IT Core Blog

Never stop questioning. Curiosity has its own reason for existing…

Archive for the ‘MS Hotfixes’ Category

SCVMM P2V fails with Error 2910 (0x80070005) Access Denied

leave a comment »

Symptom

When using Microsoft System Center Virtual Machine Manager 2008 to perform a Physical-to-Virtual conversion (P2V), the following error message appears during the Scan System phase.
Error (2910)
VMM does not have appropriate permissions to access the resource on the %server.
Access is denied (0x80070005)
Recommended Action
Ensure that Virtual Machine Manager has the appropriate rights to perform this action.
Additional Information: The Source computer is the machine intended to be virtualized in the P2V conversion.

 Cause

This failure is typically caused by either of the following conditions:

•  The credentials provided during the P2V wizard is not a member of the local ‘Administrators’ group on the Source computer.
•  The Source computer does not allow remote WMI calls to the CIMV2 namespace for the credentials entered during the P2V wizard.

Resolution
To resolve the problem, follow these steps:

  1. Make sure that the account used during the P2V wizard is a member of the local ‘Administrators’ group on the Source computer. Note Pay particular attention to this if the SCVMM server and Source computer are in different domains.
  2. During the Scan System phase of the P2V conversion, SCVMM makes WMI calls to the CIMV2 namespace on the Source computer to pull basic system information. If these WMI calls fail, then the P2V conversion will also fail. To verify WMI connectivity to the CIMV2 namespace on the Source computer, perform the following actions from the SCVMM server:
  3. Click Start , point to Run and type ” WBEMtest” (without the quotes) in the Open box and click OK . This will open the WBEMtest window.
  4. Click Connect in the upper right hand corner.
  5. Now, connect to the CIMV2 namespace on the Source computer.

Example: \\Source\ROOT\CIMV2

                Note Be sure to use the name of your Source computer.

  1. Then click Connect to complete the connection. This should connect without any errors displayed.
  2. Just to confirm access to a sample object, select Open Class and type Win32_PhysicalMemory
  3. You should see objects populate in the Object Editor window. The actual content returned is not as important as the fact that a remote connection to the CIMV2 namespace was established.
  4. Open wmimgmt.msc and verify connectivity to the Local computer and also check the ‘Remote Enable’ permissions.
    1. Click Start , point to Run and type wmimgmt.msc and click OK . This will open the WMI Control (Local).
    2. Right click on the WMI Control (Local) node and select Properties .
    3. Select the Security tab, highlight Root and then open security by clicking the Security button in the lower right.
    4. Select “Remote Enable” permission for Everyone or the specific user account that you want to grant this permission to.
    5. This action does not require a reboot.
    6. Open dcomcnfg and verify that DCOM is running and also check the ‘Remote Activation’ permission.
      1. Click Start , point to Run and type dcomcnfg and click OK . This will open the Component Services snap-in.|
      2. Expand Component Service , then Computers , then My Computer . If My Computer has a red down arrow mark, it means that the service is not running. It will need to be started.
      3. Right click on My Computer and select Properties and select the COM Security tab.
      4. Click Edit Limits under the Launch and Activation Permissions section.
      5. For the Everyone user give the “Remote Activation” permission or add the specific user account that you want to grant this permission to.

Note The following error message may occur if the appropriate WMI permission is not granted to the user:
Access Denied” with Error Code: 0x80041003

  1. This problem can also occur if the OLE registry key is missing or has the incorrect value on the Source computer.
    1. Start Registry Editor.
    2. Locate the following path:
      HKLM\SOFTWARE\Microsoft\OLE
    3. This key should have a REG_SZ value EnableDCOM and a value of Y

Written by IT Core

November 23, 2010 at 9:17 PM

KB2465160: Add Host or other action fails with (2916) 0x80338126 in System Center Virtual Machine Manager 2008

leave a comment »

From Microsoft , KB2465160.

Symptoms
Adding a Host to System Center Virtual Machine Manager 2008 (SCVMM 2008) fails with a variation of Error (2916):

Error (2916)
VMM is unable to complete the request. The connection to the agent ServerA.contoso.com was lost.
(The WinRM client cannot complete the operation within the time specified. Check if the machine name is valid and is reachable over the network and firewall exception for Windows Remote Management service is enabled. (0x80338126))

Recommended Action:
Ensure that the WS-Management service and the agent are installed and running and that a firewall is not blocking HTTP traffic. If the error persists; reboot ServerA.contoso.com and then try the operation again.

Cause
Specific content is being filtered by a non-Windows firewall. The firewall could be software installed on either the SCVMM 2008 Server or the Host that is being added. More likely, there is a hardware appliance firewall on the network between the two communicating servers.

Resolution
Test multiple communication protocols between the two systems; the SCVMM 2008 Server and Host in this example. Some firewalls can have content filtering enabled despite showing that it is not. Remove all non-Windows software firewalls and bypass all hardware appliance firewalls entirely long enough to perform testing to verify whether or not they are contributing to the problem.

The following tests are examples of protocols that should always succeed. Test both directions always:

Ping by DNS name in both directions (NETBIOS and FQDN). The IP address returned must match.
Access to ‘\\ServerA.contoso.com\admin$’ from the ‘Run’ command in both directions. This must succeed.
From Server B: \\ServerA.contoso.com\admin$
From Server A: \\ServerB.contoso.com\admin$
WinRM basic connectivity in both directions. This must succeed. If it does not, execute ‘winrm qc’ on both servers, accepting all prompts, then test again.
Remote NETBIOS test: winrm id -r:remoteserver
Remote FQDN test: winrm id -r:remoteserver.contoso.com
WinRM successful reply example:

C:\>winrm id -r:ServerA
IdentifyResponse
    ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
    ProductVendor = Microsoft Corporation
    ProductVersion = OS: 6.1.7600 SP: 0.0 Stack: 2.0

More Information
Recently a firewall appliance sold by a major vendor showed content filtering disabled and not licensed to be turned on, yet was still filtering specific content. This was discovered through examination of network traces. Do not assume content, protocols or traffic are not being blocked. Perform tests to verify.

Written by IT Core

November 23, 2010 at 9:12 PM

KB2413735: Mouse and screen resolution issues when managing a virtual machine using the Hyper-V

leave a comment »

From KB2413735

Windows Server 2008 or Windows Server 2008 R2, you may experience one of the following symptoms when you connect to a Hyper-V virtual machine using the Hyper-V Manager console or the System Center Virtual Machine Manager Administrator Console:
· The mouse cursor is frozen or has disappeared
· The screen resolution has reverted to the default size
If you connect to the virtual machine using a Remote Desktop Connection (RDP), the symptoms listed above are not exhibited.

This issue can occur after a new Hyper-V VMMS certificate is generated.
Note: The following event will be logged in the Hyper-VMMS event log when a new VMMS certificate is generated:

Log Name: Microsoft-Windows-Hyper-V-VMMS-Admin
Source: Microsoft-Windows-Hyper-V-VMMS
Event ID: 12520
Level: Warning
Description:
Auto-generating a self-signed certificate for server authentication.

To resolve this issue, perform one of the following steps on the Hyper-V server:
·Place the virtual machines in a saved state and then resume the virtual machines.
or
·Restart the virtual machines.

The self-signed certificate that is generated by the Hyper-V Virtual Machine Management service is valid for one year.

To create a self-signed certificate that doesn’t expire for several years, perform the following steps:
1.
Copy the PowerShell script from the following Microsoft Web site:
http://gallery.technet.microsoft.com/ScriptCenter/en-us/be2da634-978b-48d7-b3ab-01c593c9d177 (http://gallery.technet.microsoft.com/ScriptCenter/en-us/be2da634-978b-48d7-b3ab-01c593c9d177)
2. Paste the script into notepad, and then save the file as Cert.ps1. 
3. Copy Makecert.exe to the same directory as the Cert.ps1 file.
For more information on how to obtain Makecert.exe, please visit the following Microsoft web site: http://msdn.microsoft.com/en-us/library/aa386968(VS.85).aspx (http://msdn.microsoft.com/en-us/library/aa386968(VS.85).aspx)
4. Open an elevated Windows PowerShell command prompt. 
5. Run the Cert.ps1 script.

🙂

Written by IT Core

September 23, 2010 at 12:14 PM

KB2308590: System Center Virtual Machine Manager 2008 R2 hotfix rollup package

leave a comment »

KB2308590: System Center Virtual Machine Manager 2008 R2 hotfix rollup package

List of issues that are resolved
Issue 1
Duplicate virtual machines (VMs) may appear in the SCVMM Administrator Console window after a Hyper-V VM in a cluster fails over to another cluster node. Additionally, the status for one of the duplicate VMs is set to Missing. If you try to remove the missing VM from the SCVMM Administrator Console window, the VM is not removed.
Issue 2
Consider the following scenario:
You install the Hyper-V role on a computer that is running Windows Server 2008 R2.
You configure the computer to start from a virtual hard disk.
The computer is part of a Hyper-V failover cluster. The cluster is configured to use cluster shared volumes.
You try to create a VM on a cluster shared volume by using SCVMM 2008 R2.
In this scenario, the operation fails together with the 2912 (0x8004232C) error code.
Issue 3
The Virtual Machine Manager service (Vmmservice.exe) crashes if the following conditions are true:

System Center Operations Manager 2007 integration is enabled.
A Performance and Resource Optimization (PRO) feature-enabled management pack is imported into Operations Manager.
The PRO settings for a host group are changed on the SCVMM server.

KB2308590: System Center Virtual Machine Manager 2008 R2 hotfix rollup package

Written by IT Core

September 21, 2010 at 10:11 PM

Hyper-V Host may stop when VM’s Dynamic Memory use all available RAM

leave a comment »

When setting up VMs with dynamic memory remember that your hyper-v host may stop if those VMs consume (or try to) use all existing memory on the host leaving nothing for the parent partition. 

To prevent that Crete the following Registry Key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Virtualization
RED_DWORD value
Name = MemoryReserve
Setting = amount of MB to reserve for the parent partition.
After setting up the desired value you must reboot the host to the setting become active.

Note: if you set this value too low; VMs will be able to use too much memory and cause performance issues for you. Equally – the higher you set this the fewer VMs you can run.
For more information about memory reserve with dynamic memory check the Virtual PC Guy’s Blog

Written by IT Core

September 21, 2010 at 9:52 PM

KB957311: Recommended hotfixes for Windows Server 2008-based server clusters

leave a comment »

 
 
If you determine that cluster nodes in your environment may be affected by the problems that an update or hotfix addresses, install the hotfix or update on each one of the cluster nodes in your environment.
 
 
 
952247  (http://support.microsoft.com/kb/952247/ ) The Cluster network name resource and the File Share Witness resource may not come
951308  (http://support.microsoft.com/kb/951308/ ) Increased functionality and virtual machine control in the Windows Server 2008 Failover Cluster Management console for the Hyper-V role
950179  (http://support.microsoft.com/kb/950179/ ) When you run the Validate a Configuration Wizard on a Windows Server 2008-based computer or on a Windows Vista-based computer, the validation does not pass
969550  (http://support.microsoft.com/kb/969550/ ) A Stop error occurs on an HP ProLiant server that has the firmware from an E200/E200i HP Smart Array SAS/SATA controller installed on any Windows Server platform
970529  (http://support.microsoft.com/kb/970529/ ) The volume GUID may unexpectedly change after a volume is extended on a Windows Server 2008 failover cluster node
953652  (http://support.microsoft.com/kb/953652/ ) A physical disk resource may unexpectedly fail or go offline when the IsAlive function is executed on a Windows Server 2008 cluster node

Written by IT Core

September 11, 2010 at 11:12 PM

Posted in MS Hotfixes

Tagged with ,

KB:980054 Recommended hotfixes and updates for Windows Server 2008 R2-based server clusters

leave a comment »

From KB:980054
This article describes the hotfixes and updates that we recommend that you install on each node of a Windows Server 2008 R2-based failover cluster. When you update your Windows Server 2008 R2-based failover cluster, you help reduce downtime. You also help decrease the number of errors, failed print jobs, and other support issues that you experience.

We recommend that you install the following hotfixes if you plan to install the failover clustering feature on Windows Server 2008 R2 Core:
KB978309: IPv6 transition technologies, such as ISATAP, 6to4 and Teredo do not work on a computer that is running Windows Server 2008 R2 Server Core
KB976571: Stability update for Windows Server 2008 R2 Failover Print Clusters

For additional information about Network related issues and Hyper-V check my previous post at:
Hyper-V Fixes for Network Connectivity related issues

🙂

Written by IT Core

September 11, 2010 at 10:59 AM

KB2397711: Recommended hotfixes for System Center Virtual Machine Manager 2008 R2

leave a comment »

KB2397711: Recommended hotfixes for System Center Virtual Machine Manager 2008 R2.

Recommended updates for the Virtual Machine Manager (VMM) Server and Admin Console
982522 (http://support.microsoft.com/kb/982522)   Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: June 8, 2010
982523 (http://support.microsoft.com/kb/982523)   Description of the System Center Virtual Machine Manager 2008 R2 Admin Console hotfix rollup package: June 8, 2010

Windows Server 2008 – Recommended updates for Microsoft Hyper-V Server and for the VMM server
The following list applies only to systems that are running Windows Server 2008 Service Pack 1
954563 (http://support.microsoft.com/kb/954563)   Memory corruption may occur with the Windows Management Instrumentation (WMI) service on a computer that is running Windows Server 2008 or Windows Vista Service Pack 1
955805 (http://support.microsoft.com/kb/955805)   Certain applications become very slow on a Windows Server 2008-based or Windows Vista SP1-based computer when a certificate with the SIA extension is installed
956774 (http://support.microsoft.com/kb/956774)   A Background Intelligent Transfer Service (BITS) client cannot handle files that have paths that contain the volume GUID in Windows Server 2008 or in Windows Vista
958124 (http://support.microsoft.com/kb/958124)   A wmiprvse.exe process may leak memory when a WMI notification query is used heavily on a Windows Server 2008-based or Windows Vista-based computer

The following list applies to systems that are running Windows Server 2008 Service Pack 1 or Windows Server 2008 Service Pack 2
968936 (http://support.microsoft.com/kb/968936)   A rollup hotfix package for Windows Server 2008 Failover Clustering WMI provider
970520 (http://support.microsoft.com/kb/970520)   The Wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP
971244 (http://support.microsoft.com/kb/971244)   Windows Remote Management (WinRM) does not accept HTTP authorization requests that are larger than 16 KB on a computer that is running Windows Server 2008 or Windows Vista
971403 (http://support.microsoft.com/kb/971403)   The “Win32_share” WMI class cannot enumerate file shares or create file shares on a node in a Windows Server 2008 failover cluster

To see a list of recommended Hyper-V updates for Windows Server 2008 and for Microsoft Hyper-V Server 2008, visit the following Microsoft TechNet websitehttp://technet.microsoft.com/en-us/library/dd430893(WS.10).aspx (http://technet.microsoft.com/en-us/library/dd430893(WS.10).aspx)

Windows Server 2008 – Recommended updates for Hyper-V Failover Cluster nodes
957311 (http://support.microsoft.com/kb/957311)   Recommended hotfixes for Windows Server 2008-based server clusters

Windows Server 2008 R2 – Recommended updates for Microsoft Hyper-V Server and for the VMM server
981314 (http://support.microsoft.com/kb/981314)   The “Win32_Service” WMI class leaks memory in Windows Server 2008 R2 and in Windows 7
981845 (http://support.microsoft.com/kb/981845)   The Windows Remote Management service stops responding in Windows 7 or in Windows Server 2008 R2

To see a list of recommended Hyper-V updates for Windows Server 2008 R2 and for Microsoft Hyper-V Server 2008 R2, visit the following Microsoft TechNet websitehttp://technet.microsoft.com/en-us/library/ff394763(WS.10).aspx (http://technet.microsoft.com/en-us/library/ff394763(WS.10).aspx)

Windows Server 2008 R2 – Recommended updates for Hyper-V Failover Cluster nodes
974930 (http://support.microsoft.com/kb/974930)   An application or service that queries information about a failover cluster by using the WMI provider may experience low performance or a time-out exception
980054 (http://support.microsoft.com/kb/980054)   Recommended hotfixes and updates for Windows Server 2008 R2-based server clusters

Recommended updates for Windows Server 2003 systems that have Virtual Server installed
936059 (http://support.microsoft.com/kb/936059)   An update is available for the Windows Remote Management feature in Windows Server 2003 and in Windows XP

Recommended updates that should be applied to Windows 2000 systems before a P2V is performed
834010 (http://support.microsoft.com/kb/834010)   A deadlock occurs when a program that uses WMI calls the LoadLibrary() or the FreeLibrary() function in Windows 2000
843527 (http://support.microsoft.com/kb/843527)   The Win32_SCSIController WMI class cannot obtain SCSI controller information after you install the MS04-011 security update
892294 (http://support.microsoft.com/kb/892294)   A WMI event notification query does not detect a user permissions change on Windows 2000 or Windows Server 2003

Written by IT Core

September 8, 2010 at 11:08 PM

KB2397370: A System Center Virtual Machine Manager 2008 R2 virtual machine migrated between Failover Clusters fails with Error 12711

leave a comment »

 

From KB2397370

Migration of a virtual machine from one Microsoft Windows 2008 R2 Failover Cluster to another fails. Both Failover Clusters are managed by System Center Virtual Machine Manager 2008 R2 (SCVMM).

Error (12711)
VMM cannot complete the WMI operation on server Contoso.LOCAL because of error: [MSCluster_ResourceGroup.Name=”2068e895-4930-42be-a4c8-152ab15a28b8″] The cluster group could not be found.
 (The cluster group could not be found (0x1395))
Recommended Action
Resolve the issue and then try the operation again
.

SCVMM 2008 R2 attempts to execute an operation on the source host (of the source cluster) using the resources names and GUIDS of the destination cluster. Migration will always fail right after the BITS migration when the virtual machine is placed in a saved state.

This issue can only be reproduced under these conditions:
VM is created using Hyper-V
VM is made into an HA VM using the Failover Cluster GUI (resource name will be called something like “Virtual Machine <vmname>”)
VM is in a running state
VM is migrated to a different cluster. VMM will chose Quick Storage Migration with network migration in this case

There are two different workarounds for this issue.

1. Perform the migration when the virtual machine is in a saved state or powered down.

2. Use the Failover Cluster Manager User Interface to locate the virtual machine in “Services and Applications”. Right click the top resource group for this virtual machine and change the Resource Name from “Virtual Machine <vmname>” to “SCVMM <vmname>”. Then refresh the virtual machine in SCVMM PowerShell using the “refresh-vm -force ‘<vmname>'” cmdlet. The virtual machine can now be migrated while in a running state.

Written by IT Core

September 2, 2010 at 12:02 PM

KB2264080: Update rollup package for the Hyper-V role in Windows Server 2008 R2

leave a comment »

This article describes an update rollup package that resolves some issues for the Hyper-V role on a computer that is running Windows Server 2008 R2 and that is dated August 24, 2010.

Issue 1
When a computer has one or more Intel CPUs code-named Nehalem installed, you receive the following Stop error message:

0x00000101 ( parameter1 , 0000000000000000, parameter3 , 000000000000000c) CLOCK_WATCHDOG_TIMEOUT
Note The Nehalem CPU for a server is from the Intel Xeon processor 5500 series and for a client computer is from the Intel Core-i processor series.

Issue 2
Consider the following scenario:
You run a virtual machine (VM) on the computer.
You use a network adapter on the VM to access a network.
You establish many concurrent network connections. Or, there is heavy outgoing network traffic.
In this scenario, the network connection on the VM may be lost. Additionally, the network adapter is disabled.

Note You have to restart the VM to recover from this issue.

Issue 3
When a computer has an Intel Westmere processor, you receive an error message that resembles the following:
STOP: 0x0000001a ( Parameter1 , Parameter2 , Parameter3 , Parameter4 ) MEMORY_MANAGEMENT

Source: KB2264080

Written by IT Core

August 25, 2010 at 12:00 AM

SCVMM integration with Opsmgr fails with the error ID:10207

leave a comment »

How to recover from the error 10207 when performing the Administrator setup console stage:

Setup was not able to retrieve the service account from the specified Virtual Machine Manager server.
Specify a different VMM server and then try the operation again.

ID: 10207

Check if the SPN for the SCVMM service account is OK. Use the SETSPN -L, or check the account properties using ADSIEDIT or any other tool that allows you to confirm the SPN. If everything is ok you may need to recreate the SCP container that is under the SCVMM server account (In the picture bellow you can check that using the tool ADSIEDIT.msc).

 

To manually create this container, use the SCVMM CD and browse to the \Setup folder using command prompt.  Run CONFIGURESCPTOOL.EXE –INSTALL from that folder.  This should create the SCP, after running the cmd confirm the SCP creation using ADSIEdit.  Now rerun the integration setup and all steps should complete without errors.

Note: If you do uninstall/reinstall SCVMM then make sure you patch it to the level it was at before.  Up-to-date SCVMM agents cannot communicate with out-of-date SCVMM servers.

The full story Aida-s blog.

Written by IT Core

July 18, 2010 at 12:00 AM

KB982501:The monitoring of SNMP devices may stop intermittently in System Center Operations Manager or in System Center Essentials

leave a comment »

KB982501:The monitoring of SNMP devices may stop intermittently in System Center Operations Manager or in System Center Essentials

When you monitor some Simple Network Management Protocol (SNMP) devices by using System Center Operations Manager or System Center Essentials, the monitoring may stop intermittently. This issue affects the SNMP performance collection rules or the SNMP event monitors.

After you restart the OpsMgr Health service or the System Center Management service on the proxy agent, the monitoring of the SNMP devices continues as usual for a while. However, this issue may again occur sometime later. 

Additionally, the following event is logged in the Operations Manager log when this issue occurs:

Source: HealthService
Date: date
Event ID: 4000
Task Category: Health Service
Level: Error
Keywords: Classic
User: N/A
Computer: computer name
Description:
A monitoring host is unresponsive or has crashed. The status code for the host failure was 2164195371.

GET THE HOTFIX HERE

Written by IT Core

July 9, 2010 at 9:08 PM

Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1

leave a comment »

Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 was released at 6/23/2010.
The service pack includes the following new features and feature improvements:

New Reports
• The new User Activity report displays the sites and site categories accessed by any user.
• All Forefront TMG reports have a new look and feel.

Enhancements to URL Filtering
• You can now allow users to override the access restriction on sites blocked by URL filtering. This allows for a more flexible web access policy, in that users can decide for themselves whether to access a blocked site. This is especially useful for websites that have been incorrectly categorized.
• You can now override the categorization of a URL on the enterprise level; the override is then effective for each enterprise-joined array.
• Denial notification pages can now be customized for your organization’s needs.

Enhanced Branch Office Support
• Collocation of Forefront TMG and a domain controller on the same server, which can help reduce the total cost of ownership at branch offices.
• When installed on a computer running Windows Server 2008 R2, SP1 simplifies the deployment of BranchCache at the branch office, using Forefront TMG as the Hosted Cache server.

Support for publishing SharePoint 2010
• Forefront TMG SP1 supports secure publishing of SharePoint 2010.

Read some interesting articles about the new features included in TMG SP1:
Forefront TMG (ISA Server) Product Team Blog
Forefront Team Blog
Richard Hicks

Written by IT Core

July 1, 2010 at 8:58 PM

Windows XP Service Pack 3 setup error: The System cannot find the file specified

with 3 comments

Here’s one that I already saw a couple of times. You try to run Service Pack 3 in Windows XP and, almost, immediately you get the error:
Setup Error
The System cannot find the file specified.

From my experience this error is caused by the “Wintrust.dll” and/or ‘atl.dll’. This error can be solved by running regsvr32 from command prompt to register the “Wintrust.dll”:
regsvr32 Wintrust.dll
After searching for similar behavior in the web I also discover that, in some scenarios, you may need to re-register some additional dlls. Here’s a nice list that you can copy to a batch file to run in the computer that is having that error:
# Batch start
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wuweb.dll
regsvr32 atl.dll
regsvr32 Softpub.dll
regsvr32 Wintrust.dll
regsvr32 Initpki.dll
regsvr32 Mssip32.dll
# Batch End

Hopefully after that you should be able to run the Service Pack 3 without problems.

🙂

Written by IT Core

June 25, 2010 at 12:48 AM

Posted in MS Hotfixes, Troubleshooting

Tagged with

IIS 6 applications may stop responding after you install Microsoft update KB 982666

with 2 comments

Here’s an Interesting one that I ran into recently…

You are running Windows 2003 Server and you have IIS 6 installed and hosting your web-sites. The operating system prompts you to install Microsoft update MS10-040 (KB 982666). After completing the install you note the following errors:

  • IIS application pools or websites will no longer start
  • IIS web-sites may not be able to start.
  • Rapid Fail Protection will shut down your application pools
  • An inspection of the event logs show that the IIS worker processes are terminating unexpectedly, showing event messages similar to the following:

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date:  12/9/2009
Time:  10:55:01 AM
User:  N/A
Computer: WEBSERVER01
Description: A process serving application pool ‘DefaultAppPool’ terminated unexpectedly. The process id was ‘1234’.
The process exit code was ‘0xffffffff‘.
Ensure that you are seeing the above process exit code ‘0xffffffff‘ for which this post applies.

So what really happens?
NOT ALL IIS installs running on Windows 2003 will be impacted by this patch. YOU CAN INSTALL the patch and continue running IIS normally. The only case when the error occurs is the following:

You installed Windows 2003 and you did not install IIS 6 when you did this. You then installed Service Pack 1 or Service Pack 2 directly and afterwards you decided to install IIS. When installing IIS you were prompted to insert the original installation disk (not the Service Pack 1 disk or the Service Pack 2 disk).

If you followed the scenario above, you will most likely end up with what is called a binary mismatch between the operating system dlls and the dlls that belong to IIS. In plain English: your Windows 2003 files are those of Service Pack 2 and your IIS files are those of Service Pack 1 or RTM.

How can you verify that you are in this scenario?
In a Windows 2003 command prompt, type the following command:

Winver
This will show you the Windows 2003 version that you are running and the patch level. You should see that the operating system is patched to Service Pack 2. If you are not, you should seriously consider upgrading since Service Pack 1 of Windows 2003 is no longer supported.

If you are running service pack 2, then go ahead and check the version of an IIS 6 files in the following folder: %windir%\system32\inetsrv. The minimum version of the file(s) is the following if you are running SP2.
6.0.3790.3959

Solution to this:
Should you find yourself in this situation, and only after you confirm the symptoms, you should go ahead and re-install the Service Pack 2 from Windows 2003. To download the Service Pack you can go to:
http://www.microsoft.com/downloads/details.aspx?FamilyId=95AC1610-C232-4644-B828-C55EEC605D55&displaylang=en
You do not need to un-install and re-install Service Pack 2, just re-install it. Upon install, the Service Pack installer will make a list of all Windows components that are installed on your system (including IIS) and will update their binaries.

Note:
This issue is specific to Windows Server 2003. We won’t run into this issue on a Windows 2008 server.

The Credits for this solution goes for the excellent WebTopics Blog.

Written by IT Core

June 15, 2010 at 9:12 PM

Posted in MS Hotfixes, Troubleshooting

Tagged with