Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 512 Source: CryptSvc

Source
Level
Description
The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.

Details:
System Writer object failed to initialize VSS.

System Error:
Catastrophic failure.
Comments
 
Open Regedit and navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl

Check the REG_DWORD entries: NT AUTHORITY\NETWORK SERVICE, LOCAL SERVICE, NetworkService, etc., and their equivalent in your language (e.g. Servicio de red, SERVICIO LOCAL). If any of the users listed has a value of 0, set it to 1. Restart the Cryptographic Services by issuing the following commands:

net stop cryptsvc
net start cryptsvc
According to Microsoft, this problem can occur if any COM applications or COM+ applications cannot access the COM+ catalog files. The application cannot access the COM+ catalog files because the default permissions on the COM+ catalog directory and files have been changed from the default settings.
If this problem appeared after installing Yukon April CTP (SQL Server 2005), the see the link to "How to fix a problem with Windows backup and the Volume Shadow Service after installing Yukon April CTP" for information on fixing the problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...