| Event Id | 5484 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | Psec Services has experienced a critical failure and has been shut down. The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks. Error Code:%t%t%1 |
| Event Information | According to Microsoft: Cause : This event is logged when IPsec Services has experienced a critical failure and has been shut down. Resolution : Examine the status code reported and then restart the service Windows logs an error if the IPsec Policy Agent service fails to start, or if it unexpectedly terminates. The error message indicates the cause of the service failure by including an error code in the text of the message. Review the information for the error code, enable the service if necessary, and then restart the Windows Firewall service. Note To perform these procedures, you must have membership in the localAdministrators group, or you must have been delegated the appropriate authority. Review the error code To determine the meaning of the error code, open a command prompt, and then type net helpmsg errnum, where errnum is the error code displayed in the event message. Take the corrective action indicated by that error code. If the error indicates that the service fails to start because it is disabled, then you must enable the service and then attempt to start it. Enable the IPsec Policy Agent service To enable the IPsec Policy Agent service: 1.Start the Services MMC snap-in. ClickStart, then in theStart Search box, typeservices.msc and then press ENTER. 2.In theName column of the Services snap-in, right-click IPsec Policy Agent, and then clickProperties. 3.In theIPsec Policy Agent Properties dialog box, click the list next toStartup type, and then clickAutomatic. 4.ClickStart to start the service. 5.If the attempt to start the service fails, then restart the computer. This forces all related and dependent services to restart. Start the IPsec Policy Agent service To start the IPsec Policy Agent service: 1.Restart the service. You can do this at a command prompt or from the Services Microsoft Management Console (MMC) snap-in. Do either of the following: a)Start an administrative command prompt. ClickStart, clickAll Programs, clickAccessories, right-clickCommand Prompt, and then click Run as administrator. At that command prompt, run the commandnet start policyagent. b)ClickStart, type services.msc in theStart Search box, and then press ENTER. In theName column of the Services snap-in, right-click IPsec Policy Agent, and then clickStart. 2.If the attempt to restart the service fails, then restart the computer. This forces all related and dependent services to restart. 3.If the error persists after the computer restarts, then the executable files for the driver or service might be corrupted, and the operating system must be reinstalled. |
| Reference Links | Event ID 5484 from Source Security |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.