The Remote Registry Service crashes every few minutes, and Event ID 7031 appears in Event Viewer (833777)

SYMPTOMS

On your Microsoft Windows 2000-based server computer, the Remote Registry Service service may unexpectedly quit and then restart every few minutes. Additionally, one or more events that are similar to the following may appear in the system log in Event Viewer:Event ID: 7031
Description: The Remote Registry Service service terminated unexpectedly. It has done this 331 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

CAUSE

This problem may occur if you have one of the following BMC Software programs installed:

PATROL for Microsoft Windows Servers Solution version 2.2.00 (includes the 3.6.05 NT OS)
PATROL for Microsoft Windows Servers Solution version 2.2.01 (includes the 3.7.00 NT OS KM)

This problem occurs because certain versions of the PATROL Process Monitor service (Patprocess.exe) cause the Remote Registry Service to crash.

RESOLUTION

To resolve this problem, contact BMC Software technical support to obtain an update for the PATROL program. For information about how to contact BMC Software technical support, visit the following BMC Software Web site:

http://www.bmc.com/info_center_support/www_north_america.html

When you contact BMC Software technical support, reference BMC Software technical support failure number 306197 and internal resolution number 115504.

Note These numbers are not currently referenced on the BMC Software technical support Web site.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

WORKAROUND

To work around this issue, use one of the following methods:

Method 1: Disable the PATROL Process Monitor service

Stop the PATROL Process Monitor service, and then set its startup type to Disabled.

Method 2: Disable Remote Registry Service

Stop Remote Registry Service, and then set its startup type to Manual.

MORE INFORMATION

Remote Registry Service allows remote registry modification. This service permits you to connect to the registry on a remote computer and to read or to write registry keys if you have the correct permissions. Typically, this service is used by remote administrators and by performance pounters. If you stop or disable this service, the operation of the registry is not affected. The local computer continues to operate correctly. However, other computers or devices are no longer able to connect to the registry on the local computer.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.