Solved

Wsus+ asp.net error

Posted on 2008-09-30
65
1,255 Views
Last Modified: 2008-10-29
Hi,

I've installed wsus 3.0 sp1 and configured using GPO to add computers.
After that, an error is shown (see text below)...  if  you take a look to "USER HOST ADDRESS"  I can see same message  only changing the ip.. those ips are AD computers ip.


How can I resolve this?
Event code: 3006
 
Event message: A parser error has occurred.
 
Event time: 30/09/2008 23:49:50
 
Event time (UTC): 30/09/2008 21:49:50
 
Event ID: 535f6e3abbc240f7a1fb6d57e7cd0515
 
Event sequence: 1
 
Event occurrence: 1
 
Event detail code: 0
 
Application information:
 
Application domain: /LM/W3SVC/1/ROOT/ClientWebService-39-128672849899687500
 
Trust level: Full
 
Application Virtual Path: /ClientWebService
 
Application Path: C:\Program Files\Update Services\WebServices\ClientWebService\
 
Machine name: xxxx
 
Process information:
 
Process ID: 532
 
Process name: w3wp.exe
 
Account name: NT AUTHORITY\NETWORK SERVICE
 
Exception information:
 
Exception type: HttpException
 
Exception message: The type 'Microsoft.UpdateServices.Internal.Global' is ambiguous: it could come from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\microsoft.updateservices.webservices.client.DLL' or from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\clientws.DLL'. Please specify the assembly explicitly in the type name.
 
Request information:
 
Request URL: http://xxxxxx/ClientWebService/client.asmx
 
Request path: /ClientWebService/client.asmx
 
User host address: xxxxxxx
 
User:
 
Is authenticated: False
 
Authentication Type:
 
Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Thread information:
 
Thread ID: 1
 
Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Is impersonating: False
 
Stack trace: at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
 
at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
 
at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)

Open in new window

0
Comment
Question by:heze54
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 34
  • 27
65 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 22715508
You can try re-registering ASP with IIS.

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -i -enable

If that still fails then change the IIS Application Pool service to use the LOCAL SYSTEM account and restart the service.

Now, change the IIS Application Pool service to use the NETWORK SERVICE account and restart the service.

Let us know.
0
 

Author Comment

by:heze54
ID: 22715984
Hi,

Does not works...

I looking for iis application pool service but not found.... which is this service?

Best regards
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 

Author Comment

by:heze54
ID: 22719408
HI,

Same error... computers still not reporting to WSUS.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22719525
Hosts not reporting to WSUS isn't the error I see above.  Has that error gone now?

Normally, there are only a few reasons why computers don't show up in WSUS:

1) Workstations were imaged incorrectly where Sysprep wasn't used - this causes all the workstations to have the same SID.
2) The GPO isn't setup properly.
3)  Automatic Updates is disabled on the workstations.

You can try this on one workstation:

Save the attached code as AU_Clean_SID.cmd

This needs to be run as an Administrator directly on the workstation.

Let me know.

@echo off
Echo Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
Echo 1.    Stops the wuauserv service
Echo 2.    Deletes the AccountDomainSid registry key (if it exists)
Echo 3.    Deletes the PingID registry key (if it exists)
Echo 4.    Deletes the SusClientId registry key (if it exists)
Echo 5.    Restarts the wuauserv service
Echo 6.    Resets the Authorization Cookie
Echo 7.    More information on http://msmvps.com/Athif
Pause
@echo on
net stop wuauserv
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
net start wuauserv
wuauclt /resetauthorization /detectnow
Pause

Open in new window

0
 

Author Comment

by:heze54
ID: 22723633
Hi,

This is the output from a certain domain computer:


Best regards

Save the batch file "AU_Clean_SID.cmd". This batch file will do the following:
1.    Stops the wuauserv service
2.    Deletes the AccountDomainSid registry key (if it exists)
3.    Deletes the PingID registry key (if it exists)
4.    Deletes the SusClientId registry key (if it exists)
5.    Restarts the wuauserv service
6.    Resets the Authorization Cookie
7.    More information on http://msmvps.com/Athif
Presione una tecla para continuar . . .
 
C:\WINDOWS>net stop wuauserv
El servicio de Actualizaciones automáticas está deteniéndose.
El servicio de Actualizaciones automáticas fue detenido con éxito.
 
 
C:\WINDOWS>REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpd
ate" /v AccountDomainSid /f
 
Error: el sistema no pudo encontrar la clave o valor de registro especificados
 
C:\WINDOWS>REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpd
ate" /v PingID /f
 
Error: el sistema no pudo encontrar la clave o valor de registro especificados
 
C:\WINDOWS>REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpd
ate" /v SusClientId /f
 
La operación finalizó correctamente
 
C:\WINDOWS>net start wuauserv
El servicio de Actualizaciones automáticas está iniciándose.
El servicio de Actualizaciones automáticas se ha iniciado con éxito.
 
 
C:\WINDOWS>wuauclt /resetauthorization /detectnow
 
C:\WINDOWS>Pause
Presione una tecla para continuar . . .

Open in new window

0
 
LVL 51

Expert Comment

by:Netman66
ID: 22724278
Open Regedit.
Navigate to HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\WindowsUpdate

Confirm that the following values are there:

AccountDomainSid
PingID
SusClientId

If they aren't, then create them as String Values.  Do not give them a value.

Let me know.
0
 

Author Comment

by:heze54
ID: 22724400
Hi,

I use wsus 3 sp1.. this entry SUSclientID is part of old SUS server or wsus?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22726598
Both.
0
 

Author Comment

by:heze54
ID: 22726762
Hi,

I found 2 of three entries... error in AccounDomainSid.. it wasnt.. created now as a REG_SZ!!
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22726971
That's correct.

As long as the workstation OS SID is different then you should start to see clients showing up.  Make sure to run the last line of the script again.

wuauclt /resetauthorization /detectnow

0
 

Author Comment

by:heze54
ID: 22728619
Ok,

Command done but no resutl... Ill wait more time!!!

Same error Event code: 3006 are still shown

0
 
LVL 51

Expert Comment

by:Netman66
ID: 22729526
Is this code in the Event Viewer?
0
 

Author Comment

by:heze54
ID: 22729672
Hi,

Code attached.


EventiD 1310
 
 
Event code: 3006 
Event message: A parser error has occurred. 
Event time: 16/10/2008 13:21:16 
Event time (UTC): 16/10/2008 11:21:16 
Event ID: 394985d0077a4ab8a825c34b14eaeb38 
Event sequence: 1 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/1/ROOT/ClientWebService-819-128686296763437500 
    Trust level: Full 
    Application Virtual Path: /ClientWebService 
    Application Path: C:\Program Files\Update Services\WebServices\ClientWebService\ 
    Machine name: xxxx
 
Process information: 
    Process ID: 5232 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Exception information: 
    Exception type: HttpException 
    Exception message: The type 'Microsoft.UpdateServices.Internal.Global' is ambiguous: it could come from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\clientws.DLL' or from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\microsoft.updateservices.webservices.client.DLL'. Please specify the assembly explicitly in the type name. 
 
Request information: 
    Request URL: http://xxxxx/ClientWebService/client.asmx 
    Request path: /ClientWebService/client.asmx 
    User host address: xxxxxxxxx
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
 
Thread information: 
    Thread ID: 7 
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
    Is impersonating: False 
    Stack trace:    at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
   at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
   at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters)
 
 
Custom event details: 
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Open in new window

0
 
LVL 51

Expert Comment

by:Netman66
ID: 22730502
Have you tried uninstalling and reinstalling WSUS?

It looks like a permissions error that should have been taken care of with the initial install.
0
 

Author Comment

by:heze54
ID: 22731164
Yes... I did and the same error
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22731334
0
 

Author Comment

by:heze54
ID: 22733171
Hi,

As you can see, the main server is zeus. Erros posted before (apsnet errors) are shown at event viewer-> application.

Best regrads

 
WSUS Client Diagnostics Tool
 
Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is not running. PASS
        Wuaueng.dll version 7.2.6001.784. . . . . . . . . . . . PASS
                This version is WSUS 2.0
 
Checking AU Settings
        AU Option is 3 : Notify Prior to Install. . . . . . . . PASS
                Option is from Policy settings
 
Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy
                192.168.156.70:8080
                User IE ProxyByPass
                https://citrix.serced.net;<local>
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use
 
Checking Connection to WSUS/SUS Server
                WUServer = http://zeus
                WUStatusServer = http://zeus
        UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS
        Connection to server. . . . . . . . . . . . . . . . . . PASS
        SelfUpdate folder is present. . . . . . . . . . . . . . PASS
 
Press Enter to Complete

Open in new window

0
 
LVL 51

Expert Comment

by:Netman66
ID: 22733450
You may need to bypass your proxy for http://zeus.

You also should have the FQDN in the policy - like http://zeus.domain.com and any port number that WSUS is using that is NOT port 80 (the default).

0
 

Author Comment

by:heze54
ID: 22734528
Hi,

Proxy bypass for my server... where is configured? have I to configure my gpo?
0
 

Author Comment

by:heze54
ID: 22734744
Hi,

If I try to browse into http://zeus.serced.net/clientwebservice/client.asmx
Server Error in '/ClientWebService' Application.
--------------------------------------------------------------------------------
 
Parser Error 
Description: An error occurred during the parsing of a resource required to service this request. Please review the following specific parse error details and modify your source file appropriately. 
 
Parser Error Message: The type 'Microsoft.UpdateServices.Internal.Global' is ambiguous: it could come from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\microsoft.updateservices.webservices.client.DLL' or from assembly 'C:\Program Files\Update Services\WebServices\ClientWebService\bin\clientws.DLL'. Please specify the assembly explicitly in the type name.
 
Source Error: 
 
 
Line 1:  <%@ Application Codebehind="Global.asax.cs" Inherits="Microsoft.UpdateServices.Internal.Global" %>
 
 
 
Source File: /ClientWebService/global.asax    Line: 1 
 
 
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.1433; ASP.NET Version:2.0.50727.1433 

Open in new window

0
 

Author Comment

by:heze54
ID: 22765747
Hi,


Any information?
0
 

Author Comment

by:heze54
ID: 22794016
Hi,

This question must not be deleted.

I explained all data....  I have responded quickly  and  posted into the correct category.


Then... what can  I do?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22795024
Here's what I want you to do:

1)  Uninstall WSUS.
2)  Uninstall the Windows Internal Database - use this method:

msiexec /x {CEB5780F-1A70-44A9-850F-DE6C4F6AA8FB} CALLERID=ocsetup.exe

3) If you currently do NOT have any websites running on this server other than WSUS, then uninstall IIS using Add/Remove>Windows Components.  Reboot the server here.

4)  Make sure all the prerequisites are installed - if your not sure install them again:

http://technet.microsoft.com/en-us/library/cc708484.aspx

5)  Reinstall IIS from Add/Remove>Windows Components - select Application Server then select Details and be certain ASP.NET is checked.

6)  Install the latest version of WSUS.

There is an entire walkthrough tree here:

http://technet.microsoft.com/en-us/library/cc708609.aspx

0
 

Author Comment

by:heze54
ID: 22796497
Hi,


Any other program like wsus?
0
 

Author Comment

by:heze54
ID: 22796504
Hi,


Any other program like wsus?


Best regards
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22796694
Not really.

Have you followed the last instructions I posted?
0
 

Author Comment

by:heze54
ID: 22796836
Yes... and when I was reinstalling wsus... the software crashed

agggggggggggggggggggg jajaja
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22798639
What were the errors?
0
 

Author Comment

by:heze54
ID: 22802159
Hi...

2nd attemp... OK.
0
 

Author Comment

by:heze54
ID: 22802518
Hi,

After installation, install ok, synchro ok.. same error asp.net.....

What can I do?

Best regards
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22803876
Brutal...

There must be a base pemission issue.

In one of the last links I provided you with, near the bottom of the article there was a section about permissions required by certain accounts.  Please check these permissions carefully before we make any more changes.

Let me know.
0
 

Author Comment

by:heze54
ID: 22806640
what link?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22807418
0
 

Author Comment

by:heze54
ID: 22808680
Hi,

I verified:

1º was bad...changed

2º was bad..changed

3º was OK

After that, I rebooted some computers, and same error at server event viewer
Permissions
 
The following disk permissions must be granted to the specified users for the specified directories:
 
   1. Either the built-in group Users or the NT Authority\Network Service account (on Windows Server 2003) should have read permission for the root folder on the drive where the WSUS content directory resides. If this permission is missing, BITS downloads will fail.
   2. The NT Authority\Network Service account should have "Full Control" permission for the WSUS content directory, usually <SystemDriver>:WSUS\WsusContent. This permission is set by WSUS server setup when it creates the directory, but some security software may reset this permission. If this permission is missing, BITS downloads will fail.
   3. The NT Authority\Network Service account should have Full Control permission for the following folders in order for the WSUS Administration snap-in to display correctly:
          * %windir%\Microsoft .NET\Framework\v2.0.50727\Temporary ASP.NET Files
          * %windir%\Temp 

Open in new window

0
 
LVL 51

Expert Comment

by:Netman66
ID: 22809104
Did you reboot the server after these changes?

0
 

Author Comment

by:heze54
ID: 22809165
Hi,

Yes... after server rebooted, I rebooted domain computers.

Same error at wsus server
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22809266
Did this server have IIS Lockdown run against it?  It seems odd that these permissions are causing problems.

WSUS is a simple install, as long as the server is fairly default.  If there are IIS changes because you have other sites or because a different Security template was applied to the server then permission could be an issue.

When you corrected the permissions, did you apply them to the subfolders and files too?

0
 

Author Comment

by:heze54
ID: 22811282
Hi,

Yes .. applied to subfolders too

There are no other sites configured or changes... I only use this iis for  wsus
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22812139
This isn't a Domain Controller too is it?
0
 

Author Comment

by:heze54
ID: 22812163
Is a domain controller...wsus 2.0 worked properly for months
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22812197
You can run WSUS from an XP workstation if this server isn't going to behave.

I don't know (without looking at things with my own eyes) what the issue could be on your server.  It really looks like a basic permission issue.

0
 

Author Comment

by:heze54
ID: 22812423
Similar software to use?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22813150
SMS, but it's fairly complicated and expensive.

BigFix has a solution:  http://www.bigfix.com/products/patchmanagement.php

Here is a good comparison article:  http://www.networkworld.com/reviews/2003/0303patchrev.html

0
 

Author Comment

by:heze54
ID: 22813501
ag...

My loved wsus...
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22814308
I hear you!

Is the WSUS repository on another parition?
Are the correct permissions on that also?
0
 

Author Comment

by:heze54
ID: 22816156


Wsus is intalled at H disc. There is a Raid 5 n discs and a 10k rpm sata  called H, here is installed wsus.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22816414
Ok, is WSUS installed in a different partition than the WSUS repository - it has to be.

0
 

Author Comment

by:heze54
ID: 22816695
ummmm...

When I installed wsus I selected H:\wsus...all wsus is installed here.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22816919
OK.

Uninstall it again.
You may need to carve out the Windows Internal DB again with that commandline I gave you earlier.
Reboot the server and make sure there are no errors.

Reinstall WSUS, this time pay attention to where it wants to install it.  Everything EXCEPT the repository should go on C:\.  The repository can go on H:\.

Let me know.
0
 

Author Comment

by:heze54
ID: 22817230
and... install all in c:\ and then move datacontent to h:?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22817397
No, if you install it correctly you don't have to move anything.

During the installation you will get a screen that shows the location of the program, the DB and the repository (where the updates are stored).  You only want the repository on another drive leave the rest on the default C:\ drive.
0
 

Author Comment

by:heze54
ID: 22817427
Ok.... deinstalled... server rebooted...

Installing again...
0
 

Author Comment

by:heze54
ID: 22817479
can I install all wsus in c:\wsus.. or is necessary another location?
0
 

Author Comment

by:heze54
ID: 22817972
aggggggggggggggggg

installed at c:\wsus all!!!

same error
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22818179
All is NOT installed on C:

When it shows you the screen where the paths are to all the components, you need to change the Repository (where updates are stored) to H: - the rest stay on C:

0
 

Author Comment

by:heze54
ID: 22819633
It[ running...

Computers are synchro... I'll wait for a day to synchro all computers.


Best regards
0
 

Author Comment

by:heze54
ID: 22829358
Hi again,


Wsus is working.

I desintalled wsus and deleted all clientws.DLL, then reinstalled and works.

Some clients are 100% but many others are 99% is this  normal?

Best regards
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 22829920
Yes, this is normal.

0
 

Author Comment

by:heze54
ID: 22830083
Ok...

Then...


I´ll give you the point. You have spent too many time  with this post.

Thanks a lot.... for your help
0
 
LVL 51

Expert Comment

by:Netman66
ID: 22830216
You're welcome.  I'm glad it's working.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question