Solved

Cannot start RRAS

Posted on 2013-01-02
9
3,740 Views
Last Modified: 2013-01-14
Hi,


02/01/2012: RRAS was working as expected client was connected to the server, the password used to authenticate had changed. After updating the credentials the VPN connection could not be established. Additionally the windows environment explorer.exe became no response, I was unable to logoff and initiated a force reset. After the server had rebooted it hung at applying user setting... for over 2 hours. I carried out another forced reset, I successfully logon  and experienced the following issue

I am experiencing an issue where I am unable to start RRAS. After completing the configure and enable RRAS I receive the following error messages:


Error one:
An error occurred while trying to start the Routing and Remote Access service on GC01. For more information about the error, see Event Viewer. (Right-click the My Computer icon on your Windows desktop, and then click Manage. In the Computer Management console, click Event Viewer.


Error two:
Routing and Remote Access cannot be started because of the following error.  Please see event log for more information:

The service has returned a service-specific error code. (8007042a)

The two event id's that appear in the event logs are

7024:
The Routing and Remote Access service terminated with service-specific error The request is not supported..


20152:
The currently configured authentication provider failed to load and initialize successfully. The request is not supported.


I have carried out the following trouble shooting steps:

1. Removed Network Policy Services role, rebooted server, re added Network Policy Services role with Remote access service & Routing.

2. Registered the oledb32.dll and oledb32r.dll in the C:\Program Files\Common Files\System\Oel DB directory

3. Ensured all dependent services are running

4. Manually start service - below error message received:

The Routing and Remote Access service on <SERVER> started and then stopped. Some services stop automatically if they are not in use by other services or programs.

5. Disabled IPv6 via adding the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters \ and adding the DisableComponents ffffffff

Server:

OS: Server 2008 r2 SP1 Standard running AD
NIC: 4x gigabit ( 3 disabled ) Static internal IP address
AV: Trend Micro

Any additional troubleshooting procedures would be greatly appreciated.
0
Comment
Question by:ma_hd
  • 5
  • 4
9 Comments
 
LVL 4

Expert Comment

by:brokenbyte
ID: 38738956
Have you tried to reset TCP/IP on this server yet?

netsh int ip reset c:\resetlog.txt

for further information on resetting TCP/IP: http://support.microsoft.com/kb/299357
(note - this does apply to Windows 2008 R2, as you have specified as your OS)
0
 

Author Comment

by:ma_hd
ID: 38738961
Hi BrokenByte
Yes we have tried this; sorry I forgot to tell you this.
The reset completed successfully; do you want to see the log file?
Cheers
MA
0
 
LVL 4

Expert Comment

by:brokenbyte
ID: 38738992
If you remove the "Remote Access Server" role, and only left the Routing role, does it start at that point?

(I know - that doesn't really provide an answer, but it might narrow down the problem.)
0
 

Author Comment

by:ma_hd
ID: 38739005
I am unable to remove Remote Access Server as Routing is dependent on the Remote Access Server role. Please see screenshot.
Thanks.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 4

Expert Comment

by:brokenbyte
ID: 38739027
OK, thanks. Sorry, I was trying to do this from memory. I just logged onto one of my 2008 R2 servers and I see your point.

This is obviously a bit more complicated.

Doing some digging, I found the following post: http://social.technet.microsoft.com/Forums/en/winserverNIS/thread/14c70bd9-3db8-4cae-b63f-361df4b7b939

Which happens to include a laundry list of steps to resolve a very similar problem ... and this was *after* trying much of what you stated above.

Specifically, here are the steps:

Possible solution:
Just in case, disable RRAS in the RRAS mmc, as this will uninstall it.
Backup your registry.
Ignore steps  1-4, and step 21 if you are just on a member server. (and not a DC)
1.Restart the domain controller.
2.When the BIOS information appears, press F8.
3.Select Directory Services Restore Mode, and then press ENTER.
4.Use the Directory Services Restore Mode password to log on.
5.Click Start, and then click Run.
6.In the Open box, type regedit, and then click OK.
7.Locate the following registry subkeys:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock2
8.Right-click each key, and then click Delete.
9.Click Yes to confirm the deletion of each key.
10.Close Regedit.
11.Locate the Nettcpip.inf file in %winroot%\inf, and then open the file in Notepad.
12.Locate the [MS_TCPIP.PrimaryInstall] section.
13.Edit the Characteristics = 0xa0 entry and replace 0xa0 with 0x80.
14.Save the file, and then exit Notepad.
15.In Control Panel, double-click Network Connections, right-click Local Area Connection, and then select Properties.
16.On the General tab, click Install, select Protocol, and then click Add.
17.In the Select Network Protocols window, click Have Disk.
18.In the Copy manufacturer's files from: text box, type c:\windows\inf, and then click OK.
19.Select Internet Protocol (TCP/IP), and then click OK. (Note: This step will return you to the Local Area Connection Properties screen, but now the Uninstall button is available).
20.Select Internet Protocol (TCP/IP), click Uninstall, and then click Yes.
21.Restart your computer, and then select Directory Services Restore Mode as mentioned in steps 2 - 4.
22.In Control Panel, double-click Network Connections, right-click Local Area Connection, and then select Properties.
23.On the General tab, click Install, select Protocol, and then click Add.
24.In the Select Network Protocols window, click Have Disk.
25.In the Copy Manufacturer's files from text box, type c:\windows\inf, and then click OK.
26.Select Internet Protocol (TCP/IP), and then click OK.
27.Restart your computer.
Configure and Enable Routing and Remote Access.
At this point, your RRAS should start.
0
 

Author Comment

by:ma_hd
ID: 38739070
Thank you for the information, I will have to carry out the above steps out of hours as the affected server is in production.

I will get back to you after following the steps provided.
0
 
LVL 4

Expert Comment

by:brokenbyte
ID: 38756185
Hello ma_hd,

Any luck with the above?
0
 

Accepted Solution

by:
ma_hd earned 0 total points
ID: 38761520
Hi BrokenByte,

The steps outlined about caused DNS & Active directory to become corrupt. As a result I restored a backup from a known good configuration.

Thanks for your help.
0
 

Author Closing Comment

by:ma_hd
ID: 38773860
Support was good. Steps taken did not result in desired outcome.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Many companies are making the switch from Microsoft to Google Apps (https://www.google.com/work/apps/business/). Use this article to learn more about what Google Apps has to offer and to help if you’re planning on migrating to Google Apps. It is …
Article by: Leon
Software Metering within our group of companies has always been an afterthought until auditing of software and licensing became a pain point. Orchestrator and SCCM metering gave us the answer and it was an exciting process.
Viewers will learn how to maximize accessibility options in an Excel workbook for users with accessibility issues.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now