MonitorWare Knowledge Base

Hi all.

In a windows NT system I could detect a service start using 592 (proccess start); I could not detect service stop - the only way I know is to use 593, proccess stop, but I need to know the process ID (the same ID that was assigned to the service when started)

In win 2000 I read there is a tool in the resource kit to add the event,...

Any way, my question is related to windows NT, do you have any idea to monitoring the service start and stop?