Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 9305 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The Sophos Transparent Authentication Suite service terminated unexpectedly

Americo

Hi!

We have three 2012R2 DCs running STAS and periodically, once in 2-3 days we get this message in the System log and the agent crashes and needs to be restarted manually. Is there any solution for that? Update for STAS maybe? Anything???



This thread was automatically locked due to age.
  • 0

    Could you post the relevent logs you are seeing?

  • 0 in reply to Bohdan.S

    Windows System Log:

    The Sophos Transparent Authentication Suite service terminated unexpectedly. It has done this 5 time(s).

    Binary data:

    In Words

    0000: 00540053 00530041 0000

    In Bytes

    0000: 53 00 54 00 41 00 53 00 S.T.A.S.
    0008: 00 00 ..

  • 0

    Hi Americo,

    Is this error with a fresh installation or older and what is the version of STAS?

    Verify the event logs on server:

    Right Click on Computer -> Manage

    This would open Computer management window, and in that, navigate to Computer Management (Local) -> System Tools -> Event Viewer -> Windows Logs -> Application.

    Verify the STAS error event messages or any other associated error events. The error should not come in normal operation but if some assemblies are missing or some corrupt files are present, probably that would trigger these messages. In such case, run CCleaner in the server/system to resolve the issue. 

    Hope that helps.

  • 0 in reply to sachingurung

    This is a recent installation. Here is the Application Error:

    Faulting application name: stas.exe, version: 2.1.2.8, time stamp: 0x560a549b
    Faulting module name: stas.exe, version: 2.1.2.8, time stamp: 0x560a549b
    Exception code: 0xc0000005
    Fault offset: 0x0005e883
    Faulting process id: 0x1c5c
    Faulting application start time: 0x01d25c972bbaa652
    Faulting application path: C:\Program Files (x86)\Sophos\Sophos Transparent Authentication Suite\stas.exe
    Faulting module path: C:\Program Files (x86)\Sophos\Sophos Transparent Authentication Suite\stas.exe
    Report Id: 20ee37cf-d006-11e6-80d9-005056aa487a
    Faulting package full name:
    Faulting package-relative application ID:

     

    I don't see any assemblies missing or some corrupt files are present.

  • 0 in reply to Americo

    Do you have UAC enabled on the server?

  • 0 in reply to Bohdan.S

    Yes. It is in line with Microsoft recommendations for DCs.

  • 0 in reply to Americo

    You will have to log a ticket with Sophos,

    A stab in the dark would be to check things like:

    - Disk space (more than 10% free on each drive)
    - CPU, check you are not stuck at 100%
    - RAM, have 10% free, and if its a VM, dynamic RAM is not restricting access to the RAM.
    - Reboot, it is Windows at the end of the day

    Turn on full logging and see if there are any extra logs