Remote Access Connection Manager Service Won't Start

[Vince Felchle]

I recently reinstalled Windows 2000 Professional on my
notebook.

Now, I can't get Dialup/Remote Access services to start.
Here is the error I receive in the System Event log:

"Remote Access Connnection Manager failed to start because
it could not create buffers. Restart the computer. Access
is denied."
This error is followed by the log entry:

"The Remote Access Connection Manager service terminated
with the following error:
Access is denied".

The error appears to be permission related, since I have
plenty of disk space remaining.

I can't create any new dialup connection. The system
reports an error with any connection name I enter. The
problem is related to the error above.

RAS/dailup was working before I reinstalled the OS.

Regards,
Vince

 

[Praxis]

Did you install Sevice Pack 4 and the latest updates, Vince? I
recently installed the five updates from October 13th and they seem to
have hosed my RACMS at the first reboot.

Windows 2000 Hotfix KB828035
Windows 2000 Hotfix KB826232
Windows 2000 Hotfix KB825119
Windows 2000 Hotfix KB824141
Windows 2000 Hotfix KB823182

My first symptom was that my dial up networking connection icon said
that the connection didn't exist. When I tried to create one with the
"Make A New Connection" wizard, I got to where I was supposed to enter
a name for a connection and received the following message:

Connection to number is not a valid name.
The entry must contain at least one character that is not a
space and does not begin with a period.

Choose a different name.

According to a Microsoft Knowledge Base article this particular
problem requires an in place reinstall of Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;319162

However from what I've gleaned from the Usenet, this doesn't solve the
problem and a clean install is required to restore the situation:

http://groups.google.com/groups?hl=...SO-8859-1&q=319162+Windows&btnG=Google+Search

http://groups.google.com/groups?hl=...SO-8859-1&q=319162+Windows&btnG=Google+Search

http://groups.google.com/groups?hl=...SO-8859-1&q=319162+Windows&btnG=Google+Search

http://groups.google.com/groups?hl=...SO-8859-1&q=319162+Windows&btnG=Google+Search

According to my System log I got the following five error messages at
about the same time appearing in this order as soon as I rebooted to
let the Hotfixes take effect:

RemoteAccess
Event ID: 20151
The Control Protocol EAP in the Point to Point Protocol module
C:\WINNT\System32\rasppp.dll returned an error while initializing. The
specified module could not be found.

Source: RemoteAccess
Event ID: 20070
Point to Point Protocol engine was unable to load the
C:\WINNT\System32\rastls.dll module. The specified module could not be
found.

Rasman
Event ID: 20063
Remote Access Connection Manager failed to start because the Point to
Point Protocol failed to initialize. The specified module could not be
found.

These first three only appeared once but the following two alternated
several times a minute:

Service Control Manager
Event ID: 7023
The Remote Access Connection Manager service terminated with the
following error:
The specified module could not be found.

RasMan
Event ID: 20035
Remote Access Connection Manager failed to start because it could not
create buffers. Restart the computer. Access is denied.

The last event sounds much like your problem. I'm preparing to work
up the cobbles to make a fresh post on the subject, myself, since I'm
sure systems all over the world experienced similar problems. In
fact, MS just announced that it would only be introducing security
patches once a month from now on. I'm wondering if it this is their
tacit admission that it rushed out a bunch of patches that screwed up
thousands of systems and that they were going to take their time in
the future, even if there is a unpatched security vulnerability.

In any case, after a few reboots my system refused to boot the first
few time, returning various error messages in the Event Log when it
did finally reboot. The next day the system wouldn't boot at all,
even in Safe Mode (and more or less all the other options you can
elicit by hitting F8), always rebooting when the Windows default
background color was in place and it said it was applying a security
policy. I was forced to kick up a Recovery Console, and disable
RasMan and RasAuto, both of which were set to Auto. Don't know if I
had to disable both of them, but my system then rebooted "normally,"
only giving me the following error message from the Event Viewer
Application Log:

Source: rasctrs
Event ID: 2001
The description for Event ID ( 2001 ) in Source ( rasctrs ) cannot be
found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. The following information is part of the event: The event
log file is corrupt..

By the way, uninstalling the Hotfixes didn't clear up the problem.

I live in hope of a solution, but it the meantime, am brushing up my
Redhat install on the machine so I can use my Agere software modem to
dial out so I can use the system to access the net until that hallowed
day when I can afford DSL.

-P

 

[Vince]

I experienced nearly all the problems and errors you
documented in your recent post.I tried several reinstalls
of the OS. But, I was left with no dialup capability and
had to debug "locally".
I finally sent a problem report to Microsoft. They offered
several possible solutions. Here is the one that worked
for me, a patch to the registry:

"2. Check the RasMan key in the registry

Do not use a registry editor to modify the Windows
registry unless you have no alternative. Registry editors
bypass standard safeguards provided by administrative
tools which prevent loss of performance or damage to your
operating system. Editing the registry directly can have
serious, unexpected consequences that may prevent the
system from starting and may require a reinstallation of
the operating system.

- Click Start, go to Run, and choose "Regedit"

- Browse to the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan

- Select RasMan, click on the "Registry" pulldown
menu, and choose "Export Registry File."

- Save this key somewhere easily accessible, and
call it "rasman."

(The .reg extension is added
automatically).

- Once the key has been saved, expand RasMan.

- Browse to PPP\EAP.

- The only subkeys here should be 13 and 4.
Delete the 25 and 26 subkeys."

Contact me directly if you want further
information/details.

 

[Praxis]

Thank you for the suggestion, Vince. Unfortunately I tried deleting
those two keys, but even after rebooting I still am getting the
"invalid name" message when I try to make a DUN connection.

When I try to start the Remote Access Connection Manager in Services I
still get the following MMC message:

"Could not start the Remote Access Connection Manager service
on Local Computer. Error 1053: The service did not respond to the
start or control request in a timely fashion."

Trying to start the Remote Access Auto Connection Manager gave me:

"Could not start the Remote Access Auto Connection Manager
service on Local Computer. Error 1068: The dependency service or
group failed to start."

On the plus side, I was able to reenable RasAuto and RasMan as
automatic in Services and boot up without incident after deleting
subkeys 25 & 26.

I'd be interested in seeing the other possible solutions that
Microsoft sent, you, though.


Thanks again,

 

[Tosfield]

Hi there,

One of my client as the same problem ..

OS: Win2000 FR, SP3

As I can understand, the Client has got an e-mail with virus inside.
Norton as detected it, but no remove action, just quarentaine, with a
message said somthing like "please wait 3 days, and you'll received an
update to remove this virus".

So, no more ADSL connexion...
And if I start manualy the RAS manager, win2k give an error 5 "Access
Denied" back.

The new information, that's appear to come from an virus (maybe trojan
?) and that broke RAS manager setup..

If you have any kind of direction to look ..
Regards

--Tosfield