Recent changes to support-requests

mbsaremote.exe hangs with 100% CPU

NSNSAP — Wed, 18 May 2005 15:37:01 -0000

Hello Memet,

first of all: thank you for this wonderful piece of coding, it
helps us every week with the security management of
our Windows systems.

We have actually two problems within mbsaremote
deployment, whereas the second one causes big trouble:

1. not all target systems are being considered by
mbsaremote
Although the patchlists (system.patchlist) are correctly
defined, not all systems are being considered for
deployment.
Some of them are simply "forgotten" by mbsaremote.
It does not happen with the same systems every time,
though it happens by each deployment.
The number of systems should be no problem (max 80).
Only worakound we have found so far was to repetedly
calls mbsaremote (after the first successful but partial
deployment and a new scan with mbsacli).
So a complete domain deployment might take 3 or more
passes.

2. mbsaremote.exe hangs with 100% CPU
This one is new, apparently appeared for the first time
after we've installed Windows Server 2003 SP1 on our
central hotfix deployment system and/or domain
controller.

During deployment, mbsaremote stops working and
hangs consuming 100%CPU.
It never returns to normal operation! (say, aka. after 24
hours still hanging)
This is really bad, because our script stops working and
all subsequent operations (reboot, applications restart,
etc.) can't be completed.

We then have to manually kill the process and try again.

Last time it happened only with Windows 2000 Server
machines, so it can't be related to the W2K03 SP1 on
target systems.

I've produced a log with the verbose version of
mbsaremote.exe from Call ID #949740 but I guess it's
only in for debugging issue in CreateRemoteService, it
says nothing particular. (please contact me per email to
get it)
Perhaps you could provide us with another verbose
version of mbsaremote to see where the problem is?

Many thanks in advance.

Best Regards,
Jean-Xavier Bermond

***
Infrastructure:
2 Windows 2003 Domains (DOM1 / DOM2) with 17 / 6
Windows 2000 Server and 41 / 11 Windows 2003 Server
with one-way domain trusting

mbsa Tools centrally starting on a Windows 2003 SP1
Server, member of DOM1.

preparation of patch lists with:
mbsacli /HF -d DOM1 -o tab
mbsacli /HF -d DOM2 -o tab

hotfix deployment with:
mbsaremote.exe %SHARE% 128 DOM\User passwd
180 show 1>>remoteex-result.csv 2>>remoteex-
result.log
with DOM\User domain User having full domain
Administrator rights (in both domains)

mbsaFu Version 1.1 (latest one) incl. Mbsafetch.exe for
MBSA v1.2

MDAC and MSXML

Brian Schumacher — Tue, 20 Apr 2004 17:52:30 -0000

When ever I use mbsaremote.exe to update a computer,
all of the Windows and IE patches install successfully,
but when it gets to the MDAC and MSXML updates,
it just site there and does nothing. It doesn't update.
And when I cancel it, the log file shows Incorrect
Function. How do I get around this? Also, when I try and
use mbsaremote.exe on a certain computer, it comes up
with an error saying "error in creating service: (1332) No
mapping between account names and security IDs was
done. What does this mean and how can I get around
this too?

Change away from share

Anonymous — Wed, 21 Jan 2004 21:11:46 -0000

I was thinking about incorporating this execellent utility
into a install routine. I don't want to have to goto a
share. Can this be changed to store the information on
the local machine during the build process? For example
not using MBSAPARSE/MBSAFETCH/MBSASWITCH to a
share, but to a local directory?

Deployment Error

Anonymous — Fri, 24 Oct 2003 09:42:52 -0000

Hello. Any idea why I get the following error on only
some NT4 machines when I remotely
deploy? "OMRXCH500: Error in creating service: (317)
The system cannot find message text for message
number 0x%1 in the message file for %2." Thanks!,
Loubser

hotfix update exclusion

Anonymous — Sat, 18 Oct 2003 01:25:31 -0000

First of all this resource rocks!!! Thanks for all the hard
work. I got the application to work properly accross local
and remote systems...it's great. I'm just running into one
problem with MS SQL hotfixes. The updates download
properly; however, they are not traditional hotfixes and
need to be expanded with winzip and then manually
installed (eg: SQL SERVER 2000 GOLD\280380.exe,
298012.exe, 299717.exe). During the run of
mbsaexec.exe or mbsaremote.exe the user is prompted
to unzip the files. Is there another way to get around
these issues from an administrative perspective?

Thanks,

-Phil

remoteex-result.csv

Anonymous — Tue, 16 Sep 2003 21:31:49 -0000

Using edited supplied batch example with MbsaFU
Everything seems to go well, but after all patches are
dowloaded to the share I recieve the following text in
remoteex-result.csv and the batch ends.

--------
Error while copying mbsaexec.exe to \\server1
\mbsafushare: (2) The system cannot find the file
specified.
--------

All files were extracted to C:\Program Files\Microsoft
Baseline Security Analyzer

MBSAfetch

Anonymous — Mon, 15 Sep 2003 13:44:57 -0000

When I run mbsafetch \\server\share it doesn't seem to
go out and get the files.

Will this install Service Packs?

Anonymous — Mon, 15 Sep 2003 03:21:45 -0000

Self-Explanatory ...

ctkenyon@yahoo.comXX

Will this install Service Packs?

Anonymous — Fri, 12 Sep 2003 22:42:31 -0000

Self-Explanatory ...

ctkenyon@yahoo.comXX