WSUS "SQL Server does not exist or access denied" Error
JohnN
If possible could someone advise how I can deal with the issue I have:
When I go to check WSUS the page propmts for credentials but will not load
and returns this error:
"Error connecting to the Windows Server Update Services database
There was an error connecting to the Windows Server Update Services
database. Either the database is not available or you do not have the correct
privileges to access the database.
If you believe you have received this message in error, please check with
your system administrator.
Click here to reload the site: Windows Server Update Services"
I checked services and MSSQL$WSUS service is missing.
I also get this error in the event log:
"Event Type: Error
Event Source: Windows Server Update Services
Event Category: Update Services Service
Event ID: 421
Date: 26/06/2006
Time: 10:11:35
User: N/A
Computer: <server name>
Description:
Connection to database failed. Reason=SQL Server does not exist or access
denied.. Connection string: Data Source=<Server name>\WSUS;Initial
Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100"
I tried re-installing but it will not uninstall either!
Please help as this is the root distribution server.
Thanks,
John...
Lawrence Garvin (MVP)
news:4846DDEF-5EA6-425A...@microsoft.com...
> Hi,
> I checked services and MSSQL$WSUS service is missing.
Well.. that'll pretty much account for the error you're getting.
> Connection to database failed. Reason=SQL Server does not exist or access
> denied.. Connection string: Data Source=<Server name>\WSUS
> I tried re-installing but it will not uninstall either!
If this is Win2003, you cannot 'reinstall' the WMSDE. You'll need to fully
uninstall WSUS, and you may have to do a manual 'cleanup' if there are
remnants of the WMSDE that makes WSUS think it's already installed. (You'll
encounter this during installation if it asks you to designate an existing
database to connect to.)
If this is Windows 2000, then you should be able to reinstall MSDE2000, but
you'll need to reexecute the WSUS installation to get the database properly
configured.
--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
....
JohnN
that will not uninstall :(
If you know a manual way of doing this that would be great.
John..
Lawrence Garvin (MVP)
> Thanks for your suggestion Lawrence, unfortunatly its is the WSUS package
> that will not uninstall :(
Can you provide a bit more detail describing the "will not uninstall"
scenario?
> If you know a manual way of doing this that would be great.
There's not much to a WSUS uninstall as far as 'internals' go. All of the
executable and web content is stored in %programfiles%\Update Services. Just
delete that folder. You might copy the contents of the ~\Logfiles
subdirectory to a safe place, first, though, in case you find it necessary
to refer back to previous WSUS logs.
There's one registry key that should be removed:
HKLM\Software\Microsoft\Update Services
Beyond that, the only other 'issue' might be with the actual uninstallation
of WMSDE, but unless the WMSDE installation is defective, the reinstallation
of WSUS should find the 'WSUS' instance, and reuse it for the new
installation.
--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
....
..
JohnN
I'll try just removing it later but this is the error I get when I try to
un-install via add/remove programs.
It gets through - Status: Uninstalling Miscrosoft Windows Server Update
Services, then hits Removing WMSDEand comes up with "Wizard Not Complete!
The Microsoft Windows Server Update Service was not removed successfully
because an error occured."
Unbelivable - it just installed!!!
But now I get the below error when looking at the console :(
Thanks again for all your help,
John...
--------------
Server Error in '/WSUSAdmin' Application.
--------------------------------------------------------------------------------
Compilation Error
Description: An error occurred during the compilation of a resource required
to service this request. Please review the following specific error details
and modify your source code appropriately.
Compiler Error Message: CS0016: Could not write to output file
'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '
Source Error:
[No relevant source lines]
Source File: Line: 0
Show Detailed Compiler Output:
c:\windows\system32\inetsrv>
"c:\windows\microsoft.net\framework\v1.1.4322\csc.exe" /t:library /utf8output
/R:"c:\windows\assembly\gac\system.enterpriseservices\1.0.5000.0__b03f5f7f11d50a3a\system.enterpriseservices.dll"
/R:"c:\windows\assembly\gac\system.data\1.0.5000.0__b77a5c561934e089\system.data.dll"
/R:"c:\windows\assembly\gac\system.web.mobile\1.0.5000.0__b03f5f7f11d50a3a\system.web.mobile.dll"
/R:"c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\c5284228\00a939a5_f466c501\admincontrols.dll"
/R:"c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll"
/R:"c:\windows\assembly\gac\system.web.services\1.0.5000.0__b03f5f7f11d50a3a\system.web.services.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\15a32c32\003ef4af_f466c501\administration.dll"
/R:"c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll"
/R:"c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\42b9c698\001feab5_f466c501\adminstrings.dll"
/out:"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll" /D:DEBUG /debug+ /optimize-
/warnaserror /w:1 "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary
ASP.NET Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.0.cs"
Microsoft (R) Visual C# .NET Compiler version 7.10.6310.4
for Microsoft (R) .NET Framework version 1.1.4322
Copyright (C) Microsoft Corporation 2001-2002. All rights reserved.
error CS0016: Could not write to output file
'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '
Lawrence Garvin (MVP)
> --------------------------------------------------------------------------------
>
> Compilation Error
> Description: An error occurred during the compilation of a resource
> required
> to service this request. Please review the following specific error
> details
> and modify your source code appropriately.
>
> Compiler Error Message: CS0016: Could not write to output file
> 'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '
This might actually be the source of your uninstall errors.
Make sure the Network Service account has Full Control access to the
~\Temporary ASP.NET Files folder in the pathname specified in the errro
message, and it has Read/Read&Execute/List Folder Contents access to the
~\v1.1.4322 folder.
JohnN
I checked and the account should have had access, but I gave it specific
access, updated it and all subfolders/objects, but to no avail.
Is it trying to create a dll file?
To test security on that folder I created, edited and deleted a txt file
with no problems :(
Any more ideas?
Lawrence Garvin (MVP)
What you may or may not be able to do from a console session logged on as
the machine Administrator account has no bearing at all on what the "Network
Service" account may or may not be able to do.
In the case of WSUS, the Network Service account needs to be able to write
to the ~\Temporary ASP.NET Files folder. If it cannot; if the attempt fails;
you get the error message you are experiencing.
JohnN
Sorry that didn't work either :(
I'm a wee bit confused though, it used to work okay and despite two
un/re-installs it just not happy now.
Any more ideas?
So far I've given full permissions to the login account, the network service
- this is from the Temporary ASP.NET Files folder which I've checked is
inherited to the problem level.
Thanks again,
John...
Lawrence Garvin (MVP)
> Hi again,
>
> Sorry that didn't work either :(
> I'm a wee bit confused though, it used to work okay and despite two
> un/re-installs it just not happy now.
>
> Any more ideas?
The key here is to identify what was changed. If it used to 'work okay', and
then quit working, somebody/something changed something.
The only other suggestion I have would be to reapply Win2003 SP1 (or .NET
Framework v1.1 SP1 if you've not applied Win2003SP1), and see if that will
correct the permissions tree on the Microsoft.NET folder.
Alternatively, a 'repair' installation of the OS might be a possible
solution.
Another possibility is that some group memberships have been changed,
effectively removing permissions that should exist.
In any event, it's definitely a permissions problem. The Update Services
service runs with the Network Service account ( make sure this service is
using this account ), and that account needs to be able to create files and
folders in the ~\Temporary ASP.NET Files folder -- thus the need for Full
Control permissions on the folder, subfolders, and files.
As a last ditch try... here's the permissions I have on my working server
down the entire tree from the root of the drive, relevant to WSUS (these
permissions are not complete, you'll have more than these, but you must have
at least these for WSUS to work):
C: - DOMAIN\Users
- Read & Execute
- Create Folder / Append Data - This Folder and Subfolders
- Create Files / Write Data - Subfolders
- DOMAIN\Administrators, SYSTEM -- Full Control
- Everyone -- Read & Execute - This Folder Only
C:\Windows
- Authenticated Users -- Read & Execute - This folder, subfolders,
and files
- DOMAIN\Administrators, SYSTEM -- Full Control
C:\Windows\Microsoft.NET
- all permissions are inherited from C:\Windows
C:\Windows\Microsoft.NET\Framework
- all permissions are inherited from C:\Windows
C:\Windows\Microsoft.NET\Framework\v1.1.4322
- all permissions are inherited from C:\Windows,
PLUS
- Network Service -- Read & Execute - This folder, subfolders, and
files
- Local Service -- Read & Execute - This folder, subfolders, and
files
C:\Windows\Microsoft.NET\Framework\v1.1.432\Temporary ASP.NET Files
- all permissions are inherited from C:\Windows
- Network Service and Local Service are also inherited from the
parent folder, which is really irrelevant because
- Network Service -- Full Control - This folder, subfolder, and
files
- Local Service -- Full Control - This folder, subfolder, and files
All subfolders of ~\Temporary ASP.NET Files should be inheriting permissions
for Network Service (and Local Service) from the parent folder, specifically
the ~\wsusadmin folder, as I believe this is where the error is generating.
Lawrence Garvin (MVP)
> Thanks again,
>
> I'll have to try the premissions route as this server also does sharepoint
> and a couple of websites so my manager wouldn't go for any major work :(
SHAREPOINT!!!.. Ah.. the importance of sharing the /complete/ configuration
information. :-)
How do I make WSUS work on my Sharepoint server?
http://wsusinfo.onsitechsolutions.com/articles/013.htm
JohnN
*skulks off looking ashamed!*
I'll take a look see if it helps :)
JohnN
Sorry it took so long to get back, but I needed to wait for our Sharepoint
specialist - who told me that sharepoint isn;t on that server!
It turns out I had my apps mixed up!!!
So sorry the problem persists.
Lawrence Garvin (MVP)
"JohnN" <Jo...@discussions.microsoft.com> wrote in message
news:99C685B3-C64A-4950...@microsoft.com...
Then let's go back to scratch..
Run the Client Diagnostic Tool and (re)post the results.
JohnN
Once again thanks for getting back so quick :)
I thought it was a server issue so I downloaded both server and client diag
(not that I know how to use the server one). anyway here are the results of
the client diagnostic as run on the server:
Cheers,
John..
-----------------------------------------------------
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2607. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://eosuk-sec01:8530
WUStatusServer = http://eosuk-sec01:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL,
&downloadBuffer) failed with hr=0x80190194
(null)
Lawrence Garvin (MVP)
> Hi again,
>
> Once again thanks for getting back so quick :)
> I thought it was a server issue so I downloaded both server and client
> diag
> (not that I know how to use the server one). anyway here are the results
> of
> the client diagnostic as run on the server:
> Checking Connection to WSUS/SUS Server
> WUServer = http://eosuk-sec01:8530
> WUStatusServer = http://eosuk-sec01:8530
> UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
> Connection to server. . . . . . . . . . . . . . . . . . PASS
>
> WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL,
> &downloadBuffer) failed with hr=0x80190194
An HTTP '404' error attempting to access the file wuaucomp.cab in the
appropriate platform folder at
http://eosuk-sec01/selfupdate/AU/x86/netserver/wuaucomp.cab (Windows Server
2003)
http://eosuk-sec01/selfupdate/AU/x86/xp/wuaucomp.cab (Windows XP)
http://eosuk-sec01/selfupdate/AU/x86/w2ksp3/wuaucomp.cab (Windows 2000)
(Note: I may have the Windows 2000 folder name incorrect.)
This is caused either because the file is missing, or the virtual directory
pathname is broken, or the virtual directory is missing.
JohnN
Odd, I thought I'd posted this on Friday - anyway it didn't turn up so here
it is again - the client tool as run on the server, I also downloaded the
server diagnostic tool but I wasn't sure what to do with it.
Cheers...
WSUS Client Diagnostics Tool
Checking Machine State
Checking for admin rights to run tool . . . . . . . . . PASS
Automatic Updates Service is running. . . . . . . . . . PASS
Background Intelligent Transfer Service is running. . . PASS
Wuaueng.dll version 5.8.0.2607. . . . . . . . . . . . . PASS
This version is WSUS 2.0
Checking AU Settings
AU Option is 4: Scheduled Install . . . . . . . . . . . PASS
Option is from Policy settings
Checking Proxy Configuration
Checking for winhttp local machine Proxy settings . . . PASS
Winhttp local machine access type
<Direct Connection>
Winhttp local machine Proxy. . . . . . . . . . NONE
Winhttp local machine ProxyBypass. . . . . . . NONE
Checking User IE Proxy settings . . . . . . . . . . . . PASS
User IE Proxy. . . . . . . . . . . . . . . . . NONE
User IE ProxyByPass. . . . . . . . . . . . . . NONE
User IE AutoConfig URL Proxy . . . . . . . . . NONE
User IE AutoDetect
AutoDetect not in use
Checking Connection to WSUS/SUS Server
WUServer = http://eosuk-sec01:8530
WUStatusServer = http://eosuk-sec01:8530
UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
Connection to server. . . . . . . . . . . . . . . . . . PASS
WinHttpDownloadFileToMemory(szURLDest, NULL, 0, NULL, NULL, NULL,
&downloadBuffer) failed with hr=0x80190194
(null)
JohnN
I looked at the path and mine has an extra folder level "en"
So on my sytsem to get to the wuaucomp.cab file which does exist and it
seems to have access to the path would have to read
http://eosuk-sec01/selfupdate/AU/x86/netserver/en/wuaucomp.cab
Could this be the issue?
Thanks,
John...
Lawrence Garvin (MVP)
> Hi,
>
> I looked at the path and mine has an extra folder level "en"
Argh... that's right. I missed the language-specific folder tree designator.
> So on my sytsem to get to the wuaucomp.cab file which does exist and it
> seems to have access to the path would have to read
> http://eosuk-sec01/selfupdate/AU/x86/netserver/en/wuaucomp.cab
>
> Could this be the issue?
No.. that's the correct path, and confirming that the file does exist...
leaves us with one other possibility.
Do you have URLScan installed on this system? URLScan would return a '404'
error on CAB files as well as EXE files.
JohnN
Shame it wasn't the path... oh well..
Unfortunatly URLScan isn't installed on there either :(
Thanks for all you help,
John...
PS: Any idea when WSUS 3 is due ;-)
JohnN
Thank you for all your help with this over the last few months - thankfully
I've recieved permission to install WSUS on another server and so far so good.
Its installed and can be managed, just running the first sync now :)
Again - thanks for all your help.
John...