I installed updates on my Server 2008 Domain controller and this morning we are unable to connect via VPN. After looking in network connections I noticed that my Incoming connections has disappeared. After trying to create a new incoming connection I receive the error: Windows could not createe your connection Incoming connections depend on the Routing and Remote Access service, which was unable to start. After attempting to start the Routing and Remote Access service I received the error: The Routing and Remote Access service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs. In the event viewer after attempting to start the RAS I get: Log Name: System Source: Service Control Manager Date: 10/15/2009 10:41:00 PM Event ID: 7024 Task Category: None Level: Error Keywords: Classic User: N/A Computer: TPMAIN.TERRA.COM Description: The Routing and Remote Access service terminated with service-specific error 16389 (0x4005). Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7024</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-10-16T03:41:00.000Z" /> <EventRecordID>91502</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>TPMAIN.TERRA.COM</Computer> <Security /> </System> <EventData> <Data Name="param1">Routing and Remote Access</Data> <Data Name="param2">16389 (0x4005)</Data> </EventData> </Event> And a warning: Log Name: System Source: Microsoft-Windows-RasSstp Date: 10/15/2009 10:40:58 PM Event ID: 18 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: TPMAIN.TERRA.COM Description: The Secure Socket Tunneling Protocol service either could not read the SHA256 certificate hash from the registry or the data is invalid. To be valid, the SHA256 certificate hash must be of type REG_BINARY and 32 bytes in length. SSTP might not be able to retrieve the value from the registry due to some other system failure. The detailed error message is provided below. SSTP connections will not be accepted on this server. Correct the problem and try again. The system cannot find the file specified. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-RasSstp" Guid="{6c260f2c-049a-43d8-bf4d-d350a4e6611a}" EventSourceName="RasSstp" /> <EventID Qualifiers="0">18</EventID> <Version>0</Version> <Level>3</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-10-16T03:40:58.000Z" /> <EventRecordID>91497</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>TPMAIN.TERRA.COM</Computer> <Security /> </System> <EventData> <Data Name="Error Message">The system cannot find the file specified. </Data> </EventData> </Event> The updates installed last night were Security Update for Windows Server 2008: KB971486 KB974571 KB975467 KB975517 I am at a loss and our users are unable to connect via VPN because of this. I appreciate any help possible. Thanks

Hi Jwg06, thank you for posting in windows serve forum, please follow the link below and report back the results.http://technet.microsoft.com/en-us/library/cc756369(WS.10).aspxKB 971486 will update files related to mup , ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exeKB 974571 is the office communication server update KB 975467 is the LSASS update for windows 2008 and other OS platformsKB 975517 is the SMB vulnerability patch.I am not sure if LSASS update could cause the problem . sainath !analyze

The only other Event ID I have under the Service Control Manager Eventlog Provider is 7036 which involves LiveUpdate.When running sc query RemoteAccess, the Source Exit code is 16389.Thanks

hi Jwg06, Thanks for th info , can you please take a look at the below article http://support.microsoft.com/kb/947031 The above article should help you.sainath !analyze

Hi, This problem may be caused by corrupt files. Please refer to the suggestions below: 840686 You cannot start the Routing and Remote Access service on a Windows 2000 Server-based computer or on a Windows Server 2003-based computer http://support.microsoft.com/default.aspx?scid=kb;EN-US;840686 Thanks. This posting is provided "AS IS" with no warranties, and confers no rights.