[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3165
  • Last Modified:

Windows 2008 R2 DC Keep Getting Security-SPP Event 16385 Error 0x80070005

Recently promoted a new Windows 2008 R2 DC, after dc promotion the event log is filled with Security-SPP Event 16385 Error 0x80070005.

Detail of the log event:
Failed to schedule Software Protection service for re-start at 2014-07-21T13:23:32Z. Error Code: 0x80070005.

Any idea how to resolve this error? Thank you.
0
livets
Asked:
livets
  • 3
1 Solution
 
Santosh GuptaCommented:
Hi,

Please check if Volume Shadow Copy service if it is started. If it is not started, go and start the process.

Try to add full rights for network service user to C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform
0
 
livetsAuthor Commented:
Hi Santosh,
 
            Thank you for your response.

1. Volume Shadow Copy service is currently set to manual start and is not started, should I change the start up type to automatic so it will always start? Also what does this have to do with this particular issue?

2. I did try give network service user full right to the folder yesterday, and the issue was resolved for several hour until mid night last night. However, for some reason this morning the Network Service User permission was removed from the folder.
0
 
Santosh GuptaCommented:
Hi livets,

1. Volume Shadow Copy service should be set to manual start. Pls start it, some how it is related to software protection service.

2. try to give network service user full right to the folder again and also enable "Folder auditing" for every one and see which service is changing the permission on given folder. http://technet.microsoft.com/en-us/library/cc771070.aspx
0
 
Santosh GuptaCommented:
Also try solution from  http://www.ebugg-i.com/forums/windows/Event-ID-16385-Failed-to-schedule-Software-Protection-service-for-re-start-at-2112-11-28T15-57-31Z-pound-Error-Code-0x80041316.html

icacls %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NT Service\sppsvc:(OI)(CI)(R,W,D)"
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now