I've got the exact same problem, here is the error message in my log file;
MSI (s) (9C:BC): Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI322.tmp, Entrypoint: ConfigureServices ISA setup CA INFO : ENTRY: 12:43:36 ConfigureServices, Current user is WISSEL\Administrator ISA setup CA INFO : ModifyServiceDepend(RemoteAccess, fwsrv, 1) ISA setup CA INFO : Found the service, add the dependency ISA setup CA INFO : ModifyServiceDepend(SharedAccess, fwsrv, 1) ISA setup CA INFO : Found the service, add the dependency ISA setup CA ERROR : the function NetLocalGroupAddMembers failed with status = 8ac at the function AddNetSvcToNetCfgOp. ISA setup CA ERROR : the function AddNetSvcToNetCfgOp failed at the function AddNetSvcPermissions. ISA setup CA ERROR : the function AddNetSvcPermissions failed at the function ConfigureServices. ISA setup CA ERROR : (Error 36020) MSI (s) (9C:34): Running as a service. MSI (s) (9C:88): Message context already initialized, returning ERROR_INSTALL_ALREADY_RUNNING
On a friday i had this problem, when i tried to install it again on monday it worked fine. I'm guessing it was the replication/synchronisation with the DC that wasn't completed yet.
RE: Setup Failed - services configuration - 7.Mar.2005 4:26:00 AM
Guest
I am getting this same error. It's a fresh clean w2k3 server fully patched. There is nothing else on it. It is also a DC.
I am just trying to install ISA2004 and it just will not install. I get the error message "Setup failed while creating the services configuration". I click the OK button and get "Setup failed while restoring the services configuration".
I got the same problem exactly as <Anon>. When opening the ISAFWV_xxx.log, the followings are logged:
code:
05:41:46 ISA setup CA INFO : Adding NETWORK SERVICE permission... 05:41:46 ISA setup CA ERROR : the function NetLocalGroupAddMembers failed with status = 8ac at the function AddNetSvcToNetCfgOp. 05:41:46 ISA setup CA ERROR : the function AddNetSvcToNetCfgOp failed at the function AddNetSvcPermissions. 05:41:46 ISA setup CA ERROR : the function AddNetSvcPermissions failed at the function ConfigureServices. Setup failed while creating the services configuration. MSI (s) (08!7C): Product: Microsoft ISA Server 2004 -- Setup failed while creating the services configuration.
05:41:51 ISA setup CA ERROR : Setup failed while creating the services configuration. 05:41:51 ISA setup CA ERROR : (Error 36020) Setup failed while creating the services configuration.
Posts: 4
Joined: 15.Jan.2005
From: Chicago area
Status: offline
More fuel to the fire:
I got exactly the same problem when trying to install SP-1. It rolled back, then disaster: the firewall service couldn't start. NO WAY JOSE.
Got all sorts of errors, aimed at a write permission issue and a registry permission issue and got nowhere. Finally, uninstalled and reinstalled ISA 2004 from scratch - but NOT a bare metal install.
Note: read the release notes - even followed the directions!
Result: 1) The "sessions" tab now returns the contents of the "reporting" tab - even works correctly! (course, I can't see any sessions) ... and 2) reporting is still broken.
All on a recommended bare-knuckle machine with nothing else going on.
So, it looks like a bare-metal restore is the shortest way home.
Best guess: some obscure registry corruption ... or "undocumented registry setting."
Should I add that every install has generated some flavor of strange behavior that has the odor of registry corruption? Usually a basic remove/add-back resolves the issue - but not this time.
RE: Setup Failed - services configuration - 24.Mar.2005 1:25:00 AM
Guest
Hi All
I have the same problem as well, Ive installed ISA a couple of time before at other sites i manage and have just attempted an install at this site but cannot get it to install. I am at a loss as to why it fails to install.
From the logs above I'd guess you're either logged in to the ISA machine with a local account and not a domain admin account, or without administrative rights - is this possible?
Do you have your NIC's enabled and connected when you are performing the install? Remember 2003 will not start some required network services if it doesn't have a network connection at startup.
Also, don't install ISA 2004 on a DC, it's not a supported (or recommended) configuration!
IF YOU RUN ISA2004 on a Domain Controller Windows 2003 Server:
1. If you get RED X near Microsoft Firewall service in a Monitoring -> Services tab of ISA 2004 manager then: You must add rights for NETWORK SERVICE to login as service in the Domain Controller Security Settings: Click Start -> Programs -> Administrative Tools -> Domain Controller Security Policy. Expand Local Policies -> User Rights Assignment -> click on Log on as service. Click "Add User or Group" button -> enter "NETWORK SERVICE" -> Click OK. You may also need to add NETWORK SERVICE to "Adjust memory quotas for a process", "Generate Security Audits" and "Replace a process level token" policies.
Reboot server.
2. If you can't reinstall, uninstall or repair ISA2004 installation on a DC and get messages like: "Setup failed while creating the services configuration" or/and "Setup failed while restoring the services configuration" then:
You must transfer FSMO roles to DC running ISA2004 and reboot server.
- Make sure that "Authenticated Users" is a member of the "Pre-Windows 2000 Compatible Access Properties" (check in Administrative Tools-"Active Directory Users and Computers") - Verify that the user has permissions to change the "Network Configuration Operators" local domain group. You can do that with adsiedit.msc, or by running dsacls.exe "CN=Network Configuration Operators,CN=Builtin,DC=jonb,DC=local" (both adsiedit.msc and dsacls.exe are part of Windows 2003 Resource Kit).
Thanks for the hints of this thread, my problem was resolved too.
My problem seems to be different. My server is not a DC and does not have the SQL directory. After failing a few times (with the "Setup failed while creating the services configuration" message), I found there were four TBDxxxx.tmp (where xxxx are some Hex numbers) files in the ...\Microsoft ISA Server\ installation directory. When I tried to delete them I could not. So then I rebooted my server. After rebooting the files are gone and I was able to reinstall without any errors!
Posts: 5
Joined: 2.Jul.2004
From: New York
Status: offline
I deleted C:\program files\Microsoft SQL Server with no success Next I deleted C:\program files\Microsoft ISA Server and ISA 2004 installed successfully.
OK.. Not sure if this will help anyone but I ran into the same issue yesterday and today. I rebuilt the server from the OS up (Windows Server 2003 Standard R2) and installed all hotfixes.
I went to install ISA2004 and got most of the way done and got the to where it installs services and gor the error 'Setup failed while creating the services configuration'. I tried multiple methods.. (i.e. Local Admin login and Install, ISO image install, etc etc) and it finally dawned on me that it might be a domain issue (Read: GPO). I removed the machine from the domain and TS'd in via the ip address and tried the install while the ISA server was a member of a Workgroup. Success. I just finished the SP2 install and will rejoin at this point.