Category: Windows Server Update Services 3.0


The power failed on my server last night. It rebooted just fine, with no errors, except for one. Windows Server Update Services reported two errors.

Event ID 364, 10032

Event ID 364, 10032

The first was event id 364:

Event ID 364

Event ID 364

The second event id was 10032:

Event ID 10032

Event ID 10032

Microsoft states that this is the Background Intelligent Transfer Service not starting which is causing the errors. A good way to check it is to restart the services and then check the event log again.

Make a note of the time of your last event with the id of 364 or 10032. Go to Start>Administrative Tools>Services.

Make sure the Background Intelligent Transfer Service is set to automatic. Right click it and select restart.

BITS Service

BITS Service

Do the same thing for Windows Update Services.

WSUS Service

WSUS Service

They should both restart with no problems.

Now go to your WSUS 3.0 console and Synchronize Now. This is found in Start>Administrative Tools> Windows Server Update Services.

WSUS Console

WSUS Console

Now open a command prompt by clicking Start>Run, and then typing cmd.

In the command window navigate to your Tools folder in the Update Services directory. Mine is on the C partition at:

cd c:\program files\update services\tools\

This is the default.

Type this command: wsusutil checkhealth

Command Prompt

Command Prompt

Now open up the event log and check for new event id’s 10032 under the Application Log. If there are none it was a transient error and the issue is resolved.

If the event still persists, then it is most likely a Windows Defender file that is stuck, according to Bradley, a MSMVP blogger for the SBS Diva, located here. You can decline the update and it will stop the error. though I do not suggest declining important security updates, the Windows Defender will function fine without this update.

Advertisements

This post has no real meaning, but I thought I would post a screen shot of this tab. For the first time in over a year and a half, this screen is all green. All computers are updates, AV and AM is working, no one shut their computer down over the weekend. Nice.

I removed the computer names to protect the identity of my users.

Green SBS

Green SBS

So running the SBS 2008 BPA, I received a low disk space error, less than 15%. Now I get these errors often, and I have moved everything I could off of the drive, including Sharepoint Content, Redirected Folders, Exchange Databases, Installed Programs such as Microsoft Office.

BPA

BPA

Man, my space IS low, 9 Gb out of 60 Gb free. Let me clean out what I can. I empty all the temp folders, delete some empty folders, some setup logs… Wow, I actually recovered 10 Mb of space. Great.

Then I thought about Windows Server Update Services- I know they keep content somewhere (If you have them set to download and store content, which I do). Drats, that is on D:\ as well. (If you need to move WSUS CONTENT, this is not your post).

What about the database files themselves? I go to C:\WSUS\SUSDB\UpdateServicesDbFiles\ and there they are. Two files:

SUSDB.mdf

SUSDB_log.ldf

*** Stop Update Services Service in Services.mmc ***

Having worked with databases before, I know it is not as simple as dragging and dropping the files. So lets work in SQL.

Goto Start>All Programs>Microsoft SQL Server 2005> and select SQL Server Manager Express.

The program opens, and gives you the Object Explorer. You need to connect to a database instance to work with the database. WSUS uses Windows Internal Database, so let’s connect to that one. You can’t log in with sa, or with Windows Auth even if you are an admin- so enter this in the server name:

\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query

Leave it on Windows Auth, and hit connect. Expand Databases, and your looking at quite a few of them, mostly related to Sharepoint. The one we want is SUSDB.

First, and always, BACK IT UP. This can be done by right clicking the SUSDB and selecting Tasks>Back Up. Now you will have to choose your location, medium type, and file name yourself. For me, I picked a removable HDD (A:/) and named the backup…

Backup

Backup

SUSDB.bak

Let that execute, it might take some time (mine took roughly 7 minutes). Once you get the success message, it’s time to move this DB. Since databases have active connections, and moving the files with these connections can break the the entire internet, lets DETACH the database before moving it.

On a side note this can all be done via command line and sqlcmd. I am not comfortable with the language so I just use the GUI.

Go back to SQLMSE and right click the SUSDB again. This time click Tasks>Detach.

Detach

Detach

You get a screen with one line and some check boxes. You can change some of the boxes depending upon your needs, but for this one, we will select Drop Connections and Keep Full Text Catalog, which is selected by default. As you can see the DB has current connections (such as SUS clients).

Drop Connections

Drop Connections

This will detach the DB. Go back to Windows Explorer, and navigate to the C: drive. Grab the entire WSUS folder, and move it to your target drive. I moved mine to D:\WSUS, which is where my catalog is as well. Might want to give it it’s own directory to be safe.

Now we need to re-attach the database. Go back to SQLSME and right-click on instance, in this case, \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query (SQL Server 9.0.4035 – Domain\UserName).

Click Tasks>Attach.

Attach

Attach

Click Add, and navigate to your new database location.

Choose Location

Choose Location

Click ok. Let it work, it will gray out and take a bit.

Attaching

Attaching

Once it is complete, double-check the database file location by right-clicking SUSDB and selecting properties. Select Files on the left, and look at the Path. You should see your new database path listed there.

Path

Path

Your done. Close everything out, and double-check both the SBS Console and the WSUS Console to make sure everything is synchronized and working. That just recovered almost 4 Gb of space on my otherwise picked-clean C: drive.

*** Start Update Services Service in Services.mmc ***

You run the Exchange 2007 BPA, and get a non-default setting like this one:

BPA Alert

BPA Alert

First, I will explain what caused this. You wanted to disable some settings using netsh, namely autotuning level and rss, by entering these commands at the prompt:

netsh in tcp set global autotuninglevel=disabled

This is done fro two reasons. One, it speeds up remote desktop connections, which can be really slow. Second, it comes up in the SBS 2008 BPA as a warning and invites you to run up to 4 netsh commands to change the TCP values. Don’t you love how Microsoft tells us to fix one thing while the fix causes another problem? Hum.

Go to this key, and look at the values. They are probably messed up like mine, though some of them can be messed up and not others. Your keepalivetime key might be some high number like the rest, mine is sixty.

HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Regedit

Regedit

So now, let’s reverse these settings. These settings are important- you can’t just go into the registry and delete or change the values. Microsoft provides a hotfix that will stop these netsh commands from changing the values- I won’t be running them again, I do not need the hotfix. Hotfix’s and my production server don’t mix well. He hotfix is here.

First, we should restore a backup prior to the change if we have one. I do not, so meh. But I will take this opportunity to MAKE a backup, in case I botch something here. Right click the Parameters folder, and click export. Give it a nice name, like tcpip-param.reg and save it someplace safe. If all else fails we can restore this later.

Microsoft provides a PowerShell script to fix these entries. Let’s see if we can get that to work. Download the script from here. You will have to log in. Ill download it and host it on WordPress. I assure you this file is safe, but if you are unsure get the one from MS. Here is the ps1 file. I renamed it to a .doc. To change it back download it and rename it to netshregfix.ps1. Here is the code it contains. you could also make a new text document, paste in the code, and save it as .ps1

NetshRegFix.doc

MD $env:UserProfile\Desktop\TcpIpParametersBackup
REG Export HKLM\System\CurrentControlSet\Services\TcpIp\Parameters $env:UserProfile\Desktop\TcpIpParametersBackup\Backup.Reg

Get-Item "HKLM:\System\CurrentControlSet\Services\TcpIp\Parameters" | ForEach-Object {
Set-ItemProperty -Path $_.pspath -Name "TcpTimedWaitDelay" -value 60 -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "DisableTaskOffload" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "EnablePMTUBHDetect" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "EnablePMTUDiscovery" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "KeepAliveInterval" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "KeepAliveTime" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "Tcp1323Opts" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "TcpFinWait2Delay" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "TcpMaxDataRetransmissions" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $_.pspath -Name "TcpUseRFC1122UrgentPointer" -ErrorAction SilentlyContinue
}

Write-Output "You must reboot your server for the changes to take effect"

Save the file to someplace easy to navigate to, I chose C:\. Now open Windows PowerShell. Start>Run> PowerShell.

Type in cd C:\ to navigate to where the file is. If you placed it in another location, go there.

Now type NetshRegFix.ps1

PowerShell Error

PowerShell Error

*** Before you do this step, scroll down to the next bold, asterisk’d item. You do not need to install this update- though you can if you do not have the PowerShell 2.0 yet. ***

You get an error, as if PowerShell does not even recognize that this is a script. Well, let’s update PowerShell. Go to http://support.microsoft.com/kb/968929 and select your OS. Download the MSU and install it.

It will install a “hotfix”.

Windows Update

Windows Update

Ah crap. Need to restart. So much for doing this during lunch. Ill do it at 5:30 when everyone is gone.

Restart

Restart

*** Continue from here, to complete running the script in PowerShell v1.0. ***

Wait wait. What about just running the script? Go to C:\ and double-click NetshRegFix.ps1. It opens up in Notepad. Let’s open it up in PowerShell.

Click open with, browse for program. Navigate to c:\Windows\system32\windowspowershell\v1.0\ and select powershell.exe.

Now go back to the file and double-click it. A screen flashes- did it complete? To check, go to the registry setting tcp/ip>Parameters. It should look like this:

End Result, Regedit

End Result, Regedit

Now with HTML5 support! Woooo, I love upgrades to products. Until I started working as an admin, I HATED IE. Prone to closing, errors, virus popups- this was the cause of several of my operating system formats. I was always a Firefox guy. Then when I started administrating, I quickly realized that I had to change and use IE. It is so integrated with Microsoft’s other products that a few of them won’t work without it. Plus the domain support offered is for IE, nothing else.
So I learned, and quickly came to the conclusion that it IS a good browser, set up right. It WAS not good, because I probably did not have it setup.
Anyhow, I stumbled across IE9 Beta download- I am sure most of you have known about it for months, but I have not. I am excited to test drive it- I’ll walk you through the installation, a little bit of browsing, and some HTML5 now.
IE9 Beta
Go to this page, and click the Beta icon in the right hand corner.
After the install, you will need to reboot. Then configure updates. So I double click the IE icon. The browser takes about 25 seconds to open, compared to 5. I understand the computer just booted up, and it was a Beta first time opening- so I am not worried about this. the second thing I notice is the changes to the top bar- epic!

 

Internet Explorer 9 Beta Bar

Internet Explorer 9 Beta Bar

 

It looks sweet. Minimal, slim, sexy. the address bar is now a search box as well- as if the old one wasn’t? I can foresee difficulty explaining this to my staff, one of which once questioned me on where the @ symbol on the keyboard was, and how to produce it. I then noticed the tab bar, which is to the right of the address bar. Strange, doesn’t seem like a ton of room.
Well, lets open a ton of tabs and see how it is handled.

 

Many IE9 Tabs Open

Many IE9 Tabs Open

 

They all get tiny and cram in. Ehhh, not a fan, personally. When you open a new tab the default page is recently viewed web sites, like in google Chrome- this is a neat feature, as I go to the same web sites every day.
At this time notice the tooltips- when you mouseover a link it displays a very minimal tooltip in the opposite lower corner- that’s nifty. downloads are also displayed in a rectangle that appers at the bottom of the screen, asking you to open, save, or cancel. A nice improvement over the old school IE dialog box, which has been around for years and years. Download Statusbar anyone?
I noticed a flicker- i am sure this is a combination of Windows 7, my software, and the fact that IE9 is in Beta. But the flicker got really annoying. I recorded the tooltip, and moved my mouse around- if you watch you will see the flicker i was talking about. It is way worse when I was not recording, flickering every half second- but subsided when recording, and while typing.
At second thought, it is NOT IE9 flickering, but my laptop. I checked it on my other laptop (Windows 7) and my desktop (Windows XP) and there was no flicker. Crap- laptop troubles. Ill blog about that later.
I had a problem with some java web content- namely Photobucket.com’s upload video box was having script errors and wouldn’t load. Then wham- a banner on photbucket expanded! no frame, no window- the add EXPANDED. REALLY NEAT. Though this is a first time opinion, after having expanding adds all over the place I am sure it might get annoying- though clicking close or anywhere off the add minimizes it.
I LOVE the minimalistic theme. Tons of screen space for pages.
Now, onto some of the features of the Beta. this is their “Demo” page, showing off some features. they are really cool.
Beauty of the Web, IE9
First off, they display dynamic content. you click on a link, and windows flip off the page, and the link expands into a windows. VERY fluid, fast. They also have a FPS meter. I’m hitting 25 with the fish screen saver, which displays very graphical fish on your browser window. they also have a cursor trail, which puts color blotches that expand on the background of the web page- behind the content. Neat. Let me get a video of it.
Showing all the features, for the most part.
All in all, I would rate IE9 as a thumbs up. Fast, sleek, graphically amazing. Can’t wait for the release.
UPDATE: As I was finishing this post, the screen went black. I saw a popup about my display driver restarting. Flicker, flicker… BSOD! Here is the recovery error code.

Problem signature:
Problem Event Name:    BlueScreen
OS Version:    6.1.7600.2.0.0.768.3
Locale ID:    1033

Additional information about the problem:
BCCode:    116
BCP1:    880DB510
BCP2:    90E399B0
BCP3:    00000000
BCP4:    0000000D
OS Version:    6_1_7600
Service Pack:    0_0
Product:    768_1

Files that help describe the problem:
C:\Windows\Minidump\101410-28017-01.dmp
C:\Users\Adys Lynn\AppData\Local\Temp\WER-64802-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Booooo!
%d bloggers like this: