System event notification service woes – netsh is your friend


Had a call from a client describing very slow boot times and inability to access network or internet resources. when the machine was examined it was indeed in a bit of a state with multiple automatic start services not running most noticeably windows event log service. Found a few sites suggesting that there was a possible permissions error and suggesting changing folder permissions

Option One :

takeown /f c:\windows\system32\logfiles\wmi\rtbackup

cacls c:\windows\system32\logfiles\wmi\rtbackup /G administrators:F

That didn’t cure the issue

Option Two : In some cases, the issue is caused by faulty Font Cache files. Please review the following steps to solve this issue:

1.Click Start, click All Programs, click Administrative Tools and then double-click Services. OR: Click Start, type services.msc in the Search box, and then press Enter.

2.In the right pane of the Services snap-in, locate the Windows Font Cache Service.

3.Right-click the Windows Font Cache Service, and then select Stop in the context menu.

4.Go to this location

C:\Windows\ServiceProfiles\LocalService\AppData\Local
Note: please ensure your computer can display hidden files. For your information, please review this article show hidden files.

5.Rename the file FontCache-System.dat to FontCache-System.old.

6.Restart.

But that didn’t work

Start an elevated dos session

Type in – “netsh winsock reset” press enter

Then restart your computer

This resolved the slow boot and all the services issues. I am surmising that the problem was actually the machine being in the process of updating (Its a windows 7 64 bit professional machine on a domain) and being powered off – leaving something in an unknown state.