This event is generated when the Service Control Manager cannot properly terminate a service. The name of the service and the error generated by it are displayed in the event.

Review the service-specific error information

To resolve this issue, first review the service-specific error code that the Service Control Manager encountered when trying to stop the service, and then review the Event logs for other related events that have been logged by the Service Control Manager (SCM) Eventlog Provider.

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Review the service-specific error code

To review the service-specific error code:

1. Click the Start button, Run, then type cmd to open a command prompt.
2. Type sc query service_name (where service_name is the name of the service) at the command prompt to display the service-specific SERVICE_EXIT_CODE error code that the Service Control Manager encountered when stopping the service.

Note: If the service was stopped successfully, the SERVICE_EXIT_CODE field should contain a zero (0). If the service failed to stop when an attempt was made, this field should contain an exit code provided by the service when it could not stop.

Review the related events logged by the SCM

To review the related events logged by the SCM:

1. Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer. Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.
2. Click Event Viewer (Local), then Windows Logs and System.
3. In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.

The error code and related events for this service should help you to further troubleshoot and resolve the issue. Some examples are provided below:

• If event ID 7011 is also logged for this service, then extending the service timeout period to resolve event ID 7011 would also resolve this error.
• If event ID 7034 is also logged for this service, then restoring the service default settings to resolve event ID 7034 would also resolve this error.

For more information about the sc command, see SC Command Reference Help (http://go.microsoft.com/fwlink/?LinkID=84961).