Event ID 7031 or 7034 when you log off a device that's running Windows 10

Symptoms
Consider the following scenario:
  • You have a device that's running Windows 10.
  • You have an application or device that runs under the per-user service model.
  • You log off from the device and then log back on.

In this scenario, you may intermittently receive a "User log-off notification" message from Winlogon. You may also see error events in the System log that resembles the following:
Level: Error
Source: Service Control Manager
Event ID: 7031
Details: The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Level: Error
Source: Service Control Manager
Event ID: 7034
Details: The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s).

Note The number that appears right after "Sync Host_" may vary. For example, the text may read "Sync Host_Session1," "Sync Host_Session2", and so on. On a computer that is running Windows 10 version 1511 Build 10586 or a later version of Windows, the text may read something similar to "Sync Host_32613".
Cause
This issue occurs because of changes in the way that Service Control Manager cleanly shuts down user services. Specifically, a code-handling session shutdown may terminate a process early.
Workaround
Microsoft is currently investigating this issue.

To work around this issue, exit all open applications and connections before you log off or restart the system.

Properties

Article ID: 3118867 - Last Review: 12/25/2015 02:31:00 - Revision: 5.0

Windows 10

  • kbexpertiseadvanced kbsurveynew kbtshoot KB3118867
Feedback