Sign in
Microsoft.com
 
Windows Server TechCenter
 
 
 
Windows Server TechCenter > Windows Server Forums > Network Access Protection > NPS Installation Failure
Ask a questionAsk a question
Search Forums:
 

AnswerNPS Installation Failure

  • Wednesday, October 14, 2009 2:50 PMscomeau Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    I seem to be having the same issue as here: http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/0571c5a4-5b51-43d9-a77e-26481b799119, but it appears that no clear direction seems to be given.  I've tried all the recommendations for security, etc., but still no-go on the install.  Every time I try to install NPS on my one 2008 server, it fails and then asks to reboot for the uninstall.  The Server Manager log gives the following:
    4932: 2009-10-13 19:00:18.423 [CBS]                       ...parents that will be auto-installed: '<none>'
    4932: 2009-10-13 19:00:18.439 [CBS]                       ...default children to turn-off: '<none>'
    4932: 2009-10-13 19:00:18.501 [CBS]                       ...current state of 'IAS NT Service': p: Staged, a: Staged, s: UninstallRequested
    4932: 2009-10-13 19:00:18.501 [CBS]                       ...setting state of 'IAS NT Service' to 'InstallRequested'
    4932: 2009-10-13 19:00:18.548 [CBS]                       ...'IAS NT Service' : applicability: Applicable
    4932: 2009-10-13 19:01:26.315 [CbsUIHandler]              Initiate:
    4932: 2009-10-13 19:01:26.330 [InstallationProgressPage]  Installing...
    4932: 2009-10-13 19:07:03.215 [CbsUIHandler]              Error: -2147021879 :
    4932: 2009-10-13 19:07:03.215 [CbsUIHandler]              Terminate:
    4932: 2009-10-13 19:07:03.230 [CBS] Error (Id=0) Function: 'NativeMethods.GetPackageStatus(out status)' failed: 80070bc9 (-2147021879)
    4932: 2009-10-13 19:07:03.230 [CBS]                       ...done installing 'IAS NT Service '. Status: -2147021879 (80070bc9)
    4932: 2009-10-13 19:07:03.230 [InstallationProgressPage]  Verifying installation...
    4932: 2009-10-13 19:07:03.261 [Provider]                  Skipped configuration of 'NetworkPolicyServer' because install operation failed.
    4932: 2009-10-13 19:07:03.261 [Provider]                 
    [STAT] ---- CBS Session Consolidation -----
    [STAT] For
              'NetworkPolicyServer'[STAT] installation(s) took '405.9273872' second(s) total.
    [STAT] Configuration(s) took '0.0100242' second(s) total.
    [STAT] Total time: '405.9374114' second(s).

    The IAS NT Service fails installation.  I've added the "Full Control" to the IAS folder, but still no go.

    By the way, at one time, I DID have NPS installed on this server, but after I installed 2008 SP2, the NPS service wouldn't start.  I uninstalled NPS and tried to re-install but no go.  I uninstalled SP2, but I still cannot install the NPS role.

    Any help here would be appreciated.  This last NPS install is prohibiting me from a full 2008 migration.

    Thanks!

     

Answers

  • Saturday, October 31, 2009 2:20 AMscomeau Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Well, oddly enough, this just magically started to install - go figure.  The ONLY thing I did was install the Exchange 2007 Management Console (and the associated roles necessary) because I wanted that on the DC.  I'm wondering if the IIS particulars for EMC are required for NAP????
    • Marked As Answer byscomeau Saturday, October 31, 2009 2:20 AM
    •  
     

All Replies

  • Thursday, October 15, 2009 4:01 AMQunshu ZhangMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    Sign In to Vote
    0
    Sign In to Vote
    Can you please try the following procedures on your server to help troubleshoot the problem?

    1. Remove NPS and domain services.
    2. Enable tracing on the command line with netsh ras set tracing * enable
    3. Reboot the machine and try installing the services again (AD DS then NPS).
    4. Review and provide the output from logs in %windir%\tracing.
    5. When ready, disable tracing with netsh ras set tracing * dis

    please also check the Application logs on the server for error events.  Thanks.


    Thanks
    Qunshu
    Sorry. My posting is my personal suggestion, Microsoft won't take any responsibilities for my posting. But I am more than happy to try my best to help you.
     
  • Thursday, October 15, 2009 2:06 PMscomeau Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    This server is a main DC at one of my remote facilities.  If I remove Domain Services, won't I need to do a DCPROMO and won't my server lose all its configuration like all the shares, DFS, AD-DNS, DHCP, etc?  I don't think I can simply remove AD without serious consequences - or am I wrong here?

    Thank you.
     
  • Sunday, October 18, 2009 8:41 PMQunshu ZhangMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Hi, Scomeau

    Are there any events for this issue from the Event Viewer? 

    Can you please try the method from this thread http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/a987cf99-7f7c-4bbc-b8fd-e262a61db1f9 to see if this is because of the VSS issue too - Your issue is very similiar with what they discussed?
    Thanks. And please let me know if you still have this issue after that.

    thanks
    Qunshu

    Sorry. My posting is my personal suggestion, Microsoft won't take any responsibilities for my posting. But I am more than happy to try my best to help you.
     
  • Monday, October 19, 2009 12:28 AMscomeau Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Yes, I have tried the VSS avenue (I saw that post also).  VSS is fine and happy from all my tests, as well as no VSS errors are shown in the logs (well, there was one VSS error but that was when I booted into Safe Mode - which was to be expected).  I may have to call MS on this one.

    Thank you for the suggestions.  Anyone else up for the challenge before I call MS?
     
  • Saturday, October 31, 2009 2:20 AMscomeau Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Well, oddly enough, this just magically started to install - go figure.  The ONLY thing I did was install the Exchange 2007 Management Console (and the associated roles necessary) because I wanted that on the DC.  I'm wondering if the IIS particulars for EMC are required for NAP????
    • Marked As Answer byscomeau Saturday, October 31, 2009 2:20 AM
    •  
     
  • Saturday, October 31, 2009 10:55 PMRamaSubbu SKMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    If you are planning for IPSec NAP deployment then you would need IIS components.

    Thanks
    -RamaSubbu SK
    Sorry! Microsoft doesn't own any liability & responsibility for any of my posting.