Due to an issue with the rasctrs.dll, which enables performance counters for the Remote Access service, the EventSentry service (v2.92 only) will not automatically start at boot on Windows 2000 SP4 machines, even when the service is configured for Automatic startup.
Prior to starting the EventSentry service's process, Windows loads all registered performance counter DLLs. Because the operating system does not load the rasctrs.dll properly, the eventsentry_svc.exe process cannot start at boot time. If the service is started manually after the initial boot, then it will load correctly in some cases.
To resolve this issue, you will need to disable performance counters for the Remote Access service. Please note that after this change, you will not be able to view Remote Access information in performance monitor anymore. To fix the issue, follow these steps:
The next time you start the Windows 2000 host, the EventSentry service should load successfully at boot time.