NPS wont run or install, error code 0x80070643


Installing NPS results in the error below:

attempt to install network policy server failed with error code 0x80070643 fatal error during installation

The SBS server ran an update on Friday and since then, NPS has not worked. I have checked permissions on system32\IAS and the builtin OU, but still cannot run NPS. My last attempt to remove and reinstall has now left the machine unable to install NPS at all!

Has anyone seen this or have a direction to suggest? Google has shown other people haven't been able to resolve it.

The server manager log shows the below:

[CbsUIHandler] Error: -2147023293 : 2011-03-08 09:41:20.515 
[CbsUIHandler] Terminate: 2011-03-08 09:41:20.515 
[CBS] Error (Id=0) Function: 'NativeMethods.GetPackageStatus(out status)' 80070643 (-2147023293) 2011-03-08 09:41:20.515
[CBS] ...done installing 'IAS NT Service '. Status: -2147023293 (80070643) 2011-03-08 09:41:20.515
[InstallationProgressPage] Verifying installation... 2011-03-08 09:41:20.546 
[Provider] Skipped configuration of 'NetworkPolicyServer' because install operation failed.
asked on Server Fault Mar 7, 2011 by Anthony Wray • edited Aug 26, 2012 by HopelessN00b

3 Answers


I was able to resolve this issue by executing "sfc.exe /scannow"

answered on Server Fault Mar 1, 2013 by Chris Montes

Have you tried the resolutions suggested by Microsoft in KB958052?

If that doesn't work, you could try to remove every .NET-installation on the server and then clean it up with the .NET Framework CleanUp Tool. Afterwards, try reinstalling them if you need them and run the updates again.

answered on Server Fault Mar 7, 2011 by Bart De Vos
  1. Check the value for NT AUTHORITY\NETWORK SERVICE Reg_Word key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl

    If this is set to 0 change the value to 1.

  2. Stop “World Wide Web Publishing Service (W3SVC)”
  3. Remove (save in Temp folder) all files from Windows\System32\ias folder
  4. Copy from a good Windows 2008 R2 machine the dnary.xsd file
  5. Install Network Policy Server role
  6. Restart the server.


answered on Server Fault Nov 21, 2013 by das3994 • edited Nov 21, 2013 by Ladadadada

User contributions licensed under CC BY-SA 3.0