Microsoft Windows Vista Community Forums - Vistaheads
Recommended Download



Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.

Driver Scanner

Forefront Installed but errors on event log

microsoft.public.security.forefront






Speedup My PC
Reply
  #1 (permalink)  
Old 07-30-2008
SushiSean
 

Posts: n/a
Forefront Installed but errors on event log
So I installed SQL2005, WSUS, gpmc and anything else that was needed. No
problems during installation of any of that software or forefront client
security.
However, I'm unable to deploy or even download new definitions.
I have several errors and warnings showing in the event logs.

Under the system logs I got:

Event Type: Error
Event Source: FcsMs
Event Category: None
Event ID: 10002
Date: 7/29/2008
Time: 12:15:15 PM
User: N/A
Computer: FOREFRONT
Description:
The Management Server Service could not import the updated antimalware
definition. The component reporting the error returned the following
details:

[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access
denied.

Details
Error number: 17
Severity level: 16
State: 1
Server:
Procedure:
Line: 0
Result code: 0x80004005
Connection string:
Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
Info=False;Initial Catalog=OnePoint;Data Source=FOREFRONT;Use Procedure for
Prepare=1;Auto Translate=True;Packet Size=4096;Workstation ID=FOREFRONT;Use
Encryption for Data=False;Tag with column collation when possible=False

---------------------------------------------------------

Under the application logs I have:

Event Type: Error
Event Source: MPSampleSubmission
Event Category: None
Event ID: 5000
Date: 7/30/2008
Time: 8:16:13 AM
User: N/A
Computer: FOREFRONT
Description:
EventType mptelemetry, P1 8024400e, P2 endsearch, P3 search, P4 1.5.1937.0,
P5 mpsigdwn.dll, P6 1.5.1937.0, P7 microsoft forefront client security, P8
NIL, P9 NIL, P10 NIL.

---

Event Type: Failure Audit
Event Source: MSSQL$MICROSOFT##SSEE
Event Category: (4)
Event ID: 18456
Date: 7/29/2008
Time: 12:15:23 PM
User: F3\services
Computer: FOREFRONT
Description:
Login failed for user 'F3\services'. [CLIENT: <named pipe>]

---

Event Type: Error
Event Source: Windows Server Update Services
Event Category: Update Services Service
Event ID: 421
Date: 7/29/2008
Time: 12:15:23 PM
User: N/A
Computer: FOREFRONT
Description:
Connection to database failed. Reason=Cannot open database "SUSDB" requested
by the login. The login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.. Connection string:
Net=dbnmpntw;Data Source=\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query;;I nitial
Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100

---

I have the update service running as user "services", which has admin righs
and access to the databases. So I don't know why NT AUTHORITY\NETWORK
SERVICE is trying to make that connection.





Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 08-02-2008
Victor Constantinescu
 

Posts: n/a
Re: Forefront Installed but errors on event log
Hi,

Are you using a single server deployment?

--
Victor Constantinescu aka YounGun
Security MVP
http://victor-youngun.blogspot.com/


"SushiSean" <itpurchasing@marinedepot.com> wrote in message
news:AEFB60B1-2C0F-4505-9F1E-DB32169913DB@microsoft.com...
> So I installed SQL2005, WSUS, gpmc and anything else that was needed. No
> problems during installation of any of that software or forefront client
> security.
> However, I'm unable to deploy or even download new definitions.
> I have several errors and warnings showing in the event logs.
>
> Under the system logs I got:
>
> Event Type: Error
> Event Source: FcsMs
> Event Category: None
> Event ID: 10002
> Date: 7/29/2008
> Time: 12:15:15 PM
> User: N/A
> Computer: FOREFRONT
> Description:
> The Management Server Service could not import the updated antimalware
> definition. The component reporting the error returned the following
> details:
>
> [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access
> denied.
>
> Details
> Error number: 17
> Severity level: 16
> State: 1
> Server:
> Procedure:
> Line: 0
> Result code: 0x80004005
> Connection string:
> Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
> Info=False;Initial Catalog=OnePoint;Data Source=FOREFRONT;Use Procedure
> for Prepare=1;Auto Translate=True;Packet Size=4096;Workstation
> ID=FOREFRONT;Use Encryption for Data=False;Tag with column collation when
> possible=False
>
> ---------------------------------------------------------
>
> Under the application logs I have:
>
> Event Type: Error
> Event Source: MPSampleSubmission
> Event Category: None
> Event ID: 5000
> Date: 7/30/2008
> Time: 8:16:13 AM
> User: N/A
> Computer: FOREFRONT
> Description:
> EventType mptelemetry, P1 8024400e, P2 endsearch, P3 search, P4
> 1.5.1937.0, P5 mpsigdwn.dll, P6 1.5.1937.0, P7 microsoft forefront client
> security, P8 NIL, P9 NIL, P10 NIL.
>
> ---
>
> Event Type: Failure Audit
> Event Source: MSSQL$MICROSOFT##SSEE
> Event Category: (4)
> Event ID: 18456
> Date: 7/29/2008
> Time: 12:15:23 PM
> User: F3\services
> Computer: FOREFRONT
> Description:
> Login failed for user 'F3\services'. [CLIENT: <named pipe>]
>
> ---
>
> Event Type: Error
> Event Source: Windows Server Update Services
> Event Category: Update Services Service
> Event ID: 421
> Date: 7/29/2008
> Time: 12:15:23 PM
> User: N/A
> Computer: FOREFRONT
> Description:
> Connection to database failed. Reason=Cannot open database "SUSDB"
> requested by the login. The login failed.
> Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.. Connection string:
> Net=dbnmpntw;Data Source=\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query;;I nitial
> Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
> Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100
>
> ---
>
> I have the update service running as user "services", which has admin
> righs and access to the databases. So I don't know why NT
> AUTHORITY\NETWORK SERVICE is trying to make that connection.
>
>
>
>
>


Reply With Quote
  #3 (permalink)  
Old 08-26-2008
FransG [MSFT]
 

Posts: n/a
Re: Forefront Installed but errors on event log
Check:
http://support.microsoft.com/kb/949799

--
Frans Geurtsen
CSS Security
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.

"SushiSean" <itpurchasing@marinedepot.com> wrote in message
news:AEFB60B1-2C0F-4505-9F1E-DB32169913DB@microsoft.com...
> So I installed SQL2005, WSUS, gpmc and anything else that was needed. No
> problems during installation of any of that software or forefront client
> security.
> However, I'm unable to deploy or even download new definitions.
> I have several errors and warnings showing in the event logs.
>
> Under the system logs I got:
>
> Event Type: Error
> Event Source: FcsMs
> Event Category: None
> Event ID: 10002
> Date: 7/29/2008
> Time: 12:15:15 PM
> User: N/A
> Computer: FOREFRONT
> Description:
> The Management Server Service could not import the updated antimalware
> definition. The component reporting the error returned the following
> details:
>
> [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access
> denied.
>
> Details
> Error number: 17
> Severity level: 16
> State: 1
> Server:
> Procedure:
> Line: 0
> Result code: 0x80004005
> Connection string:
> Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
> Info=False;Initial Catalog=OnePoint;Data Source=FOREFRONT;Use Procedure
> for Prepare=1;Auto Translate=True;Packet Size=4096;Workstation
> ID=FOREFRONT;Use Encryption for Data=False;Tag with column collation when
> possible=False
>
> ---------------------------------------------------------
>
> Under the application logs I have:
>
> Event Type: Error
> Event Source: MPSampleSubmission
> Event Category: None
> Event ID: 5000
> Date: 7/30/2008
> Time: 8:16:13 AM
> User: N/A
> Computer: FOREFRONT
> Description:
> EventType mptelemetry, P1 8024400e, P2 endsearch, P3 search, P4
> 1.5.1937.0, P5 mpsigdwn.dll, P6 1.5.1937.0, P7 microsoft forefront client
> security, P8 NIL, P9 NIL, P10 NIL.
>
> ---
>
> Event Type: Failure Audit
> Event Source: MSSQL$MICROSOFT##SSEE
> Event Category: (4)
> Event ID: 18456
> Date: 7/29/2008
> Time: 12:15:23 PM
> User: F3\services
> Computer: FOREFRONT
> Description:
> Login failed for user 'F3\services'. [CLIENT: <named pipe>]
>
> ---
>
> Event Type: Error
> Event Source: Windows Server Update Services
> Event Category: Update Services Service
> Event ID: 421
> Date: 7/29/2008
> Time: 12:15:23 PM
> User: N/A
> Computer: FOREFRONT
> Description:
> Connection to database failed. Reason=Cannot open database "SUSDB"
> requested by the login. The login failed.
> Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.. Connection string:
> Net=dbnmpntw;Data Source=\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query;;I nitial
> Catalog=SUSDB;Connection Timeout=60;Application Name=WSUS SQL
> Connection;Trusted_Connection=Yes;Pooling='true'; Max Pool Size = 100
>
> ---
>
> I have the update service running as user "services", which has admin
> righs and access to the databases. So I don't know why NT
> AUTHORITY\NETWORK SERVICE is trying to make that connection.
>
>
>
>
>

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
errors in event log =?Utf-8?B?ZmFyYnVuY2xl?= microsoft.public.windows.vista.performance maintenance 1 09-07-2008 23:33
Svchost 100% CPU load after installed forefront microsoft.public.security.forefront 3 06-09-2008 09:08
SP1 event errors dev@null.invalid microsoft.public.windows.vista.general 3 03-20-2008 14:43
Errors in Event Viewer Sam microsoft.public.windows.vista.general 0 07-01-2007 22:27
BUG: a lot of errors "Event ID 6003 winlogon" in Event Viewer =?Utf-8?B?QmlsbEQ=?= microsoft.public.windows.vista.general 1 03-28-2007 16:39




All times are GMT +1. The time now is 04:43.




Driver Scanner - Free Scan Now

Vistaheads.com is part of the Heads Network. See also XPHeads.com , Win7Heads.com and Win8Heads.com.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.0 RC 2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120