Re: KB960089 Breaks Sharepoint Services Web Sites

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I would be willing to bet that you will find the fix in the very first post
in this thread. Just like with Sharepoint, for some reason this update
removes the "Network Services" user from the permissions list for the Windows
Internal Database. If you look close at the Application event log in one of
the errors that appears, you will see in specific the database file (and it's
location) that is causing SQL server not to start. Using windows explorer,
go to that database file as well as it's associated log file. Right click on
the file, go to properties, and then the security tab. It is possible that
you will only see Administrator access. Add access for the user "Network
Service". Go through and add that for each database file in that directory.
Once done, your SQL service will likely start.

I do not understand why this update has made a modification to the file
security and removed the Network Services user from both the Windows Internal
Database files as well as the Sharepoint Services configuration database
files. It did this on 3 seperate servers including one that caused the exact
problem you described.

"Nara20" wrote:

Hello

Windows update has installed for me kb960089.
Since this install, I have the followinf problem :
Sql server service does not wants to run.
The error is error is "access refused"

"net start mssqlserver" return system error code 5.

Before the kb960089, all was ok. What is wrong ?

Nara20



"PA Bear [MS MVP]" wrote:

OK.

Did you see the "How to obtain help..." section?

John wrote:
I didn't see anything in the known issues section that was related to a
sharepoint installation no longer working after the update. That is why I
posted what I found that fixed the problem. Hopefully, if someone else
has
the same issue, they will save a few hours of work and some frustration by
just re-adjusting the security settings that this update seems to
"adjust".

"PA Bear [MS MVP]" wrote:
Did you check the Known Issues section of
http://support.microsoft.com/kb/960089?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

John wrote:
After installing KB960089, all my sharepoint web sites would not pull
up.
The only thing displayed was the error message "Cannot connect to the
configuration database"

I found and resolved the issue by doing a search for the STS_Config.mdf
database file on the hard drive. Once you find the file, right click on
it
and look at the security properties. It appears that the update removed
all
allowed access except for Administrator. Giving access to the user
"Network
Services" to this file as well as the STS_Config.log file corrects the
problem after you reset/reboot the server. This happened on two
seperate
servers. Modifying the security fixed the problem in both cases.


.

Relevant Pages

  • SecurityFocus Microsoft Newsletter #164
    ... Got Storage Security Risks? ... MICROSOFT VULNERABILITY SUMMARY ... Chat Client FTP Server Default Username Credential Weak... ... NetServe Web Server is a compact web server for Microsoft Windows ...
    (Focus-Microsoft)
  • Re: im being held in memory
    ... How can I harden my computer or server to secure it from hackers? ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • MS and security: good effort but no cigar
    ... build upon the progress it's already made in security. ... The low-hanging fruit of millions of insecure Windows machines ... Then there's the issue of poorly secured server applications. ... and execute external virus and filtering ...
    (microsoft.public.windowsxp.general)
  • SecurityFocus Microsoft Newsletter #167
    ... MICROSOFT VULNERABILITY SUMMARY ... Multiple Vendor XML Parser SOAP Server Denial Of Service Vul... ... Proactive Windows Security Explorer ...
    (Focus-Microsoft)
  • Re: Group Policy broke my DCs
    ... > need to be very careful with tweaking services on domain controllers. ... > Group Policy - security policy at the OU level which makes it much easier ... > is complied from the Windows 2003 Server Security guide for baseline core ...
    (microsoft.public.windows.group_policy)