locked
NPS service installation Failing RRS feed

  • Question

  • Hi,

    We are trying to install NPS service on the Windows 2008 R2 Server and it is failing with error " Network Policy Server Installation Failed" and it asks to reboot the Server. We have tried the following solutions but no help

    • Tried installing other role to check if the issue is with NPS or Server MAnager. Other roles are getting installed properly
    • Removed the ias folder from %Windir%\System32\
    • Checked the registry value of NT AUTHORITY\NETWORK SERVICE and found it to be 1
    • Event Viewer is showing the error that NPS service start failed 
    • Tried installing through Powershell and Command Line

    None of the above solutions worked. Please suggest

    Friday, September 12, 2014 4:20 PM

Answers

  • Hi,

    According to your description, maybe we forgot something in troubleshooting this problem. Based on my research, if we only removed the ias folder from %Windir%\System32, then we install NPS roles again, we will gain installation failed with error code 0x80070643. We also need to copy the ‘dnary.xsd’ file from a good Windows 2008 R2 machine. Paste the ‘dnary.xsd‘ file in the ias folder. Then try it again.

    Note: Please backup the ias folder before removing all files in ias folder.

    Best Regards,

    Tina

    • Marked as answer by Steven_Lee0510 Wednesday, October 8, 2014 9:39 AM
    Monday, September 15, 2014 6:57 AM
  • Hi,

    To setup offline repair of the dnary.xsd file with an offline boot directory set to d: and offline windows directory set to d:\windows,

    Please run sfc /scanfile=d:\windows\system32\ias\dnary.xsd /offbootdir=d:\ /offwindir=d:\windows command.

    To learn more details about this command, please refer to the link below,

    http://technet.microsoft.com/en-us/library/ff950779.aspx

    Best Regards,

    Tina

    • Marked as answer by Steven_Lee0510 Wednesday, October 8, 2014 9:39 AM
    Thursday, September 25, 2014 6:10 AM

All replies

  • Hi,

    According to your description, maybe we forgot something in troubleshooting this problem. Based on my research, if we only removed the ias folder from %Windir%\System32, then we install NPS roles again, we will gain installation failed with error code 0x80070643. We also need to copy the ‘dnary.xsd’ file from a good Windows 2008 R2 machine. Paste the ‘dnary.xsd‘ file in the ias folder. Then try it again.

    Note: Please backup the ias folder before removing all files in ias folder.

    Best Regards,

    Tina

    • Marked as answer by Steven_Lee0510 Wednesday, October 8, 2014 9:39 AM
    Monday, September 15, 2014 6:57 AM
  • Hi,

    I have tried copying DNARY.XSD file from working Windows 2008 R2 NPS server but the issue is still the same

    I have tried running SFC /SCANNOW and got the message

    "Windows Resource Protection found corrupt files but was unable to fix some of them.
    Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log"

    In CBS logs I am getting the below error

    2014-09-15 16:10:31, Info                  CSI    00000313 [SR] Beginning Verify and Repair transaction
    2014-09-15 16:10:31, Info                  CSI    00000314 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_2f54961b4c9f4194\dnary.xsd do not match actual file [l:18{9}]"dnary.xsd" :
      Found: {l:32 b:p/tulXZEmpaZtEcoxdUsN6PNg/jieqe3rp3RNi2Mb0U=} Expected: {l:32 b:SxyZnrdAL9qK518u3HjSxkdKnK/mLR0Ww3iLGbsaSio=}
    2014-09-15 16:10:31, Info                  CSI    00000315 [SR] Cannot repair member file [l:18{9}]"dnary.xsd" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2014-09-15 16:10:32, Info                  CSI    00000316 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_2f54961b4c9f4194\dnary.xsd do not match actual file [l:18{9}]"dnary.xsd" :
      Found: {l:32 b:p/tulXZEmpaZtEcoxdUsN6PNg/jieqe3rp3RNi2Mb0U=} Expected: {l:32 b:SxyZnrdAL9qK518u3HjSxkdKnK/mLR0Ww3iLGbsaSio=}
    2014-09-15 16:10:32, Info                  CSI    00000317 [SR] Cannot repair member file [l:18{9}]"dnary.xsd" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2014-09-15 16:10:32, Info                  CSI    00000318 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
    2014-09-15 16:10:32, Info                  CSI    00000319 Repair results created:
    POQ 118 starts:

    Monday, September 15, 2014 10:45 AM
  • Hi,

    When Windows Resource Protection found corrupt files but was unable to fix some of them, we need to manually replace the corrupted file with a known good copy of the file. But according to your description, it doesn't work. It is recommended to use a Windows Setup CD to repair the dnary.xsd file. Windows Server 2008 R2 provides a function called Windows Recovery Environment, it is a set of tools that we can use to perform operating system or full server recoveries.

    For more details about Windows Recovery Environment, please refer to link below.

    http://technet.microsoft.com/en-us/library/cc770593(WS.10).aspx#BKMK_Windows_Recovery_Environment_overview

    Best Regards,

    Tina

    Wednesday, September 17, 2014 7:26 AM
  • Hi Tina,

    Thanks for the reply. If I reboot the server in Windows Recovery Environment and choose Command Prompt then how can I repair the single file. Should I use SFC and scan files or there is some other command for repairing the single file.

    Tuesday, September 23, 2014 12:49 PM
  • Hi,

    To setup offline repair of the dnary.xsd file with an offline boot directory set to d: and offline windows directory set to d:\windows,

    Please run sfc /scanfile=d:\windows\system32\ias\dnary.xsd /offbootdir=d:\ /offwindir=d:\windows command.

    To learn more details about this command, please refer to the link below,

    http://technet.microsoft.com/en-us/library/ff950779.aspx

    Best Regards,

    Tina

    • Marked as answer by Steven_Lee0510 Wednesday, October 8, 2014 9:39 AM
    Thursday, September 25, 2014 6:10 AM