Quick question regarding event log

[Roeee]

Does anyone know the policy setting to write service control messages to the event logs (ie a service stopping and starting).

I have enabled all the Audit Policy settings. However, any service being stopped and started doesnt write an entry to the logs?

Thanks

 

[itsp1965]

Service control messages would appear in the system log. Auditing of starting/stopping services will only generate security log entries. It's the application/service itself that could create an event in the system event log.

 

[Roeee]

In Windows 2003, starting and stopping services should generate service control messages in the system log (SP1 onwards). The security log also details starting and stopping services.

I have resolved the issue after finding the fix on the MS site. I shall publish when I dig out the link.