none
SP2 RTM problem

    Question

  • After I install SP2 RTM (from MSDN) on domain controller with Network Police Server role, this server hangup after few hours.

    Problem is in NPS/IAS service:

    Faulting application svchost.exe_IAS, version 6.0.6001.18000, time stamp 0x47919291, faulting module msvcrt.dll, version 7.0.6002.18005, time stamp 0x49e04189, exception code 0xc0000005, fault offset 0x0000000000001467, process id 0xe0, application start time 0x01c9d260d7f4de5e.

    is possible uninstall SP2 from domain controller ?

    Thanks,
    Ladislav

    Wednesday, May 13, 2009 7:03 PM

Answers

  • We had the same issue here and opened a case at microsoft for this.

    We use the NPS for authentication for our wireless network.
    The reason appears to be when a valid user authenticates with a wrong password then the services crash.
    Microsoft is aware of this bug and are working on a fix. But there is no release date known for this.

    they gave me 3 options to solve it for now:

    1. Uninstall service pack 2
    2. Stop using PAEP as authentication method.
    3. Do nothing and wait for hot fix to be ready

    Jerry

    JS
    Thursday, July 09, 2009 2:34 PM
  • Hi,
    I open case on MS PSS and install + run debugger. After this NPS service dont crash :-)

    1)Adplus Dump for NPS service

     

    a.            Install Debugging Tools for Windows x64 Version

    b.            < http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx#EQB <http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx>>

    c.             Open a command prompt window

    d.            Change the directory C:\Program Files\Debugging Tools for Windows>

    e.            Execute the following command:

    adplus -crash -nodumponfirst -p PID (If you will see other widows prompting please click always on OK)

                    Were  PID is the Process ID for the NPS Service - you can find the  PID in TaskManager.

    g.             Wait untill the NPS service crashed.

    h.            You will find the dump in C:\Program Files\Debugging Tools for Windows :

                    Crash_Mode__Date_08-23-2007__Time_xx-x-xx aM Directory

     

    More information about ADPLUS <<http://support.microsoft.com/kb/286350>>

     
    L.

    • Marked as answer by David Shen Wednesday, June 03, 2009 7:14 AM
    Wednesday, June 03, 2009 6:46 AM
  • We're seeing exactly the same crash, but this is with the release version of SP2 (from Windows Update).

    NPS running on a 2008 domain controller will crash within about 24 hours, and kill anything else in the same SVCHOST process, which in out case kills the User Profile Service, which causes a cascading series of problems.

    I've rolled back SP2 until there is a proper fix for this.


    Thanks,
    Phil.
    • Marked as answer by David Shen Monday, June 08, 2009 9:33 AM
    Saturday, June 06, 2009 2:35 AM
  • We're seeing exactly the same crash, but this is with the release version of SP2 (from Windows Update).

    NPS running on a 2008 domain controller will crash within about 24 hours, and kill anything else in the same SVCHOST process, which in out case kills the User Profile Service, which causes a cascading series of problems.

    I've rolled back SP2 until there is a proper fix for this.


    Thanks,
    Phil.

    Is there any way a person could run the nps server in its own SVCHOST process??

    Steve

    From this thread:
    http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e230f23c-9667-4f64-96b4-232d7b342c0d

    Open up a CMD prompt (as administrator)

    Type:

      sc config IAS type= own

      net stop ias & net start ias

     

    I have tried this on two DC's (also NPS servers) however they still appear to be exhibiting the same symptoms at random intervals (2hrs through to 2days). Others have reported success with this.

     

    I am hanging out for a hotfix.

     

    Ian
    • Marked as answer by David Shen Wednesday, July 29, 2009 2:38 AM
    Monday, July 27, 2009 1:02 PM

  • no info on a fix yet :

    The fix will be included in Service Pack 3.
    I have no release date for service pack 3 to give you.
    Also I tried to get information if a KB hot fix will be released before the release of service pack 3 but was not able to extract any such information.

     


    @ALL:
     Microsoft released an security Hotfix that is adressing a part of the issue that where here reported. As you will see this comes as an Security Bulletin so will be available also via Windows update.
    Link to the Hotfix:
    http://www.microsoft.com/technet/security/bulletin/MS09-071.mspx

    Recomandation: Please test this carefully in a non test environment before deploying it in to the productive one.
    Good Luck!





    • Proposed as answer by Snif the Sniffer Wednesday, December 09, 2009 2:59 PM
    • Marked as answer by David Shen Tuesday, December 22, 2009 7:14 AM
    Wednesday, December 09, 2009 2:59 PM

All replies

  • Hello Ladislav,

     

    Thank you for posting here.

     

    For your concern about uninstall the Windows Server 2008 Service Pack 2, I built a test environment like yours to verify that we can remove Windows Server 2008 SP2 from a domain controller.
     

    Here are the steps what I have performed:

     

    1. Install Windows Server 2008 SP2 (Windows6.0-KB948465-X64.exe) on a domain controller

     

    2. Then remove the Windows Server 2008 SP2 with no problem.

    To remove the Windows Server 2008 SP2 from a domain controller, please follow these steps:

     

    a.    Click Start Collapse this imageExpand this image, copy and then paste (or type) the following command in the Start Search box, and then press ENTER: appwiz.cpl

     

    b.    Click View installed updates 

     

    c.    Click Service Pack for Microsoft Windows (KB948465), and then click Uninstall.

     

    d.    Follow the instructions to complete the removal process.

     

    For further information about Service Pack 2 for Windows Server 2008, please refer to the KB 948465

     

    Information about Service Pack 2 for Windows Vista and for Windows Server 2008

    http://support.microsoft.com/default.aspx/kb/948465

     

    Hope the information will be helpful.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Thursday, May 14, 2009 9:25 AM
  • Hello David,
    thanks for you response.

    I try before uninstall SP2, uninstall FCS SHV - event log wrote after SP2:

    SHV Id : 79747 can not create validator.

    This SHV not working correctly with SP2.

    Thursday, May 14, 2009 2:30 PM
  • Hello Ladislav,

     

    According to the customer's description, it seems that you may have installed Forefront Integration Kit for Network Access Protection.

     

    From the error message, it seems that this component has encountered some problems after installing Windows Server 2008 SP2.

     

    To resolve this issue, please uninstall this component to see whether it helps.

     

    Microsoft® Forefront™ Integration Kit for Network Access Protection

    http://technet.microsoft.com/en-us/library/cc512112.aspx

     

    Hope it helps.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by David Shen Monday, May 18, 2009 6:07 AM
    • Unmarked as answer by rudi01 Monday, May 18, 2009 11:32 AM
    Friday, May 15, 2009 9:26 AM
  • Hi Rudi,

    I have the same issue:

    Faulting application svchost.exe_IAS, version 6.0.6001.18000, time stamp 0x47919291, faulting module msvcrt.dll, version 7.0.6002.18005, time stamp 0x49e04189, exception code 0xc0000005, fault offset 0x0000000000001467, process id 0x1444, application start time 0x01c9d570f76f56bc.

    Error message seems almost identical. This machine is not a DC, and not using any forefront tools. I've uninstalled SP2, and i'm hoping that the problem will go away.
    Friday, May 15, 2009 4:03 PM
  • Hi Lukas,

    after deinstall FCS SHV my NPS working fine on W2K8 X64 w/SP2. Authenticated about 2000 users and installed on domain controller and now use Windows SHV and Configuration Manager SHV.

    L.
    • Proposed as answer by lrudi Saturday, May 16, 2009 4:15 AM
    • Marked as answer by David Shen Monday, May 18, 2009 6:07 AM
    • Unmarked as answer by rudi01 Monday, May 18, 2009 11:32 AM
    • Unproposed as answer by David Shen Friday, May 22, 2009 2:38 AM
    Saturday, May 16, 2009 4:14 AM
  • Hi Lukas,
    after for days -> server crash and same error:

    Faulting application svchost.exe_IAS, version 6.0.6001.18000, time stamp 0x47919291, faulting module msvcrt.dll, version 7.0.6002.18005, time stamp 0x49e04189, exception code 0xc0000005, fault offset 0x0000000000001467, process id 0xf8, application start time 0x01c9d452643511c9.

    L.

    Monday, May 18, 2009 11:32 AM
  • Hello Rudi,

     

    According to the error message, we find it seems to be system crash issue and we need to analyze the crash dump file to troubleshoot it. Unfortunately, it is not effective for us to debug the crash dump file here in the forum. Therefore, I would like to suggest that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.

     

    To obtain the phone numbers for specific technology request please take a look at the web site listed below:

     

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607

     

    For your reference, you may try the following steps and check if it helps.

     

    Clean boot:

     

    1. Click Start | Run and type "msconfig" (no quotes) and press enter.

    2. Click services from the tab, check the check box of "Hide All Microsoft Service", and then click "Disable all"

    3. Click Startup from the tab, then click "Disable all"

    4. Click "OK" and follow the instructions to Restart Computer, after rebooting if you get a prompt dialog of System Configuration, please check the check box in the dialog and click "OK".

     

    Hope the issue will be resolved soon.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by David Shen Wednesday, May 20, 2009 3:17 AM
    • Unmarked as answer by rudi01 Wednesday, June 03, 2009 6:46 AM
    Tuesday, May 19, 2009 3:33 AM
  • Is there any progress with this?

    I too have seen this (on servers running on ESX 3.5.0)


    Wednesday, June 03, 2009 6:32 AM
  • Hi,
    I open case on MS PSS and install + run debugger. After this NPS service dont crash :-)

    1)Adplus Dump for NPS service

     

    a.            Install Debugging Tools for Windows x64 Version

    b.            < http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx#EQB <http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx>>

    c.             Open a command prompt window

    d.            Change the directory C:\Program Files\Debugging Tools for Windows>

    e.            Execute the following command:

    adplus -crash -nodumponfirst -p PID (If you will see other widows prompting please click always on OK)

                    Were  PID is the Process ID for the NPS Service - you can find the  PID in TaskManager.

    g.             Wait untill the NPS service crashed.

    h.            You will find the dump in C:\Program Files\Debugging Tools for Windows :

                    Crash_Mode__Date_08-23-2007__Time_xx-x-xx aM Directory

     

    More information about ADPLUS <<http://support.microsoft.com/kb/286350>>

     
    L.

    • Marked as answer by David Shen Wednesday, June 03, 2009 7:14 AM
    Wednesday, June 03, 2009 6:46 AM
  • Hi Ruid01,

    Thank you for the sharing on solution to the issue.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Wednesday, June 03, 2009 7:15 AM
  • Shouldn't that be "workaround" rather than "answer" ?!

    /Fisker
    Wednesday, June 03, 2009 11:46 AM
  • Hi Fisker,
    Is not an workaround is an troubleshooting method.. We are attaching debugger to the crashing service in order to see where is the problem.
    Friday, June 05, 2009 11:07 AM
  • We're seeing exactly the same crash, but this is with the release version of SP2 (from Windows Update).

    NPS running on a 2008 domain controller will crash within about 24 hours, and kill anything else in the same SVCHOST process, which in out case kills the User Profile Service, which causes a cascading series of problems.

    I've rolled back SP2 until there is a proper fix for this.


    Thanks,
    Phil.
    • Marked as answer by David Shen Monday, June 08, 2009 9:33 AM
    Saturday, June 06, 2009 2:35 AM
  • We had the same error yesterday!

    Faulting application svchost.exe_IAS, version 6.0.6001.18000, time stamp 0x47919291, faulting module msvcrt.dll, version 7.0.6002.18005, time stamp 0x49e04189, exception code 0xc0000005, fault offset 0x0000000000001467, process id 0x1444, application start time 0x01c9d570f76f56bc.

    Our server could not connect to the network because network list service couldn't start and hereby the SQL server that was installed wasn't accessible anymore... We disabled the UAC and after a reboot the server was able to connect to the network again and the svchost error didn't appear anymore.

    It seems that the Windows Server 2008 Service Pack 2 for x64-based Systems (KB948465)isn't downloadable anymore eather... we receive an error on our other test server that the windows update encountered an error while downloading this update...

    It think it's best to wait installing this update, we are not even sure if disabling the UAC is even the solution...

     


    MCT,MCTS - http://www.tomvangaever.be
    Friday, June 12, 2009 8:41 AM
  • Any update on this?  I am seeing the same problem with one of my DCs.
    Monday, July 06, 2009 5:28 PM
  • I'm having the same problem in the same environment Windows 2008 x64 SP2 Domain Controller. This is in a smaller branch office so I disabled NPS but this can only be a temporary workaround because this stops VPN and Wireless Access in the branch.

    Marc
    Wednesday, July 08, 2009 7:07 AM
  • We had the same issue here and opened a case at microsoft for this.

    We use the NPS for authentication for our wireless network.
    The reason appears to be when a valid user authenticates with a wrong password then the services crash.
    Microsoft is aware of this bug and are working on a fix. But there is no release date known for this.

    they gave me 3 options to solve it for now:

    1. Uninstall service pack 2
    2. Stop using PAEP as authentication method.
    3. Do nothing and wait for hot fix to be ready

    Jerry

    JS
    Thursday, July 09, 2009 2:34 PM
  • We're seeing exactly the same crash, but this is with the release version of SP2 (from Windows Update).

    NPS running on a 2008 domain controller will crash within about 24 hours, and kill anything else in the same SVCHOST process, which in out case kills the User Profile Service, which causes a cascading series of problems.

    I've rolled back SP2 until there is a proper fix for this.


    Thanks,
    Phil.

    Is there any way a person could run the nps server in its own SVCHOST process??

    Steve
    Friday, July 24, 2009 9:58 PM
  • We're seeing exactly the same crash, but this is with the release version of SP2 (from Windows Update).

    NPS running on a 2008 domain controller will crash within about 24 hours, and kill anything else in the same SVCHOST process, which in out case kills the User Profile Service, which causes a cascading series of problems.

    I've rolled back SP2 until there is a proper fix for this.


    Thanks,
    Phil.

    Is there any way a person could run the nps server in its own SVCHOST process??

    Steve

    From this thread:
    http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e230f23c-9667-4f64-96b4-232d7b342c0d

    Open up a CMD prompt (as administrator)

    Type:

      sc config IAS type= own

      net stop ias & net start ias

     

    I have tried this on two DC's (also NPS servers) however they still appear to be exhibiting the same symptoms at random intervals (2hrs through to 2days). Others have reported success with this.

     

    I am hanging out for a hotfix.

     

    Ian
    • Marked as answer by David Shen Wednesday, July 29, 2009 2:38 AM
    Monday, July 27, 2009 1:02 PM
  • Still no news :(

    I have the same problem. logged it with MS and paid $390 for specialist when there was not much about it on the web yet about it.

    (i've removed the IAS service at the moment so the server wont crash)

    4 weeks later - still nothing. Im gonna try the CMD line options tomorrow to see if it works.
     
    kinda ____ when wifi doesn't work and you've got 1100 clients asking why and when it will be fixed.

    Anything been issued yet ?

    Steve
    Tuesday, August 04, 2009 12:14 PM
  • 4 months later.... still waiting for a fix....
    Tuesday, August 04, 2009 7:06 PM
  • Didn't get time today as I was training a trainee most the day and sorting other problems. Im going to copy the VM tomorrow onto an external HDD and  try resolve the issue (although it could take a while to copy, as its a 1.5 TB VM).

    Before I was running Server 2008 Sp2 x64 on a physical server which had no problems with it. However, after migrating to Hyper-V (x32) (fresh domain) this problem arose randomly :(

    Is any one experiancing this problem with a physical server.. ?

    Wednesday, August 05, 2009 11:15 AM
  • Didn't get time today as I was training a trainee most the day and sorting other problems. Im going to copy the VM tomorrow onto an external HDD and  try resolve the issue (although it could take a while to copy, as its a 1.5 TB VM).

    Before I was running Server 2008 Sp2 x64 on a physical server which had no problems with it. However, after migrating to Hyper-V (x32) (fresh domain) this problem arose randomly :(

    Is any one experiancing this problem with a physical server.. ?

    Yes. I am experiencing this on two physical DC's....both are crashing on average twice to three times per day. I have had to disable NPS on one of them just so I always have at least one live DC...let's just say I now have quite possibly the most unreliable wireless setup one can offer due to this problem. The work around I mentioned above did not work for either of my DC's.

    Ian
    Wednesday, August 05, 2009 11:53 AM
  • Has a hotfix been made available to this issue yet? We have experienced this on both a VMWare 3.5 DC and a physical DC...
    Tuesday, August 11, 2009 9:32 PM
  • Nope. Has anyone tried a system repair ?
    Wednesday, August 12, 2009 12:25 AM
  • Does anyone know if this issue is fixed in Windows Server 2008 R2?
    Monday, August 17, 2009 5:03 PM
  • I've upgraded our NPS server to R2 this weekend. So far, it has stood up to a day of production use.

    However, as with SP2 this problem happened "occasionally", so i can't tell you for sure.

    Our NPS Server is a VM - so i setup a new one with the same Name & IP. In case R2 doesn't work, i'll just go back to the old SP1 VM.
    Monday, August 17, 2009 5:07 PM
  • Any further data on R2 fixing this issue?  We are seriously considering deploying if it might fix.  We have been plagued by this problem for several months now and students arrive (we are a small college) next weekend!!!  Microsoft PSS has been unable to assist.

    Thank you!
    Friday, August 21, 2009 2:19 PM
  • Our NPS Server has been running this week without any issues on R2.
    Friday, August 21, 2009 2:22 PM
  • Hi all,
    I opened a case with MS, and got this response from the technician:

    Action on Customer –  Please ensure a full system backup prior to making any changes.  Run the SVChost.exe in its own address space.  (Please see attached).  Action 2 – Uninstall SP2

     

    NB – I understand this known issue is fixed in Windows 2008 R2.

     

    Possible fixes: 

    1.       Move NPS to its own instance of svhost  - Run the following command: sc config type= own (yes, you need the space between the "="
    and "own"). This will cause the service to always launch in its own svchost – Please find a link to the sc command line utility http://support.microsoft.com/kb/251192/en-us

    2.       Uninstall SP2 http://support.microsoft.com/kb/948537/en-us  - same procedure as in Windows Vista.

    Tuesday, August 25, 2009 11:45 AM
  • still no hotfix (and no answer if the issue is resolved in R2, we asked this 2 weeks ago) :

    I just checked the status of the hot fix and unfortunately there are still no significant updates to give you.

     

    My Tech Lead returned to work today (he was on sick leave) and will answer me shortly if this is solved in R2.

     

    Wednesday, August 26, 2009 3:46 PM
  • So far we haven't seen the issue yet in R2...  normally on 2008 we would see the issue in about 2 days...  and we have been running R2 for almost 2 weeks now.


    Steve
    Tuesday, September 08, 2009 6:04 PM
  • info on 2 september :

    I just checked info for the bug you are experiencing and a hot fix is now released but has the status of private which means that it is limited available. This further means that the hot fix is provided to limited number of customers to test if the hot fix works for them. This does not necessarily mean that the hot fix will soon be made publicly available.

     

    I also finally received feedback internally if this bug is fixed in Win 2008 R2. Unfortunately this is not the case.

     

    We’ll keep checking the status of this hot fix for you an update you as soon as there are changes with regard to the publicly availability.


    info on 16 september :

    No new updates.

     

    Bug still being worked on, has not yet passed internal validation yet.


     
    Wednesday, September 16, 2009 3:46 PM
  • Hi All,

    Today after using SP2 for some time... we suddenly had no wireless access any more.

    Ok I rebooted the server and then users also complained that they could not access shares on the file sever (DFS namespace server on the DC)

    I used this : http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/a9698005-aac3-42e6-9b5c-c00e9604b045

    Currently working with Premiere. Suggestions given to mitigate the total collapse are...

    1.       split 4 service (ias, rasman , lanmanserver and eaphost )to different instances of svchosts.exe so that other services do not crash.

    2.       The command that you need to run is “c:\> sc config ias type= own”. Repeat the same command by replacing the service name and then restart the server.


    I would like to have the fix

    Hi! Just heard from premier. Fix will be added in December updates as an ETA. Until then the recommendation is to not use SP2 for full functionality. To stabilize, separate out services, but CHAP authentication will fail from my observations.
    Thursday, October 08, 2009 12:16 PM
  • info on 7 Oktober :

    There has been some progress on the bug fix.

    It seems it is now at the stage where it is to be approved for creation of package.

    Keep in mind we can still be some time to go. When the package job has been approved they will start to make a package then that package needs to go thru the regression testing as well.


    I really don't undestand why it takes months to create this fix....
    Thursday, October 08, 2009 12:22 PM
  • I don't understand why this wasn't caught long before SP2 was released.
    Thursday, October 22, 2009 12:39 AM

  • no info on a fix yet :

    The fix will be included in Service Pack 3.
    I have no release date for service pack 3 to give you.
    Also I tried to get information if a KB hot fix will be released before the release of service pack 3 but was not able to extract any such information.

     

    Wednesday, November 11, 2009 8:41 PM
  • We have the same issue. We used to run IAS on all 2003 DC's. This issue is preventing us from rolling out 2008 DC's, because NPS is unstable and crashes all the time. I have a ticket open for this.
    Friday, November 20, 2009 8:56 AM
  • It looks like the issue is resolved in R2, we upgraded one of our DC's last week and no issues so far.
    (we also tried some logins with incorrect passwords)
    Friday, November 20, 2009 9:12 AM

  • no info on a fix yet :

    The fix will be included in Service Pack 3.
    I have no release date for service pack 3 to give you.
    Also I tried to get information if a KB hot fix will be released before the release of service pack 3 but was not able to extract any such information.

     


    @ALL:
     Microsoft released an security Hotfix that is adressing a part of the issue that where here reported. As you will see this comes as an Security Bulletin so will be available also via Windows update.
    Link to the Hotfix:
    http://www.microsoft.com/technet/security/bulletin/MS09-071.mspx

    Recomandation: Please test this carefully in a non test environment before deploying it in to the productive one.
    Good Luck!





    • Proposed as answer by Snif the Sniffer Wednesday, December 09, 2009 2:59 PM
    • Marked as answer by David Shen Tuesday, December 22, 2009 7:14 AM
    Wednesday, December 09, 2009 2:59 PM
  • Has this ever been properly resolved?

    We are experiencing the same thing, but the required patch is already installed...

     

    /Michel

    Friday, March 26, 2010 11:42 AM