|
|
WSUS 3.0 on SBS PE (enu) SP1 (w2k3 sp2)
Installation OK but, ...
.... Synchronization with MS Update server error --> "cancel" in
configuration !
.... Proxy or not ...
NB.: The server can normally contact and download via web the MS Update
server (MS Update)
Any ideas ?
Thank.
Fabrizio Ziberna
|
|
|
|
Yes, of course !
NEWS: error access to TEMP directory (c:\temp ? c:\windows\temp ?
c:\documents and setting\local setting\... ?) with NETWORK SERVICE rights
from XMLSERIALIZER (?)
I found this in a log file ...
Can you help me ?
Thank.
Fabrizio Ziberna
"Lawrence Garvin (MVP)" <onsitech[ at ]community.nospam> ha scritto nel messaggio
news:uhgjpmRuHHA.4764[ at ]TK2MSFTNGP05.phx.gbl...
[Quoted Text]
|
|
"Fipe Trieste" <administrator[ at ]fipets.it> wrote in message
news:u4$w9pZuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
[Quoted Text] > Yes, of course !
> NEWS: error access to TEMP directory (c:\temp ? c:\windows\temp ?
> c:\documents and setting\local setting\... ?) with NETWORK SERVICE rights
> from XMLSERIALIZER (?)
> I found this in a log file ...
> Can you help me ?
Sounds like the Network Service account doesn't have the correct permissions
on the TEMP directory.
Most likely this is %windir%\temp, but the Application Event Log or the
SoftwareDistribution.log should specifically identify what resource access
is failing on. Check to see if Network Service has any access at all to
%windir%\temp, and if not, I'll post the rather complicated security
permissions appropriate for that account and resource.
It could also be an issue in the folder tree at
%windir%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
which we see a quite often.
The Network Service account needs to have all permissions (except Full
Control) on the "Temporary ASP.NET Files" folder and those permissions need
to be inherited to all Files/Folders.
--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E
Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....
|
|
[Quoted Text] > Sounds like the Network Service account doesn't have the correct
> permissions
> on the TEMP directory.
>
> Most likely this is %windir%\temp, but the Application Event Log or the
> SoftwareDistribution.log should specifically identify what resource access
> is failing on. Check to see if Network Service has any access at all to
> %windir%\temp, and if not, I'll post the rather complicated security
> permissions appropriate for that account and resource.
NETWORK SERVICE with FULL CONTROL on c:\windows\temp !
> It could also be an issue in the folder tree at
> %windir%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
> which we see a quite often.
>
> The Network Service account needs to have all permissions (except Full
> Control) on the "Temporary ASP.NET Files" folder and those permissions
> need to be inherited to all Files/Folders.
>
NETWORK SERVICE with appropriate rights on
c:\windows\Microsoft.Net\Framework\v2.0.50727\Temporary ASP.NET etc...
> --
> Lawrence Garvin, M.S., MCTS, MCP
> Independent WSUS Evangelist
> MVP-Software Distribution (2005-2007)
> https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E
>
> Everything you need for WSUS is at
> http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
>
> And, almost everything else is at
> http://wsusinfo.onsitechsolutions.com
> ....
>
|
|
"FIPE TRIESTE" <fabrizio.ziberna[ at ]fipets.it> wrote in message
news:uww$sJluHHA.4476[ at ]TK2MSFTNGP03.phx.gbl...
[Quoted Text] >> Sounds like the Network Service account doesn't have the correct
>> permissions
>> on the TEMP directory.
> NETWORK SERVICE with FULL CONTROL on c:\windows\temp !
Okay. Good.
>> It could also be an issue in the folder tree at
>> %windir%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
>> which we see a quite often.
> NETWORK SERVICE with appropriate rights on
> c:\windows\Microsoft.Net\Framework\v2.0.50727\Temporary ASP.NET etc...
And properly inherited???
>> the Application Event Log or the SoftwareDistribution.log should
>> specifically identify what resource access is failing on.
So... specifically, what resource is throwing the error?
--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E
Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx
And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....
|
|
[Quoted Text] >> NETWORK SERVICE with FULL CONTROL on c:\windows\temp !
>
> Okay. Good.
>
>
>
>> NETWORK SERVICE with appropriate rights on
>> c:\windows\Microsoft.Net\Framework\v2.0.50727\Temporary ASP.NET etc...
>
> And properly inherited???
Yes, ...
>>> the Application Event Log or the SoftwareDistribution.log should
>>> specifically identify what resource access is failing on.
>
> So... specifically, what resource is throwing the error?
***inizio log***
2007-06-28 11.25.14.343 UTC Error WsusService.11
ReportingDatabaseAccess.AddReportingEventBatchToDatabase
***attenzione *** Error occurred while writing events to the database.
Exception: System.UnauthorizedAccessException: Access to the temp directory
is denied. Identity 'NT AUTHORITY\NETWORK SERVICE' under which
XmlSerializer is running does not have sufficient permission to access the
temp directory. CodeDom will use the user account the process is using to
do the compilation, so if the user doesnt have access to system temp
directory, you will not be able to compile. Use Path.GetTempPath() API to
find out the temp directory location.
at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns,
CompilerParameters parameters, Evidence evidence)
at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[]
xmlMappings, Type[] types, String defaultNamespace, Evidence evidence,
CompilerParameters parameters, Assembly assembly, Hashtable assemblies)
at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings,
Type[] types, String defaultNamespace, String location, Evidence evidence)
at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping
xmlMapping, Type type, String defaultNamespace)
at System.Xml.Serialization.XmlSerializer..ctor(Type type, String
defaultNamespace)
at System.Xml.Serialization.XmlSerializer..ctor(Type type)
at
Microsoft.UpdateServices.Internal.DatabaseAccess.EventHistoryTableRow.ConvertStringCollectionToXml(StringCollection
collection)
at
Microsoft.UpdateServices.Internal.ReportingDatabaseAccess.ConvertEventBatchToXml(ReportingEvent[]
eventBatch, Int32& acceptedEventCount)
at
Microsoft.UpdateServices.Internal.ReportingDatabaseAccess.ExecuteSPAddReportingEvent(ReportingEvent[]
eventBatch, Boolean doUpdateIdValidation, Boolean doSummarization)
at
Microsoft.UpdateServices.Internal.ReportingDatabaseAccess.AddReportingEventBatchToDatabase(ReportingEvent[]
eventBatch, Boolean doUpdateIdValidation, Boolean doSummarization)
at
Microsoft.UpdateServices.Internal.ReportingDatabaseAccess.AddReportingEventBatchToDatabase(ReportingEvent[]
eventBatch, Boolean doUpdateIdValidation, Boolean doSummarization)
at
Microsoft.UpdateServices.Internal.Reporting.LocalServerEventReporter.ReportEvent(ReportingEvent
reportingEvent)
at
Microsoft.UpdateServices.Internal.Reporting.EventReporter.ReportEvent(ReportingEvent
reportingEvent)
at
Microsoft.UpdateServices.Internal.BaseApi.SubscriptionEvent.GenerateEvent(String
userName, WsusEventId eventId, WsusEventSourceComponent sourceComponent,
SynchronizationError error, Exception errorException,
SynchronizationUpdateErrorInfoCollection updateErrors)
at
Microsoft.UpdateServices.Internal.BaseApi.SubscriptionEvent.GenerateEvent(WsusEventId
eventId, WsusEventSourceComponent sourceComponent, SynchronizationError
error, Exception errorException)
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean
allowRedirect)
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThreadProcess()
at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
at System.Threading.ExecutionContext.runTryCode(Object userData)
at
System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode
code, CleanupCode backoutCode, Object userData)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext
executionContext, ContextCallback callback, Object state)
at System.Threading.ExecutionContext.Run(ExecutionContext
executionContext, ContextCallback callback, Object state)
at System.Threading.ThreadHelper.ThreadStart()
***fine log***
Bye,
Fabrizio Ziberna
|
|
|