
07-30-2008
|
|
|
|
Forefront Installed but errors on event log
So I installed SQL2005, WSUS, gpmc and anything else that was needed. No
problems during installation of any of that software or forefront client
security.
However, I'm unable to deploy or even download new definitions.
I have several errors and warnings showing in the event logs.
Under the system logs I got:
Event Type: Error
Event Source: FcsMs
Event Category: None
Event ID: 10002
Date: 7/29/2008
Time: 12:15:15 PM
User: N/A
Computer: FOREFRONT
Description:
The Management Server Service could not import the updated antimalware
definition. The component reporting the error returned the following
details:
[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access
denied.
Details
Error number: 17
Severity level: 16
State: 1
Server:
Procedure:
Line: 0
Result code: 0x80004005
Connection string:
Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
Info=False;Initial Catalog=OnePoint;Data Source=FOREFRONT;Use Procedure for
Prepare=1;Auto Translate=True;Packet Size=4096;Workstation ID=FOREFRONT;Use
Encryption for Data=False;Tag with column collation when possible=False
---------------------------------------------------------
Under the application logs I have:
Event Type: Error
Event Source: MPSampleSubmission
Event Category: None
Event ID: 5000
Date: 7/30/2008
Time: 8:16:13 AM
User: N/A
Computer: FOREFRONT
Description:
EventType mptelemetry, P1 8024400e, P2 endsearch, P3 search, P4 1.5.1937.0,
P5 mpsigdwn.dll, P6 1.5.1937.0, P7 microsoft forefront client security, P8
NIL, P9 NIL, P10 NIL.
---
Event Type: Failure Audit
Event Source: MSSQL$MICROSOFT##SSEE
Event Category: (4)
Event ID: 18456
Date: 7/29/2008
Time: 12:15:23 PM
User: F3\services
Computer: FOREFRONT
Description:
Login failed for user 'F3\services'. [CLIENT: <named pipe>]
---
Event Type: Error
Event Source: Windows Server Update Services
Event Category: Update Services Service
Event ID: 421
Date: 7/29/2008
Time: 12:15:23 PM
User: N/A
Computer: FOREFRONT
Description:
Connection to database failed. Reason=Cannot open database "SUSDB" requested
by the login. The login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.. Connection string:
Net=dbnmpntw;Data Source=\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query;;I nitial
Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100
---
I have the update service running as user "services", which has admin righs
and access to the databases. So I don't know why NT AUTHORITY\NETWORK
SERVICE is trying to make that connection.
|