Loading RAS supporting modules failure

Loading_RAS_supporting_modules_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack

Summary

The Routing and Remote Access service could not start because it failed to load and initialize one of the RAS DLLs.

 

Causes

1.     The service failed to start and initialize the Remote Access Connection Manager service. The most common reasons for this error are:

                      i.        Winsock failed to initialize. The underlying network subsystem might not be ready for network communication.

                     ii.        The Remote Access Connection Manager service does not exist on the computer.

                    iii.        The Remote Access Connection Manager service failed to bind to the local RPC server.

2.     The service encountered an error while loading one of the RAS support binaries. The most common reasons for this error are:

                      i.        One of the files does not exist.

                     ii.        The System account does not have read/execute permissions for one of the files.

                    iii.        The driver is not loaded in memory.

3.     The service failed to load and start the authentication or accounting provider. The most common reasons for this error are:
If Routing and Remote Access is configured for RADIUS authentication/accounting:

                      i.        The file rasrad.dll is missing in %systemroot%\system32.

                     ii.        The RADIUS server name is misspelled.

                    iii.        The RADIUS server is not running.

If Routing and Remote Access is configured for Windows authentication/accounting:

                    iv.        One of the Internet Authentication Service (IAS) DLLs is not registered under %systemroot%\system32.

 

Resolutions

1.     Open the Services MMC snap-in, and verify that the Remote Access Connection Manager service is installed. If the service does not appear in the list of services, you might need to repair or reinstall the operating system.

2.     If the Remote Access Connection Manager service appears in the list of services, verify that the service is started. If the service is stopped, start it.

3.     If you cannot start the Remote Access Connection Manager service or the problem persists, you might need to restart the computer.

4.     Verify that the following files exist in the %systemroot%\system32 folder:

                      i.        iprtrmgr.dll

                     ii.        mprddm.dll

                    iii.        rasppp.dll

                    iv.        raschap.dll

                     v.        rastls.dll

Verify that the following file exist under %systemroot%\system32\drivers folder:

                    vi.        wanarp.sys

If these files do not exist in the specified directories, you must repair the Windows operating system. For more information about repairing the Windows operating system, see Help and Support Center.

5.     Verify that the System account has read/write permissions on the above files. To check the permissions:

                      i.        Right-click each file, and click Properties.

                     ii.        On the Security tab, verify that the System account has read/execute permissions for the file. If it does not, add them.

6.     Open Routing and Remote Access and verify that Routing and Remote Access is correctly configured for RADIUS authentication and accounting:

                      i.        Determine whether the server should use Windows Authentication/Accounting instead of RADIUS Authentication/Accounting. If the server should use Windows Authentication/Accounting, reconfigure the server to do so. To configure the authentication or account provider for an RRAS server, open Routing and Remote Access, right-click the RRAS server or, if in Server Manager, right-click Routing and Remote Access, and then click Properties. On the Security tab, configure the authentication provider and the accounting provider.

                     ii.        Verify that the name of the RADIUS server is spelled correctly.

                    iii.        Verify that the RADIUS server is available and running properly.

7.     If the server is configured to use Windows Authentication/Accounting,

                      i.        Check Event Viewer on the server for events that relate to Internet Authentication Service (IAS) DLLs, and resolve any issues.

                     ii.        Run regsvr32.exe on following IAS DLLs to register them: ias.dll,iasacct.dll,iasads.dll,iashlpr.dll,iasperf.dll,iaspolcy.dll,iasrad.dll,iasrecst.dll, iassam.dll,iassdo.dll,iassvcs.dll

 

Sample Event

Sample Event #1: Remote Access Service failed to start because the Remote Access Connection Manager failed to initialize because of the following error: %1
Sample Event #2: Unable to load %1.
Sample Event #3: The currently configured authentication provider failed to load and initialize successfully. %1
Sample Event #4: The currently configured accounting provider failed to load and initialize successfully. %1
Sample Event #5: Point to Point Protocol engine was unable to load the %1 module. %2
Sample Event #6: The Point to Point Protocol failed to load the required PAP and/or CHAP authentication modules.

 

© 2004 Microsoft Corporation, all rights reserved.

 

Element properties:

TargetMicrosoft.Windows.Server.RRAS.2008.Server
CategoryEventCollection
EnabledTrue
Event SourceRemoteAccess
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Loading_RAS_supporting_modules_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.Server.RRAS.2008.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(20054|20103|20152|20153|20070|20072)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">RemoteAccess</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
</WriteActions>
</Rule>