I've noticed some inconsistent behavior on our Windows 2003 Sp1 and Sp2 boxes that I am unable to explain: If I terminate a process that is associated with a service, some servers will log the 7031 'service terminated unexpectedly' event while others will not.As an example, onsome serversI can either use pskill remotely or taskmgr locally to end a process. On some servers the 7031 system event fromService Control Manager will be logged. Other servers log nothing when performing the exact same actions.Usingspoolsv to test.What setting in Windows controls that behavior?Vexed,Mr Desk

Turned out the behavior resulted from a known WMI issue in Windows that prevents SCM from writing events.Scary!http://support.microsoft.com/kb/917463mr desk