• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA FW client install causes ms hotfixes to not install

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Installation >> ISA FW client install causes ms hotfixes to not install Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA FW client install causes ms hotfixes to not install - 27.Jan.2010 3:20:07 PM   
Ashokk001

 

Posts: 244
Joined: 6.Oct.2005
Status: offline
Hi there,

We have ISA 2004 Std Edition with SP3 and post SP3 fixes on our network. We deploy the FW client to all desktop and laptop PC (although not installed on the servers for obvious reason).

Latetly we have noticed that when we send out the ms hotfixes i.e. security fixes they fail to install on the stations for some reason. Looking at the hotfix log that gets created on the stations in C:\windows folder it complains about not having permission to update windows i.e. se_back_priviliage is required.

If we take the ISA FW client off the station and repeat the ms hotfixes installation it succeeds. I have worked on this problem for long and have singled out that is def. the firewall client that is the problem. Have you guys come across this issues?

OS: Windows XP with SP2
ISA FW Client version: v4.0 (build 4.0.3442.654)

I know that i will get some comment about blaming isa when its not an isa problem but this looks like the it is the FW client. I'm not sure what it modifies on the station when it is installed but it def. causes issues installing the hotfixes. The issue is observed when installing either MS hotfix or service pack. I have gone through all the articles about se_backup_priviliage and all settings in AD are correct and so are the GPO setting etc.

The strange thing is that is happens on some stations and not others even when they are the same spec model, same HW, same connection to switch, server etc.

Completely stumped on this. Any assistance or support would be greatly recieved and appreciated.

Ash.
Post #: 1
RE: ISA FW client install causes ms hotfixes to not ins... - 27.Jan.2010 4:19:32 PM   
Rotorblade

 

Posts: 1348
Joined: 27.Feb.2007
Status: offline
Is the Internal Network; Domain and Web Browser properties properly configuured? On the Domains tab; make sure that all Internal Domains are listed. On the Web Browsers tab; make sure that you have defined and listed all servers and domains that need to be directly accessed.

RB 

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to Ashokk001)
Post #: 2
RE: ISA FW client install causes ms hotfixes to not ins... - 28.Jan.2010 3:52:13 AM   
Ashokk001

 

Posts: 244
Joined: 6.Oct.2005
Status: offline
Hi,
 
The internal domains, networks and web browsers servers have have defined correctly. The strange thing is if the firewall client is not installed then the hotfixes would install fine but as soon as the firewall client is installed the fixes don't go on and we the error message in the appropriate KB.xxxxxx.log file
 
I'm not sure what  the firewall client does when its installed but for some reason its having some kind of impact on the perrmissions to install hotfixes etc.
 
Ash.

(in reply to Rotorblade)
Post #: 3
RE: ISA FW client install causes ms hotfixes to not ins... - 28.Jan.2010 12:51:09 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi Ash,

what does ISA logs tells you?

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to Ashokk001)
Post #: 4
RE: ISA FW client install causes ms hotfixes to not ins... - 29.Jan.2010 3:29:15 AM   
Ashokk001

 

Posts: 244
Joined: 6.Oct.2005
Status: offline
Hi Paulo,

The isa logs is not stating anything as there is no traffic that is being passed during the installation of hotfixes. But the strange thing is that as soon as FW client is installed it fails, in order to install the fixes the station does not need any internet access, just access to the servers from where its pulling the hotfix files. It happens on some stations and not on others.

I have a call open with our support providers and i'm havign to rebuild the stations many times to eliminate different things.

Ash.

(in reply to paulo.oliveira)
Post #: 5
RE: ISA FW client install causes ms hotfixes to not ins... - 4.Feb.2011 6:51:22 AM   
Ashokk001

 

Posts: 244
Joined: 6.Oct.2005
Status: offline
Hi Guys,

Sory to drag up an old thread but i'm still looking at this issue of the hotfix problem. What i have found out is that if the isa firewall client service is stopped, it does allow the hotfixes to go on correctly.

I have tried all version of the isa firewall client including the latest Forefront TMG client but it hasen't made any difference.

The hotfixes are just normal microsoft fixes for the operating system. I have tried adding update (update.exe) on the firewall client settings but this has not made any difference.

Looks like a permission on either the registry or file system but i can't figure out which keys the firewall client holds on to.

Any ideas?

Ash.

(in reply to Ashokk001)
Post #: 6
RE: ISA FW client install causes ms hotfixes to not ins... - 5.Feb.2011 7:43:01 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi Ash,

this is a really strange issue. Do you have update Windows XP workstations to SP3?

It may worth call PSS, so they can investigate deeper. Keep us updated.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to Ashokk001)
Post #: 7
RE: ISA FW client install causes ms hotfixes to not ins... - 6.Feb.2011 9:00:40 AM   
Ashokk001

 

Posts: 244
Joined: 6.Oct.2005
Status: offline
Hiya,

Yes the workstations are all running XP SP3, it was happening when we were on XP SP2 as well and i was really looking forward to getting XP SP3 to see if it solved the problem but it didn't unfortunatelty.

I have out support provider looking at this at the moment and will suggest to them about calling MS PSS and see if they can suss out what is causing the problem.

Will keep you guys updated on what is happening and hopefully a solution if we find one.

Ash.

(in reply to paulo.oliveira)
Post #: 8
RE: ISA FW client install causes ms hotfixes to not ins... - 6.Feb.2011 10:07:41 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

great! Thanks!

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to Ashokk001)
Post #: 9

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Installation >> ISA FW client install causes ms hotfixes to not install Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts