Archive for the ‘IIS’ Category

NOTE: The configuration suggestions I mention in this post won’t fix the underlying issue. Depending on the size of your environment they may be enough to get things working for you again. Microsoft is currently working on releasing a hotfix that I have tested and found to resolve this problem

 

Microsoft have released the WSUS server hotfix, details here: https://blogs.technet.microsoft.com/configurationmgr/2017/08/18/high-cpuhigh-memory-in-wsus-following-update-tuesdays/

NOTE2: It turns out there is a new issue from the August 2017 updates that “clears” the update history on a computer that will trigger a full client scan again. This will also cause high load on your WSUS server, although for slightly different reasons, however the suggestions here and the coming updates will help to resolve the load issue from that problem as well.

Microsoft have updated the August cumulative updates to resolve this issue, details here: https://support.microsoft.com/en-us/help/4039396/windows-10-update-kb4039396

 

NOTE3: Microsoft has now published some additional official guidance here: https://blogs.technet.microsoft.com/askcore/2017/08/18/high-cpuhigh-memory-in-wsus-following-update-tuesdays/

This issue is one I first encountered on only a couple of our WSUS servers (2 or 3 of 15 servers) last year in November 2016 after the new cumulative update process was introduced for patching. At first I assumed it to be a failure on my part to do more regular cleanup, or a result of the recent upgrade to ConfigMgr 1610, or an “end of year” rush of activity on the network. This isn’t unusual for the environment I currently manage (Education with approx. 370,000+ devices)

At first I looked at server bottlenecks (we run everything in VMWare) and even SQL DB corruptions. I tried doing WSUS resets, even recreating the database (this is a last resort in a large environment). I then thought maybe it was a Server 2012 WSUS issue as we had other Server 2012 related cases open with Microsoft. To test I rebuilt one server as 2012R2, but the problems persisted. Given it was only happening on a couple of server I assumed it was an issue with those servers in particular and didn’t suspect a larger issue.

Over the Christmas holidays things went quite, so there was nothing more I could do until school returned the following February.

Then everything basically exploded.

The first patch cycle we ran saw the WSUS server rocket to 100% CPU and stay there. Nothing I did could stop this reoccurring. I found ways to bring things under control for a few hours at a time. Endpoint definitions started falling behind because clients couldn’t scan for updates. Then it started happening on a couple more of the servers. At this point I conceded defeat and called in Microsoft. Unfortunately it was another 6 months before they finally identified it was a “function” of WSUS causing the grief and not the configuration or size of our environment.

The Problem

The most obvious symptoms will be clients failing to scan for updates and the WSUS server CPU (w3wp.exe) going very high. Some clients get through, many will fail. The main cause will be Windows 10 clients and the way WSUS has to process the Cumulative Updates.

(more…)

Advertisements

Following on from some recent database corruptions and repairs, I decided it was a good idea to create a new Exchange database and move all my mailboxes across to it.

This worked fine for all but one, which also happened to be my own.

Every time I would do the migration, it would all appear to be fine, but then it would finish as Completed, with no errors, but showing in the EAC as Synced and Finalized mailboxes: 0 of 0

I tried again and watched more closely and noticed it the extended “show details” that it was reporting an issue with the not being able to connect to the System Attendant mailbox. Various searches led me to articles about if the arbitration mailbox is accidentaly deleted how to re-create it etc, but this was not the problem.

Digging a bit further I noticed a mention of the mailbox being Quarantined.

(more…)

While installing multiple new ConfigMgr 2012 Management Points I was seeing a non-specific failure with an error code of 1603. Much troubleshooting and any web searches later, I discovered that there were in fact three different issues across the different servers that all failed with the same uninformative error.

  1. HTTPS binding missing in IIS
  2. Old WMI information from previous CM2007 client
  3. BITS not installed correctly

This was really quite bizarre. When I had found the “solution” and tried applying it to other servers I found that they had a different issue, which led to a mix of all three of the above. The old WMI issue being the most prevalent.

(more…)

My gaming clan forums started throwing a rather annoying random error recently and I couldn’t figure out what had changed to cause it. Essentially a page saying only “No input file specified.”

My forums are running phpBB on Server 2012 running IIS with (of course) php installed. The message would just randomly appear when posting replies to messages, or searching for new topics. It didn’t always happen, and clicking refresh would then load the page fine. I tried re-installing php, upgrading to a newer php and “tweaking” settings in the php.ini file. No difference.

Looking in the IIS logs would show a 404 error returned, hitting refresh (maybe a couple of times) usually returned a 200 and loaded the page. The file being loaded was present and everything seemed to be in order.

(more…)

Fixing IIS 500.19 errors

Posted: May 26, 2013 in IIS, Information

A quick reference to this link for troubleshooting 500.19 errors on IIS

http://blogs.iis.net/webtopics/archive/2010/03/08/troubleshooting-http-500-19-errors-in-iis-7.aspx

After an unexpected server shutdown, I was cleaning up various issues. One thing was to remove an old WSUS install that was no longer used. It turns out this didn’t cleanup all the settings and left a “bad” DynamicCompression library enabled.

So for me, scenario 6 sorted the problem out.

Got Windows 8? Yup

Got a Server somewhere running IIS? Yup

Got the IIS management feature install on Win8? Sure have

So you open it, connect to the remote IIS server and all is cool? Um……

Go figure. When you install the IIS management feature in Win8, the *only* thing you can manage is a local install of IIS. It doesn’t give the option to connect to another server at all. Thinking I’d stuffed it up somehow (using the mouse with my left hand instead of right perhaps?) I removed and re-added it, but still the same. No remote connect option!

(more…)

My Adventures with PHPBB running on an all Microsoft platform began many years ago. Much trial and error resulted in the first forums with V2. When they released V3 there was a much improved situation with documentation and guides, but it was still a tough thing to get right. It’s a community that favours Linux/Apache/MySQL, so getting assistance for Windows/IIS/MSSQL is pretty tough.

This time around I’m starting a completely fresh install on Windows Server 2012, with IIS 8, and MSSQL 2012. I’ve been “upgrading” over the years and have completely forgotten all the tweaks I needed to make it work, so that as well as dealing with any new “features” of the latest MS software is why I’m writing this entry.

(more…)