Loading RAS supporting modules failure

Loading_RAS_supporting_modules_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
The Routing and Remote Access service could not start because it failed to load and initialize one of the RAS DLLs.
 
Causes
  1. The service failed to start and initialize the Remote Access Connection Manager service. The most common reasons for this error are:
    1. Winsock failed to initialize. The underlying network subsystem might not be ready for network communication.
    2. The Remote Access Connection Manager service does not exist on the computer.
    3. The Remote Access Connection Manager service failed to bind to the local RPC server.
  2. The service encountered an error while loading one of the RAS support binaries. The most common reasons for this error are:
    1. One of the files does not exist.
    2. The System account does not have read/execute permissions for one of the files.
    3. The driver is not loaded in memory.
  3. The service failed to load and start the authentication or accounting provider. The most common reasons for this error are:
    If Routing and Remote Access is configured for RADIUS authentication/accounting:
    1. The file rasrad.dll is missing in %systemroot%\system32.
    2. The RADIUS server name is misspelled.
    3. The RADIUS server is not running.
    If Routing and Remote Access is configured for Windows authentication/accounting:
    1. One of the Internet Authentication Service (IAS) DLLs is not registered under %systemroot%\system32.
 
Resolutions
  1. Open Services, and verify whether the Remote Access Connection Manager service is installed. If the service does not appear in the list of services, you might need to repair or reinstall the operating system.
  2. If the Remote Access Connection Manager service appears in the list of services, verify whether the service is started. If the service is stopped, start it.
  3. If you cannot start the Remote Access Connection Manager service or the problem persists, you might need to restart the server.
  4. Verify whether the following files exist in the %systemroot%\system32 folder:
    1. iprtrmgr.dll
    2. mprddm.dll
    3. rasppp.dll
    4. raschap.dll
    5. rastls.dll
    Verify whether the following file exist under %systemroot%\system32\drivers folder:
    1. wanarp.sys
    If these files do not exist in this directory, you must repair the Windows operating system. For more information about repairing the Windows operating system, see Help and Support Center.
  5. Verify that the System account has read/write permissions on the above files. To check the permissions:
    1. Right-click each file, and click Properties.
    2. On the Security tab, verify that the System account has read/execute permissions for the file. If it does not, add them.
  6. Open Routing and Remote Access and verify whether Routing and Remote Access is correctly configured for RADIUS authentication and accounting:
    1. Verify whether the server should use Windows Authentication/Accounting instead of RADIUS Authentication/Accounting. If the server should use Windows Authentication/Accounting, reconfigure the server to do so. For more information about reconfiguring a server for Windows Authentication/Accounting, see Help and Support Center.
    2. Verify whether the name of the RADIUS server is spelled correctly.
    3. Verify whether the RADIUS server is available and running properly.
  7. If the server is configured for Windows Authentication/Accounting,
    1. Check Event Viewer on the server for events that relate to Internet Authentication Service (IAS) DLLs, and resolve any issues.
    2. Run regsvr32.exe on following IAS DLLs to register them: ias.dll,iasacct.dll,iasads.dll,iashlpr.dll,iasperf.dll,iaspolcy.dll,iasrad.dll,iasrecst.dll, iassam.dll,iassdo.dll,iassvcs.dll
 
Sample Event
Sample Event #1: Remote Access Service failed to start because the Remote Access Connection Manager failed to initialize because of the following error: %1
Sample Event #2: Unable to load %1.
Sample Event #3: The currently configured authentication provider failed to load and initialize successfully. %1
Sample Event #4: The currently configured accounting provider failed to load and initialize successfully. %1
Sample Event #5: Point to Point Protocol engine was unable to load the %1 module. %2
Sample Event #6: The Point to Point Protocol failed to load the required PAP and/or CHAPauthentication modules.
 
© 2004 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Windows.RemoteAccess.2012.Class.VPNServer
CategoryEventCollection
EnabledTrue
Event SourceRemoteAccess
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Loading_RAS_supporting_modules_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.RemoteAccess.2012.Class.VPNServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(20054|20103|20152|20153|20070|20072)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">RemoteAccess</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>
</WriteActions>
</Rule>