Go here first for an update with more precise instructions, or read this article for the backstory.

I've had two Windows 2000 Professional machines in as many days that are unable to download updates. The usual Dial-a-fix Windows Update fix routines changed little about the situation. I found out that BITS couldn't start because SENS couldn't start because EventSystem couldn't start. On the second machine, EventSystem was starting, but then SENS was the final failure point. (NetMan and several other services that usually run under SvcHost were also failing with the Event 700x error listed below.)

The event log gets flooded with Event 7000 (SENS), Event 7001 (BITS), Event 4097 (EventSystem), and DCOM event 10005.

7000:

The System Event Notification service failed to start due to the following error:
The executable program that this service is configured to run in does not implement the service.

7001:

The Background Intelligent Transfer Service service depends on the System Event Notification service which failed to start because of the following error:
The executable program that this service is configured to run in does not implement the service.

4097:

The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043B from line 42 of .\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

10005:

DCOM got error "The dependency service or group failed to start. " attempting to start the service BITS with arguments "" in order to run the server:
{4991D34B-80A1-4291-83B6-3328366B9097}

The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register with DCOM within the required timeout.

The fix is to change the "netsvcs" REG_MULTI_SZ in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost. You can save the following block of text as a .reg file and double-click it to import it (it's for Windows 2000 only). Then restart the computer. All of the services that failed before should now work fine, and Windows Update should work again (and/or Dial-a-fix will finally be able to help).

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
6d,00,00,00,49,00,61,00,73,00,00,00,49,00,70,00,72,00,69,00,70,00,00,00,49,\
00,72,00,6d,00,6f,00,6e,00,00,00,4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,\
4e,00,77,00,73,00,61,00,70,00,61,00,67,00,65,00,6e,00,74,00,00,00,52,00,61,\
00,73,00,61,00,75,00,74,00,6f,00,00,00,52,00,61,00,73,00,6d,00,61,00,6e,00,\
00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,61,00,63,00,63,00,65,00,73,00,73,\
00,00,00,53,00,45,00,4e,00,53,00,00,00,53,00,68,00,61,00,72,00,65,00,64,00,\
61,00,63,00,63,00,65,00,73,00,73,00,00,00,54,00,61,00,70,00,69,00,73,00,72,\
00,76,00,00,00,4e,00,74,00,6d,00,73,00,73,00,76,00,63,00,00,00,57,00,5a,00,\
43,00,53,00,56,00,43,00,00,00,00,00
"rpcss"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"wugroup"=hex(7):77,00,75,00,61,00,75,00,73,00,65,00,72,00,76,00,00,00,00,00
"BITSgroup"=hex(7):42,00,49,00,54,00,53,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\BITSGroup]
"DefaultRpcStackSize"=dword:00000008

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs]
"CoInitializeSecurityParam"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\wugroup]
"CoInitializeSecurityParam"=dword:00000001

Here is a link to the .reg for right-click-save purposes. (If you single-click on it and it looks funny, that's because it's Unicode).

Also take a look at the update to this article.

Tags:

Comments

31 Responses to “BITS, SENS, and EventSystem superfail”

  1. # aqmxv on July 20th, 2006 9:24 AM

    You saved my intranet server's life with this one. Somehow this key had gotten corrupted, and it was bleeding all over the system event log. Your explanation made sense, and the pre-fab .reg file made it even more painless.

  2. # DjLizard on July 20th, 2006 9:24 PM

    Congrats on getting it fixed :)

  3. # nNathan on August 3rd, 2006 7:10 AM

    thank you very much. I almost invested whole of my day figuring this out. Did google, digged microsoft website but of no help. Had lost all my hope, and I was thinking of reinstalling OS, but in the end I came across this web site and all my issues were finally resolved.
    Thanks

  4. # monty on September 26th, 2006 1:23 AM

    Thanks, your the man. I had gotten to the same point sens failing because..same type of deal I also was digging away through microsoft did a google search (using some of the eventlog unhelpful cryptic text and landed on your site) It wasn't a server it was my work computer and my support guy lets just say I am more qualified and leave it at that, but anyway all fixed up. I believe this problem could have been the result of an improper shutdown, as I kicked the power strip under my desk, (and no I didn't do it on purpose the outlet has a shortage honest:)

  5. # Krispin Sullivan on October 17th, 2006 1:13 PM

    Did the fix, it worked great, and THEN I updated from Microsoft and surprise, surprise, the error is back all over again, no Network Connections, no BITS, no Automatic Update.

    It seems that something being downloaded and installed changes the registry. I believe it has to do with MU (Microsoft Update) instead of WU (Windows Update) and since so many other things don't work when this happens (like my LAN icon disappears) this is very bad stuff. Any comments from others?
    I have Win2K SP4
    Office 2003
    and will go back to Windows Update and Office Update (or just check for updates myself) instead of the new combined MU which does both products.

  6. # Massimo on November 7th, 2006 3:44 AM

    You are great!!!!!

    After 6 hours of research i found you...you are my solution!

    Thanks man!

  7. # Kashiko on November 7th, 2006 9:55 AM

    I hate clever bastards... no i dont really.... i love 'em. You saved me thank you!!

  8. # Connie on November 28th, 2006 4:33 PM

    Thank you!!!
    This solved a problem that I (and Windows Support) have been working on for weeks!
    My network icons are back, the services are running, Hurrah!
    Thanks again!

  9. # Eric on January 7th, 2007 3:43 PM

    Thank you! Solved my problem.

  10. # Nibbs on February 2nd, 2007 5:26 AM

    Absolutely fantastic!! I spent the whole of yesterday trying to fix this and now it is magically sorted out... thank you so much. For all your information, I implemented WSUS in our customers Win2k AD environment, the Win2k SP4 (it is a DC aswell) server I installed and setup WSUS on would not Automatically update from itself, i.e WSUS could see the server in the console but Auto Updates would not run to enable me to install the patches needed. By the way I am using Group Policy to push out the updates. After many fixes which didn't work I was left with Com+ Event System, BITS and Auto Update services failing..... until I came across this fix. I imported the reg key, started all the services and not Auto Updates is working perfectly with the Group Policy and WSUS. Thank you!!!!

  11. # rash on February 27th, 2007 6:33 AM

    Does anyone has this registry code for windows server 2003???
    I am facing a similar problem with my windows server 2003 box.
    Thanks

  12. # Francesco on March 8th, 2007 11:38 AM

    Thank you very much! I spent days trying to solve that... You had the ONLY solution on the web. Thanks again!

  13. # DjLizard on March 8th, 2007 9:12 PM

    Glad it helped, thanks for the comment! :)

  14. # michael on April 16th, 2007 5:11 PM

    this has fixed more than 15 windows 2000 servers having this issue. run the reg. reboot, done.

  15. # Adam on May 25th, 2007 7:55 AM

    I got into this mess on a Windows 2000 Pro machine after applying a cure-all script to deal with recent SVCHOST 100% CPU utilization problems with Windows Update in my enterprise. Long story short, I had to reinstall COM+ and after that, the errors above began to surface. It seems like such a simple thing that Microsoft could have a KB article for!

    This fix worked like a champ. I now have "0" errors in my system, and application event logs!

    -A

  16. # phill baker on June 12th, 2007 5:48 AM

    does thisfix work on win 2003 server we are having a simliler problem and cannot get any services to load.

  17. # lazamazu on June 14th, 2007 2:37 AM

    A big thank you, indedd.
    BTW how did you realize the trick?

  18. # DjLizard on June 15th, 2007 5:36 PM

    I don't have a Server 2003 version of this (I don't have Server 2003), but if you compare the areas of the registry between a good and a bad machine you can probably figure out the rest.

    I compared that area of the registry between the affected machine and my personal machine and noticed entries were missing, so I simply copied them from my machine.

  19. # Soeren Moller on June 28th, 2007 2:21 AM

    You are super great, my servers run like a dream now.

  20. # DjLizard on June 28th, 2007 6:54 AM

    Consider donating $5 via PayPal to help my 'get out of debt' fund :D

  21. # LJ on October 4th, 2007 5:15 PM

    Just used this on my workstation after 5 hours of troubleshooting. WORKS GREAT! WHAT A RELIEF that I don't have to re-install!!! YOU ROCK!!

  22. # Bill Nesting on October 17th, 2007 10:43 AM

    GENIUS!!

  23. # Gaven on November 5th, 2007 6:26 PM

    Thank you for posting this fix. I'm just sad it took 5 hours of troubleshooting to find this fix!

  24. # Moracca on November 9th, 2007 11:59 AM

    I ran into the same problem on an XP machine, and since this is just for 2000, I had to play with it a bit more. Basically, on a customer's xp machine, the netsvcs key had gotten its entries replaced.
    I checked my computer and that key had the following value:
    6to4
    AppMgmt
    AudioSrv
    Browser
    CryptSvc
    DMServer
    DHCP
    ERSvc
    EventSystem
    FastUserSwitchingCompatibility
    HidServ
    Ias
    Iprip
    Irmon
    LanmanServer
    LanmanWorkstation
    Messenger
    Netman
    Nla
    Ntmssvc
    NWCWorkstation
    Nwsapagent
    Rasauto
    Rasman
    Remoteaccess
    Schedule
    Seclogon
    SENS
    Sharedaccess
    SRService
    Tapisrv
    Themes
    TrkWks
    W32Time
    WZCSVC
    Wmi
    WmdmPmSp
    winmgmt
    wscsvc
    xmlprov
    BITS
    wuauserv
    ShellHWDetection
    helpsvc
    WmdmPmSN

    I changed the client to match, and suddenly all the services were magically able to start. Good luck!

  25. # Paul on December 31st, 2007 3:54 PM

    Just wanted to also say thanks and let everybody know this worked great on my Small Business Server 2000. Thanks alot for posting this.

  26. # Munawar on January 7th, 2008 6:12 PM

    THANK YOU !!!!

    You are a life saver. The fix worked like a charm.

    keep up the good work !

    Cheers

  27. # diegoj on February 12th, 2008 11:51 AM

    I just want to say THANKS.

  28. # Sabman on March 15th, 2008 4:10 AM

    Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you!

  29. # Rob on April 9th, 2008 12:48 PM

    Your awesome, thanks a ton.

  30. # Ian on May 4th, 2008 8:36 PM

    Well after a few hours of trying EVERYTHING I could to fix this error, I ran into this page.

    After running the reg file and rebooting. I see icons again!

    Needless to say I just did a "Dance of Joy" in the server room, don't think anyone seen me!

    THANK YOU! (NO really, Thanks.)

  31. # MadArtists on May 15th, 2008 9:50 PM

    This worked perfectly! My Event Viewer is so clean, you could eat off it.

Leave a Reply

Comments are moderated.

If you use the same email address you used in a previous comment that was approved then your comment will bypass moderation.





Comments will be sent to the moderation queue.