1 Reply Latest reply on Dec 4, 2008 9:34 AM by Jake-in-US

    Agent Issue

      We are using ePO 4, now with patch 3 installed, and McAfee Agent 4 with patch 1. We have one server with a problem. It is running Windows Server 2003 with service pack 2. After I install the McAfee agent, I see this in ePO in the Activity Log:

      Tuesday, December 02, 2008 7:22:20 AM Error Framework Service Failed to start Subsystem <Management>, result=-1
      Tuesday, December 02, 2008 7:22:20 AM Info Updater Subsystem started
      Tuesday, December 02, 2008 7:22:20 AM Info Scheduler Scheduler is now running
      Tuesday, December 02, 2008 7:22:20 AM Info Agent Generating Agent key pair...
      Tuesday, December 02, 2008 7:22:20 AM Error Agent Generating private key FAILED
      Tuesday, December 02, 2008 7:22:20 AM Error Agent Failed to generate Agent Key pair
      Tuesday, December 02, 2008 7:22:20 AM Info Agent Agent will connect to Server in randomized 10 minutes interval
      Tuesday, December 02, 2008 7:22:20 AM Info Agent Agent will connect to Server in : 1 minutes and 14 seconds
      Tuesday, December 02, 2008 7:22:20 AM Info Agent Next policy enforcement in 5 minutes


      In the Agent log, I see this:

      2008-12-02 07:22:20 E #4296 Logging addAgentInfoToLog GUID query error 2
      2008-12-02 07:22:20 I #4296 FrmSvc START cmdline=FrameworkService.exe /ServiceStart
      2008-12-02 07:22:20 I #4296 FrmSvc ServiceStart
      2008-12-02 07:22:20 I #4296 FrmSvc Running
      2008-12-02 07:22:20 I #4296 FrmSvc Starting Subsystem <Logging>
      2008-12-02 07:22:20 x #4296 Logging Subsystem started
      2008-12-02 07:22:20 I #4296 FrmSvc Starting Subsystem <User Space Controller>
      2008-12-02 07:22:20 E #4208 Logging addAgentInfoToLog GUID query error 2
      2008-12-02 07:22:20 I #4208 FrmSvc START cmdline="C:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart
      2008-12-02 07:22:20 I #4208 FrmSvc ServiceStart
      2008-12-02 07:22:20 I #4208 FrmSvc Running
      2008-12-02 07:22:20 I #4292 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:20 e #4296 FrmSvc Failed to start Subsystem <User Space Controller>, result=-13
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Logging>
      2008-12-02 07:22:20 x #2444 Logging Subsystem started
      2008-12-02 07:22:20 I #4296 FrmSvc Starting Subsystem <Management>
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <User Space Controller>
      2008-12-02 07:22:20 I #1128 Manage Mangement plugin watch worker thread started
      2008-12-02 07:22:20 I #4292 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:20 I #4296 Manage CManage::Start() Initialize() -- failed result=-13(0xfffffff3)
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Management>
      2008-12-02 07:22:20 I #5872 Manage Mangement plugin watch worker thread started
      2008-12-02 07:22:20 I #1128 Manage WorkThread - WaitForMultipleObjects = WAIT_OBJECT_0
      2008-12-02 07:22:20 I #1128 Manage Mangement plugin watch worker thread terminating
      2008-12-02 07:22:20 I #4296 Manage call CManage::Deinitialize() -- because result=-13(0xfffffff3)
      2008-12-02 07:22:20 e #4296 FrmSvc Failed to start Subsystem <Management>, result=-13
      2008-12-02 07:22:20 I #2444 Manage CManage::Start() InitializePolicies() -- failed result=-1(0xffffffff)
      2008-12-02 07:22:20 I #5872 Manage WorkThread - WaitForMultipleObjects = WAIT_OBJECT_0
      2008-12-02 07:22:20 I #5872 Manage Mangement plugin watch worker thread terminating
      2008-12-02 07:22:20 I #2444 Manage call CManage::Deinitialize() -- because result=-1(0xffffffff)
      2008-12-02 07:22:20 e #2444 FrmSvc Failed to start Subsystem <Management>, result=-1
      2008-12-02 07:22:20 I #4296 FrmSvc Starting Subsystem <Updater>
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Updater>
      2008-12-02 07:22:20 I #2444 updsubs Starting updater subsystem
      2008-12-02 07:22:20 i #2444 Updater Subsystem started
      2008-12-02 07:22:20 I #4292 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:20 I #5604 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:20 e #4296 Updater
      2008-12-02 07:22:20 e #4296 FrmSvc Failed to start Subsystem <Updater>, result=-13
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Scheduler>
      2008-12-02 07:22:20 I #2444 Sched >>--CSchedule::Start
      2008-12-02 07:22:20 I #2444 Sched Glbs.szMyPlatform: WXPS:5:2:2
      2008-12-02 07:22:20 I #2444 Sched All the tasks are successfully loaded from the file
      2008-12-02 07:22:20 i #2444 Sched Scheduler is now running
      2008-12-02 07:22:20 I #2444 Sched <<--CSchedule::Start
      2008-12-02 07:22:20 I #4296 FrmSvc Starting Subsystem <Scheduler>
      2008-12-02 07:22:20 I #4296 Sched >>--CSchedule::Start
      2008-12-02 07:22:20 I #4292 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:20 E #4296 Sched pFactory->RegisterFrameworkCallback--CSchedule::InitFwInterface hr=0xfffffff3 : Unknown error code
      2008-12-02 07:22:20 E #4296 Sched <<--CSchedule::InitFwInterface hr=0xfffffff3 : Unknown error code
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Agent>
      2008-12-02 07:22:20 I #2444 Agent Subsystem starting...
      2008-12-02 07:22:20 i #2444 Agent Generating Agent key pair...
      2008-12-02 07:22:20 e #2444 Agent Generating private key FAILED
      2008-12-02 07:22:20 e #2444 Agent Failed to generate Agent Key pair
      2008-12-02 07:22:20 I #5824 Agent Agent communication thread started
      2008-12-02 07:22:20 i #4704 Agent Agent will connect to Server in randomized 10 minutes interval
      2008-12-02 07:22:20 I #2444 Agent Subsystem started
      2008-12-02 07:22:20 I #924 Agent Agent Immediate Events worker thread started
      2008-12-02 07:22:20 I #4704 Agent Agent worker thread started
      2008-12-02 07:22:20 i #4704 Agent Agent will connect to Server in : 1 minutes and 14 seconds
      2008-12-02 07:22:20 I #4080 Agent Agent event worker thread started
      2008-12-02 07:22:20 i #5176 Agent Next policy enforcement in 5 minutes
      2008-12-02 07:22:20 E #4296 Sched <<--CSchedule::Start hr=0x80004005 : Unspecified error
      2008-12-02 07:22:20 e #4296 FrmSvc Failed to start Subsystem <Scheduler>, result=-2147467259
      2008-12-02 07:22:20 I #2444 FrmSvc Starting Subsystem <Listen Server>
      2008-12-02 07:22:20 I #4620 LstnSvr CAsyncSocket::StartListening (SOCK_STREAM) LISTENING... TRUE
      2008-12-02 07:22:20 x #2444 LstnSvr Subsystem started
      2008-12-02 07:22:21 I #4296 FrmSvc Starting Subsystem <Agent>
      2008-12-02 07:22:21 I #4296 Agent Subsystem starting...
      2008-12-02 07:22:21 i #4296 Agent Generating Agent key pair...
      2008-12-02 07:22:21 e #4296 Agent Generating private key FAILED
      2008-12-02 07:22:21 e #4296 Agent Failed to generate Agent Key pair
      2008-12-02 07:22:21 I #2444 FrmSvc Starting Subsystem <Trusted Connection>
      2008-12-02 07:22:21 I #2444 TrstCon Start
      2008-12-02 07:22:21 I #2444 FrmSvc Service started
      2008-12-02 07:22:21 I #5604 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:21 e #4296 FrmSvc Failed to start Subsystem <Agent>, result=-13
      2008-12-02 07:22:21 I #4296 FrmSvc Starting Subsystem <Trusted Connection>
      2008-12-02 07:22:21 I #4296 TrstCon Start
      2008-12-02 07:22:21 I #4292 FrmSvc User SID is S-1-5-21-1788567730-1232475711-604069369-1215 and SessionID is 2
      2008-12-02 07:22:21 e #4296 FrmSvc Failed to start Subsystem <Trusted Connection>, result=-13
      2008-12-02 07:22:21 I #4296 FrmSvc Service started

      This is the only machine I am having trouble with. Any help is appreciated.

      Jake