Auditing Long-Running Services
If a service takes a long time to process, you might want to use the service log to verify that service execution started. If the service log contains a start entry for the service but no end or error entry, then you know that service execution began but did not complete. To enable auditing of long-running services, select the Error, success, and start option for the Log on property.
Note:
Typically, you will audit long-running services in conjunction with error auditing, service auditing, or auditing for recovery.