Jun
28
BITS, SENS, and EventSystem superfail
Filed Under Fixes, Technical, Windows 2000
Go here first for an update with more precise instructions, or read this article for the backstory.
I've had two Windows 2000 Professional machines in as many days that are unable to download updates. The usual Dial-a-fix Windows Update fix routines changed little about the situation. I found out that BITS couldn't start because SENS couldn't start because EventSystem couldn't start. On the second machine, EventSystem was starting, but then SENS was the final failure point. (NetMan and several other services that usually run under SvcHost were also failing with the Event 700x error listed below.)
The event log gets flooded with Event 7000 (SENS), Event 7001 (BITS), Event 4097 (EventSystem), and DCOM event 10005.
7000:
The System Event Notification service failed to start due to the following error:
The executable program that this service is configured to run in does not implement the service.
7001:
The Background Intelligent Transfer Service service depends on the System Event Notification service which failed to start because of the following error:
The executable program that this service is configured to run in does not implement the service.
4097:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043B from line 42 of .\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.
10005:
DCOM got error "The dependency service or group failed to start. " attempting to start the service BITS with arguments "" in order to run the server:
{4991D34B-80A1-4291-83B6-3328366B9097}
The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.
The fix is to change the "netsvcs" REG_MULTI_SZ in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost. You can save the following block of text as a .reg file and double-click it to import it (it's for Windows 2000 only). Then restart the computer. All of the services that failed before should now work fine, and Windows Update should work again (and/or Dial-a-fix will finally be able to help).
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
6d,00,00,00,49,00,61,00,73,00,00,00,49,00,70,00,72,00,69,00,70,00,00,00,49,\
00,72,00,6d,00,6f,00,6e,00,00,00,4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,\
4e,00,77,00,73,00,61,00,70,00,61,00,67,00,65,00,6e,00,74,00,00,00,52,00,61,\
00,73,00,61,00,75,00,74,00,6f,00,00,00,52,00,61,00,73,00,6d,00,61,00,6e,00,\
00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,61,00,63,00,63,00,65,00,73,00,73,\
00,00,00,53,00,45,00,4e,00,53,00,00,00,53,00,68,00,61,00,72,00,65,00,64,00,\
61,00,63,00,63,00,65,00,73,00,73,00,00,00,54,00,61,00,70,00,69,00,73,00,72,\
00,76,00,00,00,4e,00,74,00,6d,00,73,00,73,00,76,00,63,00,00,00,57,00,5a,00,\
43,00,53,00,56,00,43,00,00,00,00,00
"rpcss"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"wugroup"=hex(7):77,00,75,00,61,00,75,00,73,00,65,00,72,00,76,00,00,00,00,00
"BITSgroup"=hex(7):42,00,49,00,54,00,53,00,00,00,00,00[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\BITSGroup]
"DefaultRpcStackSize"=dword:00000008[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs]
"CoInitializeSecurityParam"=dword:00000001[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\wugroup]
"CoInitializeSecurityParam"=dword:00000001
Here is a link to the .reg for right-click-save purposes. (If you single-click on it and it looks funny, that's because it's Unicode).
Also take a look at the update to this article.
Tags: Operating systemsComments
31 Responses to “BITS, SENS, and EventSystem superfail”
Leave a Reply

You saved my intranet server's life with this one. Somehow this key had gotten corrupted, and it was bleeding all over the system event log. Your explanation made sense, and the pre-fab .reg file made it even more painless.
Congrats on getting it fixed :)
thank you very much. I almost invested whole of my day figuring this out. Did google, digged microsoft website but of no help. Had lost all my hope, and I was thinking of reinstalling OS, but in the end I came across this web site and all my issues were finally resolved.
Thanks
Thanks, your the man. I had gotten to the same point sens failing because..same type of deal I also was digging away through microsoft did a google search (using some of the eventlog unhelpful cryptic text and landed on your site) It wasn't a server it was my work computer and my support guy lets just say I am more qualified and leave it at that, but anyway all fixed up. I believe this problem could have been the result of an improper shutdown, as I kicked the power strip under my desk, (and no I didn't do it on purpose the outlet has a shortage honest:)
Did the fix, it worked great, and THEN I updated from Microsoft and surprise, surprise, the error is back all over again, no Network Connections, no BITS, no Automatic Update.
It seems that something being downloaded and installed changes the registry. I believe it has to do with MU (Microsoft Update) instead of WU (Windows Update) and since so many other things don't work when this happens (like my LAN icon disappears) this is very bad stuff. Any comments from others?
I have Win2K SP4
Office 2003
and will go back to Windows Update and Office Update (or just check for updates myself) instead of the new combined MU which does both products.
You are great!!!!!
After 6 hours of research i found you...you are my solution!
Thanks man!
I hate clever bastards... no i dont really.... i love 'em. You saved me thank you!!
Thank you!!!
This solved a problem that I (and Windows Support) have been working on for weeks!
My network icons are back, the services are running, Hurrah!
Thanks again!
Thank you! Solved my problem.
Absolutely fantastic!! I spent the whole of yesterday trying to fix this and now it is magically sorted out... thank you so much. For all your information, I implemented WSUS in our customers Win2k AD environment, the Win2k SP4 (it is a DC aswell) server I installed and setup WSUS on would not Automatically update from itself, i.e WSUS could see the server in the console but Auto Updates would not run to enable me to install the patches needed. By the way I am using Group Policy to push out the updates. After many fixes which didn't work I was left with Com+ Event System, BITS and Auto Update services failing..... until I came across this fix. I imported the reg key, started all the services and not Auto Updates is working perfectly with the Group Policy and WSUS. Thank you!!!!
Does anyone has this registry code for windows server 2003???
I am facing a similar problem with my windows server 2003 box.
Thanks
Thank you very much! I spent days trying to solve that... You had the ONLY solution on the web. Thanks again!
Glad it helped, thanks for the comment! :)
this has fixed more than 15 windows 2000 servers having this issue. run the reg. reboot, done.
I got into this mess on a Windows 2000 Pro machine after applying a cure-all script to deal with recent SVCHOST 100% CPU utilization problems with Windows Update in my enterprise. Long story short, I had to reinstall COM+ and after that, the errors above began to surface. It seems like such a simple thing that Microsoft could have a KB article for!
This fix worked like a champ. I now have "0" errors in my system, and application event logs!
-A
does thisfix work on win 2003 server we are having a simliler problem and cannot get any services to load.
A big thank you, indedd.
BTW how did you realize the trick?
I don't have a Server 2003 version of this (I don't have Server 2003), but if you compare the areas of the registry between a good and a bad machine you can probably figure out the rest.
I compared that area of the registry between the affected machine and my personal machine and noticed entries were missing, so I simply copied them from my machine.
You are super great, my servers run like a dream now.
Consider donating $5 via PayPal to help my 'get out of debt' fund :D
Just used this on my workstation after 5 hours of troubleshooting. WORKS GREAT! WHAT A RELIEF that I don't have to re-install!!! YOU ROCK!!
GENIUS!!
Thank you for posting this fix. I'm just sad it took 5 hours of troubleshooting to find this fix!
I ran into the same problem on an XP machine, and since this is just for 2000, I had to play with it a bit more. Basically, on a customer's xp machine, the netsvcs key had gotten its entries replaced.
I checked my computer and that key had the following value:
6to4
AppMgmt
AudioSrv
Browser
CryptSvc
DMServer
DHCP
ERSvc
EventSystem
FastUserSwitchingCompatibility
HidServ
Ias
Iprip
Irmon
LanmanServer
LanmanWorkstation
Messenger
Netman
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
Schedule
Seclogon
SENS
Sharedaccess
SRService
Tapisrv
Themes
TrkWks
W32Time
WZCSVC
Wmi
WmdmPmSp
winmgmt
wscsvc
xmlprov
BITS
wuauserv
ShellHWDetection
helpsvc
WmdmPmSN
I changed the client to match, and suddenly all the services were magically able to start. Good luck!
Just wanted to also say thanks and let everybody know this worked great on my Small Business Server 2000. Thanks alot for posting this.
THANK YOU !!!!
You are a life saver. The fix worked like a charm.
keep up the good work !
Cheers
I just want to say THANKS.
Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you!
Your awesome, thanks a ton.
Well after a few hours of trying EVERYTHING I could to fix this error, I ran into this page.
After running the reg file and rebooting. I see icons again!
Needless to say I just did a "Dance of Joy" in the server room, don't think anyone seen me!
THANK YOU! (NO really, Thanks.)
This worked perfectly! My Event Viewer is so clean, you could eat off it.