Hello all, I have problem with one server. Windows Server 2008 R2 Standard running only HP Data Protector. I have a lot of errors in eventlog about faulty services. Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Application Experience service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25881</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Application Experience</Data> <Data Name="param2">1</Data> <Data Name="param3">60000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Certificate Propagation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25882</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Certificate Propagation</Data> <Data Name="param2">1</Data> <Data Name="param3">120000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Group Policy Client service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25883</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Group Policy Client</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The IKE and AuthIP IPsec Keying Modules service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25884</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer>t</Computer> <Security /> </System> <EventData> <Data Name="param1">IKE and AuthIP IPsec Keying Modules</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The IP Helper service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25885</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">IP Helper</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Server service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25886</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Server</Data> <Data Name="param2">2</Data> <Data Name="param3">120000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The User Profile Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25887</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">User Profile Service</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Task Scheduler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25888</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Task Scheduler</Data> <Data Name="param2">2</Data> <Data Name="param3">60000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The System Event Notification Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25889</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">System Event Notification Service</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Remote Desktop Configuration service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25890</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Remote Desktop Configuration</Data> <Data Name="param2">2</Data> <Data Name="param3">60000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Windows Management Instrumentation service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25891</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Management Instrumentation</Data> <Data Name="param2">2</Data> <Data Name="param3">300000</Data> <Data Name="param4">1</Data> <Data Name="param5">Restart the service</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 04.05.2011 09:31:12 Event ID: 7034 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: The Windows Update service terminated unexpectedly. It has done this 2 time(s). Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7034</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-05-04T07:31:12.610583100Z" /> <EventRecordID>25892</EventRecordID> <Correlation /> <Execution ProcessID="496" ThreadID="1988" /> <Channel>System</Channel> <Computer></Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Update</Data> <Data Name="param2">2</Data> </EventData> </Event> Any ideas what is causing that issue? I am blind and I don't know where to start in order to fix that issue. Any help is appreciated.

Ok I found solution. http://support.microsoft.com/kb/982293 On a computer that is running Windows Server 2008 R2 or Windows 7, the Svchost.exe process that hosts Windows Management Instrumentation (WMI) service may crash. Additionally, an event entry that includes the following message is added to the Application log: Faulting application name: svchost.exe, version: version, time stamp: time stamp Faulting module name: ntdll.dll, version: version, time stamp: time stamp Exception code: 0xc000071f Fault offse: 0x55ac0 Faulting process id: svchost.exe Faulting application start time: start time Faulting application path: C:\Windows\system32\svchost.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: report id Also, the following other services that run in the same Svchost.exe process also fail: Certificate Propagation service Group Policy Client service IKE and AuthIP IPsec Keying Modules service IP Helper service Server service User Profile Service Task Scheduler service System Event Notification Service Remote Desktop Configuration service Windows Update service Background Intelligent Transfer Service (BITS)