#define EVENT_SERVICE_RECOVERY_FAILED 0xC0001B78L
Parameter %1 is the value, in decimal, of the SC_ACTION_ constant for the action described in parameter %2. MessageId: EVENT_SERVICE_RECOVERY_FAILED MessageText: The Service Control Manager tried to take a corrective action (%2) after the unexpected termination of the %3 service, but this action failed with the following error: %n%4
Lanman Server Events (2000 - 2999)
2000-2499 are generated by the server driver (kernel mode)
2500-2999 are generated by the server service (user mode)
Server driver events, issued from kernel mode.
Values are 32 bit values laid out as follows:
3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
+---+-+-+-----------------------+-------------------------------+
|Sev|C|R| Facility | Code |
+---+-+-+-----------------------+-------------------------------+
where
Sev - is the severity code
00 - Success
01 - Informational
10 - Warning
11 - Error
C - is the Customer code flag
R - is a reserved bit
Facility - is the facility code
Code - is the facility's status code