Application and Service Detection Status

Updated: January 8, 2009

Applies To: Windows Server 2008 R2

Restart Manager attempts to detect applications and services that are using resources needed for program installation or updates. If this detection process is successful, event 10005 is logged and the event details contain a list of the applications and services using the required resources. This indicates that Restart Manager succesfully detected resource requirements, but that a system restart might be required to complete the operation.

Restart Manager uses service tagging to identify services that are using required resources. Services are supported by a service host process, which appears in Task Manager and other process lists as svchost. If this operation is successful, only the services that are using required resources are stopped. If this operation is not successful, and if the service host process does not also support critical system services, the entire service host process is stopped and event ID 10009 is written to the Event Log.


Event ID Source Message



Registering %2 file(s), %3 process(es), %4 service(s).



Machine restart is required.



Service tagging failed to find target service in process %2.

Restart Manager

Reliability Infrastructure