d@xxxxxxxxxx
Process Explorer is a really, really cool program, but unless I'm
missing something it has no way of logging activity - it appears to be
realtime only.

If I get into the office at 9am and find that the service was shut
down at 7am it does not look like it will help me.

-Brad


On Sun, 23 Apr 2006 10:11:20 +0530, "Thota Umesh" <thotaumesh@xxxxxxx>
wrote:

Hii, Use process explorer
[http://www.sysinternals.com/Utilities/ProcessExplorer.html] to view &
diagnose the services and other active programs and which programs are
using
which files resources n services. so viewing on few program shd help u
find
out which program is trying to stop the service.

Hope this helps..,
Umesh Thota.

"Brad Berson" <userj@xxxxxxx> wrote in message
news:dvhi42ptvq5d3cf2g5bl0ud47r9gigjokp@xxxxxxxxxx
I'm an admin for some Windows Server 2003 boxes and after some recent
changes (which backing out really is not an option), I'm finding that
on /some/ mornings one of the services mission-critical to the boxes
has been stopped.

The event log reveals that the service is being stopped on request, so
the feature for automatically restarting services does not help us.

I'm looking for a way to figure out what process - hopefully by EXE
name (and account if possible) is requesting this service to stop.

Any suggestions to help with this detective work?


Thanks,
-Brad




.

Relevant Pages

  • Re: Concurrent Logging: How?
    ... >>each request sequentially. ... you just need a viewer that will group them appropriately. ... you will of course need to format the log entries ... log4j has a few tools to help you to this end. ...
    (comp.object)
  • Re: Concurrent Logging: How?
    ... >>each request sequentially. ... you just need a viewer that will group them appropriately. ... you will of course need to format the log entries ... log4j has a few tools to help you to this end. ...
    (comp.lang.java)
  • Re: Concurrent Logging: How?
    ... >>each request sequentially. ... you just need a viewer that will group them appropriately. ... you will of course need to format the log entries ... log4j has a few tools to help you to this end. ...
    (comp.lang.java.programmer)
  • form output
    ... I have added a form to the end on my presentation where the viewer can ... request more information and the info goes into a txt file. ... City = Houston ...
    (microsoft.public.powerpoint)