WSUS "SQL Server does not exist or access denied" Error

Hi,

If possible could someone advise how I can deal with the issue I have:

When I go to check WSUS the page propmts for credentials but will not load
and returns this error:

"Error connecting to the Windows Server Update Services database
There was an error connecting to the Windows Server Update Services
database. Either the database is not available or you do not have the correct
privileges to access the database.

If you believe you have received this message in error, please check with
your system administrator.

Click here to reload the site: Windows Server Update Services"

I checked services and MSSQL$WSUS service is missing.

I also get this error in the event log:

"Event Type: Error
Event Source: Windows Server Update Services
Event Category: Update Services Service
Event ID: 421
Date: 26/06/2006
Time: 10:11:35
User: N/A
Computer: <server name>
Description:
Connection to database failed. Reason=SQL Server does not exist or access
denied.. Connection string: Data Source=<Server name>\WSUS;Initial
Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100"

I tried re-installing but it will not uninstall either!

Please help as this is the root distribution server.

Thanks,

John...

"JohnN" <JohnN@discussions.microsoft.com> wrote in message
news:4846DDEF-5EA6-425A-8ABD-2CBB944FC8E9@microsoft.com...

> Hi,

> I checked services and MSSQL$WSUS service is missing.

Well.. that'll pretty much account for the error you're getting.

> Connection to database failed. Reason=SQL Server does not exist or access
> denied.. Connection string: Data Source=<Server name>\WSUS

> I tried re-installing but it will not uninstall either!

If this is Win2003, you cannot 'reinstall' the WMSDE. You'll need to fully
uninstall WSUS, and you may have to do a manual 'cleanup' if there are
remnants of the WMSDE that makes WSUS think it's already installed. (You'll
encounter this during installation if it asks you to designate an existing
database to connect to.)

If this is Windows 2000, then you should be able to reinstall MSDE2000, but
you'll need to reexecute the WSUS installation to get the database properly
configured.

--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....

Thanks for your suggestion Lawrence, unfortunatly its is the WSUS package
that will not uninstall :(
If you know a manual way of doing this that would be great.

John..

Sorry forgot to mention, yes it is on Windows 2003.

"JohnN" <JohnN@discussions.microsoft.com> wrote in message
news:E7B7A9FA-2F01-473A-9F94-DD5395137840@microsoft.com...
> Thanks for your suggestion Lawrence, unfortunatly its is the WSUS package
> that will not uninstall :(

Can you provide a bit more detail describing the "will not uninstall"
scenario?

> If you know a manual way of doing this that would be great.

There's not much to a WSUS uninstall as far as 'internals' go. All of the
executable and web content is stored in %programfiles%\Update Services. Just
delete that folder. You might copy the contents of the ~\Logfiles
subdirectory to a safe place, first, though, in case you find it necessary
to refer back to previous WSUS logs.

There's one registry key that should be removed:
HKLM\Software\Microsoft\Update Services

Beyond that, the only other 'issue' might be with the actual uninstallation
of WMSDE, but unless the WMSDE installation is defective, the reinstallation
of WSUS should find the 'WSUS' instance, and reuse it for the new
installation.

--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....
...

Hi again,

I'll try just removing it later but this is the error I get when I try to
un-install via add/remove programs.

It gets through - Status: Uninstalling Miscrosoft Windows Server Update
Services, then hits Removing WMSDEand comes up with "Wizard Not Complete!
The Microsoft Windows Server Update Service was not removed successfully
because an error occured."

Unbelivable - it just installed!!!

But now I get the below error when looking at the console :(

Thanks again for all your help,

John...

--------------

Server Error in '/WSUSAdmin' Application.
--------------------------------------------------------------------------------

Compilation Error
Description: An error occurred during the compilation of a resource required
to service this request. Please review the following specific error details
and modify your source code appropriately.

Compiler Error Message: CS0016: Could not write to output file
'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '

Source Error:



[No relevant source lines]


Source File: Line: 0



Show Detailed Compiler Output:


c:\windows\system32\inetsrv>
"c:\windows\microsoft.net\framework\v1.1.4322\csc.exe" /t:library /utf8output
/R:"c:\windows\assembly\gac\system.enterpriseservices\1.0.5000.0__b03f5f7f11d50a3a\system.enterprises ervices.dll"
/R:"c:\windows\assembly\gac\system.data\1.0.5000.0__b77a5c561934e089\system.data.dll"
/R:"c:\windows\assembly\gac\system.web.mobile\1.0.5000.0__b03f5f7f11d50a3a\system.web.mobile.dll"
/R:"c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\c5284228\00a939a5_f466c501\admincontrols.dll"
/R:"c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll"
/R:"c:\windows\assembly\gac\system.web.services\1.0.5000.0__b03f5f7f11d50a3a\system.web.services.dl l"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\15a32c32\003ef4af_f466c501\administration.dll"
/R:"c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll"
/R:"c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll"
/R:"c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net
files\wsusadmin\665e2b36\fc5b9679\assembly\dl2\42b9c698\001feab5_f466c501\adminstrings.dll"
/out:"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll" /D:DEBUG /debug+ /optimize-
/warnaserror /w:1 "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary
ASP.NET Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.0.cs"


Microsoft (R) Visual C# .NET Compiler version 7.10.6310.4
for Microsoft (R) .NET Framework version 1.1.4322
Copyright (C) Microsoft Corporation 2001-2002. All rights reserved.

error CS0016: Could not write to output file
'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '

> Server Error in '/WSUSAdmin' Application.
> --------------------------------------------------------------------------------
>
> Compilation Error
> Description: An error occurred during the compilation of a resource
> required
> to service this request. Please review the following specific error
> details
> and modify your source code appropriately.
>
> Compiler Error Message: CS0016: Could not write to output file
> 'c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
> Files\wsusadmin\665e2b36\fc5b9679\dasvl3hw.dll' -- 'Access is denied. '

This might actually be the source of your uninstall errors.

Make sure the Network Service account has Full Control access to the
~\Temporary ASP.NET Files folder in the pathname specified in the errro
message, and it has Read/Read&Execute/List Folder Contents access to the
~\v1.1.4322 folder.


--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....

Hmn...

I checked and the account should have had access, but I gave it specific
access, updated it and all subfolders/objects, but to no avail.
Is it trying to create a dll file?
To test security on that folder I created, edited and deleted a txt file
with no problems :(

Any more ideas?

"JohnN" <JohnN@discussions.microsoft.com> wrote in message
news:BE622853-7F4A-434D-8435-4023E772C194@microsoft.com...
> Hmn...
>
> I checked and the account should have had access, but I gave it specific
> access, updated it and all subfolders/objects, but to no avail.
> Is it trying to create a dll file?
> To test security on that folder I created, edited and deleted a txt file
> with no problems :(

What you may or may not be able to do from a console session logged on as
the machine Administrator account has no bearing at all on what the "Network
Service" account may or may not be able to do.

In the case of WSUS, the Network Service account needs to be able to write
to the ~\Temporary ASP.NET Files folder. If it cannot; if the attempt fails;
you get the error message you are experiencing.

--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....

Hi again,

Sorry that didn't work either :(
I'm a wee bit confused though, it used to work okay and despite two
un/re-installs it just not happy now.

Any more ideas?

So far I've given full permissions to the login account, the network service
- this is from the Temporary ASP.NET Files folder which I've checked is
inherited to the problem level.

Thanks again,

John...

"JohnN" <JohnN@discussions.microsoft.com> wrote in message
news:B4F55A37-9EE5-4882-9119-6BD02917A600@microsoft.com...
> Hi again,
>
> Sorry that didn't work either :(
> I'm a wee bit confused though, it used to work okay and despite two
> un/re-installs it just not happy now.
>
> Any more ideas?

The key here is to identify what was changed. If it used to 'work okay', and
then quit working, somebody/something changed something.

The only other suggestion I have would be to reapply Win2003 SP1 (or .NET
Framework v1.1 SP1 if you've not applied Win2003SP1), and see if that will
correct the permissions tree on the Microsoft.NET folder.

Alternatively, a 'repair' installation of the OS might be a possible
solution.

Another possibility is that some group memberships have been changed,
effectively removing permissions that should exist.

In any event, it's definitely a permissions problem. The Update Services
service runs with the Network Service account ( make sure this service is
using this account ), and that account needs to be able to create files and
folders in the ~\Temporary ASP.NET Files folder -- thus the need for Full
Control permissions on the folder, subfolders, and files.

As a last ditch try... here's the permissions I have on my working server
down the entire tree from the root of the drive, relevant to WSUS (these
permissions are not complete, you'll have more than these, but you must have
at least these for WSUS to work):

C: - DOMAIN\Users
- Read & Execute
- Create Folder / Append Data - This Folder and Subfolders
- Create Files / Write Data - Subfolders
- DOMAIN\Administrators, SYSTEM -- Full Control
- Everyone -- Read & Execute - This Folder Only

C:\Windows
- Authenticated Users -- Read & Execute - This folder, subfolders,
and files
- DOMAIN\Administrators, SYSTEM -- Full Control

C:\Windows\Microsoft.NET
- all permissions are inherited from C:\Windows

C:\Windows\Microsoft.NET\Framework
- all permissions are inherited from C:\Windows

C:\Windows\Microsoft.NET\Framework\v1.1.4322
- all permissions are inherited from C:\Windows,
PLUS
- Network Service -- Read & Execute - This folder, subfolders, and
files
- Local Service -- Read & Execute - This folder, subfolders, and
files

C:\Windows\Microsoft.NET\Framework\v1.1.432\Temporary ASP.NET Files
- all permissions are inherited from C:\Windows
- Network Service and Local Service are also inherited from the
parent folder, which is really irrelevant because
- Network Service -- Full Control - This folder, subfolder, and
files
- Local Service -- Full Control - This folder, subfolder, and files

All subfolders of ~\Temporary ASP.NET Files should be inheriting permissions
for Network Service (and Local Service) from the parent folder, specifically
the ~\wsusadmin folder, as I believe this is where the error is generating.


--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....

Thanks again,

I'll have to try the premissions route as this server also does sharepoint
and a couple of websites so my manager wouldn't go for any major work :(

"JohnN" <JohnN@discussions.microsoft.com> wrote in message
news:5D1EF93D-9DE4-4886-AEA9-B7027F229BFE@microsoft.com...
> Thanks again,
>
> I'll have to try the premissions route as this server also does sharepoint
> and a couple of websites so my manager wouldn't go for any major work :(


SHAREPOINT!!!.. Ah.. the importance of sharing the /complete/ configuration
information. :-)

How do I make WSUS work on my Sharepoint server?
http://wsusinfo.onsitechsolutions.com/articles/013.htm

--
Lawrence Garvin, M.S., MVP-Software Distribution
Everything you need for WSUS is at
http://technet2.microsoft.com/window...s/default.mspx
And, everything else is at
http://wsusinfo.onsitechsolutions.com
.....

Sorry :(

*skulks off looking ashamed!*

I'll take a look see if it helps :)

Hi,

Sorry it took so long to get back, but I needed to wait for our Sharepoint
specialist - who told me that sharepoint isn;t on that server!

It turns out I had my apps mixed up!!!

So sorry the problem persists.