Microsoft Forefront codename "Stirling" > Forefront Codename 'Stirling' Forums > Forefront Threat Management Gateway > TMG Setup Fails on: (Error 37020) Setup failed while creating the services configuration.
Ask a questionAsk a question
 

QuestionTMG Setup Fails on: (Error 37020) Setup failed while creating the services configuration.

  • Friday, April 11, 2008 10:07 AMNCoker Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hello

    i tried to install TMG but get always the failure: (Error 37020) Setup failed while creating the services configuration.

    part of log: Setup failed while creating the services configuration.

    Action 09:49:32: ConfigureFweng. Creating the services configuration...
    09:49:33 ISA setup CA INFO   : ENTRY: ConfigureFweng, Current user is IGUS\Administrator
    09:49:33 ISA setup CA INFO   : About to call InstallNetComponent(MS_Fweng,C:\Program Files (x86)\Microsoft ISA Server\fweng.inf)
    09:49:33 ISA setup CA INFO   : InstallNetComponent: ComponentID MS_Fweng InfPath C:\Program Files (x86)\Microsoft ISA Server\fweng.inf
    09:49:33 ISA setup CA INFO   : NCGetINetCfg: NetCfg 0035EF54
    09:49:33 ISA setup CA INFO   : NCGetINetCfg: hResult 0x0, NetCfg 0035EF54
    09:49:33 ISA setup CA INFO   : InstallNetComponent: Calling NCInstallNetComponent NetCfg 031707F8 ComponentID MS_Fweng GUID_DEVCLASS_NETSERVICE
    09:49:33 ISA setup CA INFO   : NCInstallNetComponent: NetCfg 031707F8 ComponentId MS_Fweng ClassGuid 6FDA163C
    09:49:36 ISA setup CA INFO   : NCInstallNetComponent: hResult 0x0 NetCfg 031707F8 ComponentId MS_Fweng ClassGuid 6FDA163C
    09:49:36 ISA setup CA INFO   : NCReleaseINetCfg: NetCfg 031707F8
    09:49:36 ISA setup CA INFO   : NCReleaseINetCfg: hResult 0x0 NetCfg 031707F8
    09:49:36 ISA setup CA INFO   : InstallNetComponent Return 1
    09:49:36 ISA setup CA INFO   : InstallNetComponent() completed
    09:49:37 ISA setup CA INFO   : Fweng.sys was installed properly by InstallNetComponent()
    09:49:37 ISA setup CA INFO   : EXIT: ConfigureFweng, Custom Action succeeded
    Action 09:49:37: ConfigureServices_Rollback.
    Action 09:49:37: ConfigureServices. Creating the services configuration...
    09:49:37 ISA setup CA INFO   : ENTRY: ConfigureServices, Current user is IGUS\Administrator
    09:49:37 ISA setup CA INFO   : ModifyServiceDepend(RemoteAccess, fwsrv, 1)
    09:49:37 ISA setup CA INFO   : Found the service, add the dependency
    09:49:38 ISA setup CA INFO   : spService->SetServiceSidType success for service fwsrv
    09:49:38 ISA setup CA INFO   : Adding NT SERVICE\fwsrv Service-Sid permission...
    09:49:38 ISA setup CA ERROR  : the function AddSidToNetCfgOp failed with status = 80070057 at the function AddFwsrvPermissions.
    09:49:38 ISA setup CA ERROR  : the function AddFwsrvPermissions failed at the function ConfigureServices.
    Setup failed while creating the services configuration.
    MSI (s) (F8!94) [09:52:10:026]: Product: Microsoft Forefront Threat Management Gateway -- Setup failed while creating the services configuration.

    09:52:10 ISA setup CA ERROR  : Setup failed while creating the services configuration.
    09:52:10 ISA setup CA ERROR  : (Error 37020) Setup failed while creating the services configuration.
    09:52:10 ISA setup CA ERROR  : EXIT: ConfigureServices, Custom Action failed (0x643)
    Action ended 09:52:10: InstallExecute. Return value 3.
    Action 09:52:10: Rollback. Rolling back action:
    Rollback: Creating the services configuration...
    Rollback: ConfigureServices_Rollback
    09:52:10 ISA setup CA INFO   : ENTRY: RestoreServicesConfiguration, Current user is IGUS\Administrator
    09:52:10 ISA setup CA INFO   : ModifyServiceDepend(RemoteAccess, fwsrv, 0)
    09:52:10 ISA setup CA INFO   : EXIT: RestoreServicesConfiguration, Custom Action succeeded
    Rollback: Creating the services configuration...
    Rollback: ConfigureFweng_Rollback
    09:52:10 ISA setup CA INFO   : ENTRY: RemoveFweng, Current user is IGUS\Administrator
    09:52:10 ISA setup CA INFO   : UnInstallNetComponent: ComponentID MS_Fweng
    09:52:10 ISA setup CA INFO   : NCGetINetCfg: NetCfg 0276F974
    09:52:10 ISA setup CA INFO   : NCGetINetCfg: hResult 0x0, NetCfg 0276F974
    09:52:10 ISA setup CA INFO   : UnInstallNetComponent: Calling NCUninstallNetComponent NetCfg 02A856B8 ComponentID MS_Fweng
    09:52:10 ISA setup CA INFO   : NCUninstallNetComponent: NetCfg 02A856B8 ComponentId MS_Fweng
    09:52:11 ISA setup CA INFO   : NCUninstallNetComponent: hResult 0x0 NetCfg 02A856B8 ComponentId MS_Fweng
    09:52:11 ISA setup CA INFO   : NCReleaseINetCfg: NetCfg 02A856B8
    09:52:11 ISA setup CA INFO   : NCReleaseINetCfg: hResult 0x0 NetCfg 02A856B8
    09:52:11 ISA setup CA INFO   : UnInstallNetComponent returned 1
    09:52:11 ISA setup CA INFO   : EXIT: RemoveFweng, Custom Action succeeded
    Rollback: PATCH_DisablePatchRemoveForSlipstream


    Please help!


    IT-Admin

All Replies

  • Saturday, April 12, 2008 8:58 PMNady VizalteerOwnerUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Can I get TMG setup logs please? On what OS you're installing TMG
  • Monday, April 21, 2008 10:55 AMSteve AJ Black Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    I received (Error 37020) Setup failed while creating the services configuration on 'vanilla' 2008 Ent DC.
    Also received (Error 37020) Setup failed while creating the services configuration on 2008 Ent (stand alone) with Exchange 2007SP1.
    Exchange OWA non functional after TMG install attempt.


    However, successfully installed on a vanilla install 2008 Ent.

    Regards,

    Steve.

  • Friday, May 30, 2008 6:29 PMRMorosMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi all. My experience with the initial setup is that the user that runs the installation has to be a local admin of the machine but also needs to be a domain user account. If you run with a local account the setup fails (even though the user is an administrator)

    Hope it helps

  • Monday, June 02, 2008 11:23 PMdtscaps Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hello all, just want to chime in on the 37020 error while installing on a 2008 DC. Anyone succeeded in promoting a vanilla 2008 install with TMG already in place? perhaps a little trick from SBS with a temp rule allowing traffic from all protected networks - > all protected networks will help in the process. I haven't tried this myself yet so I am keen to hear if anyone have accomplished a setup with a 2008 DC with tmg running on it.

    Second, I would like to install Exchange 2007SP1 on top of that with OWA and the app pools still working (got a lot of errors here after TMG install attempt) Perhaps someone accomplished this too. I'd sure like to hear how:)


    Regards
    Henning
  • Wednesday, June 04, 2008 11:09 PMElMajdalMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    The Requirement for installing TMG is to set the machine as a Domain member.

    The installation will fails if you tried to install it on a DC or on a workgroup machine.

    HTH,
    Tarek

    ________________

    Tarek Majdalani
    ISA Server MVP
    http://www.elmajdal.net/isaserver

    Tarek Majdalani ISA Server MVP Http://www.elmajdal.net
  • Thursday, July 17, 2008 8:14 PMJohn Joyner - MVPMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
     Hi Tarek -

    Thanks for clearing that up. I was also trying on a DC, had failure on the services config, will not try anymore.
    Do you know if TMG will be able to install on a DC in future releases?

    John Joyner
    MCSE | MVP-OM | MCTS: OM | MCTS: ISA
  • Saturday, October 24, 2009 10:52 AMKeith AlabasterMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    No - this was an omission in the early release notes and there is no intention (made known by the team) to allow this in the future.

    Keith
  • Saturday, October 24, 2009 12:53 PMElMajdalMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Do you know if TMG will be able to install on a DC in future releases?


    Sorry for not checking this post since long time ago !!

    Honostly, I was very happy to know that TMG can not be installed on a Domain Controller :)

    And I do hope it will continue like this.

    John, do you have any specific reasons why you want to install TMG on a DC ?
    Tarek Majdalani | MS Forefront Edge Security MVP | http://www.elmajdal.net