Server Service on Windows Server 2003 Stops Unexpectedly


Symptoms


The Server service stops unexpectedly on the Windows Server 2003 server. You find the following event in the application event log:

Event Type:        Error
Event Source:    Application Error
Event Category:                (100)
Event ID:              1000
Date:                     29/10/2011
Time:                     1:02:12 AM
User:                     N/A
Computer:          <computer name>
Description:
Faulting application svchost.exe, version 5.2.3790.3959, faulting module netman.dll, version 5.2.3790.3959, fault address 0x0000000000008d4f. 

Cause


The instance of svchost that is hosting the Server service crashes, causing any other services in that svchost instance to fail. The service cannot be restarted and generates an "Access Denied" event in the System Event log (Event ID 7023 from Service Control Manager). This is due to a known issue in Netman.dll that becomes exposed after rules and monitors are run from the SCOM server with OS Management Pack version 6.0.6958.0 or later.

Resolution