Windows 2008 R2 DC Keep Getting Security-SPP Event 16385 Error 0x80070005

Recently promoted a new Windows 2008 R2 DC, after dc promotion the event log is filled with Security-SPP Event 16385 Error 0x80070005.

Detail of the log event:
Failed to schedule Software Protection service for re-start at 2014-07-21T13:23:32Z. Error Code: 0x80070005.

Any idea how to resolve this error? Thank you.
livetsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Santosh GuptaCommented:
Hi,

Please check if Volume Shadow Copy service if it is started. If it is not started, go and start the process.

Try to add full rights for network service user to C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform
0
livetsAuthor Commented:
Hi Santosh,
 
            Thank you for your response.

1. Volume Shadow Copy service is currently set to manual start and is not started, should I change the start up type to automatic so it will always start? Also what does this have to do with this particular issue?

2. I did try give network service user full right to the folder yesterday, and the issue was resolved for several hour until mid night last night. However, for some reason this morning the Network Service User permission was removed from the folder.
0
Santosh GuptaCommented:
Hi livets,

1. Volume Shadow Copy service should be set to manual start. Pls start it, some how it is related to software protection service.

2. try to give network service user full right to the folder again and also enable "Folder auditing" for every one and see which service is changing the permission on given folder. http://technet.microsoft.com/en-us/library/cc771070.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Santosh GuptaCommented:
Also try solution from  http://www.ebugg-i.com/forums/windows/Event-ID-16385-Failed-to-schedule-Software-Protection-service-for-re-start-at-2112-11-28T15-57-31Z-pound-Error-Code-0x80041316.html

icacls %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NT Service\sppsvc:(OI)(CI)(R,W,D)"
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.