The Windows Agent service terminated unexpectedly.
I'm seeing a never ending stream of event logs which say "The Windows Agent service terminated unexpectedly." The service is set to auto start but is dying without much explaination in the event log.If I try to manually start the service I get "Error 1067. The process terminated unexpectedly."The machine is running 32-bit Server 2003 with all service packs and patches applied.The only sympton that I can see is thatour Subversion server (running under Apache) can no longer connect to my AD via LDAP to authenticateour users.It has been working for over a year and unexpectedly stopped a few days ago when the Windows Agent service messages started appearing.Any thoughts on how to coax more diagnostics out of the server so I can get to the root of this?Thx
November 30th, 2009 7:33pm
Hello Freelancer,
Based on your description, I understand that you are experiencing an issue with Windows Agent Service.
According to the error message, most likely this issue is caused by permission missing for the Network Service Account on a different registry key.
Note: permissions to this hive is usually inherited from the root of HKCR so you can just make sure that one of these groups has read access to HKCR.
To isolate the root cause, you can use the process monitor to monitor the Registry activities when the issue occurs.
Please follow the steps below:
Use Process Monitor to monitor the process while installing the package
a) Download Process Monitor. To do this, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
b) Click Download Process Monitor and then click Save.
c) Save the file in a folder of your choice.
d) Right-click the file that you downloaded, and then click Extract to.
e) Specify where you want to extract the file, and then click Extract.
f) Double Click the Procmon.exe to start Process Monitor.
g) In the File menu, tick off Capture Events.
h) Click Clear in the tool bar.
i) Select the events type Registry Activities in the tool bar
j) Tick on Capture Events in the File Menu.
k) Reproduce the issue.
l) On the File menu, click Save to save the Process Monitor log file.
m) Under Events to save, click to select the All events check box.
n) Under Format, click to select the Native Process Monitor Format (PML) check box.
o) In the Path box, specify a location on the local hard disk where you want to save the file.
p) Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give us the download address.
Please let me know if you have any questions or concerns.
Best Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
December 1st, 2009 7:20am
Hi ,Please follow wilson suggestion and can you please paste the entire event log without editing ?
December 1st, 2009 7:28am
Thanks for the prompt feedback.On investigation, The Windows Agent is attempting to run as "Local System". "System" has Full Control permissions on the CLSID hive.Unedited event log from the procedure described by Wilson has been uploaded to http://cid-eb37ad0fe972744b.skydrive.live.com/self.aspx/.Public/FL486.PMLThanks again for your assistance.
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2009 5:05pm
Hi Freelancer486,Thank you for your upload.Did you run a Exchange server on your Windows 2003 server? If so, please check the KB http://support.microsoft.com/kb/q247769/.Meanwhile, please boot the server into safe mode to see if the issue continues. In addition, can you please let us know the process name of"Windows agent service"and paste a screen shot of it?Best Regards,Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.
December 3rd, 2009 1:01pm


