Hello, for the first event ID: http://social.technet.microsoft.com/wiki/contents/articles/windows-server-2008-event-id-7034-service-stop-operations.aspx for the second event ID: http://www.eventid.net/display.asp?eventid=861&eventno=4615&source=Security&phase=1 This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

Hi ALL, I'm using W2K3 x64 SP2. We have a service running using a network service account, this is not a Windows service. ( and located in E drive). Then, we have this error repeatedly: Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7034 Date: 9/30/2011 Time: 8:37:56 AM User: N/A Computer: Description: The OpenLink_OESH019D.Endur.V91R2SHELLAUGMR2_08192011_BUILD_5097_MSWinX64_NOSH_2 service terminated unexpectedly. It has done this 6 time(s). When I check in security log, I have this: Event Type: Failure Audit Event Source: Security Event Category: Detailed Tracking Event ID: 861 Date: 9/30/2011 Time: 8:37:51 AM User: EUROPE\BOIL_END1-EU-S Computer: AMSDC1-S-8937 Description: The Windows Firewall has detected an application listening for incoming traffic. Name: - Path: E:\APPS_64\OpenLink\Endur\V91R2SHELLAUGMR2_08192011_BUILD_5097_MSWinX64_NOSH\bin\cluster_engine.exe Process identifier: 15680 User account: BOIL_END1-EU-S User domain: EUROPE Service: Yes RPC server: No IP version: IPv4 IP protocol: TCP Port number: 2289 Allowed: No User notified: No Do these 2 errors related? And do they the cause of the outage?

Hello, for the first event ID: http://social.technet.microsoft.com/wiki/contents/articles/windows-server-2008-event-id-7034-service-stop-operations.aspx for the second event ID: http://www.eventid.net/display.asp?eventid=861&eventno=4615&source=Security&phase=1 This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer