Solved Event ID 7001 Service Control Manager causing slow logon

[mugelbbub]

Malwarebytes Pro has always been installed, up to date and scanned.
SAS! Not yet
Windows is up to date, updates are installed on automatic, the only updates I turned off (months ago) are the IE11 upgrade as it would not complete (lots of people apparently had issues with it) and Windows defender for the same reason.

 

[Anak]

Okay, sounds like you can slow down a bit as long as those errors stay away. I find that SAS will find more junk than mbam, but that's what it does best, goes after those trackin' cookies, though I have had it nail a few bigger nasties.

Yea, just watch when you're installing anything, it seems lately, those programmers will try an slip ya a mickey if you're not careful.

Have you ever seen this? Unchecky - Keeps your checkboxes clear

 

[ICIT2LOL]

Absolutely could not agree more and the Unchecky is the best program I have added for a long time it saves a lot of grief.

Like Anak has said many a mickey finn slipped in by the unscrupulous and especially those programs that some insist on using that promise to make the machine faster and find drivers etc etc
Prsonally I do everything manually apart form the on call scans and CCleaner.

 

[mugelbbub]

Anak

When you get the time let us know if you tested your log-in with MAC
disabled, Okay?

Startup with Mcafee disabled I think coincided with better logon timescale having also already done ADWCleanup. Since MAC has been enabled and still getting better logon have ruled it out for now. Also, since you mentioned it, 'Siteadvisor' is not enabled.

I am going to wait till I have visited each client site and experienced the logon the timescales before doing much else here. If they prove ok I will be giving a big thanks to you both for your help.

 

[Anak]

With what you've been through it's understandable that you'd be a little gun-shy about your login timescales, try to compare them with how it was before all this happened.

Different clients would have faster or slower login's simply because of the fact that each connection is going through different servers / connections. You wouldn't have to be precise but now would be a good time to keep a log to get a baseline of the time it takes to connect to each client.

On the other hand.....If you would like to be precise you can run a ping, tracert, and a more comprehensive pathping test to see how each clients connection behaves.

Open a CMD prompt; Windows key+R, type in cmd click OK or tap the enter/return key.

At the blinking cursor type; ping (your clients name (dot) com), that is a space after ping and whatever domain your clients have be it com, gov, net, edu. etc.
i.e. the login address you use for your clients.

When that finishes running substitute tracert for ping and include your clients address, click OK or tap the enter/return key.

When that finishes running substitute pathping for tracert and include your clients address, click OK or tap the enter/return key.

Here are my results for sevenforums.com, first ping and tracert the one item to look for in all examples is packet loss, 0% is good:


Using the ping command

The Ping.exe Command Line Tool

Tracert

Then pathping:


PathPing

To save when you're finished running these cmd's go up to the cmd icon in the upper left corner of the window and click on it.

Go to Edit >Select All. Then you'll have to re-enter the context menu and Edit >Copy. Once you have all three cmd's copied you can save to your text editor (Word, Libre/Open office) for reference later if your login gets slow again, comparing times you'll be able to pinpoint where the problem lies.

I don't know how many clients you have (its probably a lot) but these tests should be done for each one.

 

[mugelbbub]

Ok, have been seeing if the event occurred again during visits to clients sites and no problems UNTIL today! arrrgghhh after logon the screen went black for over ten minutes until I forced a shutdown and restarted in safe mode.

In the event viewer in safe mode I saw thousands of the event id's 7001 BUT... I noticed something else. They occurred during the safe mode restart NOT during the black screen I had forced the shut down from.

In fact the event 7001's seem to contribute only 1.5 minutes to the start up time. Whilst they do occur in other than Sage Mode (albeit not for a week or so) I am sure I should not be getting them......

The event that took the time (ten minutes), and which I can only assume led to the black screen and delay was Source: DHCP-Client Event ID:1001 Level: Error User: LOCAL SERVICE OpCode: IpAddressNotAssigned General
"
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x88532E083A19. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server."

I have checked back over previous events where my eye had been directed to the 7001 errors and sure enough it is the above error that had taken the time not the 7001's.

Is this significant?

After the safe mode I rebooted using a different clean logon profile and the error did not occur the rebooted again with my own profile again and the error did not occur.

 

[Anak]

I'm wondering if that MAC Siteadvisor got started up again, but you restarted and everything was back to normal.

Open Services.msc; That's Window Key+R to open the Run box, type in Services.msc and click on OK.

Scroll down to Server make sure that Status is started and Start up type is set to Automatic. Then,
scroll down a bit more to Workstation, and make sure that Status is started and Start up type is set to Automatic.

Then I'd like you to go and check your network connections. Do you know how to get to the ipv4 and ipv6 adapter properties settings and check to see if they are set to obtain automatically?

 

[mugelbbub]

Server and Workstation are already set to Automatic and Started.

ipv4 and 6, no I don't know how to get to properties.

NB. I don't have siteadvisor installed.

Thanks

 

[Anak]

I'll have to set up a short tutorial, might take 'bout a half hour.

 

[Anak]

Use this tutorial to start: http://www.sevenforums.com/tutorials/12421-local-area-connection-status-create-shortcut.html

But, when you get to step #4 click on Properties instead of create shortcut. You'll see this open:



Make sure everything that's there is checked.

• Double click on TCP/Ipv6, on the general tab make sure both radio buttons are checked for automatically.

• Click on the Advanced button, lower right corner. The IP tab should say Automatic configuration only. Nothing in the default gateway box and automatic metric checked.

• The DNS tab should have the append primary and connection specific DNS suffixes on.

• Append parent suffixes of the primary DNS suffix checked.

• The last append button is unchecked.

• At the bottom register this connections addresses in DNS is checked off.

• Below that is unchecked.

• Double click TCP/Ipv4 the general tab should have both obtain IP address and Obtain DNS server set to automatic.

• Alternate config tab have automatic private IP address on.

• Go back to General tab, click on the advanced button.

• IP settings tab should say DHCP enabled, automatic metric checked.

• The DNS tab should have the append primary and connection specific DNS suffixes on.

• Append parent suffixes of the primary DNS suffix checked.

• The last append button is unchecked.

• At the bottom register this connections addresses in DNS is checked off.

• Below that is unchecked.

• The WINS tab should have the LMHOSTS lookup checked.

• NETBIOS set to default.

OK your way back out Anything much different if at all?

I also uploaded a zip file for your services settings from: Black Viper?s Windows 7 Service Pack 1 Service Configurations » Black Viper | www.blackviper.com

I used Libre office calc, If you can't open it go to that link and check or I can try to save it in excel format.
The columns are hide-able, click on the show/hide columns button and you can narrow them down to where you only see the service its file name, win7 Ultimate and whether it has a safe , tweaked or bare bones setting.


It's done with windows zip:
View attachment BVULTSP1.zip

 

[mugelbbub]

Anak

Firstly, How do I insert a snipping tool image into these posts, ( Pictures, Words and Telly Savalas!)

In response to your guide - For this I have selected the Local Area Connection 'Realtek PCIe GBE Family Controller' but whilst the network cable is unplugged because I am currently on wireless (hope that makes no difference) (I did check the same things on the Wireless network connection and they are the same on each as below).

for TCP/Ipv6 The ONLY thing potentially different is

At the bottom register this connections addresses in DNS is checked off

Mine is checked.

for TCP/Ipv4 The ONLY thing potentially different is

At the bottom register this connections addresses in DNS is checked off

Mine is checked.

I am looking into the Service configurations next

 

[ICIT2LOL]

I hope Anak doesn't mind but just follow this How to Use the Snipping Tool in Vista

I usually crop the pic if it is a photo to cut down the data load but screenshots you can just use the whole thing.

If you ant to point something out in the pic > go to pictures select the one you want > right click and open with Paint then select the colour you want and text etc and save the changes

The it is just a matter of going to Manage attachments and navigate (browse) to where the pic is click on it and wait for it to upload then send reply.

Mine is not working properly at the moment so I cannot send one I will send form one of the other machines in a bit

 

[mugelbbub]

Services

144 Services we both have listed of which 62 have different 'Settings' albeit that includes the likes of 'Automatic' as opposed to 'Automatic (Started)' as I am not sure the significance of what I am looking for!

In addition
20 Services that Viper has listed but I do not
76 Services that I have listed but Viper does not

 

[mugelbbub]

ICit2lol

I have to snip and save to a location on my drive then upload as attachment? I hoped to be able to just snip and insert into the message! like you have with the screen shots in your answer.

I have tried it here but I think it ends up as an attachment not an inserted image.

 

[mugelbbub]

No, I was wrong! it does insert as an image.

Thanks for that

 

[ICIT2LOL]

Yes mate I save mine to the Pictures library as I keep a lot of pics there that show application function etc

Oh when you browse you just go to that library and search though it > click on the pic and open.

If you forget to to add the pic you just edit your post go to GO Advanced and do it from there

 

[Anak]

John, I won't ever mind if someone jumps in to help in my absence. Well done!

mugel,
Those settings are okay for ipv4 and 6, I didn't word it right but you do want the register this connections addresses in DNS checked.

Don't worry if viper has more or less services than you, his list is generic, and it would be understandable that yours would be different. Go to the beginning of the viper link I gave you and read it, it will explain what the different types (auto, auto delayed, manual, etc. mean) look under Configuration Information.

For the 76 Services that you have listed but Viper does not you'll have to track them down if their specific to Dell or a program or hardware you've installed.

You can use this as a guide: http://www.sevenforums.com/tutorials/2495-services-start-disable.html

 

[mugelbbub]

Anak and ICIT2LOL

Apologies for not having responded/updated more recently. I just have been unable to get anywhere near it.

Wanted to thank you for all your time and assistance, all of which very helpful, easy to follow and informative.

Since, following your help, I have only had one incident of the Service Control login delay I have sort of given it a back seat unless it arises again although still looking into your last suggestions to see if there are any deeper issues.

Again, really appreciate all you help.

Regards

 

[Anak]

You're welcome mb,

No problem with the time delay, I'd of posted sooner myself, but my Mum's in rehab and I'm now catching up. Let us know if you run into any snags or something you don't understand.