#define EVENT_SERVICE_DIFFERENT_PID_CONNECTED 0x80001B7FL
MessageId: EVENT_SERVICE_DIFFERENT_PID_CONNECTED MessageText: A service process other than the one launched by the Service Control Manager connected when starting the %1 service. The Service Control Manager launched process %2 and process %3 connected instead.%n%n Note that if this service is configured to start under a debugger, this behavior is expected.
Lanman Server Events (2000 - 2999) 2000-2499 are generated by the server driver (kernel mode) 2500-2999 are generated by the server service (user mode) Server driver events, issued from kernel mode. Values are 32 bit values laid out as follows: 3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 +---+-+-+-----------------------+-------------------------------+ |Sev|C|R| Facility | Code | +---+-+-+-----------------------+-------------------------------+ where Sev - is the severity code 00 - Success 01 - Informational 10 - Warning 11 - Error C - is the Customer code flag R - is a reserved bit Facility - is the facility code Code - is the facility's status code