ePO Stopped and unable to start Services as well

[User87791215]

Good day all! 
We use ePO 5.10 version with latest update which is Update 4. If stopped working and not allowing to start the services as well. 
When i try to start the event parser service, below is the error message displayed: 
"The McAfee ePolicy Orchestrator 5.10.0 Event parser service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs." 
When i try starting the ePO Server service, below error is displayed: 
Windows could not start the McAfee ePolicy Orchestrator 5.10.0 Server service on Local Computer. Error 1067: The process terminated unexpectedly. "
Also upon checking the Event viewer, the below error entries are recorded: 
Faulting application name: tomcat7.exe, version: 1.1.0.0, time stamp: 0x5a022cf5
Faulting module name: KERNELBASE.dll, version: 10.0.14393.2999, time stamp: 0x5ce36c36
Exception code: 0xc06d007e
Fault offset: 0x0000000000034c48
Faulting process id: 0x1d18
Faulting application start time: 0x01d542e7af0ff712
Faulting application path: D:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\bin\tomcat7.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 3a1f8afe-0a4a-4fa4-9e6f-1f0563be11cd
Faulting package full name: 
Faulting package-relative application ID:

One more:
Faulting application name: Apache.exe, version: 2.4.38.0, time stamp: 0x5c5b6a42
Faulting module name: KERNELBASE.dll, version: 10.0.14393.2999, time stamp: 0x5ce36b16
Exception code: 0xc06d007e
Fault offset: 0x000dc1a2
Faulting process id: 0x1da8
Faulting application start time: 0x01d542e7afce0f6a
Faulting application path: D:\Program Files (x86)\McAfee\ePolicy Orchestrator\Apache2\bin\Apache.exe
Faulting module path: C:\Windows\System32\KERNELBASE.dll
Report Id: 71e1158c-f46f-4a7c-94c4-715576942f01
Faulting package full name: 
Faulting package-relative application ID: 
Final one:

Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: This app can't be activated by the Built-in Administrator. See the Microsoft-Windows-TWinUI/Operational log for additional information.

Checked the DB connectivity and looks good! 

Could someone please assist here! 

Thanks in Advance

[cdinet]

What changed on the system?  By any chance did anyone run the endpoint removal tool on the epo server to remove any point products?

[User87791215]

Defender was removed from the machine and then ENS was installed. After that the Agent and ENS was removed using Endpoint removal tool! Tried removing ENS  because of this issue, means before running the endpoint removal tool itself, ePO was down and services were not starting with same set of error messages.  

[cdinet]

Refer to KB90593 (you will need to be logged into the service portal to view it - support.mcafee.com).  That is the known issues doc for the epr tool. The epr tool removes registry keys that epo requires.  If this is a VM and you have a snapshot of it from before running that tool, restore it.  Otherwise you will need to do a disaster recovery to restore functionality.  This is fixed in a release planned for August.