Endpoint Security and Control: errors are logged to the event viewer: Catastrophic failure. Event ID 14, Event ID 23, or Event ID 0

  • Article ID: 109695
  • Rating:
  • 7 customers rated this article 1.0 out of 6
  • Updated: 26 Feb 2013

Note: This issue was fixed in Sophos Anti-Virus for Windows 2000+ 9.5.4


When installing Sophos Endpoint Security and Control and/or starting the Sophos Anti-Virus service you see the event log errors:

  • Catastrophic failure.
  • Event ID 14 - Error configuring ConfigurationManager.
  • Event ID 23 - Error requesting component ConfigurationManager from ComponentManager.
  • Event ID 0 - Exception caught in CInfrastructureModule::PreMessageLoop.

First seen in
Sophos Anti-Virus for Windows 2000+ 9.0.5

Fixed in
Sophos Anti-Virus for Windows 2000+ 9.5.4

When the Sophos Anti-Virus service starts up it tries to expand certain environmental variables and is denied access.

What to do

NOTE: The issue described in this article only applies to Sophos Anti-Virus 9.5.3 and lower.

Add the 'Everyone' group to the root of the C:\ drive (or other system drive).  The everyone group it is only required for the root of the drive and not all subfolders.  Please see the screenshot below.

The requirement for the root of C:\ requiring Everyone group has been removed since Sophos Anti-Virus 9.5.4+.  

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent