UNABLE TO INSTALL SECURITY PATCH 948109 TO SQL SERVER 2005 EXPRESS EDITION WHICH IS INSTALLED ALONG WITH ACT7 SOFTWARE.
Posted on Tuesday, July 15, 2008 at 10:02 pmThe ACT7 software installs sql server 2005 express edition along with the installation of ACT7 software. When we try to apply the latest security patch 948109 released by Microsoft for sql server 2005, the installation may fail.
In order to find the cause of the installation we need to look into the setup boothstrap logs located in the folder c:\program files\microsoft sql server \90\setup bootstrap\log\hotfix\Summary.txt.
When we check the summary.txt we may find the following error reported
Product Installation Status
Product : SQL Server Database Services 2005 (ACT7)
Product Version (Previous): 3042
Product Version (Final) :
Status : Failure
Log File : C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\LOG\Hotfix\SQL9_Hotfix_KB948109_sqlrun_sql.msp.log
SQL Express Features :
Error Number : 29533
Error Description : MSP Error: 29533 Service ‘TEST-PC\ACT7′ could not be stopped. Verify that you have sufficient privileges to stop system services. The error code is (16386)
———————————————————————————-
Product : SQL Server Tools and Workstation Components 2005
Product Version (Previous): 3068
Product Version (Final) :
Status : Not Selected
Log File :
SQL Express Features :
Error Description :
CAUSE:
====================
When ACT7 software is installed on the system and the sql server instance is used by ACT7 software, it deletes all the Windows logins (for security reasons) including the BUILTIN\Administrator account for that instance of the sql server instance, generally the instance name is ACT7.
During the installation of the security patch 948109 the setup.exe tries to login to the sql server using the credential of the windows user with which we are trying to install the security patch. However it will not be able to login to the sql server since there is windows login for the user with which it will try to login
Also it is difficult to enter in the sql server instance as the sql user ‘sa’ password are not known to the end users and there is no means by which we can enter into the sql server instance
RESOLUTION/WORKAROUND:
====================
So to resolve or workaround this we need to add the Windows login account as a sql server login with which we are installing the security patch.
So to add the windows login as sql server login for the sql server 2005 express edition instance ACT7 which is installed alongwith ACT7 we can use the following procedure
Stop the sql server service and start the sql server from command line as shown
C:\program files\microsoft sql server\MSSQL.1\MSSQL\Binn\Sqlservr.exe -s ACT7 -m -c
we then need to login into the sql server using sqlcmd using the following commands
sqlcmd -S <computer-name>\ACT7 -E
create login [<Windows user name>] from windows from e.g
Create login [TEST-PC\SAM] from Windows
grant sysadmin to windows login just created above
Sp_addsrvrolemember ‘SAM-PC\SAM,’sysadmin’
Stop the sql server from command line and start the sql server service again
You can then start the installation of service pack or hotfix and it should work
Note: ACT7 software tries to delete the windows login periodically and the login which we just created above might get deleted in say 15 mins so need to make sure the installation is sstarted immediately after adding the login
July 20th, 2008 at 7:58 pm
When running the sqlserver.exe -s ACT -m -c puts sqlserver in single user mode. You will execute that statement in a different cmd window. not the same window as where you’ll run the following command lines.
Sqlcmd launches a command line mode for sql. Let’s confirm some of the command lines:
Upon running the sqlcmd you’ll get this…
1>
Enter this: create login [domainname\account] from windows
(yes you need the brackets)
then type in “GO” - go executes the statement
You’ll see the 1> again meaning sql took the transact sql command statement
Then type: sp_addsrvrolemember ‘domainname\account’,’sysadmin’
Syntax is very important type “GO”
again you’ll see 1>
Type Exit
Next download the KB948109 at - http://www.microsoft.com/downloads/details.aspx?familyid=4C9851CC-2C4C-4190-872C-84993A7623B7&displaylang=en#filelist
(Don’t run the update yet because sql is still in single user mode)
Now in that cmd window that put sql in single user mode type: control c. This will gracefully close SQL.
Started the SQL Server via services.msc
Execute the patch. And Done.
July 22nd, 2008 at 12:49 am
This sounds like a cure to my delima if I understood the command line process. For a novice and the sql server this is greek
July 29th, 2008 at 2:35 pm
Just as an FYI, I attempted to add the user to the group as mentioned in a previous post and it did not seem to work for me on two laptops in our Org.
July 30th, 2008 at 11:34 am
Hi Rich,
Do you receive the same error (Error 29533)in the summary.txt located in the Setup Bootstrap\HotFix as mentioned in the above post.
If you receive Error 29533 the above solution must work. However if the error is different in addition to adding the user to group you might have perform additional troubleshooting depending on the error.
Also FYI, ACT7 deletes the Windows login you create periodically so if you add the user and after half an hour you perform the installation you may receive the same error again since the login must have been deleted by ACT7
August 17th, 2008 at 1:25 am
Lovely post. Please add my email address to your list and email me the updates if possible. I always like to read your blog and comment on it.