question

VIkky384-6139 avatar image
0 Votes"
VIkky384-6139 asked VIkky384-6139 commented

Event ID: 16385 windows server 2012 R2


Failed to schedule Software Protection service for re-start at 2121-08-08T11:41:21Z. Error Code: 0x800719F3.


I'm getting an error message twice in a minute, when i open server manager dashboard on all servers panel.

As per the event ID i have searched in the Microsoft community & followed the steps as per mentioned in the documentation forum.

But my problem not solved.

  • I was getting the same event error message repeatedly.

  • As mentioned in the documentation forum, i have checked the SPP folder's security has a read permission for Network service & it was marked as read for Network Service.

*As mentioned I have verified the Task Scheduler for SPP & found that there were 3 entries:

          SVC restart task as ready

          SVC restart task logon as disabled

          SVC restart task network as disabled

  • When i try to enable any of these disabled tasks I was getting a dialogue box stating that "The sate could not be modified as requested".

So, I tried to restart the service of SPPSVC & checked after a while but the event error is still continuing on the event log.

Please find the XML view of the error:

  • <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">;

  • <System>

    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />

    <EventID Qualifiers="49152">16385</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2021-09-01T12:09:08.000000000Z" />

    <EventRecordID>32987700</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>XXXxxxx</Computer>

    <Security />

    </System>

  • <EventData>

    <Data>0x800719F3</Data>

    <Data>2121-08-08T12:09:08Z</Data>

    </EventData>

    </Event>

Regards,

Vikky

windows-server
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered VIkky384-6139 commented

Maybe this one.
https://blogs.msmvps.com/alunj/2013/09/22/security-spp-errors-in-the-event-log-every-thirty-seconds/

--please don't forget to upvote and Accept as answer if the reply is helpful--


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



0 Votes 0 ·

Hi @DSPatrick

Good to see you, I have gone through the article & followed the steps but no change.

Please see the attachment linked in @LimitlessTechnology-2700

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered VIkky384-6139 commented

Hi @VIkky384-6139

Can you give this a try

  1. Open the Computer Management tool, and then navigate to Configuration -> Task Scheduler -> Task Scheduler Library -> Microsoft -> Windows -> SoftwareProtectionPlatform.

  2. On the General tab of SoftwareProtectionPlatform, select the security options, and then verify that the Software Protection Platform service is set to use the NETWORK SERVICE account.

  3. In Windows Explorer, browse to the C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform folder, and then verify that the NETWORK SERVICE account has Read permissions for that folder.

  4. Restart the Software Protection service if it is running.

Hope this Answers all your queries , if not please do repost back .
If an Answer is helpful, please click "Accept Answer" and upvote it : )

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@LimitlessTechnology-2700

  1. I have tried to enable to the task scheduler for Svcrestarttasklogon & Svcrestrattasknetwork but it was throwing an error as attached130802-capture.jpg


  2. The NETWORK SERVICE account have READ permission for that folder in the mentioned directory

  3. Restarted the service for software protection but error is getting recorded in the event log of server manager


0 Votes 0 ·
capture.jpg (137.4 KiB)