Windows server 2008 R2 Enterprise SP1
Dhcp services is not required in our environment.
Below event are found as follows.....
Log Name: System
Source: Service Control Manager
Date: 11/9/2016 3:18:16 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: A1.abc.com
Description:
The Windows Error Reporting Service service entered the stopped state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-11-08T21:48:16.265808100Z" />
<EventRecordID>124800</EventRecordID>
<Correlation />
<Execution ProcessID="1628" ThreadID="8344" />
<Channel>System</Channel>
<Computer>A1.abc.com</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Error Reporting Service</Data>
<Data Name="param2">stopped</Data>
<Binary>5700650072005300760063002F0031000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 11/9/2016 3:37:17 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: A1.abc.com
Description:
The WinHTTP Web Proxy Auto-Discovery Service service depends on the DHCP Client service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-11-08T22:07:17.585553300Z" />
<EventRecordID>124803</EventRecordID>
<Correlation />
<Execution ProcessID="1628" ThreadID="1780" />
<Channel>System</Channel>
<Computer>A1.abc.com</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">WinHTTP Web Proxy Auto-Discovery Service</Data>
<Data Name="param2">DHCP Client</Data>
<Data Name="param3">%%1058</Data>
</EventData>
</Event>
Log Name: System
Source: TermDD
Date: 11/7/2016 3:37:03 PM
Event ID: 56
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: A1.abc.com
Description:
The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 10.125.239.224.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="TermDD" />
<EventID Qualifiers="49162">56</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-11-07T10:07:03.719000900Z" />
<EventRecordID>124660</EventRecordID>
<Channel>System</Channel>
<Computer>A1.abc.com</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Termdd</Data>
<Data>10.125.239.224</Data>
<Binary>0000040002002C000000000038000AC00000000038000AC000000000000000000000000000000000B50000D0</Binary>
</EventData>
</Event>