Already done actions:

- Verified that the setting for NT AUTHORITY\NETWORK SERVICE is set to 1 (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl).
- Deleted all the files in "C:\Windows\system32\IAS" and copied file "dnary.xsd" from healthy 2008 r2 server
- Ran: sfc /scannow
- Removed DNS server role
- Uninstalled Windows Server Backup feature
- Uninstalled (Windows process activation Service support; TCP Activation, Named Pipes Activation, NET Framework 3.5.1 Features WCF activation-Non HTTP Activation)
- Uninstalled MS TMG 2010 (we will reinstall it after we will be able to install Network policy server role)

Routing and remote Access Service is installed
Remote Acesss service is installed
Routing is installed

Only network policy server is unable to be installed.
any other hints guys?

Also removed:
Network load balancing tools
Remote assistance
Remote Server Administration tools

Anyone?

Hi Bostjan,

In addition to the resolutions you have tried, NPS installation failure may be caused by network service account permission on folder windows\system32\IAS.

In folder windows\system32\IAS, network service account should have read/write/modify permission, in order to test, we may configure it with full control, and check if it will work.

Besides, does NPS fail to start after dcpromo? If so, we may add authenticated users to the Builtin\pre windows 2000 compatible access group, then restart the server to apply the changes.

Best regards,

Anne he

Anne thank you for your Reply.

We already gave FULL CONTROL to network service on that folder and that didn't help.

Server isn't DC so there were no dcpromo commands.

Unfortunatelly we ended up with reinstallin the OS :(

But if you have any other hints what could we had tried let me know.

with best regards