Can't apply KB835732 on various Win2k systems
From: Kiran Sanghi (anonymous_at_discussions.microsoft.com)
Date: 05/05/04
- Next message: Bojidar Alexandrov: "Re: Password Protect Folder/Win 2000"
- Previous message: anonymous_at_discussions.microsoft.com: "MS04-011: Security Update problem"
- In reply to: Aaron: "Can't apply KB835732 on various Win2k systems"
- Next in thread: Jerry Bryant [MSFT]: "Re: Can't apply KB835732 on various Win2k systems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 5 May 2004 12:26:12 -0700
I have same problem w/ KB835732 not installing on W2K Pro
SP4 PC's. If you hear or find a solution, please e-mail
me at kiran_sanghi@yahoo.com Thanks!.
Kiran
>-----Original Message-----
>On various systems (all Win2k) the KB835732 patch does
not apply other than in Safe Mode. When trying to
install, technicians get the error 'lsass.exe cannot be
terminated.' obviously it can't be stopped manually. The
%windir%\kb835732.log is rather undecipherable, but I do
notice lots of errors (I'll attach a section of one log at
the bottom of this post). The System event log gives a
Windows File Protection event for sp3res.dll and then auto-
uninstalls the patch (see full events below). I can't
find any similarities between the systems - some are SP3,
some SP4. Some are one version of our standard image,
some are another. Some have special software loaded, some
don't.
>
>Has anyone encountered this as well, or have any idea how
to resolve it? Rebooting into Safe Mode seems to work,
but it's a lot of extra work.
>
>
>[from System event log]
>
>Event Type: Information
>Event Source: Windows File Protection
>Event Category: None
>Event ID: 64021
>Date: 5/4/2004
>Time: 10:36:40 AM
>User: N/A
>Computer: (removed)
>Description:
>The system file c:\winnt\system32\sp3res.dll could not be
copied into the DLL cache. The specific error code is
0x00000020 [The process cannot access the file because it
is being used by another process.
>]. This file is necessary to maintain system stability.
>
>Event Type: Information
>Event Source: NtServicePack
>Event Category: None
>Event ID: 4382
>Date: 5/4/2004
>Time: 10:36:45 AM
>User: (domain user w/ local admin access)
>Computer: (removed)
>Description:
>Windows 2000 KB835732 was removed from your computer, and
the previous Windows 2000 configuration was restored.
>
>
>[from %windir%\kb835732.log - white space & "***" lines
removed to save space]
>================== Update.exe started at 5/ 4/2004 at
10:34:42 ==================
>Service Pack started with following command line:
>DoInstallation: CleanPFR failed: 0x2
>SetAltOsLoaderPath: No section uses DirId 65701; done.
>IncludeDirectoryIdFromInfSection: No DirId found for:
DontRemoveOnUninst.DirId
>FetchSourceURL: SetupOpenInfFile Failed to open file:
c:\9568cc827f370578407edb7f06e5\update\update.url
>DoInstallation: FetchSourceURL for
c:\9568cc827f370578407edb7f06e5\update\update.inf Failed
>LoadFileQueues: SetupGetSourceFileLocation for
halacpi.dll failed: 0xe0000102
>BuildCabinetManifest:SetupOpenInfFile failed with error
INVALID_HANDLE_VALUE
>AnalyzePhaseZero used 0 ticks
>CreateUninstall = 1,Directory =
C:\WINNT\$NtUninstallKB835732$
>AnalyzePhaseOne: used 7691 ticks
>AnalyzeComponents: Hotpatch analysis disabled; skipping.
>AnalyzeComponents: Hotpatching is disabled.
>AnalyzePhaseTwo used 100 ticks
>AnalyzePhaseThree used 0 ticks
>AnalyzePhaseFive used 0 ticks
>AnalyzePhaseSix used 30 ticks
>AnalyzeComponents used 7821 ticks
>Downloading 0 files
>bPatchMode = FALSE
>Inventory complete: ReturnStatus=0, 7951 ticks
>Num Ticks for invent : 7951
>Allocation size of drive C: is 512 bytes, free space =
11345235456 bytes
>LoadFileQueues: SetupGetSourceFileLocation for
halacpi.dll failed: 0xe0000102
>Drive C: free 10819MB req: 51MB w/uninstall 83MB
>Num Ticks for download : 851
>CabinetBuild complete
>Num Ticks for Cabinet build : 0
>Starting process: C:\WINNT\system32
\secedit.exe /configure /cfg C:\WINNT\inf\hfsecper.inf /db
C:\WINNT\security\templates\hfsecper.sdb /log
C:\WINNT\security\logs\hfsecper.log
> Return Code = 1
>LoadFileQueues: SetupGetSourceFileLocation for
halacpi.dll failed: 0xe0000102
>Num Ticks for Backup : 3996
>Num Ticks for creating uninst inf : 2233
>Registering Uninstall Program for -> KB835732, KB835732 ,
0x0
>LoadFileQueues: SetupGetSourceFileLocation for
halacpi.dll failed: 0xe0000102
>SfcTurnOff: System is not Win2k < SP2; Not turning off
SFC.
>SfcTurnOff: SFC was not turned off; using
MakeSfcFileException.
>AtomicReplaceFile: Calling HpReplaceSystemModule(
C:\WINNT\system32\ADVAPI32.DLL, HFX18.tmp, _000064_.tmp,
FALSE ).
>AtomicReplaceFile: HpReplaceSystemModule failed;
status=0xc0000003, location=684.
>DoNoDelayReplace: Atomic replace support not implemented;
disabling.
>Copied file: C:\WINNT\system32\ADVAPI32.DLL
>Message displayed to the user: The file C:\WINNT\system32
\LSASS.EXE is open or in use by another application.
>Close all other applications and then click Retry.
>User Input: CANCEL
>Message displayed to the user: Are you sure you want to
cancel?
>User Input: YES
>DoInstllation: SetupCommitFileQueue for FileQueue failed:
0x4c7
>VerifySize: Unable to verify size: Source = NULL:
c:\winnt\oem12.cat
>KB835732 Setup canceled.
>Select 'OK' to undo the changes that have been made, or
select 'Cancel' to quit. If you select 'Cancel', your
system will be left in a partially updated state and may
not work correctly.
>Message displayed to the user: KB835732 Setup canceled.
>Select 'OK' to undo the changes that have been made, or
select 'Cancel' to quit. If you select 'Cancel', your
system will be left in a partially updated state and may
not work correctly.
>User Input: OK
>Starting process: C:\WINNT\$NtUninstallKB835732
$\spuninst\spuninst.exe /~ -u -z
>Dirty Uninstall was successful
>[KB835732.log]
>2004/5/4 10:42:39.669
>Exe = UPDATE.EXE, Version = 5.4.1.0
>.
>
- Next message: Bojidar Alexandrov: "Re: Password Protect Folder/Win 2000"
- Previous message: anonymous_at_discussions.microsoft.com: "MS04-011: Security Update problem"
- In reply to: Aaron: "Can't apply KB835732 on various Win2k systems"
- Next in thread: Jerry Bryant [MSFT]: "Re: Can't apply KB835732 on various Win2k systems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
