• State Not Answered
  • +1 person also asked this people also asked this
  • Replies 5 replies
  • Subscribers 21 subscribers
  • Views 6657 views
  • Users 0 members are here
Options
Related

Change Auditor agent keeps on stopping

Roger Castillo
over 3 years ago

We provisioned new DC on windows server 2016 and deployed the change auditor agents. The agent will run but it will automatically stop after a minute. I checked on the logs and some DLLs fails to initialize. 

ID: 2484
Time: 7/8/20 08:29:03.543
Level: WARN
Thread: 13156
Logger: NetProLib.Injection.DllInjector
File: DllInjector.cpp
Function: NetProLib::Injection::DllInjector::_OpenProcess
Line: 800
Message: DllInjector(1a6c938) process not found

ID: 2485
Time: 7/8/20 08:29:03.543
Level: ERROR
Thread: 13156
Logger: CServicesHook
File: ServicesHook.cpp
Function: CServicesHook::InstallHook
Line: 306
Message: Support Dll initialization error (NetProLib::Injection::DllInjector::_OpenProcess - Unable to locate process id -1) on C:\Program Files\Quest\ChangeAuditor\Agent\SCM

But I checked the files were on their respective locations. Can someone help me on resolving this?

For reference, we are on Change Auditor 6.9.5.

Thank you!

Parents
  • 0 over 3 years ago

    Do you have some kind of endpoint protection on your DCs that might have been recently patched and/or reconfigured?

    If yes, turn it off and restart your agent again to see if the issue goes away.  Then the fun begins - i.e how to work with the endpoint protection in place.  You may end up having to open a ticket with Support as these issues can be tedious to troubleshoot.

  • 0 over 3 years ago in reply to JohnnyQuest

    Hi JohnnyQuest,

    Thank you for your reply. Yes we have an AV and this AV has been installed as well on our old DCs. I also tried disabling the AV but still the agents keep on stopping and having the same error message in the logs. I would love to open a ticket with the Support but it asks for our license and when adding the license, it doesn't recognize the license we have. 

  • 0 over 3 years ago in reply to Roger Castillo

    Try stopping the AV and setting it so it doesn't re-start.  Then reboot the DC.  

    On the Support site you say it wouldn't recognize your xxx-xxx-xxx license #?  Are you current on your maintenance?

Reply Children