The Event Monitor Service Shutdown Coordinator, seeshutdown.exe, is a Windows service that is part of ES for .NET. It is not used or needed by other Micro Focus products.

If the customer is running ES for .NET, then they ought to have this service running on all systems where the Micro Focus Event Monitor Service (seemonitor.exe) is running.

The Event Monitor Service Shutdown Coordinator is a very simple Windows service that exists only to receive the "preshutdown" event from the Windows Service Controller.

Windows services are managed by the Service Controller, a part of the Windows OS. The Service Controller sends services various event messages to tell them to pause, stop, etc. For example, when you open the Services console and stop a service, the Service Controller sends a stop event to the service process.

One of the events that the Service Controller can send is "preshutdown"; it's sent to services when the OS begins to shut the system down, and gives the services an opportunity to perform any necessary housekeeping.

ES for .NET includes a number of Windows services, which is how Microsoft recommends background and system tasks run. Most of these services are written as managed code. However, the .NET Framework's classes for Windows services do not handle the preshutdown event, which means it's impossible for a managed-code service to detect preshutdown. (At least this was true when ES for .NET was originally developed; I haven't confirmed this is still the case.)

It's important for the Event Monitor Service to be shut down cleanly whenever possible. (The Event Monitor performs a variety of tasks for ES for .NET. See the topic "Managing Event Monitors" in the Micro Focus Enterprise Server for .NET book in the product documentation for more information.) Since the Event Monitor Service is managed code, it can't receive the preshutdown event.

The Event Monitor Service Shutdown Coordinator is written in native code, and can receive preshutdown. When it does, it notifies the Event Monitor Service of the pending shutdown, so it can do its cleanup.