1. Problem Overview
When installing Siemens WinCC V6.2 SP2 with the SIMATIC WinCC/Downtime Monitor V1.0 SP1 add-on on a Windows Server 2003 host, the project wizard may abort immediately with the dialog:
"An error occurred when trying to create the Compliance Service database. Operation aborted."
The wizard terminates before any tag archive, alarm logging, or user archive structures are created, leaving the .MCP project skeleton empty and no ComplianceDB SQL database provisioned. This blocks the entire Downtime Monitor workflow because every reason-code, downtime event, and OEE calculation depends on the Compliance Service writing into that database.
The error is non-fatal from the Windows perspective (no blue screen, no MSI rollback) but is fatal for the project, which is why the issue is often misclassified as a generic install problem and "fixed" by uninstall/reinstall loops that change nothing.
2. Verified Compatibility Matrix (WinCC 6.2 SP2 / Downtime Monitor V1.0 SP1)
Before touching the system, confirm the operating system patch level matches what Siemens explicitly approves. Mixing a supported OS with an unsupported service pack is the single most common reason the Compliance Service silently fails to provision its schema.
| WinCC Version | Downtime Monitor Version | Approved Operating Systems |
|---|---|---|
| V6.2 (no SP) | V1.0 | Windows 2003 SP1 Standard Server; Windows Server 2003 R2 |
| V6.2 + SP2 | V1.0 SP1 | Windows Server 2003 R2 SP2 with KB929046; Windows Server 2003 SP2 |
| V6.2 + SP3 | V1.0 SP1 / SP2 | Windows Server 2003 R2 SP2; Windows XP Professional SP2/SP3 |
The full Siemens compatibility bulletin for this exact error scenario is published in entry ID 21927773 in the Siemens Industry Online Support portal. Validate that:
- The Windows version reports
5.2.3790build number with Service Pack 2 applied. - Hotfix KB929046 is installed (only required on R2; do not install it on plain 2003 SP2).
- WinCC reports
6.2.2.xin SIMATIC WinCC Explorer > Help > About. - Downtime Monitor reports
1.0.1.0(or higher SP) in Start > Programs > SIMATIC > WinCC > Downtime Monitor > About.
3. Root Cause Analysis
The "Operation aborted" message is a generic wrapper produced by the Downtime Monitor setup COM object. The actual fault is one of four layered causes, listed in order of frequency observed in field service reports:
| # | Root Cause | Diagnostic | Typical Trigger |
|---|---|---|---|
| A | SQL Server / MSDE service not running, or running under a low-privilege account | Event Viewer → Application log shows error 17204 / 17207 from MSSQLSERVER | Manual service tweak, GPO override, antivirus quarantine |
| B | User lacks dbcreator / sysadmin role on the SQL instance |
Run SELECT IS_SRVROLEMEMBER('sysadmin', SYSTEM_USER) in Query Analyzer → returns 0 |
Engineer logged in as a limited domain user; UAC-less login on Server 2003 with stripped local group |
| C | Compliance Service Windows service is not registered or has a corrupted binary |
sc query "Siemens Compliance Service" returns ERROR_SERVICE_NOT_FOUND or STOPPED with exit code 1053 |
Incomplete install, manual deletion of the service key, restore from image |
| D | DCOM / RPC ports blocked between WinCC Explorer and the local SQL instance | Application log shows 0x800706BA (RPC server unavailable) at wizard start | Windows Firewall enabled on 2003, third-party host firewall, IPSec policy |
Note that cause A and B account for roughly 80% of incidents. Cause D is the trap for engineers who hardened the server with the Windows Firewall after install.
4. Pre-Flight Diagnostics
Run the following checks before changing anything. Capture each result to a text file so you have evidence for the WinCC hotline if escalation is needed.
4.1 Verify the WinCC SQL Instance
WinCC 6.2 ships with its own SQL instance named WINCC (MSDE 2000 Release A on a 2003 OS, SQL Server 2005 Express on R2). Confirm the service exists and is running:
sc query "MSSQL$WINCC"
Expected state field: RUNNING. If state is STOPPED or START_PENDING, restart it manually and watch the Application event log for MSDE error 9001 (log corruption) or 17113 (master.mdf missing).
4.2 Verify the Compliance Service Binary
sc query "Siemens Compliance Service"
The service image path should point to:
"C:\Program Files\Siemens\Automation\WinCC\DowntimeMonitor\bin\SiemensComplianceService.exe"
If the path is missing, the binary is uninstalled but the registry key remains — this is the "ghost service" symptom that produces a STOPPED state with no Start button response.
4.3 Verify the Local SQL Login Used by Downtime Monitor
Open SQL Server Enterprise Manager (MSDE) or SQL Server Management Studio Express, expand Security > Logins, and confirm:
-
SAis enabled with a known password (the Downtime Monitor wizard uses SA by default). - The Windows user account running the wizard has
sysadminserver role. -
BUILTIN\Administratorslogin is present and mapped tosysadmin.
4.4 Capture the Wizard Log
Enable verbose logging before recreating the project. The wizard writes to:
%TEMP%\Siemens\DowntimeMonitor\ComplianceSetup.log
Delete the file, reproduce the error, then read the last 100 lines. A clean "Operation aborted" with no preceding SQL error usually indicates a permission failure rather than a schema failure.
5. Resolution Procedure (Step-by-Step)
The procedure below resolves all four root causes in the order they should be tried. Each step is independently verified, so you can stop as soon as the wizard succeeds.
Step 1 — Repair the Compliance Service Registration
- Open an elevated command prompt (
cmd→ right-click → Run as administrator). - Re-register the service executable:
"C:\Program Files\Siemens\Automation\WinCC\DowntimeMonitor\bin\SiemensComplianceService.exe" -regserver - Re-register the COM proxy used by the wizard:
regsvr32 "C:\Program Files\Siemens\Automation\WinCC\DowntimeMonitor\bin\DTCreate.dll" - Reboot and re-test the wizard.
Step 2 — Grant SQL sysadmin to the Wizard User
- Open SQL Server Enterprise Manager (Start → Programs → Microsoft SQL Server).
- Expand the
WINCCinstance → Security → Logins. - Right-click the Windows account running the WinCC Explorer → Properties → Server Roles tab.
- Tick System Administrators and Database Creators, click OK.
- Stop and restart the
MSSQL$WINCCservice so the role change takes effect.
Step 3 — Reset the SA Password and Re-Test
- In Enterprise Manager, right-click Logins → sa → Properties.
- Type a new password (match the value stored in the Downtime Monitor configuration, or simply clear the value if WinCC was set to use Trusted Connection).
- From the WinCC project computer, open Start → Programs → SIMATIC → WinCC → Downtime Monitor → Configuration.
- Switch the database connection from SQL Authentication to Windows Authentication (Trusted) and re-enter the wizard. This bypasses SA password issues entirely.
Step 4 — Open the Required DCOM and SQL Ports
- Open Control Panel → Windows Firewall → Exceptions.
- Add
C:\Program Files\Siemens\Automation\WinCC\DowntimeMonitor\bin\SiemensComplianceService.exe as an exception. - Add the SQL Server executable
sqlservr.exe(path inside the MSSQL$WINCC install directory). - If a corporate IPSec policy is enforced, request an exception for ports TCP 135 (RPC endpoint mapper) and the dynamic range 49152–65535 between the WinCC host and the SQL instance (they are normally local, but some shops enforce a loopback IPSec rule).
Step 5 — Recreate the Downtime Monitor Project
- Launch SIMATIC WinCC Explorer as the same Windows user that owns the SQL sysadmin role.
- Right-click the project tree → Downtime Monitor → New Project.
- In the wizard, enter:
- Project name: the desired MCP name (no spaces; 8 chars max for legacy compatibility).
-
SQL server:
(local)\WINCCorHOSTNAME\WINCC. - Authentication: Windows Authentication (Trusted).
- Click Create. The wizard should now advance past the Compliance Service dialog within 10–30 seconds.
6. Verification Checklist
After a successful project creation, validate the following artefacts exist on disk and in the SQL instance:
| Artefact | Expected Location | Validation Command / Action |
|---|---|---|
| Compliance database MDF | C:\SQL\MSSQL$WINCC\Data\ComplianceDB.mdf |
File exists, size > 5 MB |
| Compliance database LDF | Same directory, ComplianceDB_log.LDF
|
File exists, size > 1 MB |
| Schema tables | Database ComplianceDB in Enterprise Manager |
Tables: dt_Reason, dt_Event, dt_Shift
|
| Compliance Service status | services.msc | State: RUNNING, Startup: Automatic
|
| WinCC internal tags | WinCC Explorer → Tag Management → Internal Tags | Prefix DTM_ tags present (e.g. DTM_State) |
7. Common Event-Log Signatures
Use this matrix to map the Application event log to a precise root cause before opening a ticket with the WinCC hotline.
| Event ID | Source | Meaning | Action |
|---|---|---|---|
| 17204 | MSSQL$WINCC | FCB::Open failed: could not open database file | Check file permissions on .mdf / .ldf; re-attach database |
| 17207 | MSSQL$WINCC | Cannot open database ComplianceDB requested by the login | Grant db_owner to the wizard user |
| 18456 | MSSQL$WINCC | Login failed for user 'sa' | Reset SA password or switch to Trusted auth |
| 10005 | DCOM | DCOM got error "Cannot create a file when that file already exists" | Re-register Compliance Service (Step 1) |
| 0x800706BA | SiemensComplianceService | The RPC server is unavailable | Open firewall ports (Step 4) |
8. Reinstall vs. Repair Decision Matrix
Uninstalling and reinstalling the WinCC stack is rarely the right first move and can introduce a worse failure mode (orphan SQL logins, missing BUILTIN\Administrators). Use this decision tree:
- If the Compliance Service is registered and the SQL instance is healthy → repair the service (Step 1) and re-grant permissions (Step 2).
- If the SQL instance is corrupted (event 9001) or missing master.mdf → uninstall only the Downtime Monitor component, repair the SQL instance via the WinCC setup, then reinstall Downtime Monitor.
- If the OS service pack is wrong → do not reinstall; patch the OS to the approved level and rerun the wizard.
-
If a full uninstall is unavoidable → remove in the order: Downtime Monitor → WinCC → MSDE. Use the official Siemens KB 21927773 cleanup script
WinCC_Cleanup.batto wipe registry keys and SQL logins before reinstalling.
9. Modernizing the Stack (Recommended Long-Term Path)
WinCC 6.2 SP2 reached end of life in 2014 and Windows Server 2003 in 2015. Continuing to operate a plant-floor SCADA on a 20-year-old OS introduces ongoing security and compliance risk. Two proven migration paths exist:
- Same-vendor upgrade: Move to WinCC Professional V17 (TIA Portal) or WinCC Unified V18 on Windows Server 2019 / 2022. The Downtime Monitor functionality is now integrated into the WinCC Performance & Quality option. Plan for a full project migration; the V6.2 .MCP files do not import directly.
- Cross-platform migration: For plants looking to move off legacy Siemens SCADA entirely, the Inductive Automation guide on building a downtime report demonstrates an equivalent workflow using FactoryPMI (now Ignition) with a Reporting plugin. While not a drop-in replacement, it shows the architectural pattern: a reporting database receiving downtime events from the SCADA layer, with a web-based PDF report containing tables and pie charts of reason codes.
10. Escalation to Siemens Support
If the wizard still fails after completing Steps 1–4, escalate to the Siemens WinCC Hotline with the following package:
- The exact WinCC and Downtime Monitor build numbers (from Help → About in each tool).
- The Windows version output of
winverandsysteminfo | findstr /B /C:"OS". - The
ComplianceSetup.logfrom%TEMP%\Siemens\DowntimeMonitor\. - Application event log exported as
.evtcovering the 15 minutes before the error. - The output of
sc query "Siemens Compliance Service".
Siemens support will typically respond within 2 business days with either a hotfix DLL for the Compliance Service or a clean reimage procedure specific to your SP level.
11. Frequently Asked Questions
Why does the wizard succeed on Windows XP but fail on Windows Server 2003?
Windows Server 2003 enforces stricter DCOM and SQL Server security defaults than Windows XP SP3. Even when both OS variants appear in the Siemens compatibility matrix, the Server SKU activates NTLM-only authentication and the stricter Winsock provider, both of which the WinCC 6.2 Compliance Service installer must explicitly opt into. The result is a hard abort on the server SKU unless KB929046 and SP2 are both present.
Can I run WinCC 6.2 Downtime Monitor on Windows 7 or Windows Server 2008?
No. Siemens never certified WinCC 6.2 for any OS newer than Windows Server 2003. The Compliance Service binary links against MSDE 2000, which is not supported on NT 6.0 kernels. If you need a modern OS, upgrade to WinCC 7.4 SP1 (last Windows 7-supported release) or move directly to WinCC Professional V17 on Windows Server 2019.
Is the Compliance Service database different from the regular WinCC archive database?
Yes. The WinCC archive database (CC_Alg_<timestamp>_<project>) stores tag and alarm history. The Compliance Service database (ComplianceDB) is a separate SQL database owned by the Downtime Monitor option and stores reason codes, event start/stop timestamps, shift definitions, and OEE rollups. Deleting one does not affect the other.
What permissions does the wizard user need on the SQL instance?
The user account running SIMATIC WinCC Explorer must be a member of the sysadmin server role on the local WINCC SQL instance. This is required only during project creation; at runtime the Runtime service can be downgraded to db_owner on the ComplianceDB database for least-privilege operation.
Can I migrate a Downtime Monitor database from WinCC 6.2 to a newer WinCC version?
The schema is partially compatible with the Performance & Quality option in WinCC 7.x, but reason codes, shift calendars, and OEE formulas must be re-mapped manually. Plan a minimum 2-day window per server for the migration, with downtime validation against the legacy system before decommission.