From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Lutz, Ken
Sent: Monday, June 29, 2009 4:30 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Install WSUS on existing ConfigMgr Site Server
I just got a reply on my open issue for this problem, and they now can reproduce the "uninstall" and have a fix. The fix will be released with SP2 due out in October of 2009.
Here is what I just got:
We were finally able to configure an environment where we could debug the issue as it occurred. This allowed us to confirm the root cause of the issue. Here is a summary of the issue and the status of the fix:
SYMPTOM:
The Software Update Point (SUP) stops synchronizing unexpectedly when Windows Server Update Services server (WSUS) is installed onto the same machine as the System Center Configuration Manager 2007 (SCCM) site server.
Upon further investigation, WSUS is found to no longer be fully installed such that the WSUS virtual directories are missing within IIS and the Update Services service is missing from the Services console.
The SCCM WSUSCTRL.log (drive:\Program Files\Microsoft Configuration Manager\Logs) may report errors similar to the following once the site server is in-state (i.e. WSUS is already uninstalled):
"The installed WSUS build (0.0.0.0) does not have the valid and supported WSUS Administration DLL assembly version. Please install WSUS 3.0 (minimum 3.0.6000.367) or above"
Status Message ID’s 7003 and 7004 are also generated at least once an hour until WSUS is reinstalled.
CAUSE:
This behavior has a two part cause:
The first part is the root cause of the issue and is due to a race condition in our Microsoft .NET Common Language Runtime (CLR) Fusion initialization code. This .NET CLR Fusion race condition issue becomes exposed by two of our System Center Configuration Manager components, WSUSCTRL and WCM, when these two components' threads simultaneously execute a health check on WSUS during startup. As a result of this issue, WSUS appears to be missing some of its binaries so a Windows Installer repair is invoked which exposes a WSUS installation bug where WSUS becomes partially uninstalled which is the second part of the cause.
The sequence of events is as follows:
1 - The wsusctrl thread and the WCM thread enter the Fusion code simultaneously.
2 - One of these threads begins Fusion initialization in mscorwks.dll
3 - Due to the race condition, the other thread proceeds with creating the assembly cache while the other thread is still initializing Fusion
4 - Because Fusion is not initialized properly, the thread that proceeded will utilize GAC paths that are not properly initialized (i.e. C:\Assembly)
5 - Due to the improper initialization, WSUS assemblies will not be found
6 - CLR calls WSUS installer to repair the installation
7 - Due to a known problem with the WSUS installer's repair functionality that has been addressed in WSUS 3.0 SP2, WSUS repair fails and WSUS is left uninstalled.
TENTATIVE WORKAROUND:
The current workarounds to mitigate the issue until the patch is released include:
1. Monitor the server for an occurrence and simply remove WSUS while choosing to keep the current database and content and reinstall WSUS using the existing database and files.
2. Remove WSUS from the SCCM site server and install WSUS onto a separate machine.
RESOLUTION:
We have a fix that has been scheduled to be included in SCCM 2007 Service Pack 2. Our tentative release date for SP2 is October 2009.
Since we have no further actions to complete with you at this time, I will close the support case while we await the release of the fix within Service Pack 2 of SCCM 2007. If you have any questions or concerns in the interim, you may contact me directly regarding this support issue.
Ken ...
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Gerlak, Matt
Sent: Monday, June 29, 2009 12:26 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Install WSUS on existing ConfigMgr Site Server
My WSUS Install on my site server removed itself twice now since October 08.
I called ms support and they told me I have two options to remove it and install it on a separate system. Or to remove the path to the MSI So it cant uninstall.
They have no fix for that issue yet and they say it only happens to installs directly on the Site server.
So if I had to do it all over again. I would put it on a separate server.
matt
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of John Marcum
Sent: Monday, June 29, 2009 3:20 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Install WSUS on existing ConfigMgr Site Server
I don't think so. I have never noticed anything at all from adding wsus to my site servers.
________________________________
John Marcum
MCP, MCTS, MCSA
MVP - System Center Configuration Manager 2007
www.myitforum.com/cs2/blogs/jmarcum
_________________________________
From: "Hemsell, Todd" <Todd.Hemsell@lyondellbasell.com>
Sent: Monday, June 29, 2009 10:47 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Install WSUS on existing ConfigMgr Site Server
WSUS will add a lot of load to your SMS server if the DB is hosted on it.
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Stewart Woollaston
Sent: Monday, June 29, 2009 10:06 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Install WSUS on existing ConfigMgr Site Server
So, I have two choices then:
a) install full WSUS 3.0 onto the site server then install and configure the SUP role
b) install WSUS 3.0 admin console onto the site server. Install site server role and SUP role on the existing WSUS server.
If both are valid, I'd prefer to go with a) as it means everything is more or less self contained and the existing WSUS servers can be decomissioned.
Also, while I'm here, after installing full WSUS on the central site server do the child primaries need full WSUS/SUP or can they made do with WSUS Console/SUP?
2009/6/29 Troy Martin <Troy.Martin@1e.com>
Only the Active SUP requires "full" WSUS 3.0 installed (app + Admin Console). If the site servers are NOT Active SUP's, then they should at least have the WSUS 3.0 Admin Console installed (not the full app).
Are any of the existing WSUS servers 1) v3.0 (required) and 2) if they are, have they been added as a site system to the site(s) and given the Active SUP role?
Troy L. Martin | Senior Consultant | 1E |
Mobile: 678 898 6147 | US/Canada Toll Free: 1 866 592 4214
troy.martin@1e.com | www.1e.com
I started my new gig today and have discovered that none of the four ConfigMgr site servers have WSUS installed.There are a few WSUS servers floating around that are in various states of operation. What is required, and more importantly, is it even feasible to install WSUS on an existing production site server? If not, then can ConfigMgr take over an existing WSUS server for it's own purposes?
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
DISCLAIMER: This is a PRIVATE AND CONFIDENTIAL message for the ordinary user of this email address. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind 1E to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
************************************************************** This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. This communication may contain nonpublic personal information about consumers subject to the restrictions of the Gramm-Leach-Bliley Act. You may not directly or indirectly reuse or redisclose such information for any purpose other than to provide the services for which you are receiving the information. There are risks associated with the use of electronic transmission. The sender of this information does not control the method of transmittal or service providers and assumes no duty or obligation for the security, receipt, or third party interception of this transmission. Thank you. **************************************************************
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
