Retour
-
Titre
Agent will not stay running -
Description
After starting the agent, it stops shortly afterwards.
The agent log file has the following logged:
ERROR][CServicesHook::InstallHook(306)] Support Dll initialization error (NetProLib::Injection::DllInjector::ExecuteRemoteFunction - Remote function failed. Error: Access is denied.) on C:\Program Files\Quest\ChangeAuditor\Agent\SCM\SERVICESHOOK.DLL[WARN][TrogdorLib::Common::CTrogdorService::StartImpl(185)] Error initializing sub-system {Services Hook (41)}.[ERROR][CMonitorService::OnStartFailed(521)] Failed to initialize some threads and sub-systems. -
Résolution
This is usually caused by Antivirus Software preventing the dll from loading. If there is Antivirus Software or HIPS software running on the server, temporarily disable it and then test to see if the agent stays running. If it does, add the following exceptions for the Antivirus Software:
- The Change Auditor directory on the Server: C:\Program Files\Quest\Change Auditor
- The following CA Processes:
- NPSRVhost.exe
- NPSrvWatchdog.exe
- ServiceControl.exe
- ServiceStatusTray.exe
- Dumper.exe - The Lsass.exe Microsoft process