KB960089 Breaks Sharepoint Services Web Sites

After installing KB960089, all my sharepoint web sites would not pull up.
The only thing displayed was the error message "Cannot connect to the
configuration database"

I found and resolved the issue by doing a search for the STS_Config.mdf
database file on the hard drive. Once you find the file, right click on it
and look at the security properties. It appears that the update removed all
allowed access except for Administrator. Giving access to the user "Network
Services" to this file as well as the STS_Config.log file corrects the
problem after you reset/reboot the server. This happened on two seperate
servers. Modifying the security fixed the problem in both cases.

Did you check the Known Issues section of
http://support.microsoft.com/kb/960089?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

John wrote:
> After installing KB960089, all my sharepoint web sites would not pull up.
> The only thing displayed was the error message "Cannot connect to the
> configuration database"
>
> I found and resolved the issue by doing a search for the STS_Config.mdf
> database file on the hard drive. Once you find the file, right click on
> it
> and look at the security properties. It appears that the update removed
> all
> allowed access except for Administrator. Giving access to the user
> "Network
> Services" to this file as well as the STS_Config.log file corrects the
> problem after you reset/reboot the server. This happened on two seperate
> servers. Modifying the security fixed the problem in both cases.

I didn't see anything in the known issues section that was related to a
sharepoint installation no longer working after the update. That is why I
posted what I found that fixed the problem. Hopefully, if someone else has
the same issue, they will save a few hours of work and some frustration by
just re-adjusting the security settings that this update seems to "adjust".

"PA Bear [MS MVP]" wrote:

> Did you check the Known Issues section of
> http://support.microsoft.com/kb/960089?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> John wrote:
> > After installing KB960089, all my sharepoint web sites would not pull up.
> > The only thing displayed was the error message "Cannot connect to the
> > configuration database"
> >
> > I found and resolved the issue by doing a search for the STS_Config.mdf
> > database file on the hard drive. Once you find the file, right click on
> > it
> > and look at the security properties. It appears that the update removed
> > all
> > allowed access except for Administrator. Giving access to the user
> > "Network
> > Services" to this file as well as the STS_Config.log file corrects the
> > problem after you reset/reboot the server. This happened on two seperate
> > servers. Modifying the security fixed the problem in both cases.
>
>

OK.

Did you see the "How to obtain help..." section?

John wrote:
> I didn't see anything in the known issues section that was related to a
> sharepoint installation no longer working after the update. That is why I
> posted what I found that fixed the problem. Hopefully, if someone else
> has
> the same issue, they will save a few hours of work and some frustration by
> just re-adjusting the security settings that this update seems to
> "adjust".
>
> "PA Bear [MS MVP]" wrote:
>> Did you check the Known Issues section of
>> http://support.microsoft.com/kb/960089?
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>> John wrote:
>>> After installing KB960089, all my sharepoint web sites would not pull
>>> up.
>>> The only thing displayed was the error message "Cannot connect to the
>>> configuration database"
>>>
>>> I found and resolved the issue by doing a search for the STS_Config.mdf
>>> database file on the hard drive. Once you find the file, right click on
>>> it
>>> and look at the security properties. It appears that the update removed
>>> all
>>> allowed access except for Administrator. Giving access to the user
>>> "Network
>>> Services" to this file as well as the STS_Config.log file corrects the
>>> problem after you reset/reboot the server. This happened on two
>>> seperate
>>> servers. Modifying the security fixed the problem in both cases.

Hello

Windows update has installed for me kb960089.
Since this install, I have the followinf problem :
Sql server service does not wants to run.
The error is error is "access refused"

"net start mssqlserver" return system error code 5.

Before the kb960089, all was ok. What is wrong ?

Nara20



"PA Bear [MS MVP]" wrote:

> OK.
>
> Did you see the "How to obtain help..." section?
>
> John wrote:
> > I didn't see anything in the known issues section that was related to a
> > sharepoint installation no longer working after the update. That is why I
> > posted what I found that fixed the problem. Hopefully, if someone else
> > has
> > the same issue, they will save a few hours of work and some frustration by
> > just re-adjusting the security settings that this update seems to
> > "adjust".
> >
> > "PA Bear [MS MVP]" wrote:
> >> Did you check the Known Issues section of
> >> http://support.microsoft.com/kb/960089?
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.net/
> >>
> >> John wrote:
> >>> After installing KB960089, all my sharepoint web sites would not pull
> >>> up.
> >>> The only thing displayed was the error message "Cannot connect to the
> >>> configuration database"
> >>>
> >>> I found and resolved the issue by doing a search for the STS_Config.mdf
> >>> database file on the hard drive. Once you find the file, right click on
> >>> it
> >>> and look at the security properties. It appears that the update removed
> >>> all
> >>> allowed access except for Administrator. Giving access to the user
> >>> "Network
> >>> Services" to this file as well as the STS_Config.log file corrects the
> >>> problem after you reset/reboot the server. This happened on two
> >>> seperate
> >>> servers. Modifying the security fixed the problem in both cases.
>
>

I would be willing to bet that you will find the fix in the very first post
in this thread. Just like with Sharepoint, for some reason this update
removes the "Network Services" user from the permissions list for the Windows
Internal Database. If you look close at the Application event log in one of
the errors that appears, you will see in specific the database file (and it's
location) that is causing SQL server not to start. Using windows explorer,
go to that database file as well as it's associated log file. Right click on
the file, go to properties, and then the security tab. It is possible that
you will only see Administrator access. Add access for the user "Network
Service". Go through and add that for each database file in that directory.
Once done, your SQL service will likely start.

I do not understand why this update has made a modification to the file
security and removed the Network Services user from both the Windows Internal
Database files as well as the Sharepoint Services configuration database
files. It did this on 3 seperate servers including one that caused the exact
problem you described.

"Nara20" wrote:

> Hello
>
> Windows update has installed for me kb960089.
> Since this install, I have the followinf problem :
> Sql server service does not wants to run.
> The error is error is "access refused"
>
> "net start mssqlserver" return system error code 5.
>
> Before the kb960089, all was ok. What is wrong ?
>
> Nara20
>
>
>
> "PA Bear [MS MVP]" wrote:
>
> > OK.
> >
> > Did you see the "How to obtain help..." section?
> >
> > John wrote:
> > > I didn't see anything in the known issues section that was related to a
> > > sharepoint installation no longer working after the update. That is why I
> > > posted what I found that fixed the problem. Hopefully, if someone else
> > > has
> > > the same issue, they will save a few hours of work and some frustration by
> > > just re-adjusting the security settings that this update seems to
> > > "adjust".
> > >
> > > "PA Bear [MS MVP]" wrote:
> > >> Did you check the Known Issues section of
> > >> http://support.microsoft.com/kb/960089?
> > >> --
> > >> ~Robear Dyer (PA Bear)
> > >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> > >> AumHa VSOP & Admin http://aumha.net
> > >> DTS-L http://dts-l.net/
> > >>
> > >> John wrote:
> > >>> After installing KB960089, all my sharepoint web sites would not pull
> > >>> up.
> > >>> The only thing displayed was the error message "Cannot connect to the
> > >>> configuration database"
> > >>>
> > >>> I found and resolved the issue by doing a search for the STS_Config.mdf
> > >>> database file on the hard drive. Once you find the file, right click on
> > >>> it
> > >>> and look at the security properties. It appears that the update removed
> > >>> all
> > >>> allowed access except for Administrator. Giving access to the user
> > >>> "Network
> > >>> Services" to this file as well as the STS_Config.log file corrects the
> > >>> problem after you reset/reboot the server. This happened on two
> > >>> seperate
> > >>> servers. Modifying the security fixed the problem in both cases.
> >
> >

[mudgie]

Originally Posted by John

After installing KB960089, all my sharepoint web sites would not pull up.
The only thing displayed was the error message "Cannot connect to the
configuration database"

I found and resolved the issue by doing a search for the STS_Config.mdf
database file on the hard drive. Once you find the file, right click on it
and look at the security properties. It appears that the update removed all
allowed access except for Administrator. Giving access to the user "Network
Services" to this file as well as the STS_Config.log file corrects the
problem after you reset/reboot the server. This happened on two seperate
servers. Modifying the security fixed the problem in both cases.

Your solution worked in my case. The question I have regards the permissions. Should I grant Network Service full permissions?
Thank you!

Mudgie

I am not certain what it should have. Right or wrong, I did give Network
Services full permission in order to get our system up and running again.

John


"mudgie" wrote:

>
> John;4234878 Wrote:
> > After installing KB960089, all my sharepoint web sites would not pull
> > up.
> > The only thing displayed was the error message "Cannot connect to the
> > configuration database"
> >
> > I found and resolved the issue by doing a search for the
> > STS_Config.mdf
> > database file on the hard drive. Once you find the file, right click
> > on it
> > and look at the security properties. It appears that the update
> > removed all
> > allowed access except for Administrator. Giving access to the user
> > "Network
> > Services" to this file as well as the STS_Config.log file corrects the
> > problem after you reset/reboot the server. This happened on two
> > seperate
> > servers. Modifying the security fixed the problem in both cases.
>
> Your solution worked in my case. The question I have regards the
> permissions. Should I grant Network Service full permissions?
> Thank you!
>
>
> --
> mudgie
> ------------------------------------------------------------------------
> mudgie's Profile: http://forums.techarena.in/members/mudgie.htm
> View this thread: KB960089 Breaks Sharepoint Services Web Sites
>
> http://forums.techarena.in
>
>