DLP Endpoint Agent service does not start with "Error starting agent component: File System Connector [SYMRESULT 0x80010005]"

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enterprise Suite

Issue/Introduction

DLP Endpoint Agent service does not start with "Error starting agent component: File System Connector [SYMRESULT 0x80010005]"

DLP Agent installation/upgrade is successful but the service does not start. The service becomes manual.

Errors in the EDPA logs:

Level: ADMIN
Source: AgentServices.SystemEventLogger
Message: Category: agent_event.category.file_system_driver, SubCategory: agent_event.subcategory.driver_down, Extended Value: NA

Level: SEVERE
Source: CoreServices.ComponentManager
Message: Error starting agent component: File System Connector [SYMRESULT 0x80010005]

 

 

Environment

All DLP versions.

Cause

The EDPA service is unable to start the kernel file system driver service "vfsmfd"

The driver service "vfsmfd" is either not installed or unable to start due to a third party conflict/locking or is corrupt.

Resolution

Validate if the DLP file system kernel driver service is installed and can be started.

Command to verify if the service is installed : "sc query vfsmfd"

Command to start the service : "sc start vfsmfd"

Reinstall the agent and validate the "vfsmfd" service can be started.