Event viewer Account specified is different" errors

[witan]

I had disabled some services on my computer, such as Universal Plug and
Play Device Host [UPnP} as advised in the Internet document
http://www.z123.org/techsupport/xpservices.htm Recently. I decided to
enable this (and a few other services), because it seems to be required
by some features of Windows Media Player v11. Now I am getting error
messages in Event Viewer, such as:

"Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 1/22/2007
Time: 19:25:54
User: N/A
Computer: INDIA-4A7444560
Description:
The SSDP Discovery Service service failed to start due to the following
error:
The account specified for this service is different from the account
specified for other services running in the same process."

I thought I could get some help by looking at the account
specifications of "services", but it has left me confused.. The logon
name for most of the services is shown as "Local System Account" but
for a few services it is: "NT AUTHORITY\LocalService", and a 15 heavy
dots are printed already in the "Password" and "Confirm Password"
boxes. What is this "password"?
Also, some of the "Local System Account" items have a checkmark in the
box "Allow service to interact with desktop".
I shall be thankful if the experts in this list would tell me how I can
change the settings using "Services.msc" or some other program, for
getting rid of the error messages.

 

[Wesley Vogel]

SSDP Discovery Service is only needed for WMP if you have some sort of
Portable Media Device.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click: SSDP Discovery Service |
On the Log On tab, Local System account should be selected |
Allow service to interact with desktop should NOT be selected

Allow service to interact with desktop
[[Specifies whether the service provides a user interface on a desktop that
can be used by whomever is logged on when the service is started. This
option is available only if the service is running as a LocalSystem
account.]]

SSDPSRV should be started by LocalService.

The Local System account is a predefined local account that can start a
service and provide the security context for that service. The actual name
of the account is NT AUTHORITY\System.

The Local Service account is a special built-in account that has reduced
privileges similar to an authenticated local user account. The actual name
of the account is NT AUTHORITY\LocalService.

SSDP Discovery Service = SSDPSRV

To display the WIN32_EXIT_CODE error that SCM encountered when trying to
start the program, at the command prompt, type:

sc query ssdpsrv

See this...

ID: 7000
Source: Service Control Manager
http://www.microsoft.com/technet/su...7000&EvtSrc=Service Control Manager&LCID=1033

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I had disabled some services on my computer, such as Universal Plug and
Play Device Host [UPnP} as advised in the Internet document
http://www.z123.org/techsupport/xpservices.htm Recently. I decided to
enable this (and a few other services), because it seems to be required
by some features of Windows Media Player v11. Now I am getting error
messages in Event Viewer, such as:

"Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 1/22/2007
Time: 19:25:54
User: N/A
Computer: INDIA-4A7444560
Description:
The SSDP Discovery Service service failed to start due to the following
error:
The account specified for this service is different from the account
specified for other services running in the same process."

I thought I could get some help by looking at the account
specifications of "services", but it has left me confused.. The logon
name for most of the services is shown as "Local System Account" but
for a few services it is: "NT AUTHORITY\LocalService", and a 15 heavy
dots are printed already in the "Password" and "Confirm Password"
boxes. What is this "password"?
Also, some of the "Local System Account" items have a checkmark in the
box "Allow service to interact with desktop".
I shall be thankful if the experts in this list would tell me how I can
change the settings using "Services.msc" or some other program, for
getting rid of the error messages.

 

[witan]

SSDP Discovery Service is only needed for WMP if you have some sort of
Portable Media Device.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click: SSDP Discovery Service |
On the Log On tab, Local System account should be selected |
Allow service to interact with desktop should NOT be selected

Allow service to interact with desktop
[[Specifies whether the service provides a user interface on a desktop that
can be used by whomever is logged on when the service is started. This
option is available only if the service is running as a LocalSystem
account.]]

SSDPSRV should be started by LocalService.

The Local System account is a predefined local account that can start a
service and provide the security context for that service. The actual name
of the account is NT AUTHORITY\System.

The Local Service account is a special built-in account that has reduced
privileges similar to an authenticated local user account. The actual name
of the account is NT AUTHORITY\LocalService.

SSDP Discovery Service = SSDPSRV

To display the WIN32_EXIT_CODE error that SCM encountered when trying to
start the program, at the command prompt, type:

sc query ssdpsrv

See this...

ID: 7000
Source: Service Control Manager
http://www.microsoft.com/technet/su...7000&EvtSrc=Service Control Manager&LCID=1033

Thank you for the prompt help.

I recently bought a Philips SA1105 "digital audio player", but have
seen that SSDP Discovery is not needed for using it. I have disabled
the SSDPD again.

However, I continued to see several other services giving the same
("The account specified for this service is different from the
account specified for other services running in the same process")
message on the Event Viewer: Following up the lead given by you, I
changed the account of the 'erring' services. I am the only user of
the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it blank.
Now *no more errors* of wrong account!
However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on. The annoying red blotches in Event
Viewer have now disappeared, but I get a feeling a number of unwanted
services may be running on the computer.
Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.
Thanks again.

 

[Wesley Vogel]

I am the only user of

the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it blank.

Interesting. I am the only user also and have no passwords either.

Now *no more errors* of wrong account!

Glad to hear it.

However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on.

StiSvc service is the Windows Image Acquisition (WIA) service. I have it
Disabled. Windows thinks that every time you look at a .jpg or other image
file that the service needs to run. It does not.

I get Event ID 10005 DCOM StiSvc service errors by the hundreds. I just
swear out loud, click on Clear All Events and otherwise ignore them.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/10/2004
Time: 3:13:43 PM
User: MYPENTIUM450\Wesley P. Vogel
Computer: MYPENTIUM450
Description:
DCOM got error "The service cannot be started, either because it is disabled
or because it has no enabled devices associated with it. " attempting to
start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

Time: 8:34, 8:51, 8:52, 9:11, 9:14, 9:15, 9:16, 9:26, 9:27, 9:28, 9:34,
9:39, 9:50, 9:56, 9:57, 10:05, 10:27, 10:31, 10:32, 10:49, 11:43, 11:45 ad
nauseum.

{A1F4E726-8CF1-11D1-BF92-0060081ED811} is the CLSID for WIA Device Manager.

Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.

Usually, unless there is a problem, services are set to start correctly
under the proper account.

There is no one single place. I use a bunch. Black Viper used to be the
first place that I looked, but hasn't been updated for quite some time. Now
smallvoid.com is the first place that I look.

http://smallvoid.com/tweak/winnt/services.html

http://www.theeldergeek.com/services_guide.htm#Services

http://www.geocities.com/ziyadhosein/xpserv1.htm

http://www.beemerworld.com/tips/servicesxp.htm

http://web.archive.org/web/20041128094512/http://www.blackviper.com/

http://web.archive.org/web/20041128084144/www.blackviper.com/WinXP/servicecfg.htm

[[This guide lists the default service configurations for Windows XP Service
Pack 1 and Windows XP Service Pack 2. Services that have been added,
removed, or had the default settings changed are highlighted in bold text.]]
TweakHound - Windows XP Services Default Settings Guide
http://www.tweakhound.com/xp/defserv.htm

[[Services
Microsoft pulled their services guide that I had linked to previously
because the information was outdated due to SP2. Even the default settings
for Services listed in Help & Support are still wrong. I've gotten these
settings by doing a fresh install of both XP Home and Pro and exporting the
Services configuration as a .csv file.]]
TweakHound's Super XP Tweaking Guide - Services
http://www.tweakhound.com/xp/xptweaks/supertweaks6.htm

Default settings for services
http://www.microsoft.com/resources/.../proddocs/en-us/sys_srv_default_settings.mspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

SSDP Discovery Service is only needed for WMP if you have some sort of
Portable Media Device.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click: SSDP Discovery Service |
On the Log On tab, Local System account should be selected |
Allow service to interact with desktop should NOT be selected

Allow service to interact with desktop
[[Specifies whether the service provides a user interface on a desktop
that can be used by whomever is logged on when the service is started.
This option is available only if the service is running as a LocalSystem
account.]]

SSDPSRV should be started by LocalService.

The Local System account is a predefined local account that can start a
service and provide the security context for that service. The actual
name of the account is NT AUTHORITY\System.

The Local Service account is a special built-in account that has reduced
privileges similar to an authenticated local user account. The actual
name of the account is NT AUTHORITY\LocalService.

SSDP Discovery Service = SSDPSRV

To display the WIN32_EXIT_CODE error that SCM encountered when trying to
start the program, at the command prompt, type:

sc query ssdpsrv

See this...

ID: 7000
Source: Service Control Manager
http://www.microsoft.com/technet/su...7000&EvtSrc=Service Control Manager&LCID=1033

Thank you for the prompt help.

I recently bought a Philips SA1105 "digital audio player", but have
seen that SSDP Discovery is not needed for using it. I have disabled
the SSDPD again.

However, I continued to see several other services giving the same
("The account specified for this service is different from the
account specified for other services running in the same process")
message on the Event Viewer: Following up the lead given by you, I
changed the account of the 'erring' services. I am the only user of
the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it blank.
Now *no more errors* of wrong account!
However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on. The annoying red blotches in Event
Viewer have now disappeared, but I get a feeling a number of unwanted
services may be running on the computer.
Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.
Thanks again.

 

[witan]

I am the only user of
the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it blank.Interesting. I am the only user also and have no passwords either.

Now *no more errors* of wrong account!Glad to hear it.

However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on.StiSvc service is the Windows Image Acquisition (WIA) service. I have it

Disabled. Windows thinks that every time you look at a .jpg or other image
file that the service needs to run. It does not.

I get Event ID 10005 DCOM StiSvc service errors by the hundreds. I just
swear out loud, click on Clear All Events and otherwise ignore them.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/10/2004
Time: 3:13:43 PM
User: MYPENTIUM450\Wesley P. Vogel
Computer: MYPENTIUM450
Description:
DCOM got error "The service cannot be started, either because it is disabled
or because it has no enabled devices associated with it. " attempting to
start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

Time: 8:34, 8:51, 8:52, 9:11, 9:14, 9:15, 9:16, 9:26, 9:27, 9:28, 9:34,
9:39, 9:50, 9:56, 9:57, 10:05, 10:27, 10:31, 10:32, 10:49, 11:43, 11:45 ad
nauseum.

{A1F4E726-8CF1-11D1-BF92-0060081ED811} is the CLSID for WIA Device Manager.

Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.Usually, unless there is a problem, services are set to start correctly

under the proper account.

There is no one single place. I use a bunch. Black Viper used to be the
first place that I looked, but hasn't been updated for quite some time. Now
smallvoid.com is the first place that I look.

http://smallvoid.com/tweak/winnt/services.html

http://www.theeldergeek.com/services_guide.htm#Services

http://www.geocities.com/ziyadhosein/xpserv1.htm

http://www.beemerworld.com/tips/servicesxp.htm

http://web.archive.org/web/20041128094512/http://www.blackviper.com/

http://web.archive.org/web/20041128084144/www.blackviper.com/WinXP/se...

[[This guide lists the default service configurations for Windows XP Service
Pack 1 and Windows XP Service Pack 2. Services that have been added,
removed, or had the default settings changed are highlighted in bold text.]]
TweakHound - Windows XP Services Default Settings Guidehttp://www.tweakhound.com/xp/defserv.htm

[[Services
Microsoft pulled their services guide that I had linked to previously
because the information was outdated due to SP2. Even the default settings
for Services listed in Help & Support are still wrong. I've gotten these
settings by doing a fresh install of both XP Home and Pro and exporting the
Services configuration as a .csv file.]]
TweakHound's Super XP Tweaking Guide - Serviceshttp://www.tweakhound.com/xp/xptweaks/supertweaks6.htm

Default settings for serviceshttp://www.microsoft.com/resources/documentation/windows/xp/all/prodd...

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

SSDP Discovery Service is only needed for WMP if you have some sort of
Portable Media Device.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click: SSDP Discovery Service |
On the Log On tab, Local System account should be selected |
Allow service to interact with desktop should NOT be selected
Allow service to interact with desktop
[[Specifies whether the service provides a user interface on a desktop
that can be used by whomever is logged on when the service is started.
This option is available only if the service is running as a LocalSystem
account.]]
SSDPSRV should be started by LocalService.
The Local System account is a predefined local account that can start a
service and provide the security context for that service. The actual
name of the account is NT AUTHORITY\System.
The Local Service account is a special built-in account that has reduced
privileges similar to an authenticated local user account. The actual
name of the account is NT AUTHORITY\LocalService.
SSDP Discovery Service = SSDPSRV
To display the WIN32_EXIT_CODE error that SCM encountered when trying to
start the program, at the command prompt, type:
sc query ssdpsrv
See this...
ID: 7000
Source: Service Control Managerhttp://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...

Thank you for the prompt help.

I recently bought a Philips SA1105 "digital audio player", but have
seen that SSDP Discovery is not needed for using it. I have disabled
the SSDPD again.

However, I continued to see several other services giving the same
("The account specified for this service is different from the
account specified for other services running in the same process")
message on the Event Viewer: Following up the lead given by you, I
changed the account of the 'erring' services. I am the only user of
the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it blank.
Now *no more errors* of wrong account!
However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on. The annoying red blotches in Event
Viewer have now disappeared, but I get a feeling a number of unwanted
services may be running on the computer.
Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.
Thanks again.

Thank you for the *VALUABLE* "bunch" of reference links about Windows
services.
Right now I am not getting any error messages in Event Viewer
"Applications". In "System", I once (just once) got a cluster of:

"Syntax error in manifest or policy file "C:\Program Files\Apple
Software Update\Plugins\EXEInstallPlugin.dll.Manifest" on line 2."
etc.

which I am ignoring for the time being because it does not seem to
have much to do with the functioning of Windows-XP.
Using the information in the links provided by you, I shall try to
remove unnecessary services. I am not in a hurry, because my puter is
working fast enough. (Locally built, unbranded; Pentium 4; CPU 2.8GHz;
512MB RAM; Dual booting with Windows-xp pro, SP2, fully updated; NTFS;
installed on 160GHB Seagate HD; Mandriva 10.1 Linux installed on a
separate 20GB Seagate HD).

Thank you for the time and effort you have so kindly put in answering
my queries.

 

[Wesley Vogel]

It looks like an Apple problem.

Program Files\Apple Software Update\Plugins\EXEInstallPlugin.dll.Manifest

<quote>
Extension: MANIFEST
Windows XP has a new look. Older Windows applications use the older Windows
look even though they may use the same controls to create the look. A
..MANIFEST file, which is an XML document, can be created to tell XP to use
the newer look with the older program. In use, the .MANIFEST file is given
the same name is the program in question with .MANIFEST added after the .EXE
extension (e.g., PROGRAM.EXE.MANIFEST). The .MANIFEST file is saved in the
same directory as the .EXE file that it is meant to affect.
<quote>

Event Type: Error
Event Source: SideBySide
Event ID: 61

Event Type: Error
Event Source: SideBySide
Event ID: 59

Event Type: Error
Event Source: SideBySide
Event ID: 58

<quote>
It may have something to do with updates for either iTunes, iPod, or maybe
Quicktime. When I click on Apple Software Update in the All Programs menu
that is when I get the errors in the Event Viewer under the System Heading.
<quote>
http://www.windowsbbs.com/showthread.php?t=58415

<quote>
ID: 59
Source: SideBySide
Message: %1 failed for %2. Reference error message: %3.
Explanation
A component or manifest could not be activated.

Possible causes include:
The component or manifest depends on another program or component that is
not installed.
The manifest contains XML content that is not valid.
The user does not have the correct permissions.

User Action
To resolve this problem, do one or all of the following:

Review the event logs to see whether any related events are logged.
Verify that all dependent components or programs are installed.
Review the XML content, and correct any that is not valid.
Verify that the user has the correct permissions on the computer.
<quote>
http://www.microsoft.com/technet/su...dVer=5.2&EvtID=59&EvtSrc=SideBySide&LCID=1033

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I am the only user of
the computer, and so have only two accounts, Administrator and
"_Myself_", and no password for _Myself_. Therefore, I deleted the
"password" for "NT AUTHORITY\LocalService" and left it
blank.Interesting. I am the only user also and have no passwords
either.

Now *no more errors* of wrong account!Glad to hear it.

However, there were repetitive and different complaints about DCOM,
MSDTC, etc., which too I **seem to have** got rid of by disabling
MSDTC, enabling DCOM, and so on.StiSvc service is the Windows Image
Acquisition (WIA) service. I have it

Disabled. Windows thinks that every time you look at a .jpg or other
image
file that the service needs to run. It does not.

I get Event ID 10005 DCOM StiSvc service errors by the hundreds. I just
swear out loud, click on Clear All Events and otherwise ignore them.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/10/2004
Time: 3:13:43 PM
User: MYPENTIUM450\Wesley P. Vogel
Computer: MYPENTIUM450
Description:
DCOM got error "The service cannot be started, either because it is
disabled
or because it has no enabled devices associated with it. " attempting to
start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

Time: 8:34, 8:51, 8:52, 9:11, 9:14, 9:15, 9:16, 9:26, 9:27, 9:28, 9:34,
9:39, 9:50, 9:56, 9:57, 10:05, 10:27, 10:31, 10:32, 10:49, 11:43, 11:45
ad
nauseum.

{A1F4E726-8CF1-11D1-BF92-0060081ED811} is the CLSID for WIA Device
Manager.

Where can a non-expert like me get advice on configuring the Services
-- including the CHOICE OF ACCOUNT -- for one's specific needs? I
simply don't like to do it by trial-and-error.Usually, unless there is
a problem, services are set to start correctly

under the proper account.

There is no one single place. I use a bunch. Black Viper used to be the
first place that I looked, but hasn't been updated for quite some time.
Now
smallvoid.com is the first place that I look.

http://smallvoid.com/tweak/winnt/services.html

http://www.theeldergeek.com/services_guide.htm#Services

http://www.geocities.com/ziyadhosein/xpserv1.htm

http://www.beemerworld.com/tips/servicesxp.htm

http://web.archive.org/web/20041128094512/http://www.blackviper.com/

http://web.archive.org/web/20041128084144/www.blackviper.com/WinXP/se...

[[This guide lists the default service configurations for Windows XP
Service
Pack 1 and Windows XP Service Pack 2. Services that have been added,
removed, or had the default settings changed are highlighted in bold
text.]]
TweakHound - Windows XP Services Default Settings
Guidehttp://www.tweakhound.com/xp/defserv.htm

[[Services
Microsoft pulled their services guide that I had linked to previously
because the information was outdated due to SP2. Even the default
settings
for Services listed in Help & Support are still wrong. I've gotten these
settings by doing a fresh install of both XP Home and Pro and exporting
the
Services configuration as a .csv file.]]
TweakHound's Super XP Tweaking Guide -
Serviceshttp://www.tweakhound.com/xp/xptweaks/supertweaks6.htm

Default settings for

serviceshttp://www.microsoft.com/resources/documentation/windows/xp/all/prod
d...

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Wesley Vogel wrote:
SSDP Discovery Service is only needed for WMP if you have some sort of
Portable Media Device.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click: SSDP Discovery Service |
On the Log On tab, Local System account should be selected |
Allow service to interact with desktop should NOT be selected

Allow service to interact with desktop
[[Specifies whether the service provides a user interface on a desktop
that can be used by whomever is logged on when the service is started.
This option is available only if the service is running as a
LocalSystem
account.]]

SSDPSRV should be started by LocalService.

The Local System account is a predefined local account that can start a
service and provide the security context for that service. The actual
name of the account is NT AUTHORITY\System.

The Local Service account is a special built-in account that has
reduced
privileges similar to an authenticated local user account. The actual
name of the account is NT AUTHORITY\LocalService.

SSDP Discovery Service = SSDPSRV

To display the WIN32_EXIT_CODE error that SCM encountered when trying
to
start the program, at the command prompt, type:

sc query ssdpsrv

See this...

ID: 7000
Source: Service Control

Managerhttp://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W
....
Thank you for the *VALUABLE* "bunch" of reference links about Windows
services.
Right now I am not getting any error messages in Event Viewer
"Applications". In "System", I once (just once) got a cluster of:

"Syntax error in manifest or policy file "C:\Program Files\Apple
Software Update\Plugins\EXEInstallPlugin.dll.Manifest" on line 2."
etc.

which I am ignoring for the time being because it does not seem to
have much to do with the functioning of Windows-XP.
Using the information in the links provided by you, I shall try to
remove unnecessary services. I am not in a hurry, because my puter is
working fast enough. (Locally built, unbranded; Pentium 4; CPU 2.8GHz;
512MB RAM; Dual booting with Windows-xp pro, SP2, fully updated; NTFS;
installed on 160GHB Seagate HD; Mandriva 10.1 Linux installed on a
separate 20GB Seagate HD).

Thank you for the time and effort you have so kindly put in answering
my queries.