Event ID - 601

Event Id601
SourceSecurity
DescriptionAttempt to install service:
      Service Name: < Service Name>
      Service File Name: < Service File Name>
      Service Type: < Service Type>
      Service Start Type: < Service Start Type>
      Service Account: < Service Account>     

By:
      User Name: < User Name>
      Domain: < Domain>
      Logon ID: < Logon ID>     

Event InformationCause :
This event is logged when a new service is installed by the user and User Name and Domain identify the user who installed the service.
Resolution :
Verify the user is authorised to install the service.
Reference LinksAlternate Event ID in Vista and Windows Server 2008 is 4697.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.