Hi Folks,

Runnning Forefront TMG build 7.0.9193.500

When attempting to update the NIS definition files, the files download but fail to install and the following message is logged in the TMG alert section:

"Definition Updating Failed

Description: An error occurred during an attempt to check for, download, or install definition updates on the server ServerName.
The failure is due to error: 0x80240022"

When looking in the windowsupdate.log file, it appears that there is a permissions problem encountered during the update process (WARNING: ExtractUpdateFiles failed with 0x80070005)

Here are the full contents of the C:\Windows\windowsupdate.log file logged during the update process:

Since it seemed to help some folks that were having trouble downloading the NIS updates, I have also tried downloading the updates with (winhttp) Proxy authentication on and off.

I have also tried recreating the C:\Windows\SoftwareDistribution folder (Stop wuauserv; Rename folder; Start wuauserv; Folder recreated)

Still no luck. Any help or direction you can provide is much appreciated.

Cheers,

John

Hi,

Thank you for the post.

I did some research regarding error 0x80070005, you may perform the following steps and see if it helps:

Step 1: Verify DCOM security

1. Click Start, click Run, type Dcomcnfg, and then click OK.

2. Expand Component Services, and then expand Computers.

3. Right-click My Computer, and then click Properties.

4. Click the COM Security tab.

5. Under Access Permissions, click Edit Default.

6. Verify that the following accounts are listed:

7. If any one of these accounts is missing in the Access Permission box, follow these steps:

a.  Click Add, click Advanced, and then click Locations.

b.  In the Locations box, click the Local_Computer_Name, and then click OK.

c.  Click Find Now.

d.  Press CTRL, click the required account names, and then click OK two times.

e.  In the Group or User names box, click an account that you added, click Local Access in the Permissions for Account_Name box, and then click to select the check box in the Allow column.

f.  Repeat step 7e for all the accounts that you just added, and then click OK.

 Step 2: Verify DCOM default properties

1. Click the Default Properties tab.

2. Verify that the following configuration:

The Enable Distributed COM on this computer check box is selected.

In the Default Authentication level box, Connect is selected.

In the Default Impersonation level box, Identify is selected.

3. Make any required changes, and then click OK.

4. Restart the computer.

http://social.answers.microsoft.com/Forums/en-US/vistawu/thread/29d7f9d1-56cd-42f3-bd44-7de8448ef70e

http://social.technet.microsoft.com/Forums/en-US/itprovistasetup/thread/95edbee4-a75c-48ad-91d1-5316a96f9567

Regards,

Hi Nick,

Thanks for your reply. I have a question about Step 1: item #6 as it says "Verify that the following accounts are listed:" but it doesn't tell me which accounts are needed.

The current settings are:

SELF - Allow Local Access; Allow Remote Access

SYSTEM - Allow Local Access; Remote Access Allow and Deny unchecked

Administrators (Local_Computer_Name\Administrators) - Allow Local Access; Allow Remote Access

As far as I know, these settings have not been modified, so they should be default. Are these the correct settings?

Thanks,

John

Hi,

Thank you for the update.

Are these the correct settings? yes, permission setting is correct. Is there any other alert in the dashboard? Please configure to  use " Use Microsoft Update Service, directly" in the update center settings and see if it works.

Regards,

Hi Nick,

Thanks for your message. Apologies for the delay in my reply, I was away from the office last week.

The server was set to "Use Microsoft Update Service, directly.." and a scheduled reboot was performed last night, but the NIS update still fails to install.

There are 2 related alerts in the dashboard:

Definition Updating Failed

Description: An error occurred during an attempt to check for, download, or install definition updates on the server ServerName.
The failure is due to error: 0x80240022

and

Update Center - Updates Not Installed

(The NIS Definition Updates option is set to "Check for and install definitions (recommended)")

The following errors are logged in the System Event Log on the server:

Event 20, WindowsUpdateClient

Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Forefront Threat Management Gateway (Network Inspection System 4.32).

and

Event20, WindowsUpdateClient

Installation Failure: Windows failed to install the following update with error 0x80070005: Definition Update for Microsoft Forefront Threat Management Gateway (Network Inspection System 11.48.0.0).

So it appears that the same problem remains. Any other thoughts?

Thanks,

John

I called Tech support on this one,  Took several days and we did several thigns finally got he definitions to install,  SO I thought I was good, now I am back in the same boat and am going to have to re-open the ticket.  I think there actually may be an issue with the definitions themselves not allowing future updates....or so it seems to be acting that way

Good luck

Hi Lester,

Thanks for the information, sorry to hear you're having the same problems. Unfortunately, we still have not been able to get the definitions to update. We wanted to take advantage of the feature but have other devices performing IPS, so this issue has been pushed to the back burner for now. Hopefully I can get back to this some time soon.

Good luck, I hope you can get it sorted out and would love to hear the solution if you do.

Cheers,

John

Hi Lester,

Thanks for the information, sorry to hear you're having the same problems. Unfortunately, we still have not been able to get the definitions to update. We wanted to take advantage of the feature but have other devices performing IPS, so this issue has been pushed to the back burner for now. Hopefully I can get back to this some time soon.

Good luck, I hope you can get it sorted out and would love to hear the solution if you do.

Cheers,

John

Hi, John.

We have the same problem.

What solution you have found?