COM+ Event System (EventSystem) Service Defaults in Windows 7
Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
Default Settings
| Startup type: | Automatic |
| Display name: | COM+ Event System |
| Service name: | EventSystem |
| Service type: | share |
| Error control: | normal |
| Object: | NT AUTHORITY\LocalService |
| Path: | %SystemRoot%\system32\svchost.exe -k LocalService |
| File: | %SystemRoot%\system32\es.dll |
| Registry key: | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem |
| Privileges: |
|
Default Behavior
COM+ Event System is a Win32 service. In Windows 7 it is starting automatically on the operating system startup. Then the COM+ Event System service is running as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other system components, such as drivers and services, may run in the same process. If COM+ Event System fails to start, Windows 7 attempts to write the failure details into Event Log. Then Windows 7 startup should proceed and the user should be notified that the EventSystem service is not running because of the error.
Dependencies
COM+ Event System is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
If COM+ Event System is stopped, the following services cannot start:
- Background Intelligent Transfer Service
- COM+ System Application
- SPP Notification Service
- System Event Notification Service
Restore Default Startup Configuration of COM+ Event System
Before you begin doing this, make sure that all the services on which COM+ Event System depends are configured by default and function properly. See the list of dependencies above.1. Run the Command Prompt as an administrator.
2. Copy the commands below, paste them into the command window and press ENTER:
sc config EventSystem start= auto
sc start EventSystem
3. Close the command window and restart the computer.
The EventSystem service is using the es.dll file that is located in the C:\Windows\system32 directory. If the file is removed or corrupted, read this article to restore its original version from Windows 7 installation media.