Event ID 7031 itself does not directly cause an automatic restart. It records that a service terminated unexpectedly and what recovery action Windows took (for example, restart the service, run a program, or restart the computer). To resolve automatic restarts, the root cause must be identified from stop codes or reboot-related events, then the failing component fixed.
On a Windows 11 workstation, use this approach:
- Check whether the restart is a crash (bug check/BSOD) or an intentional reboot
- Open Event Viewer → Windows Logs → System.
- Look for:
- Bug check / stop code events (Blue/Black Screen) as described in the Windows 11 guidance. These indicate a serious error that forces a restart.
- Unexpected reboot events such as those documented for Windows Server (for example, power loss, hardware failure, or bug check).
- If the system shows a stop code (for example,
PAGE_FAULT_IN_NONPAGED_AREA, MEMORY_MANAGEMENT), treat it as a crash.
- If there are Windows 11 stop code or blue/black screen errors
Follow the basic troubleshooting steps for repeated restarts:
- Remove any new hardware that was added before the issue started, then test.
- Start in Safe Mode and see if the restart still occurs. If not, use Safe Mode to continue the steps below. See “Start your PC in safe mode in Windows 11”.
- In Device Manager, check for devices with a yellow exclamation mark (!) and update, disable, or uninstall their drivers.
- Ensure there is 10–15% free disk space on the system drive.
- Install the latest Windows 11 updates via Start → Settings → Windows Update → Check for updates.
- If the problem persists, use Recovery options in Windows 11 (for example, System Restore) to roll back to a point before the issue began.
- If the reboot is logged as “unexpected” without a stop code
- Use the system event logs as described in the unexpected reboot article:
- Review Event IDs 12, 13, 6005, 6009 to see reboot history and frequency.
- Review Event IDs 19, 41, 1001, 1074, 7045 to determine whether the reboot was due to power loss, a bug check, a user- or process-initiated restart, or a driver/service installation.
- If a recent driver or service installation (for example, a new hardware driver) appears just before the reboots, roll back or remove that driver and test again.
- How Event ID 7031 fits in
- Event ID 7031 from Service Control Manager tells which service crashed and what recovery action was configured.
- If the recovery action for that service is set to Restart the computer, changing the service recovery options to only restart the service (or take no action) can stop automatic reboots, but only after confirming the service is not critical to system stability.
Information that is needed to help further
Collect and share at least the following details:
- Exact stop code or error text shown on any blue/black screen, if present.
- Relevant System log entries around the time of the restart:
- Event IDs 41, 1001, 1074, 7031, and any bug check events.
- For each, include the full event text (source, description, and data fields).
- Hardware or software changes made shortly before the issue started (new drivers, Windows updates, new applications, or devices).
- Frequency and pattern of restarts (only under load, at idle, after wake from sleep, etc.).
- Confirmation that the basic Windows 11 troubleshooting steps above have been tried and their results.
With those details, the failing component (driver, service, hardware, or Windows itself) can be correlated with the restart events and a specific fix (driver update/rollback, service configuration change, or Windows repair) can be chosen.
References: