batcmd.com Windows Vista Services

Windows Event Collector - Windows Vista Service

This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.

This service also exists in Windows 10, 7 and 8.

Startup Type

Windows Vista edition without SP SP1 SP2
Starter Manual Manual Manual
Home Basic Manual Manual Manual
Home Premium Manual Manual Manual
Business Manual Manual Manual
Ultimate Manual Manual Manual

Default Properties

Display name:Windows Event Collector
Service name:Wecsvc
Type:share
Path:%WinDir%\system32\svchost.exe -k NetworkService
File:%WinDir%\system32\wecsvc.dll
Error control:normal
Object:NT AUTHORITY\NetworkService
Privileges:
  • SeAuditPrivilege
  • SeChangeNotifyPrivilege
  • SeImpersonatePrivilege

Default Behavior

Windows Event Collector logs on as NT AUTHORITY\NetworkService and runs in a shared process of svchost.exe. If Windows Event Collector fails to start, the error is recorded into the Event Log. Windows Vista startup proceeds, but a message box is displayed informing you that the Wecsvc service has failed to start.

Dependencies

Windows Event Collector won't start, if the following system components are stopped or disabled:

Restore Default Startup Type for Windows Event Collector

Automated Restore

1. Select your Windows Vista edition and Service Pack, and then click on the Download button below.

2. Save the RestoreWindowsEventCollectorWindowsVista.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

4. Restart the computer to save changes.

Note. Make sure that the wecsvc.dll file exists in the %WinDir%\system32 folder. If this file is missing you can try to restore it from your Windows Vista installation media.