COM+ Event System - Windows 10 Service
Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
This service also exists in Windows 11, 8, Vista and XP.
Startup Type
| Windows 10 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 1507 | Automatic | Automatic | Automatic | Automatic |
| 1511 | Automatic | Automatic | Automatic | Automatic |
| 1607 | Automatic | Automatic | Automatic | Automatic |
| 1703 | Automatic | Automatic | Automatic | Automatic |
| 1709 | Automatic | Automatic | Automatic | Automatic |
| 1803 | Automatic | Automatic | Automatic | Automatic |
| 1809 | Automatic | Automatic | Automatic | Automatic |
| 1903 | Automatic | Automatic | Automatic | Automatic |
| 1909 | Automatic | Automatic | Automatic | Automatic |
| 2004 | Automatic | Automatic | Automatic | Automatic |
| 20H2 | Automatic | Automatic | Automatic | Automatic |
| 21H1 | Automatic | Automatic | Automatic | Automatic |
| 21H2 | Automatic | Automatic | Automatic | Automatic |
| 22H2 | Automatic | Automatic | Automatic | Automatic |
Default Properties
| Display name: | COM+ Event System |
| Service name: | EventSystem |
| Type: | share |
| Path: | %WinDir%\system32\svchost.exe -k LocalService -p |
| File: | %WinDir%\system32\es.dll |
| Error control: | normal |
| Object: | NT AUTHORITY\LocalService |
| Privileges: |
|
Default Behavior
The COM+ Event System service is running as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other services might run in the same process. If COM+ Event System fails to start, the error is logged. Windows 10 startup proceeds, but a message box is displayed informing you that the EventSystem service has failed to start.
Dependencies
COM+ Event System is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
If COM+ Event System is stopped, the following services cannot start:
Restore Default Startup Type of COM+ Event System
Automated Restore
1. Select your Windows 10 edition and release, and then click on the Download button below.
2. Save the RestoreCOMEventSystemWindows10.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer to save changes.
Note. Make sure that the es.dll file exists in the %WinDir%\system32 folder. If this file is missing you can try to restore it from your Windows 10 installation media.