Error Message

Type : Error
Event : 1000
Source : Application Error
Category : Application Crashing Events
Computer : XXXX
Description:
Faulting application name: collection-service-dispatch.exe, version: 8.1.1006.1002, time stamp: 0x4fec87c9
Faulting module name: MSVCR80.dll, version: 6.3.9600.19629, time stamp: 0x5e2fdc0d
Exception code: 0xc0000135
Fault offset: 0x00000000000ecf30
Faulting process id: 0x6a2c
Faulting application start time: 0x01d60013a9ae591b
Faulting application path: D:\Program Files (x86)\Enterprise Vault\EVIndexing\bin\collection-service-dispatch.exe
Faulting module path: MSVCR80.dll
Report Id: e9aef122-6c06-11ea-8199-005056a4f5ce
Faulting package full name: ?
Faulting package-relative application ID: ?

This issue can occur when specific software restriction group policies are applied to EV servers causing interference in the activities of the EV application.

If experiencing this issue try to confirm whether there are any software restriction group policies applied to the EV servers (using a tool of choice such as rsop.msc or gpresult /h). Isolate the interference by reviewing the policies Apply Software Restriction Policy to the following and Apply Software Restriction Policy to the following users under Enforcement to not check DLL's and not apply to the local administrators respectively and confirm the behavior thereafter.

To browse the above policies use rsop.msc on the EV server (while logged in as the VSA which should be a member of local administrators group) expand Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies > Enforcement and:

1.  Make sure All software files except libraries (such as DLLs) is selected

2.  Make sure All Users except local administrators is selected

3. Use the Group Policy Management console to update the group policy for the EV server so that the appropriate settings are updated.  

4. Once the group policy is updated the following can be performed from an Administrator CMD prompt to update the EV server(s): gpupdate /force 

For more information on Software Restriction Policy refer to: https://docs.microsoft.com/en-us/windows-server/identity/software-restriction-policies/administer-software-restriction-policies

Note: The crash may also be seen for other Veritas related / non-related EXE's with same/similar msvcrXX.dll as the faulting module failing with the same Exception code: 0xc0000135.