none
Events 999 and 33447, DPM Service continually crashes during InitializeSecurity RRS feed

  • General discussion

  • Posting this mostly for visiblity, since my Google searches turned nothing helpful up. Information on server:

    Windows Server 2012 R2 Standard

    Microsoft System Center Data Protection Manager 2012 R2 (version 4.2.1589.0)

    SQL server 2012

    A few days ago we ran into issues with a client DPM server, the DPM service would no longer start. We saw the following error in the "C:\Program Files\Microsoft System Center 2012 R2\DPM\DPM\Temp\MSDPMCurr.errlog" file:

    145C	0FF4	04/07	15:06:05.148	09	MsdpmService.cs(237)			NORMAL	OnStartAsync - Initializing MSDPM
    145C	0FF4	04/07	15:06:05.179	09	servicemodule.cpp(481)			NORMAL	CServiceModule::InitializeSecurity
    145C	0FF4	04/07	15:06:05.320	02	EventManager.cs(143)			NORMAL	Logging event to NT log from d:\btvsts\3739\private\product\engine\service\dll\servicemodule.cpp(648): FatalServiceError
    145C	0FF4	04/07	15:06:05.398	09	servicemodule.cpp(649)			WARNING	Failed: Hr: = [0x80070534] CATLException 
    145C	0FF4	04/07	15:06:05.414	68	DpmThreadPool.cs(121)			WARNING	Caught unhandled exception : System.Exception: -2147023564
    145C	0FF4	04/07	15:06:05.429	68	DpmThreadPool.cs(149)			WARNING	Attempting to write error to the event log -2147023564
    145C	0FF4	04/07	15:06:05.429	02	EventManager.cs(143)			NORMAL	Logging event to NT log from DpmThreadPool.cs(163): FatalServiceError
    145C	0FF4	04/07	15:06:05.445	68	DpmThreadPool.cs(170)			WARNING	Attempting to invoke Watson
    145C	0FF4	04/07	15:06:05.445	09	everettexception.cpp(761)			CRITICAL	Exception Message = -2147023564 of type System.Exception, process will terminate after generating dump


    We also saw Error Event ID 999 with the following message:

    Log Name:      Application
    Source:        MSDPM
    Date:          4/7/2017 11:10:09 AM
    Event ID:      999
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:     server.domain.com
    Description:
    The description for Event ID 999 from source MSDPM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    
    If the event originated on another computer, the display information had to be saved with the event.
    
    The following information was included with the event: 
    
    An unexpected error caused a failure for process 'msdpm'.  Restart the DPM process 'msdpm'.
    
    Problem Details:
    <FatalServiceError><__System><ID>19</ID><Seq>1</Seq><TimeCreated>4/7/2017 3:10:09 PM</TimeCreated><Source>DpmThreadPool.cs</Source><Line>163</Line><HasError>True</HasError></__System><ExceptionType>Exception</ExceptionType><ExceptionMessage>-2147023564</ExceptionMessage><ExceptionDetails>System.Exception: -2147023564</ExceptionDetails></FatalServiceError>
    
    
    the message resource is present but the message is not found in the string/message table


    I tried a few different things prior, with no success:

    • Found a table with error codes and translations: -2147023564, 0x80070534, No mapping between account names and security IDs was done; which prompted me to clean up security policy, local groups, and SQL for all deleted/disabled AD and local accounts
    • Disabled IPv6 per another Event ID 999 thread
    • Review GPOs and all settings
    • GPUpdate multiple times with reboots
    • Re-install UR12 for DPM 2012 R2

    I reviewed the Application log, and found an Event ID 33447 just prior to the Event ID 999:

    Log Name:      Application
    Source:        MSDPM
    Date:          4/7/2017 11:10:09 AM
    Event ID:      33447
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      server.domain.com
    Description:
    The description for Event ID 33447 from source MSDPM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    
    If the event originated on another computer, the display information had to be saved with the event.
    
    The following information was included with the event: 
    
    ATL Failure in Initializing Security of msdpm.
    
    Problem Details:
    <FatalServiceError><__System><ID>19</ID><Seq>0</Seq><TimeCreated>4/7/2017 3:10:09 PM</TimeCreated><Source>d:\btvsts\3739\private\product\engine\service\dll\servicemodule.cpp</Source><Line>648</Line><HasError>True</HasError></__System><ExceptionType>CAtlException</ExceptionType><ExceptionMessage>ATL Failure in Initializing Security of msdpm.</ExceptionMessage><ExceptionDetails>-2147023564  For Sql Account :  domain\oldaccount</ExceptionDetails></FatalServiceError>
    
    
    the message resource is present but the message is not found in the string/message table

    The domain\oldaccount account used to exist, but was apparently deleted right around the same time that the issues appeared. I reviewed SQL security settings, Windows settings, and service settings, and can't find any references to this old account or SID. I did in fact remove a few references to it during my initial troubleshooting, only in the SQL Security settings.

    I went ahead and recreated the account in AD with a very complex password, and disabled it. I was able to get DPM to start after that.

    For now that is my work around until I track down the old reference and get it corrected.


    Friday, April 7, 2017 4:00 PM

All replies

  • Hi Justin,

    I had exactly the same problem with same errors just a while. I have 2 DPM servers with remote SQL. I had this problem for both DPM simultaneously this morning. After all I checked I decided to reinstall DPM and suddenly I saw the problem. When I went in control panel I selected to uninstall the DPM, an error appeared that DC could not be contacted. I went on my DC and run nslookup and saw that the resolution was unknonw. The same was for my member servers. Then I just restarted my DC and resolution began to work. Then DPM service was starting for both DPM servers. I hope this helps.



    Sunday, April 9, 2017 10:42 AM
  • I just ran in to this problem. If the account that is associated with this has it's username changed, or is deleted, you can change the account in the registry. The registry keys are:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Setup\schedulerJobOwnerName

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Setup\SqlAgentAccountName

    if you update the accounts used there to something with access to the SQL database you should be able to start the service.


    • Edited by Alex Veal Saturday, July 13, 2019 2:07 PM
    Saturday, July 13, 2019 2:06 PM