Solved

WSUS server computer account deleted, SID errors, can't connect to SQL

Posted on 2009-07-08
13
532 Views
Last Modified: 2012-05-07
Have a bit of a problem.

In deploying a Virtual Machine from a template, a duplicate name was created on the network and our WSUS server computer account got blown away. The WSUS server was then rejoined to the domain, but now gets errors that it cannot connect to the SQL server where the WSUS database lives.  We would think this is due to the User account in the SQL database called domain\Computername$ having an incorrect SID.

Is there a way to either fix this in SQL by repairing or recreating the account, or get the WSUS console to cooperate in some other way?
0
Comment
Question by:waktasz
  • 9
  • 4
13 Comments
 
LVL 8

Expert Comment

by:TDKD
ID: 24805272
I would perform a non authoritative restore of the object (computer) in AD...
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805338
I actually would probably perform an Authoritatative Restore if the OU in which the computer object is still intact...
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805368
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805486
If you do not want to perform a restore you could always duplicate the old SID on the new one?? If you think this is indeed the issue??
0
 

Author Comment

by:waktasz
ID: 24805493
If I wanted to do that I'm not sure how to get the old SID back. The original computer account was deleted.
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805501
You can do this with Winternals NewSid Tool located here: http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 8

Expert Comment

by:TDKD
ID: 24805515
Is the old physical server still around? Does the SQL server make reference of the SID it is quering?
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805528
If the physical server is still around you can simply run the NewSID tool on it and it will inform you of the current SID.
0
 

Author Comment

by:waktasz
ID: 24805587
The WSUS server is still around...everything is virtual here. It was removed and rejoined to the domain so the old SID is going to be gone, right?. Not sure how to get the old SID back on the machine and also in the computer account in AD.  I guess restore the machine and the AD account?  /Confused in Philadelphia
0
 

Author Comment

by:waktasz
ID: 24805729
At this point I think we are just going to do a WSUS reinstall. Hopefully that works.
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24805887
If you change the SID on the new server it will automatically update in AD...The SQL Server seems to be looking for the old SID?? You stated... so if you re-create the old SID on the new WSUS server you should be ok....
0
 

Accepted Solution

by:
waktasz earned 0 total points
ID: 24807312
Moral of the story...

Deleting the WSUS DB and associated logins, then reinstalling WSUS and recreating the SQL logins fixed the issue.

Thanks for your help though. Those tools could come in handy later.
0
 
LVL 8

Expert Comment

by:TDKD
ID: 24807345
Excellent!!! Glad your all set :-)

Your very welcome!!
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
Introduction: Sometimes when I receive a call from my users to solve their problems it is very difficult for me to found their computer IP address. Even finding their computer Host to provide remote support can be a problem.  So I resorted to Goo…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now