Event ID 7007 — Basic Service Control Manager Operations

Applies To: Windows Server 2008 R2

The basic operations that Service Control Manager (SCM) performs include managing the services and driver services that allow the operating system to start successfully, and reporting when one of these services or driver services fail during system startup. These operations are not associated with any particular service.

Event Details

Product: Windows Operating System
ID: 7007
Source: Service Control Manager
Version: 6.1
Symbolic Name: EVENT_REVERTED_TO_LASTKNOWNGOOD
Message: The system reverted to its last known good configuration. The system is restarting....

Resolve

Perform a system backup and restart the computer

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To resolve this issue:

  1. Make a backup of your data, if needed. For more information, see Windows Server 2008 Backup and Recovery Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkID=87597).
  2. Restart the computer.

Verify

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the Service Control Manager (SCM) is successfully sending commands to services:

  1. Open the Services snap-in by clicking the Start button, Control Panel,  and Administrative Tools, then double-clicking Services.

    Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  2. Right-click on a stopped service that is not a system service and select Start. If the SCM was successful in starting the service, the Status field for that service will display Started.

 To verify that the Service Control Manager is logging service events correctly:

  1. Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer.

    Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  2. Click Event Viewer (Local), then Windows Logs and System.

  3. In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.

  4. Review the events and confirm that event ID 7036 was logged for the action taken by the SCM in step 1 of the To verify that the Service Control Manager is successsfully sending commands to services procedure above.

Basic Service Control Manager Operations

Core Operating System