Security Center Error Message

[jobella]

Hello,
For the past month I've been getting an error message from Security Center,
saying it is turned off however I am unable to open it.
I had Norton trial and have just installed Bitdefender. Normally I should be
able to click in security center that I have my own software but am unable to
do so
I went into Security Center Properties and got the following message:
"configuration manager: the specific device instance handle does not
correspond to a present device"
I then noticed that the Security Center was STOPPED. I got the following
message when I tried to start it: "Windows would not start Security Center
Sevice on Local Computer. Error 1079: The account specified for this service
is different from the account specified for other services running in the
same process." Can anyone help me.....

 

[Mr. Arnold]

Hello,
For the past month I've been getting an error message from Security
Center,
saying it is turned off however I am unable to open it.
I had Norton trial and have just installed Bitdefender. Normally I should
be
able to click in security center that I have my own software but am unable
to
do so
I went into Security Center Properties and got the following message:
"configuration manager: the specific device instance handle does not
correspond to a present device"
I then noticed that the Security Center was STOPPED. I got the following
message when I tried to start it: "Windows would not start Security Center
Sevice on Local Computer. Error 1079: The account specified for this
service
is different from the account specified for other services running in the
same process." Can anyone help me.....

To keep it short, go to the Services off of the Start Button, Control
Panel/Admin Tool and find the Security Center Service. You right-click the
line and go to Properties to the Logon tab. You go to Use this Account and
enter Local Service and leave password blank click OK. Then you Start the
service.

I don't what is causing the problem, but I suspect the uninstalling and
installing of security software has caused the password to become corrupted.
You might get the same message after the service starts successfully when
you try to view the service's dependencies, but the service will start.

 

[me too]

To keep it short, go to the Services off of the Start Button, Control
Panel/Admin Tool and find the Security Center Service. You right-click the
line and go to Properties to the Logon tab. You go to Use this Account and
enter Local Service and leave password blank click OK. Then you Start the
service.

I don't what is causing the problem, but I suspect the uninstalling and
installing of security software has caused the password to become corrupted.
You might get the same message after the service starts successfully when
you try to view the service's dependencies, but the service will start.

Iv been having this problem too, except this solution hasnt worked for me
any other ideas?

 

[Noel Paton]

To keep it short, go to the Services off of the Start Button, Control
Panel/Admin Tool and find the Security Center Service. You right-click the
line and go to Properties to the Logon tab. You go to Use this Account and
enter Local Service and leave password blank click OK. Then you Start the
service.

I don't what is causing the problem, but I suspect the uninstalling and
installing of security software has caused the password to become corrupted.
You might get the same message after the service starts successfully when
you try to view the service's dependencies, but the service will start.

Iv been having this problem too, except this solution hasnt worked for me
any other ideas?[/QUOTE]
Do you mean that you also used to have Norton installed? - if so, then
the remains of that POS are probably preventing things from working
properly.
Download and run the Norton Removal tool - read the warniings on the
page first (it removes ALL norton software)
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

HTH

 

[me too]

Iv been having this problem too, except this solution hasnt worked for me
any other ideas?

Do you mean that you also used to have Norton installed? - if so, then
the remains of that POS are probably preventing things from working
properly.
Download and run the Norton Removal tool - read the warniings on the
page first (it removes ALL norton software)
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

HTH
[/QUOTE]

No iv never had norton installed. The thing which i think has happened is i
was trying to get my processes to a minimum and i cancelled the WMI service,
which i later learned is a dependancy of the security center. So i turned
this back on and set it to automatically start up, and now i still get the
error when i try to turn security center service on: Error 1079: The account
specified for this service
is different from the account specified for other services running in the
same process.

thanks

 

[Noel Paton]

No iv never had norton installed. The thing which i think has happened is i
was trying to get my processes to a minimum and i cancelled the WMI service,
which i later learned is a dependancy of the security center. So i turned
this back on and set it to automatically start up, and now i still get the
error when i try to turn security center service on: Error 1079: The account
specified for this service
is different from the account specified for other services running in the
same process.

thanks

....in other words, your problem is NOTHING like the original one! -
why did you think that the fix there might work for you?
OK let's start from scratch.
when you say 'cancelled' WMI Service, what do you mean? - disabled it
in services.msc, or used some form of registry tweak, or removed it
completely?
WMI should be set to run Automatically, and on the Log On tab in
services.msc|Properties, to log on as Local System Account.
Check also that the RPC and DCOM Server Launcher services are also set
to Automatic (They should be - WIndows won't run without them!)

 

[me too]

....in other words, your problem is NOTHING like the original one! -
why did you think that the fix there might work for you?
OK let's start from scratch.
when you say 'cancelled' WMI Service, what do you mean? - disabled it
in services.msc, or used some form of registry tweak, or removed it
completely?
WMI should be set to run Automatically, and on the Log On tab in
services.msc|Properties, to log on as Local System Account.
Check also that the RPC and DCOM Server Launcher services are also set
to Automatic (They should be - WIndows won't run without them!)


--
Noel Paton
www.crashfixpc.co.uk

Nil Carborundum Illegitemi

Hi, yes i simply just disabled it from the services.msc.
RPC and DCOM are how you said they should be and i havnt messed with those
WMI is set to automatically and the logon tab i cannot set the user as Local
System Account there is an error message 1057. so i set the logon tab as
local service. please reply

 

[Noel Paton]

I have just made the service "Windows Management Instrumentation" start, i
did as you said i used the local system account. (sorry about my last post).
now when i still try to start the security center i get the same error 1079.
the accoutn is local service, the circle is filled in "Use this account". any
ideaS?

Security Center should be set to Auto (delayed start), and to log on
as Local Service - have you checked the password? (it should be
removed - although the blobs will still show)
HTH

 

[me too]

Security Center should be set to Auto (delayed start), and to log on
as Local Service - have you checked the password? (it should be
removed - although the blobs will still show)
HTH
--
Noel Paton
www.crashfixpc.co.uk

Nil Carborundum Illegitemi

ok, done everything you have said so far... still not working same error
:S
thanks

 

[Noel Paton]

ok, done everything you have said so far... still not working same error
:S
thanks

OK then.... check that the 'Path to executable' in the General tab
says
'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted'
(assuming your Windows is on on the C: drive?)
check that your copy of svchost.exe is present in that location, and
that its version number is 6.01.6001.18000, and that (In the security
tab) SYSTEM, Administrators, and Users have onlyRead and
Readd&Execute permissions, and that TrustedInstaller has Full
Control.There should be no other entries in teh 'Groups or Username'
box (but don't deletew others if they exist - yet! - just report back
with details).

This seems to be a permissions error, which may mean that some other
program has taken over the file's permissions - if so, then it's
usually a security suite which has been installed (and possibly later
uninstalled, perhaps improperly), or malware.
You say that you've never had Norton installed - what security
software do you have running now, and what has been run in the past
(even briefly)?
Have you ever had a significant infection from malware of any kind?
when did you last run a full scan of the system with your security
software?

 

[me too]

OK then.... check that the 'Path to executable' in the General tab
says
'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted'
(assuming your Windows is on on the C: drive?)
check that your copy of svchost.exe is present in that location, and
that its version number is 6.01.6001.18000, and that (In the security
tab) SYSTEM, Administrators, and Users have onlyRead and
Readd&Execute permissions, and that TrustedInstaller has Full
Control.There should be no other entries in teh 'Groups or Username'
box (but don't deletew others if they exist - yet! - just report back
with details).

This seems to be a permissions error, which may mean that some other
program has taken over the file's permissions - if so, then it's
usually a security suite which has been installed (and possibly later
uninstalled, perhaps improperly), or malware.
You say that you've never had Norton installed - what security
software do you have running now, and what has been run in the past
(even briefly)?
Have you ever had a significant infection from malware of any kind?
when did you last run a full scan of the system with your security
software?

--
Noel Paton
www.crashfixpc.co.uk

Nil Carborundum Illegitemi

hi, i did what you said:

svchost.exe is file version "6.0.6001.18000" not "6.01.6001.18000".
The groups and usernames permissions is all set how you said, and no extras
that shouldnt be there.
i havent had any malware/virus at all. now you said it, i did install:
NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
at the same time. I did this because i wanted a very secure computer. So i
think this may be the cause. I have scanned recently, and as always, im
always clean.
thanks

 

[Noel Paton]

hi, i did what you said:

svchost.exe is file version "6.0.6001.18000" not "6.01.6001.18000".
The groups and usernames permissions is all set how you said, and no extras
that shouldnt be there.
i havent had any malware/virus at all. now you said it, i did install:
NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
at the same time. I did this because i wanted a very secure computer. So i
think this may be the cause. I have scanned recently, and as always, im
always clean.
thanks

NOD32 _AND_Avast????
running at the same time?
If that's the case, then I'm surprised the machine runs at all! NEVER
run two anti-viruses at the same time on any machine - they WILL
interfere with each other!
If you insist on having two installed, then make sure that one is
completely disabled, and use that one only as a backup scanner. In the
case of your pairing, I'd remove Avast, since NOD32 is far superior as
protection..
As far as I'm concerned, Zone Alarm is not required in Vista, since
Vista's own firewall is perfectly good enough for most purposes, and
is two-way. ZA is also known to have its problems (removal being one
of them!) in at least some versions.

svchost.... my bad (typo/brainf$rt?) you have the same version as me
Can you list the disabled services for me? - there appear to be some
reports that other disabled services can affect the situation here,
despite not being directly involved.

Try running the following command from an Admin CMD prompt....

winmgmt /verifyrepository

what does it report?

 

[Sam Hobbs]

i havent had any malware/virus at all. now you said it, i did install:
NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
at the same time.

I used ZoneAlarm many years ago before they released their commercial
version. Years after I had removed it, I had problems with IE; the major
symptom was that I rarely was able to get large files downloaded using IE. I
finally discovered there was one ZoneAlarm file remaining in my system, and
based on searches of the internet, it was spyware. I am surprised that
Ad-Aware did not catch it. I removed the one ZoneAlarm file and my download
problems went away. Probably none of this affects you, and I assume that
ZoneAlarm does not install spyware such as that anymore, but I think it is
an additional reason to consider abandoning it, removing it, and ensuring it
is totally gone from your system.

To be effective, anti-virus programs must use undocumented and technically
advanced and complex techniques. It is highly likely that they are not
compatible. ZoneAlarm and Ad-Aware are not anti-virus programs, except you
might have purchased an anti-virus program with ZoneAlarm. As already
stated, use only one anti-virus program at a time. Note that simply
disabling an anti-virus program might not be enough to remove possible
incompatibility program, but other people are more experienced and
knowledgeable about that.

 

[me too]

the command that i was told to type in the prompt displayed this message:

WMI repository is consistent

i have removed Zone Alarm and Avast. i now just have Ad-Aware and NOD32.

ill report about the services later.

thanks