Below event ID 7011 is logged in the System event logs.
Log name System
EventSource Service Control Manager
Date and Time 31/10/2017 19:26:01
Event ID 7011
Task Category 0
Description A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TermService service.
The following service has repeatedly stopped responding to service control requests: Remote Desktop Services
Contact the service vendor or the system administrator about whether to disable this service until the problem is identified.
You may have to restart the computer in safe mode before you can disable the service.
Faulting application name: svchost.exe_TermService, version: 10.0.14393.5006, time stamp: 0x621ef40b
Faulting module name: ntdll.dll, version: 10.0.14393.5006, time stamp: 0x621ef21b
Exception code: 0xc0000374
Fault offset: 0x00000000000f7143
Faulting process id: 0x908
Faulting application start time: 0x01d84659343487ff
Faulting application path: C:WindowsSystem32svchost.exe
Faulting module path: C:WindowsSYSTEM32ntdll.dll
Report Id: d08fd39e-9303-4e56-8c4b-894d831ef88f
Faulting package full name:
Faulting package-relative application ID: