Windows Event Collector (Wecsvc)

Registry Name:

Wecsvc

Display Name:

Windows Event Collector

Description:

This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.

Default Status:

Stopped

Default Startup Type:

Manual

Image Path:

C:\WINDOWS\system32\svchost.exe -k NetworkService -p

DLL File Path:

C:\WINDOWS\system32\wecsvc.dll

Dependencies:

The service depends on the following system components to function properly:

• Eventlog
• HTTP

System components that depend on this service to function properly:

• None

Log On As:

NT AUTHORITY\NetworkService

Additional Information:

None at this time