UNABLE TO INSTALL SECURITY PATCH 948109 TO SQL SERVER 2005 EXPRESS EDITION WHICH IS INSTALLED ALONG WITH ACT7 SOFTWARE.
The ACT7 software installs sql server 2005 express edition along with the installation of ACT7 software. When we try to apply the latest security patch 948109 released by Microsoft for sql server 2005, the installation may fail.
In order to find the cause of the installation we need to look into the setup boothstrap logs located in the folder c:\program files\microsoft sql server \90\setup bootstrap\log\hotfix\Summary.txt.
When we check the summary.txt we may find the following error reported
Product Installation Status
Product : SQL Server Database Services 2005 (ACT7)
Product Version (Previous): 3042
Product Version (Final) :
Status : Failure
Log File : C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\LOG\Hotfix\SQL9_Hotfix_KB948109_sqlrun_sql.msp.log
SQL Express Features :
Error Number : 29533
Error Description : MSP Error: 29533 Service ‘TEST-PC\ACT7′ could not be stopped. Verify that you have sufficient privileges to stop system services. The error code is (16386)
———————————————————————————-
Product : SQL Server Tools and Workstation Components 2005
Product Version (Previous): 3068
Product Version (Final) :
Status : Not Selected
Log File :
SQL Express Features :
Error Description :
CAUSE:
====================
When ACT7 software is installed on the system and the sql server instance is used by ACT7 software, it deletes all the Windows logins (for security reasons) including the BUILTIN\Administrator account for that instance of the sql server instance, generally the instance name is ACT7.
During the installation of the security patch 948109 the setup.exe tries to login to the sql server using the credential of the windows user with which we are trying to install the security patch. However it will not be able to login to the sql server since there is windows login for the user with which it will try to login
Also it is difficult to enter in the sql server instance as the sql user ‘sa’ password are not known to the end users and there is no means by which we can enter into the sql server instance
RESOLUTION/WORKAROUND:
====================
So to resolve or workaround this we need to add the Windows login account as a sql server login with which we are installing the security patch.
So to add the windows login as sql server login for the sql server 2005 express edition instance ACT7 which is installed alongwith ACT7 we can use the following procedure
Stop the sql server service and start the sql server from command line as shown
C:\program files\microsoft sql server\MSSQL.1\MSSQL\Binn\Sqlservr.exe -s ACT7 -m -c
we then need to login into the sql server using sqlcmd using the following commands
sqlcmd -S <computer-name>\ACT7 -E
create login [<Windows user name>] from windows from e.g
Create login [TEST-PC\SAM] from Windows
grant sysadmin to windows login just created above
Sp_addsrvrolemember ‘SAM-PC\SAM,’sysadmin’
Stop the sql server from command line and start the sql server service again
You can then start the installation of service pack or hotfix and it should work
Note: ACT7 software tries to delete the windows login periodically and the login which we just created above might get deleted in say 15 mins so need to make sure the installation is sstarted immediately after adding the login
The ACT7 software installs sql server 2005 express edition along with the installation of ACT7 software. When we try to apply the latest security patch 948109 released by Microsoft for sql server 2005, the installation may fail.
In order to find the cause of the installation we need to look into the setup boothstrap logs located in the folder c:\program files\microsoft sql server \90\setup bootstrap\log\hotfix\Summary.txt.
When we check the summary.txt we may find the following error reported
Product Installation Status
Product : SQL Server Database Services 2005 (ACT7)
Product Version (Previous): 3042
Product Version (Final) :
Status : Failure
Log File : C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\LOG\Hotfix\SQL9_Hotfix_KB948109_sqlrun_sql.msp.log
SQL Express Features :
Error Number : 29533
Error Description : MSP Error: 29533 Service ‘TEST-PC\ACT7′ could not be stopped. Verify that you have sufficient privileges to stop system services. The error code is (16386)
———————————————————————————-
Product : SQL Server Tools and Workstation Components 2005
Product Version (Previous): 3068
Product Version (Final) :
Status : Not Selected
Log File :
SQL Express Features :
Error Description :
CAUSE:
====================
When ACT7 software is installed on the system and the sql server instance is used by ACT7 software, it deletes all the Windows logins (for security reasons) including the BUILTIN\Administrator account for that instance of the sql server instance, generally the instance name is ACT7.
During the installation of the security patch 948109 the setup.exe tries to login to the sql server using the credential of the windows user with which we are trying to install the security patch. However it will not be able to login to the sql server since there is windows login for the user with which it will try to login
Also it is difficult to enter in the sql server instance as the sql user ‘sa’ password are not known to the end users and there is no means by which we can enter into the sql server instance
RESOLUTION/WORKAROUND:
====================
So to resolve or workaround this we need to add the Windows login account as a sql server login with which we are installing the security patch.
So to add the windows login as sql server login for the sql server 2005 express edition instance ACT7 which is installed alongwith ACT7 we can use the following procedure
Stop the sql server service and start the sql server from command line as shown
C:\program files\microsoft sql server\MSSQL.1\MSSQL\Binn\Sqlservr.exe -s ACT7 -m -c
we then need to login into the sql server using sqlcmd using the following commands
sqlcmd -S <computer-name>\ACT7 -E
create login [<Windows user name>] from windows from e.g
Create login [TEST-PC\SAM] from Windows
grant sysadmin to windows login just created above
Sp_addsrvrolemember ‘SAM-PC\SAM,’sysadmin’
Stop the sql server from command line and start the sql server service again
You can then start the installation of service pack or hotfix and it should work
Note: ACT7 software tries to delete the windows login periodically and the login which we just created above might get deleted in say 15 mins so need to make sure the installation is sstarted immediately after adding the login
When running the sqlserver.exe -s ACT -m -c puts sqlserver in single user mode. You will execute that statement in a different cmd window. not the same window as where you’ll run the following command lines.
Sqlcmd launches a command line mode for sql. Let’s confirm some of the command lines:
Upon running the sqlcmd you’ll get this…
1>
Enter this: create login [domainname\account] from windows
(yes you need the brackets)
then type in “GO” - go executes the statement
You’ll see the 1> again meaning sql took the transact sql command statement
Then type: sp_addsrvrolemember ‘domainname\account’,’sysadmin’
Syntax is very important type “GO”
again you’ll see 1>
Type Exit
Next download the KB948109 at - http://www.microsoft.com/downloads/details.aspx?familyid=4C9851CC-2C4C-4190-872C-84993A7623B7&displaylang=en#filelist
(Don’t run the update yet because sql is still in single user mode)
Now in that cmd window that put sql in single user mode type: control c. This will gracefully close SQL.
Started the SQL Server via services.msc
Execute the patch. And Done.
Comment by Comments — July 20, 2008 @ 7:58 pm
This sounds like a cure to my delima if I understood the command line process. For a novice and the sql server this is greek
Comment by Chris Paddock — July 22, 2008 @ 12:49 am
Another possible workaround is to locate the Group which has the necessary rights to access the ACT7 Instance. It is something like MQLServer2005MSSQLUser$[i]DOMAIN_OR_PC_NAME[/i]$ACT7.
Just add the current user to this group, restart to have the changes take effect and you can install the patch without having to touch the commandline.
Plus (or drawback) You can now access the Instance via Management Studio.
Comment by Ralph — July 28, 2008 @ 10:22 am
Just as an FYI, I attempted to add the user to the group as mentioned in a previous post and it did not seem to work for me on two laptops in our Org.
Comment by Rich P. — July 29, 2008 @ 2:35 pm
Hi Rich,
Do you receive the same error (Error 29533)in the summary.txt located in the Setup Bootstrap\HotFix as mentioned in the above post.
If you receive Error 29533 the above solution must work. However if the error is different in addition to adding the user to group you might have perform additional troubleshooting depending on the error.
Also FYI, ACT7 deletes the Windows login you create periodically so if you add the user and after half an hour you perform the installation you may receive the same error again since the login must have been deleted by ACT7
Comment by Anonymous — July 30, 2008 @ 11:34 am
Lovely post. Please add my email address to your list and email me the updates if possible. I always like to read your blog and comment on it.
Comment by Acomplia — August 17, 2008 @ 1:25 am
Thanks for the great walkthrough, this fixed the exact problem I was having, but the error in the summary.txt was Exit Code 11016. Figured it was something specific to ACT, and I really appreciate the info, spent 3 hours trolling other message boards and trying possible fixes, but this is the one that did it for me!
Thanks again!
Comment by Mitch C — August 25, 2008 @ 9:49 pm
Will someone PLEEEEEEASE help with ACT!2007!!!!! I have had nothing but problems with this program since I purchased it over a year ago. I uninstalled the program and then attempted to reinstall…. It did not completely install because I received an error message “Act!2007 is not supported on this edition of SQL Server 2005″. HELP!!!
Any assistance is greatly appreciated.
Comment by Ms. Annette — January 20, 2009 @ 6:55 pm
I usually don’t make comments, but I’ve been doing a lot of research on this topic recently, so I just could not resist. Posts here helped me a lot in my work, so I wanted to thank you.
Comment by Office Task Chairs — March 11, 2010 @ 10:02 pm