Generic application could not be brought online due to process creation error

Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.process.creation.error (Rule)

Knowledge Base article:

Summary

Generic application could not be brought online due to process creation error

Resolutions

If you do not currently have Event Viewer open, see 'Opening Event Viewer and viewing events related to failover clustering.' If the event contains an error code that you have not yet looked up, see 'Finding more information about error codes that some event messages contain.' After reviewing events, confirm that the following are true for the application used by the clustered Generic Application instance:

If all of the preceding items appear to be configured correctly, check Event Viewer for other errors related to the application to see what might be interfering with application startup.

To perform these procedures, you must be a member of the local Administrators group on the server, or you must have been delegated the equivalent authority.

To view or change the service name and other settings for a clustered Generic Application instance:

To open Event Viewer and view events related to failover clustering:

To find more information about the error codes that some event messages contain:

Element properties:

TargetMicrosoft.Windows.10.0.Cluster.Monitoring.Service
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Generic application could not be brought online due to process creation error
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.10.0.Cluster.EventProvider Default
WA WriteAction Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription Default

Source Code:

<Rule ID="Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.process.creation.error" Enabled="true" Target="Clus8Library!Microsoft.Windows.10.0.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.10.0.Cluster.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1039</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
<LogName>System</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.10.0.Cluster.Management.Monitoring.Generic.application.could.not.be.brought.online.due.to.process.creation.error.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>