Event iD 11000 and 14127

Chicago Area Laptop for rent: $35 per day plus $10 for additional day

Event ID: 11000, Event ID: 14127

Symptoms: You find the Proxy service and Firewall service do not start, and the following event ID messages are logged in the Application Event log:

Event Source: Microsoft Web Proxy
Event ID: 11000
Description: Microsoft Web Proxy failed to start. The failure occurred during Reading protocol rules because the configuration property of the key
SOFTWARE\Microsoft\Fpc\Arrays\{37EABF10-3326-4280-B1AF-DB6DF68A49D0}\ArrayPolicy\Proxy-Protocol-Rules\{FF3DA41B-A332-4B67-8B26-D0ADD2453D8B}\ScheduleUsed could not be accessed. Use the source location 2.546.3.0.1200.50 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: The system cannot find the file specified.

Data:
0000: 02 00 00 00

and

Event Source: Microsoft Web Proxy
Event ID: 14127
Description: The Web Proxy service could not initialize (error code). The internal error code in the Data area of the event properties indicates the cause of the failure.

Data:
0000: 02 00 07 80 ...?

Or/and

Event Source: Microsoft Firewall
Event ID: 11000
Description: Microsoft Firewall failed to start. The failure occurred during Reading protocol rules because the configuration property of the key SOFTWARE\Microsoft\Fpc\Arrays\{37EABF10-3326-4280-B1AF-DB6DF68A49D0}\ArrayPolicy\Proxy-Protocol-Rules\{FF3DA41B-A332-4B67-8B26-D0ADD2453D8B}\ScheduleUsed could not be accessed. Use the source location 2.546.3.0.1200.50 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: The system cannot find the file specified.

Data:
0000: 02 00 00 00

And the following event ID messages are logged in the System Event log:

Event Source: Service Control Manager
Event ID: 7024
Description:
The Microsoft Web Proxy service terminated with service-specific error 147942402.

Or/and

Event Source: Service Control Manager
Description: The Microsoft Firewall service terminated with service-specific error 213007.

Resolutions: This behavior may occur because the Site and Content rules and Protocol rules are set to use schedules in Policy rules. To determine the rule that is causing the problem, check the GUID of the rule in the event log, and then locate this GUID in the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc\Arrays\{37EABF10-3326-4280-B1AF-DB6DF68A49D0}\ArrayPolicy

The rule name is listed in the msFPCName registry value.

To resolve this issue, use either of the following methods:

Method One

1.	Start the Internet Security and Acceleration (ISA) Server Management snap-in.
2.	Right-click either Site and Content Rules or Protocol Rules, and then click Properties.
3.	Click the Schedule Tab, change the Schedule box to any new value, and then click Apply.
4.	Select the value again, and change the value back to the original value, and then click Apply.

When you use this method, the ScheduleUsed registry key is created in the registry for the rule that you selected. After you complete this procedure, start the services. If services do not start, use the same procedure, but choose another rule.

Method Two

1.	Change all msFPCAppliesAlways registry values to "FF FF FF FF" for each Proxy-Access-Rules and Proxy-Protocol-Rules entry that is represented with a GUID under Policy-Access-Rules and Proxy-Protocol-Rules.
2.	Reconfigure the Schedule policy by using the ISA Server Management snap-in.