RRAS broken, Windows 2003 R2 64-bit

[JSA]

I'm attempting to enable RRAS on a DC to be deployed in our DR site. When
RRA service is installed, I get a "Remote Access Policies Error" and a
"Logging Error" that both state "An error occurred while trying to make a
connection to the datastore." The system log shows that RRAS is started,
then the IAS Jet Database Access service is sent a start command, then the
following entries:

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 3/10/2009
Time: 3:53:51 PM
User: N/A
Computer: BuggeredBox
Description:
The IAS Jet Database Access service entered the stopped state.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/10/2009
Time: 3:53:51 PM
User: N/A
Computer: BuggeredBox
Description:
The IAS Jet Database Access service terminated with the following error:
The class is configured to run as a security id different from the caller

Event Type: Error
Event Source: RemoteAccess
Event Category: None
Event ID: 20152
Date: 3/10/2009
Time: 3:54:21 PM
User: N/A
Computer: BuggeredBox
Description:
The currently configured authentication provider failed to load and
initialize successfully. Access is denied.
Data:
0000: 05 00 00 00 ....

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 3/10/2009
Time: 3:54:23 PM
User: N/A
Computer: BuggeredBox
Description:
The Routing and Remote Access service entered the stopped state.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Date: 3/10/2009
Time: 3:54:23 PM
User: N/A
Computer: BuggeredBox
Description:
The Routing and Remote Access service terminated with service-specific error
5 (0x5).

The culprit appears to be the IAS Jet Database Access service. I installed
IAS from Add/Remove components - No sir. I uninstalled IAS. Thinking
database corruption, I tried reloading the IAS database files from CD - No
sir. I reverted to the originals. I also registered several .dlls which I
now believe are unrelated (oledb32.dll, oledb32r.dll, and vbscript.dll). In
all cases, the IAS Jet ... service fails with the error above. When
attempting to start just the IAS Jet ..., I get this popup:
"Could not start the IAS Jet Database Access service on Local Computer.
Error 0x80004015: The class is configured to run as a security id different
from the caller"

Side Note: Shouldn't the "as" in "The class is configured to run as a
security id different from the caller" be a "with"? If not, why not?

How do I reinstall just the IAS Jet Database Access service? Will this even
correct the security ID discrepency? Can I change the security id a class
runs "as" without breaking other things?

The servier is virtualized - VMWare. It's Windows Server 2003 R2 Service
pack 2 64-bit. It runs more services than I'd like it to - DNS, WINS, DHCP,
DFS - but it's supposed to run standalone in a disaster scenario. The
hardware is capable.

Please let me know if there are any other details that might help.

TIA,
Jim

 

[Bogdan]

I recently had the same on an Win XP x64. The way I solved it was to
delete the security descriptors from the registry for the IASJet service
to force it to apply default ones. Export and then delete the following
keys (do export first, just in case):

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{A5CEB593-CCC3-486B-AB91-9C5C5ED4C9E1}

HKEY_LOCAL_MACHINE\\SYSTEM\CurrentControlSet\Services\IASJet\Security

Start the "IAS Jet Database Access" service and then the RRAS service.
It should now work.

Additionally, you might also want to make RRAS dependent on IASJet so it
starts the IASJet service before it starts itself. Otherwise it may fail
to start with the 7024 error in the eventlog, saying

"The Routing and Remote Access service terminated with service-specific
error 340 (0x154)."

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Description:
The Routing and Remote Access service terminated with service-specific
error 340 (0x154).

Just edit the registry for the RemoteAccess service at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess and
add "IASJet" to the list of DependOnService value (note that the
services need to be separated by new lines, not spaces).

Cheers

 

[Bogdan]

Just edit the registry for the RemoteAccess service at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess and
add "IASJet" to the list of DependOnService value (note that the
services need to be separated by new lines, not spaces).

P.S. You need to reboot after adding the IASJet dependency to RemoteAccess.

 

[Bogdan]

Just edit the registry for the RemoteAccess service at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess and
add "IASJet" to the list of DependOnService value (note that the
services need to be separated by new lines, not spaces).

P.S. You need to reboot after adding the IASJet dependency to
RemoteAccess. My dependency list for RemoteAccess now looks as follows
(ignore the double quotes but not the new lines):

"RpcSS
IASJet
"

Cheers

 

[sa]

Bogdan!

Thanks! U save a lot of my time!