Rasman - PPP initialization failure

Rasman___PPP_initialization_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
The Remote Access Connection Manager service failed to start because it encountered an error while loading RASPPP.DLL.
 
Causes
The most common reasons for this error are:
  1. The DLL does not exist.
  2. The DLL does not implement the functions required by the service.
  3. The DLL implemented the required functions, but one of the functions failed.
 
Resolutions
  1. Check whether the DLL ‘rasppp.dll’ exist at %systemroot%\system32\. If not, you might need to repair or reinstall the Windows operating system.
  2. Check whether the System account has read/execute permissions for the file %systemroot%\system32\rasppp.dll. To check the permissions:
    1. Right-click the file name, and then click Properties.
    2. On the Securities tab, verify that the System account read/execute permissions for the file.
  3. If the problem persists, you might need to repair or reinstall the Windows operating system.
 
Sample Event
Sample Event: Remote Access Connection Manager failed to start because the Point to PointProtocol failed to initialize. %1
 
© 2004 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Windows.Server.RRAS.Microsoft_Windows_2003_Routing_and_Remote_Access_Servers_Installation
CategoryEventCollection
EnabledTrue
Event SourceRasman
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
Rasman - PPP initialization failure

$Data/EventDescription$
Event LogSystem
CommentMom2005ID='{019B4F07-0510-4C0C-BF6F-A192B48066BD}';MOM2005ComputerGroupID={2C66DD87-4D20-48F6-B6A3-19A1598ED025}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="Rasman___PPP_initialization_failure_1_Rule" Target="Microsoft.Windows.Server.RRAS.Microsoft_Windows_2003_Routing_and_Remote_Access_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{019B4F07-0510-4C0C-BF6F-A192B48066BD}';MOM2005ComputerGroupID={2C66DD87-4D20-48F6-B6A3-19A1598ED025}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005BooleanRegularExpression</Operator>
<Pattern>20063</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Rasman</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>true</GenerateAlert>
<Owner/>
<Description>
$Data/EventDescription$
</Description>
<AlertLevel>70</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>Rasman - PPP initialization failure</Name>
<CustomFields>
<CustomField>
$Data/Params/Param[1]$
</CustomField>
<CustomField>
$Data/Params/Param[2]$
</CustomField>
<CustomField/>
<CustomField/>
<CustomField/>
</CustomFields>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>