Computer step by step
 Make your Pc better
How to Start/Stop
Windows Event Collector service
Description Services Regedit Back CMD Msconfig
Service name: Wecsvc
Display name: Windows Event Collector

Description:
This service manages persistent subscriptions to events from remote sources that support WS-Management
protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service
stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot
be created and forwarded events cannot be accepted.

Path to executable:
C:\Windows\system32\svchost.exe -k NetworkService
Type services.msc and press Enter
Services.msc:
This method shows you how to Start/Stop Windows Event Collector from Services.msc.
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Locate Windows Event Collector observe his current status and open to make changes.
From General tab you can Start/Stop and change the Windows Event Collector .

To finish press ok button and close Services window
Type regedit and press Enter
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Please navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wecsvc  
and locate Start registry key
Regedit:          
This method shows you how to change Startup type of Windows Event Collector from Registry Editor.
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

To Start Windows Event Collector:

net start Wecsvc

Note: You can’t start a service if Startup type is on Disabled.

To Stop Windows Event Collector:

net stop Wecsvc

To change Startup Type:

Automatic:
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v Start /t REG_DWORD /d 2 /f

Manual:
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v Start /t REG_DWORD /d 3 /f

Disabled:
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v Start /t REG_DWORD /d 4 /f

Automatic (Delayed Start):
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v Start /t REG_DWORD /d 2 /f

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v DelayedAutostart /t REG_DWORD /d 1 /f

When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
REG add "HKLM\SYSTEM\CurrentControlSet\services\Wecsvc" /v DelayedAutostart /t REG_DWORD /d 0 /f
CMD:          
This method shows you how to Start/Stop and change Windows Event Collector from Command Prompt.
 
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Msconfig:          
This method shows you how to prevent Windows Event Collector from starting with the operating system
using System Configuration (msconfig.exe).
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Write msconfig and press Enter
Up Back
   
   
Double click on Start and edit the value:

Change Startup type :

Automatic - 2
Manual - 3
Disabled - 4
Automatic (Delayed Start) - 2

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
In System Configuration please go to Services tab and locate Windows Event Collector.
Uncheck the box to prevent this service to start and then press OK to finish.  
Any change make in System Configuration will be apply after restart.