990x.top

Простой компьютерный блог для души)

Microsoft-Windows-Security-SPP — что это за ошибка и как исправить?

Приветствую. Мы пользуемся многими программами, часть из которых — платные. Однако не все хотят платить и предпочитают использовать уже активированные версии, которые могут содержать не только вирусы, но и вызвать ошибки в журнале Windows.

Microsoft-Windows-Security-SPP — что это такое?

Ошибка, которая возникает при проблемах лицензирования ПО.

У некоторых пользователей при этом еще подвисает система.

Может появляться из-за использования взломанного софта. Например часто устанавливают взломанный Офис, при этом могут блокироваться некоторые защитные механизмы Windows, из-за чего собственно и может быть ошибка. Однако ошибка сама некритичная.

Взломанный софт при установке может останавливать службу SPPSVC, полное название которой — Служба платформы защиты программного обеспечения Майкрософт. Разумеется из-за этого могут быть ошибки как в журнале Windows, так и в ее работе.

Есть разные коды ошибки, например 8198. При этом в описании может упоминаться название slui.exe, а это процесс имеет отношение к активации Windows (возможно также и к софту Microsoft). Здесь также — ошибка может быть из-за использования хакерского софта для взлома Windows. Особенно учитывая, что файл slui.exe запускается из папки, в названии которой упоминается SPP:

Вообще существует еще служба Служба уведомления SPP, которая необходима для активации ПО, а также для уведомлений (как понимаю связанных с активацией). Данная служба может спокойно иметь отношение к сообщениям Security-SPP.

Пример ошибки, где в описании сразу указана примерная причина:

slui.exe — часто это именно из-за использования взломанной версии Windows. Но иногда ошибка бывает если изменилась конфигурация компьютера, тогда лицензия слетает (имею ввиду ситуацию когда лицензия привязана к железу).

Решение ошибки

Способ #1.

Нужно предоставить полные права на папку:

При этом полные права нужно дать именно учетке Network Service.

После этого нужно перезапустить службу SPPSVC при помощи командной строки. Запускаем командную строку от администратора, в Windows 10 достаточно зажать Win + X и выбрать соответствующий пункт. В семерке в диспетчере задач выбираем Файл > пишем cmd и ставим галочку запускать от админа. Сами команды, первая — net stop sppsvc и вторая — net start sppsvc . Первая останавливает, вторая запускает службу.

Также можете посмотреть тему на офф форуме Microsoft, возможно будет полезно.

Способ #2.

Возможно вы недавно ставили взломанный софт, репак какой-то. Попробуйте удалить, возможно ошибка прекратит появляться. Чтобы удалить — используйте штатные возможности Windows:

1. Зажмите Win + R, появится окошко Выполнить, вставьте команду appwiz.cpl, нажмите ОК.
2. Откроется окно установленного софта. Здесь будет колонка с датой установки, можете нажать по ней и отсортировать программы, так вы сможете понять какое ПО было установлено недавно.
3. Удалить просто: нажимаете правой кнопкой > выбираете Удалить. Появится мастер удаления, обычно нужно нажимать Далее/Next/Удалить/Uninstall.

На форуме Microsoft читал что сообщения Security-SPP могут быть также из-за использования всяких чистилок, оптимизаторов системы, удаляторов типа Revo Uninstaller. Поэтому если у вас есть что-то подобное — то возможно стоит удалить и проверить.

Способ #3.

Не уверен что поможет, но не повредит точно. По крайней мере это рекомендуют сделать на форуме Microsoft — проверить систему командой sfc /scannow, которая восстанавливает поврежденные и отсутствующие системные файлы. Запустите командную строку от администратора (выше писал как), далее вставляете команду:

Если у вас SSD, то проверка будет намного быстрее, чем на жестком диске.

Если будут обнаружены какие-то поврежденные файлы, то они будут заменены на оригинальные, которые хранятся здесь:

Microsoft-Windows-Security-SPP Event ID 16385

I I have been having a lot of issues with Windows 10. So I have stepped back from addressing each of those issue and target the Event Viewer Errors to try to correct my issues with Windows 10. I have searched for a fix for this issue and most of the results come back to «Failed to schedule Software Protection service for restart»

My Task Scheduler service is running.

NETWORK SERVICE account has Read permissions for that folder

I have restarted Restart the Software Protection service

I am still getting this error in my Event Viewer.

How can I correct this issue?

Replies (4) 

We regret for the inconvenience. Let me assist you to resolve the issue.

Before we proceed, let us know a few more details on the below questions.

What is the edition of Windows 10 installed in your computer?

What are the exact issues you are facing when you say ‘ I have been having a lot of issues’ ?

Did you make any changes to the computer prior to the issue? Also, is it an abrupt issue?

Do have any System Restore point set in Windows prior to the issue?

Did you check if the same issue occurs when you log in to Windows using a different Local Administrator user account?

As an initial recommendation, I suggest you to b oot the computer in safe mode with networking, and check if the issue still persist. This is a diagnostic step towards identifying and isolating the possible cause/s of the issue.

Safe Mode With Networking:

Safe mode is a troubleshooting option for Windows that starts your computer in a limited state. Only the basic files and drivers necessary to run Windows are started. The words Safe Mode appear in the corners of your monitor to identify which Windows mode you’re using.

Once this is done, reboot the computer in normal mode and check.

If the issue does not occur in Safe mode, try to place the computer in a Clean Boot state and check if there are any third party application/software to be causing the issue.

A clean boot is performed to start Windows by using a minimal set of startup programs. This helps eliminate software conflicts.

Disclaimer: Please go through the section: How to reset the computer to start as usual after troubleshooting with clean boot of the Kb article to boot the computer in normal startup after fixing the issue.

Now, follow the below methods and check if it helps to resolve the issue.

Method 1

This issue may happen due to system file corruption. I suggest you to run System file checker. System File checker (SFC) scan is done to check if there are any corrupted system files that could be causing this issue. Kindly follow the below given steps:

Press Windows key + X , select Command prompt (Admin) to bring up elevated Command prompt.

In Command prompt type sfc /scannow and press enter.

Restart the computer.

Method 2

If no corrupted system files were found in the previous state or were irrecoverable, then I suggest you to try the following steps to deploy the DISM command lines:

Press Windows key + X.

Click command prompt (Run as administrator).

In the Administrator: Command Prompt window, type the following commands. Press Enter key after each command:

DISM.exe /Online /Cleanup-image /Scanhealth

DISM.exe /Online /Cleanup-image /Restorehealth

Important: When you run this command, DISM uses Windows Update to provide the files that are required to fix corruptions.

To close the Administrator: Command prompt window, type Exit, and then press Enter.

Click here for more information about running the DISM Tool.

Write to us with the updated status and the required information related to the performance issues you are facing in Windows 10, for us to be able to assist you further.

1 person found this reply helpful

Was this reply helpful?

Sorry this didn’t help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

OS: Windows 10 (Build 10240)

Known Issues :
Windows running slow My PC can take up to 4 min to load with all apps disabled on startup.
Internet Explorer, Firefox: Crashing, freezing and becoming unresponsive
File Explorer: Freezing Crashing and/or becoming unresponsive
Adobe Flash Player: Crashing
Windows Defender: Not operating (I feel this issue is in Group Policy’s)

I have scanned my PC with Spybot Search and Destroy, Malwarebytes, Junkware Removal Tool and Microsoft Safety Scanner

As for changes to my system. All these errors have occurred over time. I thought my main issue was with adobe drives, Video drivers in conjunction with Windows 10
As issues started getting worse. I was not aware of what initially caused the errors.
No System restore points.
I am administrator and the only one on this PC.
I have updated all graphic drivers for my video card

I have already run
troubleshooter — System maintenance — found no issues even while the issues are occuring.
scf /scannow —
chkdsk -r
Dism /OnLine /Cleanup-Image /AnalyzeComponentStore
Dism /OnLine /Cleanup-Image /StartComponentCleanup /ResetBase
Dism /OnLine /Cleanup-Image /Checkhealth
Task Manager — Startup — Disabled all non ms programs from startup.

And I still get these issues along with the Known Issues above.
Event Viewer
Error 6/16/2016 1:32:47 PM disk 7
Error 6/16/2016 1:43:57 AM AppModel-Runtime 69
Error 6/16/2016 9:55:14 AM DistributedCOM 10016
Error 6/16/2016 11:23:39 AM ESENT 413 Logging/Recovery
Error 6/16/2016 11:21:54 AM ESENT 455 Logging/Recovery
Error 6/16/2016 11:23:39 AM ESENT 488 General
Error 6/16/2016 1:43:57 AM AppModel-Runtime 69
Error 6/16/2016 2:08:59 PM DeviceSetupManager 131
Error 6/16/2016 11:21:54 AM ESENT 490 General
Error 6/16/2016 1:31:51 PM CAPI2 513
Error 6/16/2016 10:44:31 AM Application Error 1000 (100)
Error 6/16/2016 9:55:54 AM Application Hang 1002 (101)
Error 6/16/2016 2:08:58 PM Dhcp-Client 1002 Address Configuration State Event
Error 6/16/2016 9:59:54 AM HP Active Health 1100
Error 6/16/2016 10:00:11 AM HP Active Health 401
Error 6/16/2016 9:55:50 AM Apps 2486 (2414)
Error 6/16/2016 9:55:23 AM Apps 5973 (5973)
Error 6/16/2016 9:53:54 AM Service Control Manager 7000
Error 6/16/2016 9:53:23 AM Service Control Manager 7001
Error 6/16/2016 9:53:54 AM Service Control Manager 7009
Error 6/16/2016 9:51:56 AM Service Control Manager 7031
Error 6/16/2016 9:55:14 AM DistributedCOM 10016
Error 6/16/2016 3:25:49 PM Security-SPP 16385

I will try the Safe boot and see if I can get anywhere with it

Security-SPP Error (Event ID: 16385)

I am running windows 8.1.

I have been looking for a solution for my problem and it seems to be unique.

I have seen a lot of problems with Security-SPP errors but they usually don’t allow the user to open the Task Scheduler. I do not encounter this problem and I CAN open the Task Scheduler.

The error is showing up every 30 seconds and is filling up my event viewer (which I like to look at in order to keep my computer in good health). This flood of errors pertaining to the same thing is making it impossible to look back at any errors my computer had previously and is drowning out any other errors my computer might be experiencing.

When I go to Event Properties for the Security-SPP error I’m getting the following information is presented:

«Failed to schedule Software Protection service for re-start at 2115-10-20T14:37:48Z. Error Code: 0x80070002.»

Source: Security-SPP

Event ID: 16385

Level: Error

User: N/A

OpCode: Info

Task Category: None

Keywords: Classic

Then some sensitive information regarding the name of my computer and etc.

I am not looking to factory reset my computer, I have way to many programs that would take days to reinstall and go through the authentication process.

One thing I would like to note is that I just took a look around to try and find the following path:

C:\Windows\System32\Tasks\Microsft\Windows\SoftwareProtectionPlatform

This is what people have reported making changes to. However that path does not exist on my computer. I don’t know if I would have to be in Admin mode or something to see it but I’m pretty sure I would be able to see it. I did some looking around after that and found a bunch of .exe and .dll files just sitting in my System32 folder.

To boot, since I’ve been getting these errors my computer’s performance has been getting progressively worse. The #1 thing I’ve noticed is that it takes a considerable amount of time before I can actually log in to my computer. It constantly sits in the «Please Wait. » screen whenever I try to type in my password once the computer has booted. (This started happening about a week ago)

It would be amazing if someone might be able to give me some insight. I treat this machine like a baby and it is the only thing I have for university. Up until now (about a year and a bit) it’s been working like new. Now it’s really starting to get bogged down and I don’t know why. I’ve made no changes to it.

I hope someone can help me out! I really want to get to the bottom of this.

16385 ошибка microsoft windows security spp

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

General discussion

I am getting these error messages twice a minute in the Application Log on my Server 2012 RC:

From what I can tell, this is an access is denied message. I checked the policy RSOP and the SPPsvc is run by Network Service which has all the required privileges SeAuditPrivilege, SeChangeNotifyPrivilege, SeCreateGlobalPrivilege, and SeImpersonatePrivilege.

Has anyone else seen this? Does anyone have any ideas what is causing this?

All replies

Please make sure that the Task Scheduler service is started.

If it does not work, please also backup, export the following registry from another working Windows Server 2012 RC server and import to the problematic one to check the result.

TechNet Community Support

Thank you, Arthur

I had been looking at the Schedule Service and the RequiredPrivileges versus RSOP. They seem to all be either the default, explicitly permitted, or inherent for Local Service:

SeIncreaseQuotaPrivilege Adjust memory quotas for a process
SeChangeNotifyPrivilege Bypass traverse checking
SeAuditPrivilege Generate security audits
SeImpersonatePrivilege Impersonate a client after authentication
SeAssignPrimaryTokenPrivilege Replace a process-level token
SeTcbPrivilege Act as part of the operating system
SeRestorePrivilege Restore files and directories

Some of them are «Not Defined». I assume they would take their defaults but I could be wrong. Do you think I should make sure all of them are defined?

When I tried to import an exported .reg file for the Scheduler Service I got an instant blue screen with SYSTEM_SERVICE_EXCEPTION. I tried to stop the service but I cannot, not even by using sc in an elevated command prompt. I guess I will have to do it offline.

Importing it offline did not work either.

This error message is like the pink bunny that keeps on going, and going.

If so, I agree with you to backup all the important data and reinstall the system.

TechNet Community Support

Please check Volume Shadow Copy service if it is started. If it is not started, go and start the process.

Bom dia pessoal,

Estou passando pelo mesmo problema aqui.

Nosso servidor é licenciado com Win. Server 2008 Enterprise Edition R2 e não usamos DOMINIO.

Essa mensagem pode me gerar algum problema relacionado a software pirata?

Estou preocupado com isso, uma vez que minha rede é licenciada.

I got lots of the same errors on Windows 8 Pro:

«Failed to schedule Software Protection service for re-start at 2113-08-13T01:01:44Z. Error Code: 0x80070005.»

I also got the same events with Error Code: 0x80070002 and a few others.

I was seeing error dialogs when I tried to view Task Scheduler.
The SvcRestartTask xml file (among others) in C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform folder was corrupted and broke the scheduled task.

The fix, in my case, was to delete the SvcRestartTask task in Task Scheduler.

Next, I made sure the SvcRestartTask file was removed from C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform folder.

Then, since I had no spare Win 8 machine to obtain a clean copy of SvcRestartTask xml file, I found one on PasteBin via a Google search: http://pastebin.com/p06ErcTN

I copied the text from PasteBin and created a new text file and pasted the xml text in and saved it as SvcRestartTask.

Next I selected the SoftwareProtectionPlatform branch of Task Scheduler (Task Scheduler > Task Scheduler Library > Microsoft > Windows > SoftwareProtectionPlatform). I right clicked on it and selected Import Task.

I browsed to the folder where I created the new SvcRestartTask file, selected it and clicked Open.

When I checked the Event viewer all was good. The sppsvc service had started/stoppped properly and it automatically did all its validation. I saw no more Event 16385 errors.

Here is the complete, clean SvcRestartTask xml file:

$(@%systemroot%\system32\sppc.dll,-200)
$(@%systemroot%\system32\sppc.dll,-200)
1.0
$(@%systemroot%\system32\sppc.dll,-201)
\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
D:P(A;;FA;;;SY)(A;;FA;;;BA)(A;;FA;;;S-1-5-80-123231216-2592883651-3715271367-3753151631-4175906628)(A;;FR;;;S-1-5-87-2912274048-3994893941-1669128114-1310430903-1263774323)

2012-11-02T07:00:10Z
true

1

Importing the task xml is the way to go.

I don’t think copying the file to C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform folder will fix the problem.