Event ID 7023 Service Terminated

  • Article

Applies To: Windows Server 2008 R2

Event Details

Product:

Windows Operating System

ID:

7023

Source:

Service Control Manager

Version:

6.1

Symbolic Name:

EVENT_SERVICE_EXIT_FAILED

Message:

The %1 service terminated with the following error:
%2

Details

Here are some common reasons why a service could potentially terminate unexpectedly: 

  • software bugs
  • an application that the service depends on shuts down or crashes
  • hardware failures: if a service is used to manage a device and that device is no longer available, the service may crash
  • a new software or hotfix/service pack is installed or uninstalled that disrupts the service or one of its dependencies
  • viruses and worms - any malware has the potential to disrupt applications on your computer, services are not exempted

Troubleshooting

Review the error information

To resolve this issue, first review the Windows error code that the Service Control Manager encountered when trying to stop the service, and then review the Event logs for other related events that have been logged by the Service Control Manager (SCM) Eventlog Provider.

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Review the error code

To review the error code:

  1. Click the Start button, Run, then type cmd to open a command prompt.
  2. Type sc query service_name (where service_name is the name of the service) at the command prompt to display the general Windows WIN32_EXIT_CODE error code that the Service Control Manager encountered when trying to stop the service.

Note: If the WIN32_EXIT_CODE is zero, then SCM did not attempt to stop the service because the error was detected first.

  1. , or type net helpmsg exit_code (where exit_code is the four-digit number of the error code) at the command prompt to display the meaning of the WIN32_EXIT_CODE.. For more information about the sc command, see SC Command Reference Help (http://go.microsoft.com/fwlink/?LinkID=84961).

To review the related events logged by the SCM:

  1. Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer.

Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  1. Click Event Viewer (Local), then Windows Logs and System.
  2. In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.

The error code and related events for this service should help you to further troubleshoot and resolve the issue. Some examples are provided below:

  • If event ID 7011 is also logged for this service, then extending the service timeout period to resolve event ID 7011 would also resolve this error.
  • If event ID 7034 is also logged for this service, then restoring the service default settings to resolve event ID 7034 would also resolve this error.

If the issue remains unresolved, contact Microsoft support and provide the error information.