Events 203 and 210 - ServerProtect for Microsoft Windows/Novell Netware

Events 203 and 210 appear when the ServerProtect for Microsoft Windows/Novell Netware service cannot be restarted

- Updated:
- 24 Nov 2016
- Product/Version:
- ServerProtect 5.8
- ServerProtect for Microsoft Windows/Novell Netware 5.8
- Platform:
- Windows 2000 Advanced Server
- Windows 2000 Server
- Windows 2003 Datacenter Server
- Windows 2003 Enterprise Server
- Windows 2003 Standard Server Edition
- Windows 2008 Enterprise Server
- Windows 2008 Standard Server Edition

To resolve the issue:

Open the Task Manager.
Click the Process tab. Check if Spntsvc.exe is listed. This is the process to be terminated.
Terminate the process.
If this does not work, then follow these steps:
1. Write down the PID of the Spntsvc.exe process.
2. Open a DOS prompt and change the command line to point to the ServerProtect's home directory.
3. Execute this command:
  spntsvc /x 12345
  
  Where: 12345 is the PID of the Spntsvc.exe process.
4. Watch out for any further spntsvc process instance. You can now try to kill process instances.
Restart the ServerProtect service.

Download and apply the latest patch for ServerProtect.

If you encounter issues when applying the Patch, do the following:

Note: Take note of the any scheduled task running during the Service crash>

Enable spnt.log debugging before the Trend service crash. The spnt.log on the registry.
Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
1. Open the regedit file and go to HKEY_LOCAL_MACHINE\Software\TrendMicro\DebugLog\SPNT.
  Note: Create this file if it does not exist.
  Create or modify the String value HomeDirectory to the preferred complete path and filename for the log (Example: C:\spnt.log).
2. Create or modify the DWORD value MethodMask to 0x00000002 (2).
3. Create or modify the DWORD value ModuleMask to 0xFFFFFFFF (4294967295).
4. Create or modify the DWORD value TypeMask to 0x00000003 (3).
5. Close the registry editor.
  Note: Make sure there is enough disk space on the target drive to hold the log.
6. Gather the SPNT.log file and turn off the debug by turning off the spnt.log file by following the same procedure as enabling it but this time set MethodMask and ModuleMask to 0x00000000 (0).
Get the drwtsn32.log. To enable Doctor Watson, refer to the following Microsoft solution article: How to disable or enable Dr. Watson for Windows.
Latest application and system event logs.
Export copy of SPROTECT directory list with version and build number to verify if the latest Patches has been applied successfully on the Normal Server.
The admin.csv of both the Information and Normal Server. This is typically located at:\Program Files\Trend\Sprotect directory.
Get a copy copy of the spntlog.dbf & spntlog.cdx. These are usually located at:\Program Files\Trend\SProtect\SpntLog\ directory.

Need More Help?

Events 203 and 210 appear when the ServerProtect for Microsoft Windows/Novell Netware service cannot be restarted