Event ID 7008 — Basic Service Control Manager Operations

Applies To: Windows Server 2008 R2

The basic operations that Service Control Manager (SCM) performs include managing the services and driver services that allow the operating system to start successfully, and reporting when one of these services or driver services fail during system startup. These operations are not associated with any particular service.

Event Details

Product: Windows Operating System
ID: 7008
Source: Service Control Manager
Version: 6.1
Symbolic Name: EVENT_BAD_ACCOUNT_NAME
Message: No backslash is in the account name.

Resolve

Provide a fully qualified service account name or add a backslash to the service account name

The account under which a service runs must be configured with the fully qualified account name, for example, domain\account_name or user principal name (UPN) logon such as user@company.com. To resolve this issue, either provide a fully qualified service account name or add a backslash to the service account name.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To provide a fully qualified service account name or add a backslash to the service account name:

  1. Open the Services snap-in by clicking the Start button, Control Panel,  and Administrative Tools, then double-clicking Services.

    Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  2. In the console tree of the Services snap-in, right-click Services and select Export List to create and save a tab- or comma-delimited list of the default settings for the installed services.

  3. Review the list and note any accounts (other than the Local Service and Local System accounts) in the Log On As column without a backslash or that are not fully qualified account names.

  4. Provide the fully qualified account name, for example, domain\account_name or user principal name (UPN) logon such as user@company.com, or add a backslash, if needed. For a list of the default settings for system services, including service account names, see Default Settings for System Services (https://go.microsoft.com/fwlink/?LinkId=4657). For non-system settings, see the documentation for that product.

Verify

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the Service Control Manager (SCM) is successfully sending commands to services:

  1. Open the Services snap-in by clicking the Start button, Control Panel,  and Administrative Tools, then double-clicking Services.

    Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  2. Right-click on a stopped service that is not a system service and select Start. If the SCM was successful in starting the service, the Status field for that service will display Started.

 To verify that the Service Control Manager is logging service events correctly:

  1. Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer.

    Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.

  2. Click Event Viewer (Local), then Windows Logs and System.

  3. In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.

  4. Review the events and confirm that event ID 7036 was logged for the action taken by the SCM in step 1 of the To verify that the Service Control Manager is successsfully sending commands to services procedure above.

Basic Service Control Manager Operations

Core Operating System