Forum posts for services.exe

Why is services.exe changing the Event Log retention policy?

I have a server running Windows 2003 R2 Enterprise Ediditon with Service Pack 2. I reset the Application Event Log Retention policy within EventVwr (right-click on Application, click the radio button next to 'Overwrite events as needed'.) A few hours later, somehow this setting got reset to 'Overwrite events older than 7 days.' This happened several times, so I started up RegMon to monitor what was changing this setting. The setting is located at HKLMSystemCurrentControlSetServicesEventLogApplicatinRetention. I found out that services.exe is changing this setting on a regular basis. Can anyone tell me why services.exe would be automatically changing the Event Log retention policy, and how I can make it stop doing that?

View complete forum thread with replies

Other posts related to services.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

how to change the way explorer.exe and service.exe is started up to edit process affinity?
Why is services.exe changing the Event Log retention policy?
difference between process explorer and task manager [closed]
In windows programming, is there any way we can find out which module (Thread ID & DLL) is c…
CeSetUserNotificationEx with named event and CNT_TIME fails under services.exe
How to read a REG Value into an Environment Variable
Hooking Protected Processes