none
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API Failed RRS feed

  • Question

  • I am getting the below error message since running updates.  The error appears to be related to updates done to .Net FW 4.  .Net FW 4 was updated but it was not removed. 

    System is Server 2008 SP2

    "Cryptographic Services Failed while processing the OnIdentity() call in the System Writer Object.

    Details:  AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API Failed

    System Error: The resource loader failed to find MUI File"

    I have seen similar errors that say since .Net FW4 was removed that the v400Fontcache was not uninstalled with it.  I don't think that this applies.  I am wondering if a repair of .net FW 4 would work. Any assistance is greatly appreciated.

    Saturday, June 13, 2015 7:14 AM

Answers

  • Hi,

    As the error mentioned Cryptographic Service, please try to restart that service to see if it will help. In fact, system writer is registered in Cryptographic Service. 

    • Any errors on system/application log?
    • Run vssadmin list writers to see if you can find System Writer?

    If no system writer, try to run the command in command prompt:

    SC.EXE SDSHOW EVENTSYSTEM

    • If the output is like below, that means it is missing the Service Logon User (missing the entry (A;;CCLCSWLOCRRC;;;SU) )
     
    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
     
    • Then you can reset the eventsystem permission:
     
    Sc.exe sdset eventsystem D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
     
    • Restart both the COM+ Event System and Cryptographic Services
    • Run VSSADMIN LIST WRITERS again and see if system writer is back.

    NOTEs:If the problem on your side is indeed related to service permission, you can check the GPO setting on your side to see if there is any change on the COM+ Event System Service.

    If the system writer is back, please test if backup function is back to work. 


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, June 18, 2015 2:22 AM
    Moderator

All replies

  • Hi,

    As the error mentioned Cryptographic Service, please try to restart that service to see if it will help. In fact, system writer is registered in Cryptographic Service. 

    • Any errors on system/application log?
    • Run vssadmin list writers to see if you can find System Writer?

    If no system writer, try to run the command in command prompt:

    SC.EXE SDSHOW EVENTSYSTEM

    • If the output is like below, that means it is missing the Service Logon User (missing the entry (A;;CCLCSWLOCRRC;;;SU) )
     
    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
     
    • Then you can reset the eventsystem permission:
     
    Sc.exe sdset eventsystem D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
     
    • Restart both the COM+ Event System and Cryptographic Services
    • Run VSSADMIN LIST WRITERS again and see if system writer is back.

    NOTEs:If the problem on your side is indeed related to service permission, you can check the GPO setting on your side to see if there is any change on the COM+ Event System Service.

    If the system writer is back, please test if backup function is back to work. 


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, June 18, 2015 2:22 AM
    Moderator
  • Windows Server 2008 SP2: Same issue but on this server, System Writer is already there and stable, but this event is repeated 2-3 times per hour. Version: 6.0.6002 Service Pack 2 Build 6002

    Writer name: 'System Writer'
       Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Instance Id: {75f22f71-fe2f-4120-a027-a0d67a9b1709}
       State: [1] Stable
       Last error: No error

    Details: AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed System Error: The resource loader failed to find MUI file.

    Details: AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed System Error: The resource loader failed to find MUI file.Any help on this is greatly appreciated.

    Monday, August 3, 2015 2:18 PM
  • Anyone have a resolution for this error in the case where the system writer is present?  A client is having the exact error as stated in an SBS 2008 environment and cannot get good backups.  What file is it looking for and where SHOULD it be located?
    Monday, August 31, 2015 12:11 PM
  • Hi,

    Have a look at the known issues for security patch https://support.microsoft.com/en-us/kb/3045171

    Quick check if this is the issue thats causing the events 513:

    Open Services.msc

    Look at the description for the FontCache Service, if it says <Failed to Read Description, Error Code:15100> the solution is to uninstall KB3045171 or  install the patch from https://support.microsoft.com/en-us/kb/971512

    Affected server OS versions: Windows 2008 Server (all editions / all servicepacks)

    • Proposed as answer by kiostory Friday, October 27, 2017 7:32 AM
    Monday, August 31, 2015 4:05 PM