Error Messages at Start Up

[Aitionn]

I have just installed XP home on a newly built computer and am getting two
error messages, both the same, when I start the computer. The message reads
"The service has failed to start" and the computer stops loading. When I
click the OK button the same message appears, click okay again and everything
loads fine. All services appear to be running according to "msconfig"

Event viewer shows two event messages each time I boot up numbered 7035 and
7036 in the system part of viewer but I cannot find out what they refer to
(may well have nothing to do with the error message)

Any solution, please?

 

[Pegasus [MVP]]

I have just installed XP home on a newly built computer and am getting two
error messages, both the same, when I start the computer. The message
reads
"The service has failed to start" and the computer stops loading. When I
click the OK button the same message appears, click okay again and
everything
loads fine. All services appear to be running according to "msconfig"

Event viewer shows two event messages each time I boot up numbered 7035
and
7036 in the system part of viewer but I cannot find out what they refer to
(may well have nothing to do with the error message)

Any solution, please?

Msconfig does not indicate whether a service is currently running or not. It
simply tells you which services are scheduled to start at boot time. If you
cannot identify the name of the problem service by looking at the error
message or by examining its event viewer entry then you can work it out by a
process of elimination like so:
1. Launch msconfig.
2. Tick the box that hides all Microsoft services.
3. Selectively untick the other services and reboot the machine.
When the message stops appearing then you know which service generates it.

 

[Aitionn]

Thanks

I will let you know how I get on

Aitionn

 

[Jose]

Msconfig does not indicate whether a service is currently running or not.It
simply tells you which services are scheduled to start at boot time. If you
cannot identify the name of the problem service by looking at the error
message or by examining its event viewer entry then you can work it out by a
process of elimination like so:
1. Launch msconfig.
2. Tick the box that hides all Microsoft services.
3. Selectively untick the other services and reboot the machine.
When the message stops appearing then you know which service generates it..

If you see the stuff in Event Viewer, try to copy and paste the bad
events here.

A good way to do that is click the third icon under the up/down arrow
buttons in the Event Viewer. You won't see much happen, but all the
details are now on your clipboard. Start your message here, get into
EV, find the event, click the button to copy, come back to the message
here, paste... Repeat for each message. It does not tell you which
of the logs in EV the messages came from so you can put that in with
the message, or we can probably figure it out.

You could just select the event message text and paste it, but if you
do what I said above it will have everything and we won't have to ask
you more questions (for the moment).

In the EV for each log, under View, there is also an option to Clear
all Events for that log. That might be good to get a fresh log for
each EV section. Clear all the events in all the logs, reboot, then
let's see the errors - and only the errors that are of interest to
you. They will probably have a red X in the left column.

The EV log is set to only get to a certain size and then start
overwriting itself and the way it is set up by default is fine, so
clearing the logs is not something you NEED to do to save space or
anything, this is just to get a fresh look at things.

 

[Aitionn]

Hello again

Tried unticking the services one at a time but it did not take long before
the PC refused to work properly and I was forced to select the "start all
services" option.

These are the error messages I am getting in the event viewer

1)

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 26/04/2009
Time: 05:11:05
User: NT AUTHORITY\NETWORK SERVICE
Computer: BREADALBANE
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

2)
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 26/04/2009
Time: 05:11:02
User: N/A
Computer: BREADALBANE
Description:
The IP address lease 192.168.1.73 for the Network Card with network address
0022B073D39E has been denied by the DHCP server 10.13.57.105 (The DHCP Server
sent a DHCPNACK message).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I have had a look at the help and support advice both links bring up but
they do not seem to apply to XP or I cannot locate the route recommended to
solve the issues.

Aitionn

 

[Jose]

Hello again

Tried unticking the services one at a time but it did not take long before
the PC refused to work properly and I was forced to select the "start all
services" option.

These are the error messages I am getting in the event viewer

1)

Event Type:     Failure Audit
Event Source:   Security
Event Category: Policy Change
Event ID:       615
Date:           26/04/2009
Time:           05:11:05
User:           NT AUTHORITY\NETWORK SERVICE
Computer:       BREADALBANE
Description:
IPSec Services:         IPSec Services failed to get the completelist of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

2)
Event Type:     Error
Event Source:   Dhcp
Event Category: None
Event ID:       1002
Date:           26/04/2009
Time:           05:11:02
User:           N/A
Computer:       BREADALBANE
Description:
The IP address lease 192.168.1.73 for the Network Card with network address
0022B073D39E has been denied by the DHCP server 10.13.57.105 (The DHCP Server
sent a DHCPNACK message).

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

I have had a look at the help and support advice both links bring up but
they do not seem to apply to XP or I cannot locate the route recommended to
solve the issues.

Aitionn

Let's start over.

When it reboots, you said you get an error "The service has failed to
start".

Are there no other words on the screen? I think there should be
something else on the screen, before you see it. Is the background
blue, black, some other color? Try to describe it since we can't see
it.

In your Event Viewer do you see a whole bunch of 7035/7036 messages or
just a couple? I have some too, but I don't have your problem and
mine are not red X'd.

When looking at EV, (FYI) the ones with the red X are the most
interesting, and due to different boot timings, you may never be able
to get rid of them all - some things are just not ready yet but will
come around.

Are you using or have installed any Symantec products for AV (anti
virus)? How about any AV products?

Try booting in Safe mode by pressing the F8 key repeatedly on the next
boot before Windows can load. At the menu just choose Safe mode with
networking. Do you see any similar failed to start messages there?
Things will be bigger since the video drivers won't load, but just
reboot again normally when you are done.

 

[Aitionn]

Let's start over.

When it reboots, you said you get an error "The service has failed to
start".

Are there no other words on the screen? I think there should be
something else on the screen, before you see it. Is the background
blue, black, some other color? Try to describe it since we can't see
it.

In your Event Viewer do you see a whole bunch of 7035/7036 messages or
just a couple? I have some too, but I don't have your problem and
mine are not red X'd.

When looking at EV, (FYI) the ones with the red X are the most
interesting, and due to different boot timings, you may never be able
to get rid of them all - some things are just not ready yet but will
come around.

Are you using or have installed any Symantec products for AV (anti
virus)? How about any AV products?

Try booting in Safe mode by pressing the F8 key repeatedly on the next
boot before Windows can load. At the menu just choose Safe mode with
networking. Do you see any similar failed to start messages there?
Things will be bigger since the video drivers won't load, but just
reboot again normally when you are done.

 

[Aitionn]

Problem solved!!

I went back through the entire event log and found a programme which after
installation caused the error messages to appear. It was an MSI
bios/motherboard update programme. Removal, reboot and reinstall stopped all
the error messages.

Many thanks to all who helped here - I am very grateful. I will be back when
the next issue arises.

Thanks again, everyone

Aitionn