batcmd.com Windows 7 Services

Windows Event Log - Windows 7 Service

This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.

This service also exists in Windows 10, 8, Vista and XP.

Startup Type

Windows 7 edition without SP SP1
Starter Automatic Automatic
Home Basic Automatic Automatic
Home Premium Automatic Automatic
Professional Automatic Automatic
Ultimate Automatic Automatic
Enterprise Automatic Automatic

Default Properties

Display name:Windows Event Log
Service name:eventlog
Type:share
Path:%WinDir%\System32\svchost.exe -k LocalServiceNetworkRestricted
Error control:normal
Group:Event Log
Object:NT AUTHORITY\LocalService
Privileges:
  • SeChangeNotifyPrivilege
  • SeImpersonatePrivilege

Default Behavior

The Windows Event Log service runs as NT AUTHORITY\LocalService in a shared process. It shares an executable file with other services. If the Windows Event Log fails to load or initialize, the error is recorded into the Event Log. Windows 7 startup should proceed, but a message box is displayed informing you that the eventlog service has failed to start.

Dependencies

If the Windows Event Log is stopped, the following services will not start and initialize:

Restore Default Startup Type for Windows Event Log

Automated Restore

1. Select your Windows 7 edition and Service Pack, and then click on the Download button below.

2. Save the RestoreWindowsEventLogWindows7.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

4. Restart the computer to save changes.

Note. Make sure that the svchost.exe file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 7 installation media.