Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Events 203 and 210 appear when the ServerProtect for Microsoft Windows/Novell Netware service cannot be restarted

    • Updated:
    • 24 Apr 2013
    • Product/Version:
    • ServerProtect for Microsoft Windows/Novell Netware 5.8
    • Platform:
    • Windows 2000 Advanced Server
    • Windows 2000 Server
    • Windows 2003 Datacenter Server
    • Windows 2003 Enterprise Server
    • Windows 2003 Standard Server Edition
    • Windows 2008 Enterprise Server
    • Windows 2008 Standard Server Edition
Summary
The SPNT Normal Server shows a STOP sign and any attempt to restart the service fails.
The following events appear in the Event Viewer System Logs when the new start service is found to be a duplicate:
  • 203 - RPC Server start error! Return Code: 1740
  • 210 - ServerProtect service could not be started! Return Code 1114
Details
Public
To resolve the issue:
  1. Open the Task Manager.
  2. Click the Process tab. Check if Spntsvc.exe is listed. This is the process to be terminated.
  3. Terminate the process.
    If this does not work, then follow these steps:
    1. Write down the PID of the Spntsvc.exe process.
    2. Open a DOS prompt and change the command line to point to the ServerProtect's home directory.
    3. Execute this command:
      spntsvc /x 12345
      Where: 12345 is the PID of the Spntsvc.exe process.
    4. Watch out for any further spntsvc process instance. You can now try to kill process instances.
  4. Restart the ServerProtect service.
Download and apply the latest patch for ServerProtect.
If you encounter issues when applying the Patch, do the following:
Note: Take note of the any scheduled task running during the Service crash>
  1. Enable spnt.log debugging before the Trend service crash. The spnt.log on the registry.
    Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
    1. Open the regedit file and go to HKEY_LOCAL_MACHINE\Software\TrendMicro\DebugLog\SPNT.
      Note: Create this file if it does not exist.
      Create or modify the String value HomeDirectory to the preferred complete path and filename for the log (Example: C:\spnt.log).
    2. Create or modify the DWORD value MethodMask to 0x00000002 (2).
    3. Create or modify the DWORD value ModuleMask to 0xFFFFFFFF (4294967295).
    4. Create or modify the DWORD value TypeMask to 0x00000003 (3).
    5. Close the registry editor.
      Note: Make sure there is enough disk space on the target drive to hold the log.
    6. Gather the SPNT.log file and turn off the debug by turning off the spnt.log file by following the same procedure as enabling it but this time set MethodMask and ModuleMask to 0x00000000 (0).
  2. Get the drwtsn32.log. To enable Doctor Watson, refer to the following Microsoft solution article: How to disable or enable Dr. Watson for Windows.
  3. Latest application and system event logs.
  4. Export copy of SPROTECT directory list with version and build number to verify if the latest Patches has been applied successfully on the Normal Server.
  5. The admin.csv of both the Information and Normal Server. This is typically located at:\Program Files\Trend\Sprotect directory.
  6. Get a copy copy of the spntlog.dbf & spntlog.cdx. These are usually located at:\Program Files\Trend\SProtect\SpntLog\ directory.
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
0120459
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.