The following forum(s) have migrated to Microsoft Q&A (Preview): Azure Virtual Machines!
Visit Microsoft Q&A (Preview) to post new questions.

Learn More

 locked
Failed to schedule Software Protection service RRS feed

  • Question

  • We have this error appearing every few days in the Event Log on our main server in Windows Azure:

    Level: Error
    Date: 7/24/2012 7:34:39 PM
    Source: Security-SPP
    Event ID: 16385

    Message: Failed to schedule Software Protection service for re-start at 2012-07-28T20:53:27Z. Error Code: 0x80071A91.

    Level: Error
    Date: 7/26/2012 4:30:10 PM
    Source: Security-SPP
    Event ID: 16385

    Message: Failed to schedule Software Protection service for re-start at 2012-07-28T20:53:10Z. Error Code: 0x80070057.

    How can we resolved issues with Software Protection service?

    Best regards,
    Jozef


    -- Jozef Izso (MCPD)

    Thursday, July 26, 2012 3:00 PM

All replies

  • Hi Jozef,

    • Which image did you use to create this VM?

    • Is the VM activated?

    • Can you provide the output of these commands run from within that VM?

      schtasks /query /tn \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask /xml

      wmic service sppsvc get * /format:list

      wmic service schedule get * /format:list


    Thanks,
    Craig

    Friday, July 27, 2012 4:18 PM
  • Hi Craig,

    the VM was created using the Windows Server 2008 R2 SP1, May 2012 image.

    First command returns ERROR: The parameter is incorrect.

    sppsvc:

    AcceptPause=FALSE
    AcceptStop=TRUE
    Caption=Software Protection
    CheckPoint=0
    CreationClassName=Win32_Service
    Description=Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.
    DesktopInteract=FALSE
    DisplayName=Software Protection
    ErrorControl=Normal
    ExitCode=0
    InstallDate=
    Name=sppsvc
    PathName=C:\Windows\system32\sppsvc.exe
    ProcessId=3360
    ServiceSpecificExitCode=0
    ServiceType=Own Process
    Started=TRUE
    StartMode=Auto
    StartName=NT AUTHORITY\NetworkService
    State=Running
    Status=OK
    SystemCreationClassName=Win32_ComputerSystem
    SystemName=WINFDEV
    TagId=0
    WaitHint=0

    schedule:

    AcceptPause=FALSE
    AcceptStop=TRUE
    Caption=Task Scheduler
    CheckPoint=0
    CreationClassName=Win32_Service
    Description=Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
    DesktopInteract=FALSE
    DisplayName=Task Scheduler
    ErrorControl=Normal
    ExitCode=0
    InstallDate=
    Name=Schedule
    PathName=C:\Windows\system32\svchost.exe -k netsvcs
    ProcessId=948
    ServiceSpecificExitCode=0
    ServiceType=Share Process
    Started=TRUE
    StartMode=Auto
    StartName=LocalSystem
    State=Running
    Status=OK
    SystemCreationClassName=Win32_ComputerSystem
    SystemName=WINFDEV
    TagId=0
    WaitHint=0


    -- Jozef Izso (MCPD)

    Friday, July 27, 2012 4:32 PM
  • Are you able to run the SvcRestartTask in Task Scheduler located under \Microsoft\Windows\SoftwareProtectionPlatform?

    SvcRestartTask


    Friday, July 27, 2012 5:35 PM
  • I think there's a problem with Task Scheduler service. When I open the Task Scheduler console, I get this error message:

    Task Scheduler service is not available. Task Scheduler will attempt to reconnect to it.

    When opening the SoftwareProtectionPlatform I got the error message once again and there no SvcRestartTask there.

    I can see an Error in Event Viewer related to the SPP: Task Scheduler failed to load task "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask" at service startup. Additional Data: Error Value: 2147942487.

    Thanks for your help Craig.


    -- Jozef Izso (MCPD)


    • Edited by Jozef Izso (WINF) Saturday, July 28, 2012 8:12 AM Added more information about the error.
    Saturday, July 28, 2012 8:06 AM
  • Hey Josef,

    I am investigating the details of your VM further, to better understand what may be going wrong with the SPP service.

    Corey

    Monday, August 6, 2012 1:49 AM
  • Hello,

    have the same problem on win 2008 r2 sp1 running as vm on vsphere 4.1.

    My output from you commands befor:

    C:\Windows\system32>schtasks /query /tn \Microsoft\Windows\SoftwareProtectionPla
    tform\SvcRestartTask /xml
    ERROR: The task image is corrupt or has been tampered with.

    C:\Windows\system32>wmic service sppsvc get * /format:list

    AcceptPause=FALSE
    AcceptStop=TRUE
    Caption=Software Protection
    CheckPoint=0
    CreationClassName=Win32_Service
    Description=Enables the download, installation and enforcement of digital licens
    es for Windows and Windows applications. If the service is disabled, the operati
    ng system and licensed applications may run in a notification mode. It is strong
    ly recommended that you not disable the Software Protection service.
    DesktopInteract=FALSE
    DisplayName=Software Protection
    ErrorControl=Normal
    ExitCode=0
    InstallDate=
    Name=sppsvc
    PathName=C:\Windows\system32\sppsvc.exe
    ProcessId=5128
    ServiceSpecificExitCode=0
    ServiceType=Own Process
    Started=TRUE
    StartMode=Auto
    StartName=NT AUTHORITY\NetworkService
    State=Running
    Status=OK
    SystemCreationClassName=Win32_ComputerSystem
    SystemName=SRV14V029
    TagId=0
    WaitHint=0

     
    C:\Windows\system32>wmic service schedule get * /format:list

    AcceptPause=FALSE
    AcceptStop=TRUE
    Caption=Task Scheduler
    CheckPoint=0
    CreationClassName=Win32_Service
    Description=Enables a user to configure and schedule automated tasks on this com
    puter. The service also hosts multiple Windows system-critical tasks. If this se
    rvice is stopped or disabled, these tasks will not be run at their scheduled tim
    es. If this service is disabled, any services that explicitly depend on it will
    fail to start.
    DesktopInteract=FALSE
    DisplayName=Task Scheduler
    ErrorControl=Normal
    ExitCode=0
    InstallDate=
    Name=Schedule
    PathName=C:\Windows\system32\svchost.exe -k netsvcs
    ProcessId=888
    ServiceSpecificExitCode=0
    ServiceType=Share Process
    Started=TRUE
    StartMode=Auto
    StartName=LocalSystem
    State=Running
    Status=OK
    SystemCreationClassName=Win32_ComputerSystem
    SystemName=SRV14V029
    TagId=0
    WaitHint=0

    I also see no task in the task scheduler.

    Hope you can help.

    Greetings

    Tuesday, August 28, 2012 2:49 PM
  • Any updates about the issue? It is still not resolved.

    -- Jozef Izso (MCPD)

    Saturday, September 1, 2012 3:53 PM
  • Hi Jozef,

    Please open the file:  C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask

    You may use notepad.  This is an XML file.  Please let us know what the contents of this file are.

    John

    Wednesday, September 5, 2012 6:39 PM
  • Hi John, the SvcRestartTask file is empty.

    -- Jozef Izso (MCPD)

    Friday, September 7, 2012 8:03 AM
  • Hi Jozef,

    Thanks for looking into this.  One final question.  Is the file empty, aka 0 bytes in length or is it full of NULLS, 0x0.

    Workaround for getting you up and running would be to find the same file on a working system of the same build of Windows and copy it to the non-working system.

    John

    Friday, September 7, 2012 4:05 PM
  • It has 0 bytes length and is empty.

    I ran sfc several times and it says the system is OK. How can I be sure that other system scheduled tasks are not corrupted?


    -- Jozef Izso (MCPD)

    Friday, September 7, 2012 4:39 PM
  • Replacing the SvcRestartTask for the SoftwareProtectionPlatform task resulted in Task Scheduler displaying error message: Task SvcRestartTask: The task image is corrupt or has been tampered with.

    -- Jozef Izso (MCPD)

    Friday, September 7, 2012 4:45 PM
  • Hi Jozef,

    The tasks are parsed whenever you load the Task Scheduler.  It throws the error you are seeing if one is or not proper.

    I'm looking into what to do to correct the last error you are seeing.

    John

    Monday, September 10, 2012 7:00 PM
  • I have this exact problem.  Did anybody ever find a solution?
    Tuesday, November 13, 2012 9:10 PM
  • No, the solution was never provided by Microsoft.

    -- Jozef Izso (MCPD)

    Wednesday, November 14, 2012 8:38 AM
  • The same event has been logging every 30 seconds on my Win 8 Pro 64-bit system. It might have started when I disabled the optional component Hyper-V.

    Failed to schedule Software Protection service for re-start at 2112-12-22T19:42:44Z. Error Code: 0x80041316.


    • Edited by Sherip99 Wednesday, January 16, 2013 6:53 AM
    Wednesday, January 16, 2013 6:47 AM
  • We have the same problem on a Win 2012 server.

    We use the workaround expose in this post : http://www.msfn.org/board/topic/159772-sercurity-spp-event-16385-error-code-0x80041316/page__view__findpost__p__1023235

    We have to repeat this for each corrupted tasks and the error disapeard from the event log. 

    The operations are the following :

    • Identify the corrupted task's name
    • Find it on the installation media in the right folder
    • Delete or backup the corrupted taks file in the Windows\System32\Task\... folder
    • Copy the original file in the right Windows\System32\Task\... folder and add ".xml" (without this the task Scheduler can't import the file)
    • Import the task in the right container of the  Task scheduler MMC (click OK to accept the default task's properties )
    • After the import the task may have a blank name in the mmc's center pane
    • Check the concerned Task folder in your C:\Windows\System32\Task\... and verify that a new file without extension has been created. Delete your .xml file.
    • Reboot the server
    • Re-open the Task scheduler and the error pop-up should have disappeard, or the corrupted task name should have change (in this case follow this procedure again).
    • Check your windows application's event log, and verify that the Security-SPP events report succesfull execution.

    We have the problem with to tasks. the second one refer to the Licence Validation Task (WS container of the Task scheduler) wich is not in the installation media, where "WS" folder is empty. We use a file from a working Win 2k12 server, copy/paste it, rename it with .xml and import it. The error is gone too.

    Regards

    • Proposed as answer by nickolaï Monday, January 28, 2013 12:51 PM
    • Unproposed as answer by nickolaï Monday, January 28, 2013 12:52 PM
    • Proposed as answer by Dan Visan Wednesday, May 22, 2013 5:00 PM
    Monday, January 28, 2013 8:51 AM