Event ID 7028 — Basic Service Control Manager Operations
Applies To: Windows Server 2008
.jpg)
The basic operations that Service Control Manager (SCM) performs include managing the services and driver services that allow the operating system to start successfully, and reporting when one of these services or driver services fail during system startup. These operations are not associated with any particular service.
Event Details
| Product: | Windows Operating System |
| ID: | 7028 |
| Source: | Service Control Manager |
| Version: | 6.0 |
| Symbolic Name: | EVENT_TAKE_OWNERSHIP |
| Message: | The %1 Registry key denied access to SYSTEM account programs so the Service Control Manager took ownership of the Registry key. |
Resolve
Review the event log messages
To resolve this issue, review the Event logs and note if any other events have been logged by the Service Control Manager (SCM) Eventlog Provider. The event log message and related events logged by the SCM should help you to further troubleshoot and resolve the issue. Some examples are provided below.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
- If event ID 7011 is also logged for a service, then extending the service timeout period to resolve event ID 7011 would also resolve this error.
- If event ID 7034 is also logged for a service, then restoring the service default settings to resolve event ID 7034 would also resolve this error.
If the issue remains unresolved, contact Microsoft support and provide the error information. For information about how to contact Microsoft support, see Support Options from Microsoft Services (https://go.microsoft.com/fwlink/?LinkId=89446).
To review the events logged by the SCM:
Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer.
Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.
Click Event Viewer (Local), then Windows Logs and System.
In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.
Verify
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To verify that the Service Control Manager (SCM) is successfully sending commands to services:
Open the Services snap-in by clicking the Start button, Control Panel, and Administrative Tools, then double-clicking Services.
Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.
Right-click on a stopped service that is not a system service and select Start. If the SCM was successful in starting the service, the Status field for that service will display Started.
To verify that the Service Control Manager is logging service events correctly:
Open Event Viewer by clicking the Start button, Control Panel, and Administration Tools, then double-clicking Event Viewer.
Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools.
Click Event Viewer (Local), then Windows Logs and System.
In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider.
Review the events and confirm that event ID 7036 was logged for the action taken by the SCM in step 1 of the To verify that the Service Control Manager is successsfully sending commands to services procedure above.