Troubleshooting

PRO Manager stops working after a few months

Symptom: mySCADA PRO Manager worked fine after installation but stopped unexpectedly after 1–3 months — without any updates or intentional changes.

Root cause: During installation, PRO Manager creates a Windows service account named myscada9. This account is configured to never expire. However, on corporate-managed Windows machines, domain Group Policies (GPO) often override local user settings and force a password expiry after 30–90 days. Once the password expires, the myscada9 service can no longer log in and the system stops.

1. Verify whether you are affected

Open PowerShell as Administrator and run:

net user myscada9

In the output, look at these two lines:

Password expires         Never            ← OK if "Never"
Account expires          Never            ← OK if "Never"

If either shows a specific date instead of Never, you are affected.

2. Fix — set password to never expire

WMIC --% USERACCOUNT WHERE Name="myscada9" SET PasswordExpires=FALSE

3. Fix — set account to never expire

net user myscada9 /expires:never

4. Verify the fix

Run net user myscada9 again and confirm the output now shows:

Password expires         Never
Account expires          Never

Then restart the mySCADA PRO Manager service or reboot the machine.

Tip: If your IT department manages password policies via Active Directory, ask them to create an exception for the myscada9 service account, or move the machine’s OU to one without a forced password expiry policy.

---

PLC communication fails — OPC UA

Symptom: mySCADA PRO Manager cannot communicate with a PLC over OPC UA. The connection times out or is refused immediately.

Root cause: Windows Firewall is blocking the OPC UA port (default 4840/TCP).

Quick fix — disable Windows Firewall (lab / isolated network only)

⚠ Only disable the firewall on machines that are not directly exposed to the internet or an untrusted network.

1. Open Windows Security → Firewall & network protection
2. Select the active network profile (Domain / Private / Public)
3. Toggle Microsoft Defender Firewall to Off

Recommended fix — add a firewall exception

Instead of disabling the firewall entirely, add an inbound rule for OPC UA:

New-NetFirewallRule `
  -DisplayName "OPC UA (mySCADA)" `
  -Direction Inbound `
  -Protocol TCP `
  -LocalPort 4840 `
  -Action Allow

If your PLC uses a non-standard OPC UA port, replace 4840 with the correct port number.

Verify connectivity

After adding the rule, test the connection from the PRO Manager machine:

Test-NetConnection -ComputerName <PLC_IP> -Port 4840

Expected output: TcpTestSucceeded : True

---

WSL2 fails to start — error 0x800705b4

Symptom: After installation (or after moving to a VM), PRO Manager cannot start. The WSL log shows error 0x800705b4 or the service appears to hang during startup.

Root cause: PRO Manager uses WSL2 internally. When Windows runs inside a virtual machine, nested virtualization must be enabled on the hypervisor host — otherwise WSL2 cannot create its own VM.

See the full setup guide: Running on a Virtual Machine — WSL2 Nested Virtualization

---

PRO Manager service does not start after Windows Update

Symptom: After a Windows Update or restart, mySCADA PRO Manager shows as stopped in the Manager UI or in Windows Services.

Steps to recover:

1. Open Services (services.msc)
2. Find the service named myscada9
3. Right-click → Start
4. If the service fails to start, check the Windows Event Viewer under Windows Logs → Application for an error from source myscada9

Common causes and fixes:

Event log message	Likely cause	Fix
Logon failure	Service account password expired (GPO override)	See Password expiry fix above
WSL failed to start	Nested virtualization not enabled, or WSL outdated	Run wsl —update in PowerShell; or see the VM guide
Port already in use	Another service occupies port 80 or 443	Change PRO Manager ports in Settings, or stop the conflicting service
Access denied	WSL distro registered under a different user account	Re-import the distro under the myscada9 service account

---

Port conflict — web server will not start

Symptom: PRO Manager installs successfully but the web interface is unreachable. The Manager UI shows the runtime as stopped with a port error.

Cause: Another application (IIS, Apache, Skype, Teams, or another PRO Manager instance) is using port 80 or 443.

Find the conflicting process

netstat -ano | findstr ":80 "
netstat -ano | findstr ":443 "

Note the PID in the last column, then identify it:

Get-Process -Id <PID>

Resolution options

1. Stop the conflicting service and restart PRO Manager
2. Change PRO Manager ports — open the Manager UI, go to Settings, and change the HTTP/HTTPS ports to unused ones (e.g., 8080 / 8443)

---

Service account disrupted by Windows domain policy (GPO)

Affected environments: Corporate networks where the Windows machine is joined to an Active Directory domain managed by an IT department.

During installation, mySCADA PRO Manager creates a local Windows service account named myscada9. This account is granted Administrator privileges and configured with a static password — both are required for WSL2 to start and for the service to run correctly.

In domain-managed environments, Group Policy Objects (GPO) applied by the domain can silently override these local settings, causing the service to stop working. Two policies are responsible:

Policy	What it does	Effect on mySCADA
Password expiry policy	Forces all accounts to change their password every 30–90 days, even if the local account is set to “never expire”	The service can no longer log in — Logon failure in the Event Log
Restricted Groups / Privileged Access policy	Periodically resets the membership of the local Administrators group to a domain-defined list, removing any locally added accounts	WSL2 cannot start — Access denied when launching the service

Symptoms

• PRO Manager stops working spontaneously — no updates, no manual changes
• Manually resetting the password or re-adding myscada9 to Administrators fixes it temporarily, but the problem recurs after the next GPO refresh (typically within hours or after the next restart)
• The Windows machine is managed by an IT department via Active Directory

Short-term fix (temporary)

The mySCADA PRO Manager service stores the myscada9 password in two places that must always match:

• Windows user account — the actual account password set in Windows
• Service Log On configuration — the password the service uses to start under that account

Changing only one of them will cause an Access Denied error when the service tries to start. Follow all steps before starting the service.

1. Stop the service if it is currently running:

   net stop myscada9

2. Set a new password for the Windows account — note it down, you will need it in the next step:

   net user myscada9 YourNewPassword!

3. Update the same password in the service Log On configuration:

   • Press Win + R, type services.msc, press Enter
   • Find the service named mySCADA PRO Manager
   • Right-click → Properties → Log On tab
   • Enter the new password in both the Password and Confirm password fields → OK

4. Re-add myscada9 to the Administrators group if it was removed by domain policy:

   net localgroup Administrators myscada9 /add

5. Start the service:

   net start myscada9

Note: This fix will stop working the next time domain policy is reapplied (GPO refreshes automatically, typically every 90 minutes or on restart). Contact your IT department for a permanent solution.

Permanent fix — GPO exceptions for the myscada9 account

The simplest permanent solution is to leave the myscada9 local account in place and ask your IT department to configure two policy exceptions. No reinstallation or migration is required.

Exception 1 — Exempt myscada9 from the domain password expiry policy

Active Directory supports Fine-Grained Password Policies (FGPP), which allow different password rules for specific accounts. Ask IT to create a FGPP that sets password expiry to Never for the myscada9 account (or for a dedicated PSO — Password Settings Object — applied to service accounts).

FGPP is available on all Active Directory environments running Windows Server 2008 or later. Your IT administrator can configure it in Active Directory Administrative Center → your domain → System → Password Settings Container.

Exception 2 — Protect the Administrators group membership using GPO Preferences

If IT uses a Restricted Groups policy, it periodically overwrites the local Administrators group and removes myscada9. The fix is to replace Restricted Groups with a GPO Preference (Group Policy → Preferences → Local Users and Groups), configured with action Update instead of Replace. This adds myscada9 to Administrators without removing other members.

Ask IT to add the following entry to the GPO Preference applied to this machine:

Setting	Value
Action	Update
Group name	Administrators (built-in)
Member to add	myscada9

Using Update instead of Replace is the key difference — it adds the member persistently without overwriting the entire group on each GPO refresh.

Once both exceptions are in place, the myscada9 account will retain its password and its Administrator membership regardless of domain policy refreshes.