On Windows 2000, the agent will not start, or I have to start the service manually

Article ID: 197
Category: General
Applies to: 2.92
Updated: 2012-11-27

Due to an issue with the rasctrs.dll, which enables performance counters for the Remote Access service, the EventSentry service (v2.92 only) will not automatically start at boot on Windows 2000 SP4 machines, even when the service is configured for Automatic startup.

Prior to starting the EventSentry service's process, Windows loads all registered performance counter DLLs. Because the operating system does not load the rasctrs.dll properly, the eventsentry_svc.exe process cannot start at boot time. If the service is started manually after the initial boot, then it will load correctly in some cases.

To resolve this issue, you will need to disable performance counters for the Remote Access service. Please note that after this change, you will not be able to view Remote Access information in performance monitor anymore. To fix the issue, follow these steps:

  • Click Start, click Run, type regedit in the Open box, and then click OK.
  • Click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \RemoteAccess\Performance
  • On the Edit menu, point to New, and then click DWORD Value.
  • In the New Value #1 box, type Disable Performance Counters, and then press ENTER.
  • Right-click Disable Performance Counters, and then click Modify.
  • In the Value data box, type 1, and then click OK.
  • Quit Registry Editor

The next time you start the Windows 2000 host, the EventSentry service should load successfully at boot time.




Try EventSentry on-premise

FREE 30-day evaluation

Download Now