I am getting the below error message since running updates.  The error appears to be related to updates done to .Net FW 4.  .Net FW 4 was updated but it was not removed. 

System is Server 2008 SP2

"Cryptographic Services Failed while processing the OnIdentity() call in the System Writer Object.

Details:  AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API Failed

System Error: The resource loader failed to find MUI File"

I have seen similar errors that say since .Net FW4 was removed that the v400Fontcache was not uninstalled with it.  I don't think that this applies.  I am wondering if a repair of .net FW 4 would work. Any assistance is greatly appreciated.

Hi,

As the error mentioned Cryptographic Service, please try to restart that service to see if it will help. In fact, system writer is registered in Cryptographic Service. 

Any errors on system/application log?
Run vssadmin list writers to see if you can find System Writer?

If no system writer, try to run the command in command prompt:

SC.EXE SDSHOW EVENTSYSTEM

If the output is like below, that means it is missing the Service Logon User (missing the entry (A;;CCLCSWLOCRRC;;;SU) )
 
D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
 
Then you can reset the eventsystem permission:
 
Sc.exe sdset eventsystem D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
 
Restart both the COM+ Event System and Cryptographic Services
Run VSSADMIN LIST WRITERS again and see if system writer is back.

NOTEs:If the problem on your side is indeed related to service permission, you can check the GPO setting on your side to see if there is any change on the COM+ Event System Service.

If the system writer is back, please test if backup function is back to work. 

Windows Server 2008 SP2: Same issue but on this server, System Writer is already there and stable, but this event is repeated 2-3 times per hour. Version: 6.0.6002 Service Pack 2 Build 6002

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {75f22f71-fe2f-4120-a027-a0d67a9b1709}
   State: [1] Stable
   Last error: No error

Details: AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed System Error: The resource loader failed to find MUI file.

Details: AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed System Error: The resource loader failed to find MUI file.Any help on this is greatly appreciated.

Anyone have a resolution for this error in the case where the system writer is present?  A client is having the exact error as stated in an SBS 2008 environment and cannot get good backups.  What file is it looking for and where SHOULD it be located?

Hi,

Have a look at the known issues for security patch https://support.microsoft.com/en-us/kb/3045171

Quick check if this is the issue thats causing the events 513:

Open Services.msc

Look at the description for the FontCache Service, if it says <Failed to Read Description, Error Code:15100> the solution is to uninstall KB3045171 or  install the patch from https://support.microsoft.com/en-us/kb/971512

Affected server OS versions: Windows 2008 Server (all editions / all servicepacks)