Any concern about upgrade SHA-1 to SHA-2 on Windows Server 2008 R2 PKI ?

Hi,
I have a little knowledge about PKI. I was saw about how to setting and configure CA server to support SHA-2/SHA-256. Has anyone know about what should be concerned before migrate or what have to be done after migrate.
1. Any impact with endpoint that still used SHA-1 certificate in environment, compatibility ?.
2. Are they any related with the certificate template ?
Thank you in advance

Hi,
1. Any impact with endpoint that still used SHA-1 certificate in environment, compatibility ?
If we want to upgrade the CA to SHA2, we need to renew the root certificate on every client.
2. Are they any related with the certificate template ?
Once a CA is configured with a SHA2, all certificates it issues will use the same hash.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Upgrade windows server 2008 x86 to windows server 2012

Hello i am using windows server 2008 x86 as my primary domain controller,
I want to install windows server 2012 R2 and make it additional Domain Controller and transfer the roles to make it primary Domain Controller.
How do i upgrade the Schema as i am using windows server 2008 x86. and how do i transfer the roles.

Hello,
After successful installation of the Windows 2012R2 OS, go to the server manager and Install the Active Directory Server Role: In server manager go to manage-> add roles and features wizard -> skip welcome -> Select Role-based or Feature based installation
-> Select your local server -> Select Active Directory Domain Services (including management tools) -> go throughout the wizard and press finish. Note, that schema upgrade would take care by itself.
After the Role installation you have to promote the server as an additional DC to an existing domain: On the flag on top of the server manager's console, there should be 1 notification. Press the flag and select the "Promote this server to a domain controller"
link. Choose the option to add a domain controller to an existing domain and go through the wizard.
After successful completion (including restart) open command prompt as admin and type ntdsutil.exe -> ntdsutil prompt opens -> type Roles -> type connections -> type connect to server <your new Win12 server name> -> type quit to go to
FMSO maintenance prompt -> type transfer infrastructure master (confirm transfer) -> type transfer naming master (confirm transfer) -> type transfer PDC (confirm transfer) -> type transfer RID master (confirm transfer) -> type
transfer schema master (confirm transfer).
To verify transfer: type select operation target -> type list roles for connected server
Exit ntdsutil.exe (ctrl+C) and confirm configuration status by checking the event viewer and by running dcdiag.exe in command prompt.
Lefteris Karafilis
MCSE, MCTS, SEC+
LinkedIn: http://www.linkedin.com/in/lkarafilis
Mail: [email protected]
Blog: http://www.karafilis.net

Upgrade to 11g on Windows Server 2008

Hi
I'm planning an upgrade of a 9.2.0.8 32-bit database to 11g 64-bit. The database is around 250GB in size, and is hosted on a Windows 2003 server. The plan is to host the upgraded database on a new Windows 2008 64-bit server. I have a maximum two-hour outage window
My initial thoughts for the upgrade procedure were as follows:
1) Install 9i 32-bit and 11g 64-bit on the new 2008 server
2) A day or two before the upgrade, clone the 9i database to the new 2008 server and open the database in recovery mode
3) Rollforward the clone database by applying archive logs from the source until the start of the outage window
4) Shutdown the old database, copy the last logs to the new server, apply them to the clone database, and run the upgrade procedure.
Then I realised that 9.2.0.8 won't install on Windows Server 2008 as it's not certified.
Does anyone have any suggestions regarding the best way I could do this?

250GB is not all current data and hopefully is partitioned. Approach this from the standpoint of moving 90+% before the outage. Tell us more about the organization and tablespaces.
Amazon.com has got the upgrade in place optimized to only to 16 minutes per database. I can't tell you the details but I can tell you that much of what Oracle does in its upgrade scripts can be done prior to the outage. And some of it after the database is opened again. See if you can slice and dice the upgrade script to minimize downtime too.

Windows Server 2008 R2 RRAS NAT Security Concerns

Recently we are deploying Windows Server 2008 R2 as the NAT gateway of our private network. During the testing, we found that the RRAS was doing its job as the NAT gateway,
however it seemed that hosts in the private network were allowed to access any listening port opened on the server side (2008 R2). In the normal scenario, the server side will have the process "wininit.exe" running and listening on the TCP port 49152.
We confirmed that all hosts in the private network were be able to connect to TCP port 49152 opened on the server (connecting by using the NAT's public IP), which introduced lots of security concerns and made us nervous. Since the server is acting as a NAT,
IP packets sent by hosts in the private network will be translated and forwarded as if it is generated by the NAT server itself. Thus, the windows firewall will not block the connection at all while dealing with "local" traffic, which actually is
the traffic from the host in the private network.
What we need is a mechanism that can block the hosts in the private network to access the TCP/UDP ports opened on the NAT server side. Since the NAT server has it IP on
the public network assigned dynamically (DHCP), static IP filtering on the private NIC does not fit our needs (Or probably we may use some hidden but advanced filter settings?). Which policy or setting should be used in our case?

Hi Daniel,
I am aware of what you are suggesting. Actually I have active the windows firewall to protect the server.
Suppose I have a network configuration as follows:
Private Network: 192.168.149.0 / 255.255.255.0 (Private NIC on server side IP:192.168.149.1)
--------------Windows 2008 R2 RRAS NAT--------------------
Public Network: 10.1.0.0 / 255.255.255.0 (Public NIC on server side IP:10.1.0.100 )
The problem is that while the windows firewall is effectively protecting my server by filtering inbound traffic from the public network, the windows firewall will not filter the traffic from
192.168.149.0 /255.255.255.0 to 10.1.0.100 (NAT's public IP)
The reason is that the TCP/UDP connection from the private network (192.168.149.0 / 255.255.255.0) to any other networks will be NATed. Suppose TCP connection from
192.168.149.23:50000 -> 10.1.0.100:1023
It will be translated by NAT and becomes
192.168.149.23:50000 <-NAT-> 10.1.0.100:60100 -> 10.1.0.100:1023
From the windows firewall's point of view, the connection is essentially a 'local' TCP connection and should be allowed regardless of any inbound filtering rules. So vulnerability is introduced. After some research, we are almost sure that the windows firewall
does not filter local traffic. Also, we are not able to guarantee any firewalls on the client side to be installed, since the nature of a NAT server is to provide such network access ability to clients and should not require the client side to change its configuration.
I do think it is a common security concern in lots of enterprise networks where Windows Servers are deployed as NAT servers. Would you mind help us address this issue and give us some advice about best-practices related?
Thank you

Upgrading windows server 2003 domain controller to windows server 2008

Hello friedns :
We have a company with about 2000 users , and two windows server 2003 domain controllers , one of them acts as a primary domain controller , and the other acts as secondary domain controller , all the FSMO s are on the primary DC ,we have decided to upgrade all of our servers from windows server 2003 to windows server 2008 , the first step is to upgrade the domain controllers to windows server 2008 , our domain controllers are so sensitive and has to be active 24 hours a day , i have stress upgrading it to windows server 2008 , what is the best solution to upgrade it with no risk ?
( i have an opinion but i am not sure and i dont have any guide about it , i want to install a windows server 2008 and promote it as an additional domain controller to the windows server 2003 DC and the transfer all the FSMOs to it , and then promote the first domain controller !!! is that possible ? if yes , is there any guide about it? )
If there is a guide available for it please let me know . (Specially if there is a tip & trick)
thank you guys.
Network is my LOVE

Hi,
This TechNet online article might be helpful for you.
How to Upgrade Domain Controllers to Windows Server 2008 or Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
For your convenience, I have list some general steps for your reference.
Since the following operation have potential damage to Active Directory database, it is highly suggested that you'd better perform a full backup of Active Directory (System State) firstly. Also it is better to test the following procedure in a similar lab environment first.
General Steps:
=============
1. Verify the new server's TCP/IP configuration has been pointed to the current DNS server.
2. Make the new server become a member server of the current Windows Server 2003 domain first.
3. Upgrade the Windows Server 2003 forest schema to Windows Server 2008 schema with the "adprep /forestprep" command on old server.
Please run the "adprep.exe /forestprep" command from the Windows Server 2008 installation disk on the schema master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP\adprep.exe /forestprep
4. Upgrade the Windows 2003 domain schema with the "adprep /domainprep" command on old server.
Please run the "adprep.exe /domainprep" command from the Windows Server 2008 installation disk on the infrastructure master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP \adprep.exe /domainprep
5. Insert Windows Server 2008 Installation Disc in the new server.
6. Run "dcpromo" on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory.
Please refer to:
How to Verify an Active Directory Installation in Windows Server 2003
http://support.microsoft.com/kb/816106
7. Verify the new server's TCP/IP configuration has been pointed to current DNS server.
8. Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas.
Please note: It will some time to replicate GC between DC, please wait some time with patience.
9. Disable Global Catalog on the old DC.
10. Transfer all the FSMO roles from the old DC to the new DC.
Please refer to:
How to view and transfer FSMO roles in Windows Server 2003
http://support.microsoft.com/kb/324801
11. Verify that the old DNS Server Zone type is Active Directory-Integrated. If not, please refer to:
How To: Convert DNS Primary Server to Active Directory Integrated
http://support.microsoft.com/kb/816101
Note: Active Directory Integrated-Zone is available only if DNS server is a domain controller.
12. Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
13. Make all the clients change TCP/IP configuration to point to new server as DNS.
14. You may configure TCP/IP on all the clients, or adjust DHCP scope settings to make them use the new DNS server.
Please note: It is a good practice to make the old DC offline for several days and check whether everything works normally with the new server online. If so, you may let the old DC online and run DCPROMO to demote it.
Hope it helps.
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.

Running R/3 4.7 on a Windows Server 2008 System during an upgrade

Dear all,
I am plannung an upgrade project from R/3 4.7x200 to ERP6.0. The system is running on MaxDB. It's a single stack ABAP System.
Currently the system is running on a 32 bit Windows Server 2003. During the project we want to go to a new x86 64bit hardware with OS Windows Server 2008.
In order to use the speed of the new hardware also during the upgrade I want to move the systems to the new HW before starting the upgrade.
The problem is that runnning R/3 4.7 on Windows Server 2008 is not supported by SAP. On the other hand running the target release ERP6.0 on Windows Server 2008 is officially supported by SAP. This information comes from the PAM.
From the past I know that SAP allowed to run unsupported DB, OS and Release combinations during an upgrade project but I didn't find any information which fits to my situation.
Does anyone have experience with this constellation? Is there an official statement concerning this request?
Thanks for you support!
Regards
Bernd

> So I opened the OSS Message (0000594749) to the component you mentioned but the support answered that this would be a consultant task to support me in this area (?!?)....
I know one person who works for/in this component who did this several times to me too.
> They asked me to open a thread here in SDN.
That person did that too.
> I send the message back to SAP and stated that I disagree with the statement that the confirmation of platform support is consulting...but until now I have no feedback.
Just insist on a statement. If you still get the message back, contact the CIC (support dot emea at sap dot com) since you seem to be located in the UK according to your business card) and ask them to give you a different message processor.
> So I hoped someone already has some official statement from SAP.
Those special support statements are valid for a specific installation only so even if someone would have it for their installation it may not be valid for yours.
> We would be running Production with release 4.7 on Windows 2008 for 3 weeks or so...and I will need official support for that, just for the case something goes wrong...
I don't think this should be a problem. Technically the kernel supports it (according to the note) and also the database.
Markus

ACS any Version with Domain Controller on Windows Server 2008 R2 64bit

Hi All
Is there currently any ACS version working with Windows Server 2008 R2 domain controllers?
Our server stuff has recently upgraded the Domain Controllers to 2008r2 and turned off the 2003 servers. This didn't make our ACS 4.1.4 really happy.
I've read now serveral posts regarding issues with ACS and Server 2008r2 and hope to find a solution (besides switching to LDAP, yukk).
Thanks
pato

Hi AllIs there currently any ACS version working with Windows Server 2008 R2 domain controllers?Our
server stuff has recently upgraded the Domain Controllers to 2008r2 and
turned off the 2003 servers. This didn't make our ACS 4.1.4 really
happy.I've read now serveral posts regarding issues with ACS and
Server 2008r2 and hope to find a solution (besides switching to LDAP,
yukk).Thankspato
Hi Pato,
Just check out the below link hope that help.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/release/notes/ACS42_RN.html
As per the link it says The support for Windows Server 2008 is applicable for ACS 4.2 Patch 4 onwards.
Hope to Help !!
Remember to rate the helpful post
Ganesh.H

Windows 2008 Standard SP2 inplace upgrade to Windows Server 2008 R2 Standard SP1 failing

Hi All,
I'm encountering an issue with performing an in-place upgrade of Windows Server 2008 SP2 to Windows Server 2008 R2 SP1.
Server details:
Virtual machine running on VMware ESXi 5.
Uninstalled AV and backup software
Domain controller also running AD Certificate Services#
UAC disabled
Running setup as a domain admin
When launching setup, the process completes "Copying Windows Files". After a few seconds or being on "Gathering files, settings and programs 0%", an error appears on screen -
Windows installation encountered an unexpected error. Verify that the installation sources are accessible, and restart the installation.
Error code: 0xC0000005
Errors and information up to the fatal errors in the setupact.log setup summary:
2013-04-28 19:26:35, Info MIG Loading replacement manifest data for Microsoft-Windows-WMI-Core
2013-04-28 19:26:35, Info MIG Loading replacement manifest data for Microsoft-Windows-WSRM-Service
2013-04-28 19:26:35, Info [0x080841] MIG UPGCSIAgent: Enumerating installed manifest source using C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_676975d87cc9b6e6\wcp.dll
2013-04-28 19:26:35, Warning [0x080405] MIG EnablePrivilege: AdjustTokenPrivileges failed (Error:0x514)
2013-04-28 19:26:35, Info CSI 00000001@2013/4/28:18:26:35.866 WcpInitialize (wcp.dll version 0.0.0.5) called (stack @0x7feeff78c85 @0x7fef1646a4e @0x7fef1646676 @0x7fef1647a53 @0x7fef164c291
@0x7feedd728ba)
2013-04-28 19:26:35, FatalError [0x090001] PANTHR Exception (code 0xC0000005: ACCESS_VIOLATION) occurred at 0x000007FEF00498CF in C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_676975d87cc9b6e6\wcp.dll (+00000000001498CF).
Minidump attached (107516 bytes).
2013-04-28 19:26:36, FatalError [0x090001] PANTHR Exception (code 0xC0000005: ACCESS_VIOLATION) occurred at 0x000007FEF00498CF in C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_676975d87cc9b6e6\wcp.dll (+00000000001498CF).
Minidump attached (107788 bytes).
The diagerr.xml has the two minidumps but they are just encoded straight into the xml file. Thanks for any assistance. /Ashley

Hi,
Generally such kind of issues are caused by third party programs such as CD burning programs, device driver etc.
First please refer to this article to see if there is anything helpful:
Guide for Upgrading to Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ff972408(v=ws.10).aspx
Meanwhile from the description, it mentioned a file under C:\Windows\winsxs. Check the permission of the folder amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_676975d87cc9b6e6 and the file wcp.dll to see if the permission
and ownership are correct compare with the other folders.
Also as it provided 2 minidump files, you will need to use WinDBG to read the minidump files and see if there is any further information.
http://support.microsoft.com/kb/315263
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Windows server 2008 upgrade hangs at gathering files 0%

Hii,
While upgrading my Virtual Machine from Windows Server 2003 STD 32 Bit to Windows Server 2008 STD 32 Bit...it gets stuck at Gathering files 0%..
I have tried my changing the ISO file and also copied the setup files to one of my local drive then to having the same issue...
I have up graded almost 40 to 45 server but still didnt face such problem please suggest me any solution and i have also tried my googling the same but no luck...
And for info its an VM server in ESXI 5.5

Hi
Might help:
Open Windows Explorer on the system you are trying to upgrade AFTER a failed attempt
There will be three new folders:
$UPGRADE.~OS
$WINDOWS.~BT
$WINDOWS.~LS
Go into the Security Properties and give "Everyone" Full Rights (on each folder)
Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How to upgrade Windows Server 2008 Foundation to Windows Server 2008 Standard

I have a Dell server with Windows Server 2008 Foundation installed. I am now on a larger network which has their own servers for authentication and the Windows Server 2008 Foundation will not let join a domain with more than 15 users. I was told that I needed
to upgrade Windows server 2008 foundation to Windows server 2008 Standard and that process can be done "in place" but I can't find how do do it. I called Dell and they said they basically said they didn't know what I was talking about.
How do I do this?

According to the first one you can perform an in-place upgrade.
Introduction to Windows Server 2008 Foundation
http://technet.microsoft.com/en-us/library/dd459191(WS.10).aspx
How to Perform an In-Place Upgrade on Windows Vista, Windows 7, Windows Server 2008 & Windows Server 2008 R2
http://support.microsoft.com/kb/2255099
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]

Upgrade Oracle 11.1.0.6.0 x64 to Oracle 11.1.0.7.0 for Windows Server 2008

Hi,
I am a little confused because I have Windows Server 2008 64 bit operating system and had installed Oracle 11g 11.1.0.6.0 (x64) prior to the Oracle 11g 11.1.0.7.0 for Windows Server 2008 install package becoming available.
My database needs no backup of data as it is a fresh installation so its removal is not a problem.
To now upgrade to Oracle 11g 11.1.0.7.0 for Windows Server 2008 do I need to
a) Uninstall Oracle 11.1.0.6.0 (x64) and then install Oracle 11.1.0.7.0 on Windows Server 2008
or
b) Apply patch 6890831 (will this upgrade from 11.1.0.6.0 x64 to 11.1.0.7.0 for Windows Server 2008?)
Any help much appreciated as having looked at documentation I am still confused what I need to do.
Thanks.

Duplicate post
Upgrade Oracle 11.1.0.6.0 x64 to Oracle 11.1.0.7.0 for Windows Server 2008
Please continue with other thread.

ECC 6/MS Windows Server 2008/SQL Server 2008 Upgrade

I am working with a client who wishes to do an ECC upgrade from ECC 5 to ECC 6. They also wish to upgrade the Op System from Windows Server 2003 to Windows Server 2008; and the database from MS SQL 2005 to MS SQL 2008.
My proposal is to Upgrade ECC, then the Op System then the DB in each environment before moving forward. We would do the first upgrade in Sandbox to determine timing, issues, etc. We would create a production support path to be used during the project, then start the upgrades Dev-QA-Prod.
The client has said that this is a risky approach and that SAP recommends a 2 step process, that is, upgrade ECC 6 thru all environments and then go back and do the Op Sys and Db upgrades afterward.
In my mind my approach is less risky as we will ensure each environment is clean and functioning smoothly before moving forward; there is less intrusion to the end user; testing is only accomplished once in each environment. The actual production build would be split over 2 weekends, app upgrade first then op sys and db.
The assistance I need to understand isu2026.does SAP have a recommendation in this case? I have not seen anything that says not to do the single step process I am recommending.
Thanks for any support you can provide.

Hi,
If SAP is recomending that is because They recomends not to "mix" upgrades with any other process like Heterogeneous system copies, DB upgrades, etc. In fact this is in the upgrade guides. But I think like some others here has already writen, that you could upgrade and change OS and SQL server in two different steps but in the same process so the downtime will be longer but it will be only one.
Of course this will depend on how long your upgrade downtime will take because usually the upgrade could take 7 hours more or less, post upgrade tasks, export task (R3load), change OS and SQL server if not using different HW, import task and post copy tasks.
What is the maximun downtime your client is ready to tolerate? If you have a whole weekend beginning from friday afternoon and ending Monday morning probably you will have enough time to do all in one weekend but again, it will depend on your tests. Why don´t you talk to your client and tell them if they have new HW already for this project to do a Prod copy in one of those servers as part of the whole project and take the times you will need. Then with that in perspective you could decide what approach is better.
With some upgrades done under my belt to different clients I don´t assure anything until I do a test upgrade including all changes (os or DB) necesary to finish time schedules, then with that in mind then we can redefine the way we will use and we make that clear before the beginning of the project. I always tell them that it is better to do a test like this if they don´t have much available downtime, the project will take longer but for sure the Production downtime will be shorter.

Upgrade from Windows Server 2008 R2 SP1 to Windows Server 2012 R2

Hi, I was trying to setup a new DC for our company, originally it's DC is Windows Server 2003 SP2, we decided not tomigrate it and instead build a new one from scratch which is Windows Server 2008 R2 SP1. I was able to set it up, perform windows updates,
added roles, perform Domains and Trusts, etc
When suddenly our global standards shifted to Windows Server 2012 R2, so instead of creating another server from scratch, this is the time to upgrade from 2k8 to 2K12 R2, besides the MAPtool which I've downloaded to check for prerequisites, etc, are there
other things I need to be aware of? backups? etc.
Regards,
Jeff

Hi,
You can
insert Windows Server 2012 R2 DVD into the DVD-ROM and click onRun
Setup.exe. You can refer to the link below:
Windows Server 2008R2 in-place upgrade to Windows Server 2012/2012R2
Note:
Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure
that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Susie

Can't upgrade Windows Server 2008 R2 Enterprise to Windows Server 2012 R2 Standard

Even though the "Windows Server Installation and Upgrade" TechNet article (DN627667) claims that I can upgrade Windows Server 2008 R2 SP1 to Windows Server 2012 R2 Standard, it seems I can't. I get an error message saying "Windows 2008
R2 Enterprise cannot be upgraded to Windows Server 2012 R2 Standard (Server Core Installation). You can choose to install a new copy of Windows..." What might be causing this issue? Thanks for any input! :)

Hi,
Firstly, for retail versions, Windows Server 2008 R2 Enterprise with SP1 can be upgraded to Windows Server 2012 R2 Standard/Datacenter.
I assume you are running Windows Server 2008 R2 retail version, right?
In addition, it seems that in earlier version than Windows Server 2012,
once you install the server in Core or with GUI mode, you could not switch to the other. The only option was to rebuild the server from scratch.
Did you install Windows Server 2008 R2 in GUI? If yes, I recommend you to upgrade it to Windows Server 2012 R2 in GUI
mode to see if the issue persists. If it succeed and you want to run in server core, you can just remove the graphical shell and convert your Windows Server 2012 R2 to Server Core.
Best regards,
Susie
Thanks for replying Susie. The 2008 R2 software is the one provided by Microsoft for Action Pack subscribers, so I'm assuming it's not retail. That's another thing, I think I should be installing the GUI as my 2008 has a GUI, not just the server core. For some
reason I missed that and clicked on the server core only install!

Auto rollback with no error when upgrading windows server 2003 sp2 to windows server 2008 R2

Hi, I have a server needs to upgrade from windows server 2003 sp2 to windows server 2008 r2.
It should be supported from technet site
And yes, it went through all the list of upgrade. After rebooted, it told me "the upgrade was not successful, Your previous version of windows is being restored. Do not restart your computer during this time.".
Is there a place located the upgrade failure log? What's the common cause about the auto roll back?

Thanks for the reply.
I copied some sentences in Setuperr.log
2014-07-10 23:58:33, Error
Failed to find driver file path. Error=00000002x[gle=0x80092004]
2014-07-10 23:58:45, Error      [0x0805e6] MIG    File 'C:\WINDOWS\SysWOW64\cpqteam.cnt' is unsigned! (Failed with error code 0x2 (2): Failed with error code 0x2 (2): Failed with )[gle=0x00000490]
2014-07-10 23:58:45, Error      [0x0805e6] MIG    File 'C:\WINDOWS\SysWOW64\cpqteam.hlp' is unsigned! (Failed with error code 0x2 (2): Failed with error code 0x2 (2): Failed with )[gle=0x00000490]
2014-07-11 00:06:19, Error      [0x0808ff] MIG    COutOfProcPluginFactory::CreateInstance: m_currentHostSurrogate->LoadDllServer(C:\$WINDOWS.~BT\Sources\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll,
{8179C2CA-2B60-49D6-BC81-D796378B024E}, 0) failed, hr=[0x80070003].
2014-07-11 00:06:20, Error      [0x08085e] MIG    UpgHost: CMigPluginSurrogate::LoadDllServer: Invalid argument: BinaryPath=[C:\$WINDOWS.~BT\Sources\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll]
does not exist.[gle=0x00000003]
2014-07-11 00:13:58, Error      [0x0808ff] MIG    COutOfProcPluginFactory::CreateInstance: m_currentHostSurrogate->LoadDllServer(C:\$WINDOWS.~BT\Sources\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL\drmmgrtn.dll,
{743B7FD2-8427-4B7D-B330-A95618DE2BFC}, 0) failed, hr=[0x8007007e].
2014-07-11 00:18:56, Error      [0x0803db] MIG    IndirectKeyMapper: Cannot find the currently loaded location for hive X:\Documents and Settings\####\NTUSER.DAT; giving up (2).[gle=0x00000003]
2014-07-11 00:30:58, Error                 SYSPRP SPPNP: Error 0x25 (CONFIGRET) occurred while determining the buffer size needed to hold the list of devices that are using service
usbhub20.
2014-07-11 00:30:58, Error                 SYSPRP SPPNP: Error 0x424 occurred while opening a handle to the service usbhub20.[gle=0x00000424]
2014-07-11 00:38:08, Error      [0x080973] MIG    Ignoring apply for object: C:\WINDOWS\Panther\setupact.log[gle=0x000003f0]
2014-07-11 00:38:08, Error      [0x080973] MIG    Ignoring apply for object: C:\WINDOWS\Panther\setuperr.log[gle=0x000003f0]
Is it caused by driver error, MediaPlayer-DLMigPlugin.dll
and drmmgrtn.dll?

Any concern about upgrade SHA-1 to SHA-2 on Windows Server 2008 R2 PKI ?

Similar Messages

Maybe you are looking for