| Event Id | 7041 |
| Source | Service Control Manager |
| Description | The Service_Name service terminated with the following error. The specified user account is not a member of the specified group account. |
| Event Information | According to Microsoft : Cause : This event is logged when there were changes in the account under which the service runs (for example, the account is different than the default account or password has expired), the service may be unable to start. Resolution : Check the settings of the service account and then start the service Check the settings of the service account To check the settings of the service account: 1.Open theServices snap-in by clicking theStart button, Control Panel, andAdministrative Tools, then double-clickingServices. Note: For Windows Vista, use the Classic View display option inControl Panel to see theAdministration Tools. 2.In the details pane of the Services snap-in, right-click the name of the service you want to start and selectProperties. 3.Click theLog On tab and note the account listed underLog On As. Start the service To start a service: 1.Open theServices snap-in by clicking theStart button,Control Panel‚ and Administrative Tools, then double-clicking Services. Note: For Windows Vista, use the Classic View display option in Control Panel to see the Administration Tools. 2.In the details pane of theServices snap-in, right-click the name of the service you want to start and selectStart. Verify : To perform this procedure, you must have membership inAdministrators, or you must have been delegated the appropriate authority. To verify that a service has started: 1.Open the Services snap-in by clicking theStart button,Control Panel, andAdministrative Tools, then double-clickingServices. 2.In the details pane of the Services snap-in, locate the name of the service and verify that the Status column shows a status of Started ------------------------------------------------------------------------------------------------------- This account is missing the “Log on as a Service” user right. This right must be granted to the service account in order to run this service. The Local Security Policy editor (secpol.msc) can be used to grant this privilege to the account on this machine. If this node is a member of a cluster, check that this user right is granted to the service account on all nodes in this cluster. If this user right continues to be revoked from the service account, it might be the result of a Group Policy object removing the privilege. Check with your domain administrator to determine if this is the cause of the revocation. When the Cluster service starts, it now checks the user rights that are granted to the Cluster service account together with the Cluster service accounts group membership. If an incorrect configuration is detected, the Cluster service stops, and an appropriate message is either displayed on the computer or logged in the system event log. In this scenario, the Cluster service starts and continues to run only after the appropriate corrections are made to the Cluster service account. Therefore, the server cluster administrator is quickly alerted that a problem exists with the Cluster service account configuration. |
| Reference Links | Event ID 7041 from Source Service Control Manager
New event log messages for the Cluster service account are included in Windows Server 2003 Service Pack 1 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.