Rasman Service initialization failure

Rasman_Service_initialization_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack

Summary

The Routing and Remote Access service could not start because of an initialization failure.

 

Causes

The most common reasons for this error are:

1.     The enumeration of remote access ports failed. The most common reason for this error is that not enough memory is available on the server.

2.     One of the following DLLs could not be loaded:

                      i.        dhcpcsvc.dll

                     ii.        iphlpapi.dll

                    iii.        ipbootp.dll

3.     The Remote Access IP ARP driver (wanarp) failed to start. The service could not initialize the adapter name using the Remote Access IP ARP driver (wanarp).

 

Resolutions

1.     If the server is low on memory, take appropriate action to increase the available memory. See Help and Support Center for information on low memory.

2.     Verify that the DLLs exist in the folder %systemroot%\system32. If not, you might need to repair or reinstall the Windows operating system.

3.     Verify that the SYSTEM account has read/write permissions for the DLLs. To check the permissions:

                      i.        Right-click each registry key, and click Permissions.

                     ii.        Verify that the SYSTEM account has read/write permissions for the key. If it does not, add them.

4.     Verify that the wanarp.sys file exists in the folder %systemroot%\system32 and that the driver is started. To do this:

                      i.        Click Start, click Administrative Tools, and click Computer Management.

                     ii.        Right-click Device Manager, click View, and click Show hidden devices.

                    iii.        Double-click Non-Plug and Play Drivers.

                    iv.        Right-click Remote Access IP ARP Driver, and click Properties.

                     v.        On the Driver tab, click Start.

 

Sample Event

Sample Event #1: Cannot enumerate the Remote Access Connection Manager ports. %1
Sample Event #2: Cannot initialize the Remote Access and Router service to accept calls using the TCP/IP transport protocol. The following error occurred: %1

 

© 2004 Microsoft Corporation, all rights reserved.

 

Element properties:

TargetMicrosoft.Windows.Server.RRAS.2008.Server
CategoryEventCollection
EnabledTrue
Event SourceRemoteAccess
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Rasman_Service_initialization_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.Server.RRAS.2008.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(20005|20145)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">RemoteAccess</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
</WriteActions>
</Rule>