Event ID - 7030

Event Id7030
SourceService Control Manager
DescriptionThe %1 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Event InformationAccording to Microsoft :

Cause :

This event is logged when the service has been configured to allow the service to interact with the desktop. Interactive services can display a user interface and receive user input. If you allow the service to interact with the desktop, any information that the service displays on the desktop will also be displayed on an interactive user's desktop. A malicious user could then take control of the service or attack it from the interactive desktop.

In Windows Vista and Windows Server 2008, support for interactive services has been removed to mitigate this security risk; therefore, this error will be generated by any service configured as an interactive service. To resolve this issue, change the interact with desktop setting for the service.

Resolution :

Change the interact with desktop setting

Note:

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To change the interact with desktop setting:
  1. Open the Services snap-in by clicking the Start button, Control Panel , and Administrative Tools , then double-clicking Services .
    Note:
    For Windows Vista, use theClassic View display option inControl Panel to see the Administration Tools.
  2. In the details pane of the Services snap-in, right-click on the name of the service you want to start and select Properties .
  3. Click the Log On tab and clear the Allow service to interact with desktop checkbox.
  4. Click OK
Verify :

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify the state in which a service is operating
  1. Click the Start button, Run , then type cmd to open a command prompt.
  2. Type sc interrogate service_name (where service_name is the name of the service) at the command prompt to update the status of that service in Service Control Manager.
  3. Type sc qc service_name at the command prompt to display the configuration status of the service.
  4. Type sc queryex service_name at the command prompt to display the extended status of the service. This command will provide the following information about a service: SERVICE_NAME (the service's registry subkey name), TYPE (the type of service, for example, shared process, interactive), STATE (for example, running, paused, and the states that are not available), WIN32_EXIT_CODE (the Windows exit error code), SERVICE_EXIT_CODE (the service exit code), CHECKPOINT, WAIT_HINT (the time period the SCM waits before reporting a service failure), PID (ID of the process running the service), and FLAGS. If the service was started successfully, the WIN32_EXIT_CODE field should contain a zero (0). If the service failed to start when an attempt was made, this field should contain an exit code provided by the service when it could not start.
  5. Type net helpmsg exit_code (where exit_code is the 4 digit number of the error code) at the command prompt to display the meaning of the exit code.
Reference LinksEvent ID 7030 from Source Service Control Manager

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.