EDPA or WDP service not starting or has stopped on the DLP agent

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

The EDPA (Endpoint Agent) or WDP services are stopped on the Data Loss Prevention (DLP) agent computer. Attempts to manually start the service fail.

The following line will appear in the agent log when the service fails:

CoreServices.ComponentManager | Error starting agent component: Detection Core | [SYMRESULT 0x80010006] | ComponentManager.cpp(705)

If running into SEVERE entries for the module CoreServices.AgentServices and the EDPA/ WDP services aren't running Automatically, as well might be symptomatic for this scenario

Environment

DLP 15.X

DLP 16.0.1

Cause

This problem is a symptom of a bad agent install.

Resolution

1. Uninstall the DLP agent from the client machine.
2. Install the DLP agent using the proper version and architecture type.

If the issue persists contact support. The agent uninstall may be leaving behind files, and a support utility called clean_agent.exe will be required to fully remove the agent before the reinstall.