W7 Error Event ID 7000

[Admiral208]

Afternoon!!

 

I have just installed Windows 7 on my machine, set everything up, its working brilliantly.

 

Just one problem, I keep getting loads of Errors in the event log. The event is ID 7000 and the message says

 

The Diagnostic Service Host service failed to start due to the following error:

A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.

 

I have googled and tried a few things but nothing has stopped the messgaes yet.

 

There is another W7 machine in school that one of the teachers user and I have just had a look at the event log on their machine and its the same story!

 

We are using server 2008.

 

Has anyone else seen this message or know how to fix it.

 

TIA

 

James

[sukh]

Hi

 

Does it tell you what service is having the issue n event viewer?

 

Sukh

[Admiral208]

yeah its the 'Diagnostic Service Host' service.

[sukh]

Can you check under Security Settings | Local Policies | User Rights Assignment for the below and ensure that the local service has these rights? If not add them in.

 

Bypass Traverse Checking

 

Impersonate a client after authentication

 

Profile system performance

 

 

Also, is this issue on all PC's or some, if all, then you may have to make the change for the default domain policy rather than the local one on the PC.

 

Sukh

[Admiral208]

Thanks Sukh,

 

the local service has rights to 1 and 2 but not Profile system performance.

 

This is what i tried to do earlier. I have added a GPO that should add the local service to my machine but its not appearing. It also wont let me modify it locally. I will double check the setup of the GPO but I am almost certain that its ok.

 

Its only the two windows 7 machines that we have in school but it is happening on both. If i can fix the problem on my machine then I will role it out to the other PC.

[sukh]

Hi

 

If you can modify locally, at this stage I assume because a domain GPO is enforcing this.

 

You can try to run a gpupdate /force after you have made the change on the GPO.

 

Sukh

[Admiral208]

Doh!! I added the change to the default domain policy and it worked a treat!!

 

Problem seems to be sorted. Thanks Sukh!

[sukh]

np, glad it is resolved.

Sukh

[zshadar]

np, glad it is resolved.

Sukh

 

I mean Solve it for me

 

Just the last bit add the LOCAL SERVICE account to

User right: Profile system performance

that is all that needed in my case, the others didn't have this account but it was not needed.

 

Thanks