• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1597
  • Last Modified:

IIS/WSUS issues

I am having issues with an WSUS configuration.  When I go into IIS 7 Manager -> Basic settings -> and attempt to test the connection I get the following error:
The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

I verified that NetworkService has the appropriate Read access on the folder in question.
0
keithmendez
Asked:
keithmendez
  • 9
  • 8
1 Solution
 
Donald StewartNetwork AdministratorCommented:
0
 
keithmendezAuthor Commented:
I will look over this tomorrow, today I'll be out of the office.  Thank you for the information, I will respond after I look thru the information.
0
 
keithmendezAuthor Commented:
I ran thru the link Verifying WSUS server settings, have 2 questions regarding those.
1.)  Under the IIS settings for the Vroots, I do not see a Vroot for WSUSAdmin, nor do I see the actual directory %Program Files%Update Services\Administration.  
2.)  Where the document mentions Execute Permissions:  Scripts Only, I look in each one and there are check boxes in Read and Scripts but not in Execute.  Does this mean I need to check the Execute box?

Sorry, not too familiar with IIS.  I would definitely self-classify myself as a novice with IIS 6.  It took me a while with IIS 7 to figure out what was what, UI was different.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Donald StewartNetwork AdministratorCommented:
Lets back up a bit, Normally 99 percent of the time you shouldnt need go into IIS 7 Manager at all when setting up WSUS. What errors related to WSUS are you having?
0
 
keithmendezAuthor Commented:
When I try to go into WSUS and click on Connect to Server, I get the following error message:  "Cannot connect.  The server may be using another port or different secure sockets layer setting".  I inherited this issue and from what I know, no changes were made regarding the port numbers or SSL settings.  

I went into IIS 7 manager and performed the steps initially outlined in the beginning of my post.  
0
 
Donald StewartNetwork AdministratorCommented:
I would uninstall IIS/ASP reinstall IIS/ASP and do the same with .NET
 
If that still doesnt resolve, you will need to reinstall WSUS
0
 
keithmendezAuthor Commented:
I may have to take a different route, uninstall and reinstall WSUS, as there are other websites dependent upon IIS on that server.
0
 
Donald StewartNetwork AdministratorCommented:
Ok, lets see if reinstalling .NET is enough then WSUS
0
 
keithmendezAuthor Commented:
Can I reinstall .NET and not have it affect the websites currently running on IIS at this point in time?  Or if I install .NET over itself will that not affect anything?
0
 
Donald StewartNetwork AdministratorCommented:
either way wont affect, suggest uninstall first.
 
You may need to.....http://blogs.msdn.com/astebner/pages/8904493.aspx
0
 
keithmendezAuthor Commented:
I spoke to some of my fellow co-workers.  Apparently the person who was working on this issue prior to my arrival was making some permissions changes in IIS regarding WSUS, which is why I was kind of pointed in the IIS direction.  No one knows exactly what permissions were changed/edited but whatever was done is what caused the issues with WSUS and IIS.
0
 
Donald StewartNetwork AdministratorCommented:
A reinstall should fix this, WSUS automatically configures IIS during install
0
 
keithmendezAuthor Commented:
I thought I could reinstall WSUS over itself but it's asking me to uninstall first and that is something I wanted to avoid if at all possible.  If I don't pick to remove the database, the updates, or the log files will the settings stay as they originally were configured?  
0
 
Donald StewartNetwork AdministratorCommented:
Yes, that's why the options are there.
0
 
keithmendezAuthor Commented:
I tried to uninstall and reinstall but that operation failed.  I am attaching the screen shots.
wsuserror1.jpg
wsuserror2.jpg
0
 
Donald StewartNetwork AdministratorCommented:
Afraid of that, looks like you will have to do a manual uninstall
 
http://blogs.technet.com/sus/archive/2008/11/05/how-to-manually-remove-all-of-wsus.aspx
 
In addition to the blog above:
 
 
If you are running an x86-based edition of Microsoft Windows Server 2008, use the following command line to remove Windows Internal Database from the computer:
msiexec /x {CEB5780F-1A70-44A9-850F-DE6C4F6AA8FB} CALLERID=ocsetup.exe
If you are running an x64-based edition of Windows Server 2008, use the following command line to remove Windows Internal Database from the computer:
msiexec /x {BDD79957-5801-4A2D-B09E-852E7FA64D01} CALLERID=ocsetup.exe
 
 
0
 
keithmendezAuthor Commented:
This issue was fixed by Microsoft.  Essentially, in addition to doing the steps in the above technet link, they also had to detach the susdb in sql 2008 as well.  It took 'em 4 hours, but they were able to resolve completely.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 9
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now