Server not showing up in WSUS due to cloned client ID cookie and the fix

When using clone technology you have to use sysprep or an equivalent technique to prevent nasty problems with duplicate (unique) ID’s. Unfortunately the WSUS client is usually forgotten by these tools and by sysadmins.

You can recognize this problem by checking your WSUS server of course and by identifying the following log strings in your WindowsUpdate log (C:\Windows\WindowsUpdate.log):

2011-01-20 13:51:48:361 1228 3c64 PT WARNING: Cached cookie has expired or new PID is available
2011-01-20 13:51:48:377 1228 3c64 PT Initializing simple targeting cookie, clientId = f0ce4944-xxxx-4487-xxxx-ed453c3300ae, target group = [your group], DNS name = [your client DNS name]

To re-register your client to the WSUS server with a unique ID, use the following commands:

REGSVR32 WUPS2.DLL /S
REGSVR32 MSXML3.DLL /S
REGSVR32 WUPS.DLL /S
REGSVR32 WUPS2.DLL /S
REGSVR32 WUAUENG.DLL /S
REGSVR32 WUAUENG1.DLL /S
REGSVR32 WUAPI.DLL /S
REGSVR32 MUCLTUI.DLL /S
REGSVR32 WUCLTUI.DLL /S
REGSVR32 WUWEB.DLL /S
REGSVR32 MUWEB.DLL /S
REGSVR32 QMGR.DLL /S
REGSVR32 QMGRPRXY.DLL /S
REGSVR32 JSCRIPT.DLL /S
net stop wuauserv
net stop bits
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v AccountDomainSid /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v PingID /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /v SusClientId /f
rmdir /s /q c:\Windows\softwaredistribution
mkdir c:\Windows\SoftwareDistribution
net start bits
net start wuauserv
wuauclt /resetauthorization /detectnow

Check the permission on the C:\Windows\SoftwareDistribution folder. By default these should be inherited by the C:\Windows folder. If those settings are not OK you probably have more problems to deal with.

Advertisements

Add the Internet Explorer icon back to your Windows 7 desktop

In previous versions of Windows putting the ‘special’ Internet Explorer icon (not a shortcut) back to your desktop was as simple as importing a 5 line registry file. This doesn’t work any more because Microsoft is forced to offer a complete de-install of IE by the European Union.

A registry ‘hack’ has been developed by Microsoft MVP Ramesh Srinivasan to conquer this annoyance =)

Copy below text to a .reg text file. Import the .reg file and refresh your desktop to get the IE icon back.

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}]

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}]
@=”Internet Explorer”
“InfoTip”=”@C:\\Windows\\System32\\ieframe.dll,-881″

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\DefaultIcon]
@=”C:\\Windows\\System32\\ieframe.dll,-190″

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\InProcServer32]
@=”C:\\Windows\\System32\\ieframe.dll”
“ThreadingModel”=”Apartment”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell]
@=”OpenHomePage”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\NoAddOns]
@=”Start Without Add-ons”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\NoAddOns\Command]
@=”\”C:\\Program Files\\Internet Explorer\\iexplore.exe\” -extoff”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\OpenHomePage]
@=”Open &Home Page”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\OpenHomePage\Command]
@=”\”C:\\Program Files\\Internet Explorer\\iexplore.exe\””

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\Properties]
@=”P&roperties”
“Position”=”bottom”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\Properties\command]
@=”control.exe inetcpl.cpl”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\Shellex\ContextMenuHandlers\ieframe]
@=”{871C5380-42A0-1069-A2EA-08002B30309D}”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\Shellex\MayChangeDefaultMenu]
@=””

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\ShellFolder]
@=”C:\\Windows\\System32\\ieframe.dll,-190″
“HideAsDeletePerUser”=””
“Attributes”=dword:00000024
“HideFolderVerbs”=””
“WantsParseDisplayName”=””
“HideOnDesktopPerUser”=””

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{871C5380-42A0-1069-A2EA-08002B30301D}]

If you run a x64 version of Windows and you want to use the 32-bit IE, use this text:

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}]

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}]
@=”Internet Explorer”
“InfoTip”=”@C:\\Windows\\System32\\ieframe.dll,-881″

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\DefaultIcon]
@=”C:\\Windows\\System32\\ieframe.dll,-190″

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\InProcServer32]
@=”C:\\Windows\\System32\\ieframe.dll”
“ThreadingModel”=”Apartment”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell]
@=”OpenHomePage”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\NoAddOns]
@=”Start Without Add-ons”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\NoAddOns\Command]
@=”\”C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\” -extoff”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\OpenHomePage]
@=”Open &Home Page”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\OpenHomePage\Command]
@=”\”C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\””

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\Properties]
@=”P&roperties”
“Position”=”bottom”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\shell\Properties\command]
@=”control.exe inetcpl.cpl”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\Shellex\ContextMenuHandlers\ieframe]
@=”{871C5380-42A0-1069-A2EA-08002B30309D}”

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\Shellex\MayChangeDefaultMenu]
@=””

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30301D}\ShellFolder]
@=”C:\\Windows\\System32\\ieframe.dll,-190″
“HideAsDeletePerUser”=””
“Attributes”=dword:00000024
“HideFolderVerbs”=””
“WantsParseDisplayName”=””
“HideOnDesktopPerUser”=””

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{871C5380-42A0-1069-A2EA-08002B30301D}]

Protect yourself with the Enhanced Mitigation Experience Toolkit v2.0

Here’s a very nifty tool you can use to configure your system to be less vulnerable to today’s threats. It’s called the Enhanced Mitigation Experience Toolkit v2.0. It’s from Microsoft and it’s free of charge.

It protects your system by using multiple techniques to protect your processes from the most common techniques used by malware today to hijack your system.

It enables and uses techniques like ‘Structure Exception Handler Overwrite Protection (SEHOP)’, ‘Dynamice Data Execution Prevention (DEP)’, ‘Mandatory Address Space Layout Randomization (ASLR)’ and ‘Export Address Table Access Filtering (EAF)’.

We already knew using x64 versions of the Microsoft Operating Systems is safer then using their x86 counterparts, but with this tool it is now possible to raise the security level of x86 systems to about the same level as x64 systems.

You can download the tool here and the user guide here.

When you start the tool, you can see the status of your system and processes running.

With the ‘Configure System’ button you can enable and configure system wide process protection techniques.

With the ‘Configure Apps’ button you can enable/disable every technique separately for every application you want.

I’ve had some problems with DEP in the past, but the last couple of years I’ve enabled it by default and never experienced any problems. It is, however, advisable to test applications before enabling any or all features.

Overall, this tool is very simple, very useful and I recommend everyone to start to use this asap to be more protected from today’s and tomorrow’s malware.

VMware vSphere 4.x error ‘The datastore is connected to one or more hosts that do not support Storage I/O Control’

When selecting the ‘Enabled’ checkbox in the properties of your datastore, you might receive the error “The datastore xxxx is connected to one or more hosts that do not support Storage I/O Control”.

This might seem weird (it did to me), because you installed all patches and maybe even already run vSphere 4.1. The answer is displayed here. Yes indeed, you need the most expensive vSphere license to enable this. Bummer 😦

Installing RES Automation Manager 2011 on Windows Server 2008 (R2) x64 on SQL Server 2008 R2 Express With Tools x64

You’ll need an admin account. I used Server 2008, my guess is that the procedure won’t differ much when using Server 2008 R2 although I have not tested this.

Download SQLEXPRWT_X64_ENU.exe and start the install.

Enable all features and I recommend installing on a separate partition or disk. Let me rephrase: DON’T install on your system disk (C:).

Change the Instance root directory to somewhere else as your system disk.

Choose Mixed Mode (mandatory according to the RES install docs). I recommend adding the local machine Administrators group as SQL Server administrators.

Complete the setup.

We now need to create a 32-bit System DSN. Otherwise the (32-bit) RES software will not find the database. Start the ODBC Data Source Administrator (Administrative Tools -> Data Sources (ODBC)). Select the System DSN tab and click Add.

Select the SQL Server Native Client 10.0 and press Finish.

Fill in the values as shown in the screenshot below and press Finish.

Test your connection with the button that appears in the next screen.

Press OK and OK again. Your System DSN is now created.

Now open the SQL Server Configuration Manager from the Start Menu and enable Named Pipes and TCP/IP protocols for SQLEXPRESS.

Now, reboot your server.

Download RES-AM-2011.msi and start the install. I recommend not installing on your system disk. Launch the console at the end of the setup.

Press the Create button to create the new datastore for RES Automation Manager 2011.

If you have not create the 32-bit System DSN or have not rebooted, you will not see <ServerName>\SQLEXPRESS in the pulldown list.

Choose <YourServer>\SQLEXPRESS or fill this in yourself. Use the sa account to create the database.

Choose a logical database name. I recommend using the default name.

Choose the location of the datafile and the transaction log file as well as the initial sizes and growth sizes. If you don’t know what values to use, the defaults will probably be sufficient for your needs.

Choose the user and password to be created to login to the database.

Click Next and Finish. The database will be created.

Your done. When you start RES AM, you can check and verify the settings on the Information option in the tree.

2010 in review

A big shout out to all my readers. I hope you find the information on this blog useful and keep coming by once in a while. I wish you a blessed and healthy 2011.

Here are the stats for 2010:

The stats helper monkeys at WordPress.com mulled over how this blog did in 2010, and here’s a high level summary of its overall blog health:

Healthy blog!

The Blog-Health-o-Meter™ reads Wow.

Crunchy numbers

Featured image

About 3 million people visit the Taj Mahal every year. This blog was viewed about 44,000 times in 2010. If it were the Taj Mahal, it would take about 5 days for that many people to see it.

In 2010, there were 11 new posts, growing the total archive of this blog to 32 posts. There were 30 pictures uploaded, taking up a total of 963kb. That’s about 3 pictures per month.

The busiest day of the year was October 4th with 261 views. The most popular post that day was Fix Office 2010 install error 1402 ‘Setup cannot open the registry key: UNKNOWN\Components\…’.

Where did they come from?

The top referring sites in 2010 were social.answers.microsoft.com, sevenforums.com, google.com, kindlund.wordpress.com, and google.nl.

Some visitors came searching, mostly for error 1402, call “propertycollector.retrievecontents” for object “propertycollector” on vcenter server, office 2010 error 1402, error 1402 office 2010, and delprof windows 7.

Attractions in 2010

These are the posts and pages that got the most views in 2010.

1

Fix Office 2010 install error 1402 ‘Setup cannot open the registry key: UNKNOWN\Components\…’ November 2009
29 comments

2

VMware vCenter Error Call “PropertyCollector.RetrieveContents” for object “propertyCollector” on vCenter Server failed July 2010
20 comments

3

SQL Server 2008 Management Studio Express installation error: Performance counter registry hive consistency (failed) May 2009
12 comments

4

Deleting profiles with Delprof.exe and the Vista workaround May 2009

5

Chromium (Chrome) Command Line Switches March 2009

%d bloggers like this: