A couple of the bizarre entries that are showing up in the Windows log

I didn't see a forum specific to odd log entries, so if this should go elsewhere let me know... New Dell 7740 laptop. Windows 10 Pro. A few software applications installed – Office 2019, Adobe Lightroom and Photoshop, standard stuff.

I removed most of the MS apps like Xbox and such. It’s using Microsoft Defender, so there’s nothing bizarre in the anti virus.
I’m getting a number of entries in the Windows logs I’ve never seen before.
A half dozen random times/day I get

Warning Event 27, e1dexpress
The description for Event ID 27 from source e1dexpress cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event:

Intel(R) Ethernet Connection (7) I219-LM The message resource is present but the message was not found in the message table

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System> <ProviderName="e1dexpress" /> <EventIDQualifiers="40964">27</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreatedSystemTime="2019-12-29T14:59:31.286859700Z" />
<EventRecordID>11572</EventRecordID> <Channel>System</Channel>
<Computer>TINMAN</Computer>
<Security/>
</System>
- <EventData> <Data />
<Data>Intel(R) Ethernet Connection (7) I219-LM</Data> <Binary>0000040002003000000000001B0004A00000000000000000000000000000000000000000000000001B0004A0</Binary> </EventData>
</Event> I found a discussion that said the system boots faster than the Ethernet can connect, but I’m not using the wired Ethernet… Ideas how to fix the warning?


I’m also getting 2 errors I can’t find much information on. Both are Service Control Manager.
Error event 7023, Service Control Manager

The cphs service terminated with the following error:
Unspecified error
Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Service
Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventIDQualifiers="49152">7023</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreatedSystemTime="2019-12-29T14:59:33.755772200Z" />
<EventRecordID>11591</EventRecordID>
<Correlation/>
<ExecutionProcessID="1000" ThreadID="1380"/>
<Channel>System</Channel>
<Computer>TINMAN</Computer>
<Security/>
</System>
- <EventData>
<Data Name="param1">cphs</Data>
<Data Name="param2">%%2147500037</Data>
<Binary>63007000680073000000</Binary>
</EventData>
</Event>

Error event 7023, Service Control Manager

The Intel(R) Content Protection HECI Service service terminated with the following error:
Unspecified error

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="ServiceControl Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventIDQualifiers="49152">7023</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreatedSystemTime="2019-12-29T22:43:11.660917500Z" />
<EventRecordID>11639</EventRecordID>
<Correlation/>
<ExecutionProcessID="1000" ThreadID="8780"/>
<Channel>System</Channel>
<Computer>TINMAN</Computer>
<Security/>
</System>
- <EventData>
<Data Name="param1">Intel(R)Content Protection HECI Service</Data>
<Data Name="param2">%%2147500037</Data>
<Binary>63007000680073000000</Binary>
</EventData>
</Event>

I found an Intel Content Protection HECI service, but of course, the description doesn’t tell me much (for playing blu-Ray?)… Is this a service I can just disable without any problem?

Any ideas what these are connected to, and how to get rid of the errors?

Thanks for the response... I tried the link:
From the command sc query “Content Protection HECI Service” I got
[SC] EnumQueryServicesStatus:OpenService FAILED 1060: So I ran the net helpmsg 1060 query and got:

The specified service does not exist as an installed service.
I confirmed that by looking at the Microsoft system error codes and got ERROR_SERVICE_DOES_NOT_EXIST
1060 (0x424) The specified service does not exist as an installed service.
Does this mean the system thinks the Content Protection HECI Service isn’t there? ‘Cause there IS a service “Intel® Content Protection HECI Service”…


Is this some bizarre problem with a driver or service or something from Intel? Here’s where I lose the train…
Opened the event viewer and looked at the Event 7023

The link says: "In the details pane, click on the Source column to view the events sorted by the entity that logged that event. For events logged by the SCM, the source is the Service Control Manager Eventlog Provider."
In the detail in the original post, it LOOKS like the source is the Service Control Manager, so I presume I want the Service Control Manager Eventlog Provider…
But, it shows and example for Event 7011 and one for 7034, but both my events are 7023 and I don’t know where to go from here…

When I look at the Service Stop Operations, at 7023 it just says the service is stopped and the error will be the second parameter. Except on my system it says "unspecified error".
Does this whole thing mean there SHOULD be a "Content Protection HECI Service" in addition to, or instead of, "Intel(R) Content Protection HECI Service"?

Where do I go from here?

- - - Updated - - -

Anybody have any ideas about the "Warning Event 27, e1dexpress " in the first event?

This is turning out to be really interesting... I have THREE Windows 10 machines:

1. Alienware 17R3 laptop. It's been in use about 4 years, runs Windows 10 Home and NEVER threw any of the kind of errors I"m seeing now. It got completely wiped, formatted, and Windows 10 Home re-installed for my wife to use.
2. ASUS X99 Deluxe desktop that's been running at LEAST 4 years, and since I was having to put Windows on everybody I figured it was a good time to reinstall this battered, beaten, overworked, clogged up system. I formatted the system partition and installed Windows 10 Pro.
3. Brand new (week old) Dell 7740 laptop. Came with Windows 10 Pro so other than getting rid of the goofy MS apps for stuff like sticky notes and Xbox, it's still clean. Has Office 2019, Lightroom and Photoshop - exactly the same stuff the desktop and Alienware get used for.

Everybody has a couple browsers, the laptops use wifi, the desktop is hard wired.

They're ALL throwing HUGE numbers of information, warning, and error events into the Application and System logs, and they're all throwing DIFFERENT ONES.......

And I'm having an incredibly difficult time finding much about ANY of the warnings and errors.

Have you tried running sfc /scannow at least twice,followed by dism /online /cleanup-image /restorehealth ?
Also check Reliability History to see if there are any relevant entries.
When the word "corruption" appears,it often indicates a problem file.

Warnings can be ignored - you're always going to have them.
Most errors can be ignored also, unless they are related to a specific problem you are having - you're always going to have them.

That being said, one of my personal hobbies is trying to clear Event Viewer errors.
Especially if it is throwing dozens of the same error.

For the e1dexpress warning, you can try this driver update from Dell - updated just 2 days ago:https://dl.dell.com/FOLDER05877897M/2/Intel-PCIe-Ethernet-Controller-Driver_VP20T_WIN_24.1.0.0_A13_01.EXE

If that doesn't resolve it, open Device Manager, right click the Intel Ethernet driver, go to Properties,and click on the Advanced tab. Upload a screenshot of the Advanced tab. I want to see if Energy Efficient Ethernet (EEE) is on there, and what your Auto-Negotiation setting is.

The spec sheet says it has EEE - you can try disabling Energy Efficient Ethernet, and see if the warning goes away.

The Intel(R) Content Protection HECI Service - is the startup type set to Automatic? It is mostly involved with premium video playback. If setting startup type to Automatic doesn't clear the error, you can try disabling it to see if it clears the error. If you ever try to use a video service that actually needs it, if it is disabled, it will throw an error telling you it needs the service and you can re-enable at that point in time.

I ran sfc /scannow twice. Both times came back with
Windows Resource Protection did not find any integrity violations.

ran dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool Version: 10.0.18362.1 Image Version: 10.0.18363.535 [==========================100.0%==========================] The restore operation completed successfully.

The operation completed successfully.

Unfortunately, though I know a lot of warnings can be ignored, and we're stuck with several errors that have been around since some earlier Win 10 update, that everybody says we can ignore, I also keep TRYING to clean up the logs 'cause I hate checking and seeing hundreds of warnings and dozens of errors.

I just installed the new Ethernet drivers, so I'll see if that does anything.

And since your information on the HECI service matches what I'd found, I'm just going to turn it off. I never had, and likely never will, do Blu-Ray video on this laptop!

I"ll clear the event logs and see where I am tomorrow.

Updating the Ethernet Controller driver didn't get rid of the e1dexpress warning. It still pops up at least a couple times/day telling me the Network link is disconnected. This on a laptop that only uses wifi.

And the Service Control Error that says the Intel Content Protection HECI Service terminated with an unspecified error is still showing up about hourly. This is AFTER the HECI service was disabled. I just checked and it's still disabled... So how can it be terminating with an unspecified error if it's not allowed to run? And yes, it was originally automatic and running and I got the same error at about the same interval...

At this point it's more a curiosity than a big problem, but it would be nice to get rid of these two.

You can try the latest Intel driver download tool here to see if it clears the errors:
Drivers & Software

In some cases, this will update various drivers to a newer version than one provided by Dell. As a result, in some cases this will cause your system to blue screen. If that happens, boot the computer into Safe Mode and uninstall the driver that Intel just installed. In fact, I usually update the Intel-recommended drivers one at a time, so if the blue screen happens, I know which driver caused the problem.

As far as the ed1express error, did you try unchecking the Energy Efficient Ethernet option?

Thanks for the reply... I"m a little reluctant to throw Intel drivers into the mix, especially when I'm not sure which one, or ones I'd need, and the huge number of drivers there...

As for the Energy Efficient Ethernet, I THOUGHT I had it turned off, but in Device Manager when I checked the Intel Ethernet Connection (7) 1219-LM, the Advanced screen said it was "On". I turned it "Off"...

Is there a specific driver (or drivers) over in the mass of Intel drivers that would be the correct one for the hardware (which if it's not a 1219-LM I'm not sure what it is) in this laptop?

Yes. Go the website here and download the Intel Driver & Support Assistant - it will search for updated drivers automatically. Create a System Restore point before updating any drivers, in case anything goes awry:
Intel(R) Driver & Support Assistant

If that doesn't work, open services.msc again, and change Intel Content Protection HECI service to Automatic (Delayed Start).
Reboot.
If that doesn't work, right-click on the Intel Content Protection HECI service, go to Properties, and let me know what services are listed in the Dependencies section. I'm on an AMD machine right now, so can't check it myself.

If nothing works, we may have to get a registry hacker on this problem. It's so infuriating when the Error refers to a file or service that is no longer needed.