Event ID: 16385 windows server 2012 R2

Question

Failed to schedule Software Protection service for re-start at 2121-08-08T11:41:21Z. Error Code: 0x800719F3.

I'm getting an error message twice in a minute, when i open server manager dashboard on all servers panel.

As per the event ID i have searched in the Microsoft community & followed the steps as per mentioned in the documentation forum.

But my problem not solved.

• I was getting the same event error message repeatedly.
• As mentioned in the documentation forum, i have checked the SPP folder's security has a read permission for Network service & it was marked as read for Network Service.

*As mentioned I have verified the Task Scheduler for SPP & found that there were 3 entries:

         SVC restart task as ready

         SVC restart task logon as disabled

         SVC restart task network as disabled

• When i try to enable any of these disabled tasks I was getting a dialogue box stating that "The sate could not be modified as requested".

So, I tried to restart the service of SPPSVC & checked after a while but the event error is still continuing on the event log.

Please find the XML view of the error:

• <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
• <System> <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" /> <EventID Qualifiers="49152">16385</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2021-09-01T12:09:08.000000000Z" /> <EventRecordID>32987700</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>XXXxxxx</Computer> <Security /> </System>
• <EventData> <Data>0x800719F3</Data> <Data>2121-08-08T12:09:08Z</Data> </EventData> </Event>

Regards,

Vikky

Answer 1

Hi @VIkky384

Can you give this a try

1. Open the Computer Management tool, and then navigate to Configuration -> Task Scheduler -> Task Scheduler Library -> Microsoft -> Windows -> SoftwareProtectionPlatform.
2. On the General tab of SoftwareProtectionPlatform, select the security options, and then verify that the Software Protection Platform service is set to use the NETWORK SERVICE account.
3. In Windows Explorer, browse to the C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform folder, and then verify that the NETWORK SERVICE account has Read permissions for that folder.
4. Restart the Software Protection service if it is running.

Hope this Answers all your queries , if not please do repost back .
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 2

Maybe this one.
https://blogs.msmvps.com/alunj/2013/09/22/security-spp-errors-in-the-event-log-every-thirty-seconds/

--please don't forget to upvote and Accept as answer if the reply is helpful--