Windows 2008 R2 DC Keep Getting Security-SPP Event 16385 Error 0x80070005

Posted on 2014-07-16
Last Modified: 2014-07-16
Recently promoted a new Windows 2008 R2 DC, after dc promotion the event log is filled with Security-SPP Event 16385 Error 0x80070005.

Detail of the log event:
Failed to schedule Software Protection service for re-start at 2014-07-21T13:23:32Z. Error Code: 0x80070005.

Any idea how to resolve this error? Thank you.
Question by:livets
    LVL 13

    Expert Comment

    by:Santosh Gupta

    Please check if Volume Shadow Copy service if it is started. If it is not started, go and start the process.

    Try to add full rights for network service user to C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform

    Author Comment

    Hi Santosh,
                Thank you for your response.

    1. Volume Shadow Copy service is currently set to manual start and is not started, should I change the start up type to automatic so it will always start? Also what does this have to do with this particular issue?

    2. I did try give network service user full right to the folder yesterday, and the issue was resolved for several hour until mid night last night. However, for some reason this morning the Network Service User permission was removed from the folder.
    LVL 13

    Accepted Solution

    Hi livets,

    1. Volume Shadow Copy service should be set to manual start. Pls start it, some how it is related to software protection service.

    2. try to give network service user full right to the folder again and also enable "Folder auditing" for every one and see which service is changing the permission on given folder.
    LVL 13

    Expert Comment

    by:Santosh Gupta
    Also try solution from

    icacls %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NT Service\sppsvc:(OI)(CI)(R,W,D)"

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    The problems with reply email signatures

    Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now