Re: Still Struggling with MBSA and SUS and SBS

From: Doug Neal [MSFT] (dugn_at_online.microsoft.com)
Date: 09/30/04 

Date: Thu, 30 Sep 2004 15:23:03 -0700

I'm concerned that there might be two problems. MBSA only reports a problem
getting the XML file when it cannot download (or otherwise access) the
MSSECURE.XML file - which is not connected to the SUS Server option or the
SUS-generated ApprovedItems.TXT file.

Can you provide a run down on exaactly what is happening and exactly what
error messages are appearing at what point in the process? Thanks! 

-- 
Doug Neal [MSFT]
dugn@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for the Microsoft Baseline
Security Analyzer (MBSA) at the following link:
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a
This e-mail address does not receive e-mail, but is used for newsgroup
postings only.
"Rick DIlley" <rdilley@tesslerweiss.com> wrote in message 
news:u6emrNwpEHA.1688@TK2MSFTNGP10.phx.gbl...
> Marina,
>
> The MBSA is still pukeing when I try to access the SUSADMIN for critical
> updates....
>
> If I explicitely point to c:\inetpub\wwwroot\approveditems.txt when I 
> select
> Use SUS server for security updates....everything is OK
>
> Anything else fails to locate the XML files...i.e.  if  only say
> \\TWSERVER01   it fails
>
> I'd love to set this up correctly instead of using a work-around
>
> Thanks for your help
>
> RickD
>
> "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in 
> message
> news:u2nf8LnpEHA.348@TK2MSFTNGP15.phx.gbl...
>> Hi Rick,
>>
>> Does that mean everything is working now?
>>
>> --
>> Regards,
>>
>> Marina
>> Microsoft SBS-MVP
>>
>> "Rick DIlley" <rdilley@tesslerweiss.com> schreef in bericht
>> news:%23BARt$lpEHA.2340@TK2MSFTNGP11.phx.gbl...
>> > Hi MArina and Athif,
>> >
>> > Thank you both for your helpful suggestions.....
>> >
>> > You would think that after all these posts and all these years of IT, I
>> > would have learned the following:
>> >
>> > 1.    always put it back the way you found it.
>> >
>> > 2.    do not ignore the most obvious solution.
>> >
>> > When I updates to SP4, it is necessary to reconfigure the proxy in
>> > IE.....for SUSADMIN to be accessable, the little check box in IE
>> connections
>> > lan settings HAS to be checked to BYPASS PROXY FOR LOCAL ADDRESSES.
>> >
>> > It was checked before, but I neglected to check it after the SP4
> Upgrade.
>> >
>> > RickD
>> >
>> >
>> > "Rick Dilley" <RDilley@tesslerweiss.com> wrote in message
>> > news:OsB6kbapEHA.1160@tk2msftngp13.phx.gbl...
>> > > Well Marina,
>> > >
>> > > I have installed SP4 on my SBS2000.
>> > >
>> > > Now I am "locked out" of the SUSADMIN.
>> > >
>> > > I assume that the installation changes some permissions or security
>> > > settings....But I do not know which ones...
>> > >
>> > > Can you stay with me on this and give me some direction?
>> > >
>> > > Thanks
>> > >
>> > > RickD
>> > >
>> > >
>> > > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
>> > message
>> > > news:OvXMLONpEHA.4004@TK2MSFTNGP10.phx.gbl...
>> > > > Hi Rick,
>> > > >
>> > > > The W2k has to be at SP4. Make sure you are not connected to the
>> > internet
>> > > > when installing that and the other hotfixes.
>> > > >
>> > > > --
>> > > > Regards,
>> > > >
>> > > > Marina
>> > > > Microsoft SBS-MVP
>> > > >
>> > > > "Rick Dilley" <RDilley@tesslerweiss.com> schreef in bericht
>> > > > news:ewWLw$KpEHA.3464@tk2msftngp13.phx.gbl...
>> > > > > I have SUS running on my SBS2000 server, everything is working
>> > > > > fine....server is synching with MS and updates are getting to
>> desktops
>> > > via
>> > > > > GPO.
>> > > > >
>> > > > > When I run MBSA I receive errors because the XML files cannot be
>> > > located.
>> > > > >
>> > > > > I have tried the following:
>> > > > >
>> > > > > 1.    copies approveditems.txt to root of SBS server
>> > > > > 2.    downloaded MSSECURE.CAB via IE to MBSA install directory.
>> > > > >
>> > > > > I am now able to run an effective MBSA scan.
>> > > > >
>> > > > > BTW we have a proxy server (192.168.1.2:8080) that I have
> configured
>> > in
>> > > he
>> > > > > internet options on the server.
>> > > > >
>> > > > > I am running the latest download of MBSA and the SBS2000 is W2K
> SP3
>> > > > >
>> > > > > Please help!
>> > > > >
>> > > > > Thanks
>> > > > >
>> > > > > RickD
>> > > > >
>> > > > >
>> > > >
>> > > >
>> > >
>> > >
>> >
>> >
>>
>>
>
>

Relevant Pages