This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
|Windows Vista edition||without SP||SP1||SP2|
|Display name:||Windows Event Collector|
|Path:||%WinDir%\system32\svchost.exe -k NetworkService|
Windows Event Collector logs on as NT AUTHORITY\NetworkService and runs in a shared process of svchost.exe. If Windows Event Collector fails to start, the error is recorded into the Event Log. Windows Vista startup proceeds, but a message box is displayed informing you that the Wecsvc service has failed to start.
Windows Event Collector won't start, if the following system components are stopped or disabled:
1. Select your Windows Vista edition and Service Pack, and then click on the Download button below.
2. Save the RestoreWindowsEventCollectorWindowsVista.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer to save changes.
Note. Make sure that the
wecsvc.dll file exists in the
%WinDir%\system32 folder. If this file is missing you can try to restore it from your Windows Vista installation media.