Solved Security Center Service turns itself off

[cottonball]

Please press on with Post #15.

When done, see if Action Center/Security Center still shuts off on its own.

 

[GoodOldDad]

Okay, did that yesterday. This morning the red x was back. It usually, maybe always, seems to happen overnight.

 

[cottonball]

Once again, please create a new Restore Point before proceeding. (See Post #15)

The following re-establishes the Security Center Registry.

Next, download the following Windows 7 Registry key:
http://download.bleepingcomputer.com/win-services/7/wscsvc.reg
Save to the Desktop.

Double-click on wscsvc.reg file and confirm the prompt to merge.

Restart the computer.

What happens now?

Also, what AntiVirus program do you have installed, if any?

Please check your Private Messages (Upper left).

 

[Kaktussoft]

Is there any relevent message (failure) in event log? If it crashes.... it should log in event log why

 

[Kaktussoft]

Does it happens once a day? Same time? Try to find a pattern.

Same problem when doing http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html ?

 

[Kaktussoft]

Are you sure the service Security Center is set to Startup Type - Automatic (Delayed) ... even when its state is stopped?

 

[GoodOldDad]

Once again, please create a new Restore Point before proceeding. (See Post #15)

The following re-establishes the Security Center Registry.

Next, download the following Windows 7 Registry key:
http://download.bleepingcomputer.com/win-services/7/wscsvc.reg
Save to the Desktop.

Double-click on wscsvc.reg file and confirm the prompt to merge.

Restart the computer.

What happens now?

Also, what AntiVirus program do you have installed, if any?

Please check your Private Messages (Upper left).

Okay, I did the above, and no change next morning - little red x was back.

My computer uses Vipre Business Premium - updates are current, scans are performed daily and Active Protection is enabled.

 

[GoodOldDad]

Is there any relevent message (failure) in event log? If it crashes.... it should log in event log why

Well, I wouldn't say it crashes, just the service gets turned off. As for the event log, there is a bewildering (to me) amount of information there - where specifically should I look?

 

[GoodOldDad]

Does it happens once a day? Same time? Try to find a pattern.

Same problem when doing http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html ?

Yes, it seems to happen every day, sometime between late evening and dawn.

I'll try the clean start up tonight and leave it overnight to see if the red x is there tomorrow morning.

 

[torchwood]

event viewer

Hi GoodOldDad,
see screenshot to identify cause of turning off,
NB the >>>detail<<< screen.

Roy

 

[Kaktussoft]

Hi GoodOldDad,
see screenshot to identify cause of turning off,
NB the >>>detail<<< screen.

Roy

All those events occur in 1 minute... all are the same?

 

[Kaktussoft]

Always exactly on 23:00??

 

[GoodOldDad]

Hi GoodOldDad,
see screenshot to identify cause of turning off,
NB the >>>detail<<< screen.

Roy

All those events occur in 1 minute... all are the same?

I believe that was Torchwood's example screenshot. Below I have copied the individual lines of warnings or errors that occurred overnight. I can post a screenshot of any or all of them for the details, if you think that would be relevant. They mostly seem to be caused by not being able to connect with the domain (at work) that sets group policy, because I have taken the computer home. I'm going to leave it at work tonight to see if I get the same messages.

Error 08/07/2013 11:53:58 PM NETLOGON 5719 None
Warning 08/07/2013 11:26:46 PM DNS Client Events 1014 None
Warning 08/07/2013 11:25:03 PM DNS Client Events 1014 None
Warning 08/07/2013 11:25:03 PM DNS Client Events 1014 None
Warning 08/07/2013 10:08:38 PM DNS Client Events 1014 None
Warning 08/07/2013 10:04:33 PM DNS Client Events 1014 None
Warning 08/07/2013 10:02:37 PM DNS Client Events 1014 None

 

[GoodOldDad]

Are you sure the service Security Center is set to Startup Type - Automatic (Delayed) ... even when its state is stopped?

Yep,see attached screenshot.

 

[GoodOldDad]

Okay, so I left the computer at work overnight, connected to the work network, and this morning while I was starting work I actually saw the red x appear at about 8:22. I'm pretty sure this has to do with Group Policy being pushed to all computers on our network. Here is a summary of a couple of events in the Event Viewer:

10/07/2013 8:21:15 AM The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.

10/07/2013 8:21:22 AM The Security Center service entered the stopped state.

There were several more events after that, disabling services, installing services, etc., but no event showed restarting the Security Center service. Perhaps I need to submit a ticket to our internal help desk, instead of bothering you good folks here. I've been avoiding that because it can be a long drawn out process to achieve resolution.

 

[Layback Bear]

Good evening GoodOldDad.
I have been following this thread starting 24 May just to see how things go.
I do have some questions if I may.
Reading your last post #25 has me somewhat lost.
1. Is this problem computer a work place computer?
2. Is this Work network controlled by a I.T.Department.
3. Does the work place own the troubled computer?

 

[cottonball]

GoodOldDad,

Perhaps I need to submit a ticket to our internal help desk...

At the beginning of this thread, it was not obvious (at least to me) that this was a work computer.

We do have a problem, though...
Only been working here since earlier in the year, but, in forums of this nature, where we work as volunteers, and have different skill levels, do not believe that assistance is intended for a workplace computer, nor to replace a company IT manager, help desk, or outsource staff.

It is not possible to anticipate alterations or configurations made to a business computer, or how it will interact with the tools commonly used in the removal of malware. Some of these tools may create a possible loss of company information. In addition, there are tools that have specific instructions from their authors to not use in a business environment.

Your circumstances are regrettable, but, to prevent any possible loss or corruption of company information, it is best you do refer your request for assistance to your help desk, or to the service the company uses to address computer problems.

Good luck!!