Rasman Service initialization failure

Rasman_Service_initialization_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack
The Routing and Remote Access service could not start because of initialization failure.
The most common reasons for this error are:
  1. The enumeration of remote access ports failed. The most common reason for this error is that not enough memory is available on the server.
  2. One of the following DLLs could not be loaded:
    1. dhcpcsvc.dll
    2. iphlpapi.dll
    3. ipbootp.dll
  3. The Remote Access IP ARP driver (wanarp) failed to start. The service could not initialize the adapter name using the Remote Access IP ARP driver (wanarp).
  1. If the server is low on memory, take appropriate action to increase the available memory. See Help and Support Center for information on low memory.
  2. Verify that the DLLs exist in the %systemroot%\system32 folder. If not, you might need to repair or reinstall the Windows operating system.
  3. Verify whether the SYSTEM account has read/write permissions for the DLLs. To check the permissions:
    1. Right-click each registry key, and click Permissions.
    2. Verify whether the SYSTEM account has read/write permissions for the key. If it does not, add them.
  4. Verify that the wanarp.sys file exists in the %systemroot%\system32 folder and that the driver is started. To do this:
    1. Click Start, click Administrative Tools, and click Computer Management.
    2. Right-click Device Manager, click View, and click Show hidden devices.
    3. Double-click Non-Plug and Play Drivers.
    4. Right-click Remote Access IP ARP Driver, and click Properties.
    5. On the Driver tab, click Start.
Sample Event
Sample Event #1: Cannot enumerate the Remote Access Connection Manager ports. %1
Sample Event #2: Cannot initialize the Remote Access and Router service to accept calls usingthe TCP/IP transport protocol. The following error occurred: %1
© 2004 Microsoft Corporation, all rights reserved.

Element properties:

Event SourceRemoteAccess
Alert GenerateFalse
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Rasman_Service_initialization_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.RemoteAccess.2012.Class.VPNServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
<XPathQuery Type="String">PublisherName</XPathQuery>
<Value Type="String">RemoteAccess</Value>
<WriteAction ID="WriteToDB" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>