• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 229
  • Last Modified:

SUS Server Issue. DC PROMO breaks SUSadmin. Please help.

I know it's not a great idea to host sus servers and dc's on the the same servers but this is a small multi-site network.

On to the question.

I loaded a sus server on the first DC which is also the Global Catalog server.  Not that this matters. I logged into susadmin and updated just fine.  I have two other servers configured as member server and added the sus client to them also and updated them just fine also and approved all sus updates I wanted to approve.  I could access the http://servername/susadmin just fine until I updated both these member servers to domain controllers and from there we cannot access the SUSadmin page anymore.  

I'm stuck on what to do on this.  Please anyone with any experience on the matter please provide me with any guidance you may have.  I'm not well versed in IIS administration so please keep that in mind.

I appreciate any answers you may have.  Thanks.
0
Shenook
Asked:
Shenook
  • 13
  • 3
  • 2
  • +1
2 Solutions
 
RanidaeCommented:
I've had similar problems in the past, and reinstalling SUS usually solved the problem.  Just reinstall over top the existing installation.  It usually comes down to an IIS problem with the site not being available, so you can also go play in IIS to figure out what happened to the default admin site.
0
 
ShenookAuthor Commented:
I've tried reinstalling and I also tried reinstalling after stopping the defaul-first-site in IIS and to no avail.  Does anyone know what my next step would be.  I've even tried changing the default port to 81 and SUS to 80 but to no avail.  
0
 
ShenookAuthor Commented:
I've even tried from a scratch server again and installed sus client and it worked fine and updated fine.  Again when I ran DCPROMO I cannot get to http://servername/susadmin anymore.  The funny thing is is that it works on the first domain controller.  Could this be a DNS issue and how would i fix this.  I added DNS to each DC now but that did not fix it either.  Anyone?
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
RanidaeCommented:
Have you tried http://xxx.xxx.xxx.xxx/susadmin rather than server name to eliminate DNS as the problem?
0
 
ShenookAuthor Commented:
Good advice but the ip address did not work either.  I know it probably has to do with something IIS related but I can't figure it out.
0
 
texasjpmCommented:
Make sure the ip to sus is in the exception list i have seen problems occur with IIS on a DC when it isn't.
0
 
ShenookAuthor Commented:
I'll try and check that out 7pm PST and let you guys know and go from there.  
0
 
oBdACommented:
Your IIS accounts have probably gone out of sync during the promotion. You can try your luck with the synciwam.vbs script.

Domain Controller Demotion Causes Out-of-Process Applications to Fail
http://support.microsoft.com/?kbid=236007

Synciwam Utility Does Not Function and Generates Error 80110414
http://support.microsoft.com/?kbid=269367

PRB: Configured Identity Is Incorrect for IWAM Account
http://support.microsoft.com/?kbid=297989
0
 
ShenookAuthor Commented:
IWAM solution did not resolve problem and we are not using proxy for this network.  Any other suggestions?  Please let me know.
0
 
ShenookAuthor Commented:
Is this a DNS issue.  What can I do to fix this issue?  Should I create local dns for each additional server?
0
 
ShenookAuthor Commented:
I dont' get it.  Is there anyone who knows enough about this issue?  I research this and some sites say you cannot run a SUS server on a Domain Controller but another site says just the opposite.  The sad thing is that I have one server running sus and it IS a domain controller.  SOmeone please help.

0
 
ShenookAuthor Commented:
OK reloaded windows 2000 server and added server to domain and it worked fine.  Again dcpromo'd server and now Susadmin is NOT accessible again.  Is there anyone knowledgeable enough to help out on this issue?
0
 
oBdACommented:
I'm not too familiar with IIS either, but my guess is still that your problems have something to do with the web accounts.
What exactly do you mean with "not accessible"? Page not found, access denied? Are there any errors in the event log?
Have you turned on auditing to see if this is a permissions problem?
Have you tried removing SUS and IIS after the dcpromo, then installing both again?
Then you might want to extend your search to http://www.susserver.com/; there's a forum there especially for the SUS.
SUSserver Forums
http://forums.susserver.com/
0
 
ShenookAuthor Commented:
Thanks for replying oBda.

Yes the error is page not found.  And I did try removing the sus after DCPROMO but cannot remove IIS without depromoting the domain controller.  I did try reinstalling sus thereafter but no dice.  I can only have sus working all the way up to the point of being a member server then dcpromo.  I cannot pinpoint if it's just an IIS setting or DNS or whatnot.  Let me know if you have any other ideas. THank a bunch.  
0
 
oBdACommented:
Check the permissions for the web sites and the IWAM_..., IUSR_... accounts again. If IIS was installed before you promoted, then the original I... accounts have been deleted. You'll probably have to reassign the permissions for the (now) according domain user accounts.
HOWTO: Promote a Member Server Running IIS to a Domain Controller Running IIS
http://support.microsoft.com/?kbid=300432

Just for the fun of it, I tried it in this order, and I could access the SUSAdmin site just fine:
Promoted a W2k Server (without IIS, (obviously) no SUS) to a DC.
Installed IIS.
Installed SUS.

Then there's a Microsoft forum dealing with SUS:
Microsoft SUS Newsgroup
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs
0
 
ShenookAuthor Commented:
Checking this tonight when power comes back up.  IF it works I'll close this out. *crosses Fingers*
0
 
ShenookAuthor Commented:
This issue is still Open havent got back to do this yet.
0
 
ShenookAuthor Commented:
There are valid solutions to problems similar to the one I am having.  After a week of troubleshooting and aided help we finally determined that the non-conventional single name domain name was causing issues with IIS, DNS and AD.  After renaming after a complete reload all is working fine.  Single name domain registry fixes did not remedy issue either.  
0
 
ShenookAuthor Commented:
Thanks all for the input it is greatly appreciated.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 13
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now