Client Servicing APs and wIPS Monitor Mode APs, and mixing AP models question???

Customer environment in one location is a mix of 3502i and 3602i LAPs. Customer is running wIPS Monitor Mode APs (not ELM). The answer to this question may be obvious, but wanted to get some feedback. In this environment would it be better to have the 3600 APs servicing clients with the 3500 APs doing wIPS, or having the 3500 servicing clients with the 3600 APs doing wIPS? Or a mix, both 3500 and 3600 APs serving clients as well as other 3500 and 3600 APs performing in the wIPS Monitor Mode role?
Thank you

It comes down to the performance required. If it was me and I had a choice, I would use the 3602's for client access and the 3502's for wIPS. Now does it really matter, not really. Your client access just can ustilize the enhancement that the 3602's offer over the 3502's. wIPS AP's don't really care and its client access that you should look at. Heck, you can still put some of the other in local mode with wIPS sub mode to be hones.

Similar Messages

App-V Client Service terminating and unable to start it back..Event ID 7023

Hopefully someone can help here, I am getting an error on my Windows 2008 R2 SP1, App-V Client for RDS 4.6.2.30071
The Application Virtualization Client service terminated with the following error:
A dynamic link library (DLL) initialization routine failed.
After this error, we can not start the service.
Vikrant

Hello,
I googled for the error + app-v and found the following articles;
http://support.microsoft.com/kb/2625501/en-gb
http://jamesscanlonitkb.wordpress.com/2011/01/22/application-virtualization-client-service-fails-to-start-on-windows-2008/
http://www.symantec.com/business/support/index?page=content&id=TECH161189
I would assume that none of this is applicable to your scenario as I am guessing that you already checked this.
Nicke Källén | The Knack| Twitter:
@Znackattack

Afaria Self Service Portal and Enterprise signed Afaria : Question

Afaria has an SSP where users can download Afaria signed using an enterprise license (which sybase started doing a couple of months back). The problem is even though we sign it using an apple enterprise license, we still get an error after downloading Afaria, asking if we "Trust" the application. This is not allowing the "apply enrollment code" function on the SSP to work, till the user manually overrides the "trust" warning. Anyone out there who faced a similar problem, and somehow bypassed the "trust" thing ?

Ok Sure,
As of now I have process with ignoring this warning.
Can you please help me if you have any good document related to post installation configuration of Afaria from Technical point of view. (Please note that I am a Basis Consultant and need to hand over the system to function team).
Best Regards,
Vishal Jain

Bridge mode - MAP /RAP - Client service

Hi all.
I'm very confused about the MAP and RAP mode as they are APs configured in Bridge mode.
In the CCNA Wireless, we are clearly taught that Bridge mode APs do NOT deliver client service...
Apparently Mesh and Root APs are APs in bridge mode but do deliver client service!!!
I've surelly missed something. Could someone help please?
Thanks
Alex

Hi Alex,
Bridge Mode AP
Many Wi-Fi bridging mode products exist with varying levels of functionality. Some wireless bridges support only a single point-to-point connection to another AP. Others support point-to-multipoint connections to several other APs.
Each AP in bridging mode connects to a wired LAN. Some AP models simultaneously support wireless clients while operating in bridging mode, but others work as "bridge-only" and disallow any clients from connecting.
Root AP - Places the bridge in the access point mode. In this mode, the bridge emulates a Cisco Aironet Access Point(example: 1100 Series ) and accepts associations from client devices.
Hope it helps
Regards

Open mode (monitor mode) with ise and catalyst switches

Hi There,
Anyone know if the following observation is correct ?
From the TrustSec 2.1 "Monitor Mode" guide i get the idea that Open mode, is not really as zero impact in a data gathering part of an ISE deployment is a was expecting. The guide describes using Profiling to authorize Cisco IP phones for the Voice VLAN.
- Does this mean that regular methods like using CDP won't work to for this once i enable dot1x on an access switch port interface ?
- And that i will need to figure out which ports should be set for multi-domain (phone+pc), and which should be set for multi-auth(possibly multiple devices on one port) during the open mode period ?
Regards
Jan

Hello Jan-
Below is my input to your questions:
From the TrustSec 2.1 "Monitor Mode" guide i get the idea that Open mode, is not really as zero impact in a data gathering part of an ISE deployment is a was expecting.
Yes, a device is still allowed on the network even if it fails all authentication methods (MAB, 802.1x, etc). Basically you use monitor mode to perform discovery and see what would have been blocked had ISE been deployed in production.
The guide describes using Profiling to authorize Cisco IP phones for the Voice VLAN.
Yes, you can use profiling to do this. Keep in mind that you will need advanced licensing for this. Otherwise, you can either use MAB with static MACs imported/entered in the local database or EAP-TLS with phone certificates
- Does this mean that regular methods like using CDP won't work to for this once i enable dot1x on an access switch port interface ?
CDP will still work, in fact some of the profiling happens thanks to CDP, however, the device will simply not going to be allowed to get on the network and the Voice VLAN unless it passes authentication/authorization.
- And that i will need to figure out which ports should be set for multi-domain (phone+pc), and which should be set for multi-auth(possibly multiple devices on one port) during the open mode period ?
This really depends on how secure you want your network to be
Hope this helps!
Thank you for rating!

SOAP service shutsdown and restarts itself -- SOAP - Performance Monitoring APIs

Our "SOAP - Performance Monitoring APIs" service shutdown and restarted itself twice within 5 days. Would someone know what this service is dependent on, why might it be doing this and what are the best steps to stop this from happening?

Sounds like you're hitting something similar to Bug ID CSCul26251
There's no fix and the only workaround is to disable the service.
GTG

NCS failing to gather current clients from APs

We're running NCS 1.1.0.58. Since updating to this release from the 1.0 release, the 'Autonomous AP Client Status' and 'Lightweight Client Status' background tasks have been failing with message 'java.lang.NullPointerException'. I believe as a result of this that the 'Current Clients' tab on an AP monitoring screen just reports 'No data available'.
Does anyone have any suggestions of how to fix this?
Thanks,
Sean

Hi;
We had the same problem, running NCS 1.1.0.58. I saw that 1.1.1.24 was out, so I downloaded the NCS-upgrade-bundle-1.1.1.24.tar.gz and applied it. Seems to have fixed the problem, no need for the horror of opening a TAC case.
Instructions here:
http://www.cisco.com/en/US/docs/wireless/ncs/1.1/release/notes/NCS_RN1.1.1.html#wp208350
Pertinint section below.
Steve
Shut down NCS before performing the upgrade. To stop NCS, enter the ncs stop command.
Use the following command to upgrade from NCS 1.0 to NCS 1.1.1.24:
# application upgrade NCS-upgrade-bundle-1.1.1.24.tar.gz ncs-ftp-repo
In the preceding command, NCS-upgrade-bundle-1.1.1.24.tar.gz is the upgrade bundle file, which is available for download.
The repository used in the example, ncs-ftp-repo, can be any valid repository.
Examples of repository configurations follow.
FTP Repository:
# configure
(config)# repository ncs-ftp-repo
(config-Repository)# url ftp://ip-address
(config-Repository)# user ftp-user password plain ftp-user
(config-Repository)# exit
(config)# exit
SFTP Repository:
# configure
(config)# repository ncs-sftp-repo
(config-Repository)# url sftp://ip-address
(config-Repository)# user ftp-user password plain ftp-user
(config-Repository)# exit
(config)# exit
TFTP Repository:
# configure
(config)# repository ncs-tftp-repo
(config-Repository)# url tftp://ip-address
(config-Repository)# exit
(config)# exit

LAP 1131 Monitor mode configuration

Hi,
Can anyone assist me in setting up monitor-mode on an 1131?
I've got WCS, WiSMs and 27 flrs (27 vlans) of LAPs. I want to test 'Monitor Mode' on a dedicated LAP. I've got as far as configuring a trunk on the connecting switch, for the LAP, but I'm unsure where to go next.
How do I know/verify it's working or building an ARP cache?

Hi David,
Maybe this will help get you started;
The Monitor function is set for all 802.11 Cisco Radios on a per-access point basis using any of the Cisco Wireless LAN Controller user interfaces.
You can configure an individual AP mode simply, once the Lightweight AP is connected to the controller. In order to change the AP mode, connect to the controller web-interface and navigate to Wireless. Click on Details next to the desired AP to in order to display a configuration screen.
A Lightweight AP mode of operation defines the role of the AP. The modes related to the information presented in this document are:
Local This is the normal operation of an AP. This mode allows data clients to be serviced while configured channels are scanned for noise and rogues. In this mode of operation, the AP goes off-channel for 50 ms and listens for rogues. It cycles through each channel, one at a time, for the period specified under the Auto RF configuration.
Monitor This is radio receive only mode, and allows the AP to scan all configured channels every 12 seconds. Only de-authentication packets are sent in the air with an AP configured this way. A monitor mode AP can detect rogues, but it cannot connect to a suspicious rogue as a client in order to send the RLDP packets.
Note: DCA refers to non-overlapping channels that are configurable with the default modes.
Rogue Detector In this mode, the AP radio is turned off, and the AP listens to wired traffic only. The controller passes the APs configured as rogue detectors as well as lists of suspected rogue clients and AP MAC addresses. The rogue detector listens for ARP packets only, and can be connected to all broadcast domains through a trunk link if desired.
From this good doc;
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a0080722d8c.shtml
Hope this helps!
Rob

Windows 7 Authentication Failures in Monitor Mode on ISE 1.2

Hi Support,
I have a configuration whereby most of my Windows endpoints are not running DOT1x yet. We eventually intend to authenticate them via AD and looking to push out the Windows DOT1x client to all live users soon. Currently users are getting network access due to the fact that all ports have "authentication open" set and the default Authz policy is set to Permit Access (we arent using MAC address endpoint tables to allow MAB etc)
I now have my first test group of users using DOT1x and they match a specific AuthZ policy I have added that checks for their specific AD group on the AD. All is fine.
However I have just added DOT1x to a second test group of users who currently do NOT have any specific matching AuthZ policy (they are on the same AD server but in a diffferent group which I have not defined a policy for yet), and I was expecting they would still join using the default Authz policy. However they do not and on closer observation using "ipconfig" their adapter displays "Media Unauthenticated". I researched this and found that the Windows endpoint can set this condition if you disable the "Fallback to Unauthorized Network" check-box in their dot1x settings. Now I could easily check this box but don't understand why I need to as I surely should be hitting the Default AuthZ policy. However when I debug the switch port I am getting the following:
%DOT1X-5-FAIL: Authentication failed for client (xxxxxxxxxxx) on Interface Gi2/0/26 AuditSessionID 0A540201000064AD8FC27A96
This appears to suggest my AuthC is failing (rather than AuthZ or is the word Authentication a bit vague here?), so here is my question:
1. My AuthC DOT1X policy looks at the Identity Source Sequence that includes the AD server that contains specific groups for BOTH my first test group and my second test group. Users from my first and second test group seem to be hitting this AuthC rule according to ISE.
2. My AuthZ policy contain a specific policy for my first test group ONLY, but the final Default Rule is set to Permit Access. From the ISE persepctive ALL users in my second test group are actually successfully getting this policy. The Authentication Troubleshooting page shows them getting the DOT1X AuthC policy and the Default Rule AuthZ policy. However the message in the switch debug suggests a failure and with my Windows DOT1x client settings as above, the adapter is therefore effecitvely disabled.
3. All this is occuring in Monitor mode, which I thought was harmless provided I dont give additional attributes (VLAN, ACL) to the profiles!
Very confused!
All help welcome
Mark

Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file to skydrive or a file sharing service and put a link to it in your next post
Wanikiya and Dyami--Team Zigzag

Solaris Name Service Cache and Directory Proxy Problem

We have some Solaris 10 clients ldapcliented to a Directory Proxy Server. After 15 minutes, the Solaris name service cache will fail to communicate to the proxy instance and the proxy instance's readconnectionsrefused attribute will start incrementing.
At first it seemed we would need to increase the worker-threads and num-bind-limit, but those do not fix the problem.
At the same time the name-service-cache starts failing, I am still able to query and search the proxy. I have set up a Jmeter test which continues to run and they never fail.
It seems very consistent that the problem with the name-service-cache occurs every 15 minutes and I am able to reproduce this at the client's site and in my lab. Restarting either the proxy or the name-service-cache clears the problem.
Has anyone else seen this problem?
Edited by: 957466 on Sep 6, 2012 9:11 AM

The idle-timeout on DSEE was set to none, which I believe is the default. I tried setting it to 1200 and 2400 seconds without success.
h3. get-ldap-data-source-pool-prop
<pre>
client-affinity-bind-dn-filters : any
client-affinity-criteria : connection
client-affinity-ip-address-filters : any
client-affinity-policy : write-affinity-after-write
client-affinity-timeout : 20s
description : -
enable-client-affinity : false
load-balancing-algorithm : proportional
minimum-total-weight : 100
proportion : 100
sample-size : 100
</pre>
h3. get-ldap-data-source-prop
<pre>
bind-dn : none
bind-pwd : none
client-cred-mode : use-client-identity
connect-timeout : 10s
description : -
down-monitoring-interval : inherited
is-enabled : true
is-read-only : false
ldap-address : localhost
ldap-port : ldap
ldaps-port : ldaps
monitoring-bind-dn : none
monitoring-bind-pwd : none
monitoring-bind-timeout : 5s
monitoring-entry-dn : ""
monitoring-entry-timeout : 5s
monitoring-inactivity-timeout : 2m
monitoring-interval : 30s
monitoring-mode : proactive
monitoring-retry-count : 3
monitoring-search-filter : (objectClass=*)
monitoring-search-scope : base
num-bind-incr : 10
num-bind-init : 2
num-bind-limit : 1024
num-read-incr : 10
num-read-init : 2
num-read-limit : 1024
num-write-incr : 10
num-write-init : 2
num-write-limit : 1024
proxied-auth-use-v1 : false
ssl-policy : never
use-read-connections-for-writes : false
use-tcp-keep-alive : true
use-tcp-no-delay : true
</pre>

AP monitor mode

Hello,
I have one question, I have wireless network with 45 APs, and I want to add some APs to use them in sniffer or monitor mode,
would you please recommend, how many APs I need to sniff al the wireless network by design?
Thanks in advance
BR
Tural L

I just spent the last 30 minutes trying to find the document that I read that suggest 1/6 deployment for monitor aps. But unfortunately I am having little luck finding it.
I did however, blog about this subject and conducted testing myself.
http://www.my80211.com/home/2010/1/9/why-you-should-consider-monitor-access-points-as-part-of-you.html
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

WSUS service failure and uninstall error 0x80070643

Hello
I recently had a drive fail in a RAID 1 array on a Windows Server 2008 Standard SP2 domain controller. The drive was replaced and the array successfully rebuilt the drive. Our domain comprises a Win2k8 DC (which WSUS is installed on), a W2k3 DC, a W2k8 Storage
Server and various W2k, Win XP, Vista and W7 clients.
WSUS3 SP2 is installed on this computer and had been working fine. After the drive was rebuilt WSUS stopped working. WSUS is organised as follows:
The drive is divided into 3 partitions. C: contains the program files, D: contains the WSUS database and update files. E: is a system recovery partition.
After the drive was rebuilt I had a problem connecting to the WSUS console. I am logged on using the domain administrator account. I restarted the server last night in the hope that it would solve this issue. After restarting, the problem persists. When
I start Windows Server Update Services from Administrative Tools the centre pane shows a large red X and 'Error: Connection Error'. The option to 'Reset Server Node' results in the same error. The error, available from 'Copy Error to Clipboard' is:
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.
The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,
Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.
System.IO.IOException -- The handshake failed due to an unexpected packet format.
Source
System
Stack Trace:
   at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
   at System.Net.TlsStream.CallProcessAuthentication(Object state)
   at System.Threading.ExecutionContext.runTryCode(Object userData)
   at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
   at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **
System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.
Source
Microsoft.UpdateServices.Administration
Stack Trace:
   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
   at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
   at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServerAndPopulateNode(Boolean connectingServerToConsole)
   at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.OnExpandFromLoad(SyncStatus status)
The event logs show that the Update Services service started 7mins after the server was restarted. This is immediately followed by an event stating the Windows Update service had started. If fails soon after and is restared automatically twice to try to
recover from the failure. 12 hours after the restart the Update Services service is still not running. It is set to Automatic (Delayed Start). The service is set to logon as 'Network Service'. The service can be manually started, but 'Resert Server Node' again
results in the same error. After 4mins the service will stop. Event 7034 is logged:
Log Name:      System
Source:        Service Control Manager
Date:          31/08/2011 09:05:50
Event ID:      7034
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Phobos.htlincs.local
Description:
The Update Services service terminated unexpectedly. It has done this 4 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-08-31T08:05:50.000Z" />
    <EventRecordID>230471</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Phobos.htlincs.local</Computer>
    <Security />
</System>
<EventData>
    <Data Name="param1">Update Services</Data>
    <Data Name="param2">4</Data>
</EventData>
</Event>
IIS and SQL are running fine as far as I am aware. I also have Sophos Enterprise Console installed which uses SQL to store it's data and that is working fine.
After a bit of searching around the 'net I thought the easiest solution would be to uninstall WSUS, leave the database and update files in place and then re-install. I ran the uninstallation procedure from the Server Manager, but because the service is not
running, and even after starting the service, uninstallation fails:
Windows Server Update Services: Removal failed
   Error: Attempt to un-install Windows Server Update Services failed with error code 0x80070643. Fatal error during installation
I saw a reference to the online article located here:
http://blogs.technet.com/b/sus/archive/2008/11/05/how-to-manually-remove-all-of-wsus.aspx but the article states it is out of date and I did not want to make a bad situation worse by following the instructions.
Can anyone help me with this, please. Ideally, I would like to be able to keep the updates as downloading them again will consume a substantial amount of our monthly allowance. However, if the best thing is to remove the entire installation, then I will
ahppily go with that, too.
Thanks.

I'm experiencing this issue, but haven't been able to resolve it with the steps in Lawrence's post (and, another thanks from me for another detailed post from Lawrence!)
It's a 2008 box which had a relatively new WSUS install that just stopped working - not sure why. Unable to figure out why it had stopped, I tried to Remove the WSUS role, but that failed with the error above.
During the manual uninstall steps above...
(1) Using Windows Installer Cleanup Utility only showed the Windows Internal Database, not WSUS. I removed
that.
(2) Removed %ProgramFiles%\Update
Services - other resources not present
Reinstall has now failed with this error:
Windows Server Update Services 3.0 SP2 could not install Windows Internal Database. For more information, see the Setup log "C:\Users\NAME~1.ADM\AppData\Local\Temp\WSUSSetup.log".
2012-10-23 20:57:53 Success MWUSSetup Detected that setup was launched through Server Manager
2012-10-23 20:57:54 Success MWUSSetup Validating pre-requisites...
2012-10-23 20:57:54 Error MWUSSetup Failed to determine if an higher version of WSUS is installed. Assuming it is not... (Error 0x80070002: The system cannot find the file specified.)
2012-10-23 20:57:54 Error MWUSSetup WSUS is outdated. But this will not block setup (Error 0x00000000: The operation completed successfully.)
2012-10-23 20:57:57 Success MWUSSetup Incompatible version of ReportViewer installed. Required ReportViewer version: 9.
2012-10-23 20:57:57 Success MWUSSetup Incompatible version of ReportViewer installed. Required ReportViewer version: 9.
2012-10-23 20:58:25 Success MWUSSetup Initializing installation details
2012-10-23 20:58:25 Success MWUSSetup Skipping Asp.Net install since not running on win2k3...
2012-10-23 20:58:25 Success MWUSSetup Installing wYukon using ocsetup
2012-10-23 20:58:25 Success MWUSSetup Installing Windows Internal database using ocsetup with command line as "ocsetup "WSSEE" /quiet /norestart"
2012-10-23 20:58:49 Error MWUSSetup The process ocsetup "WSSEE" /quiet /norestart returned error: 0x643 (Error 0x80070643: Fatal error during installation.)
2012-10-23 20:58:49 Error MWUSSetup ExecCmd failed (Error 0x80070643: Fatal error during installation.)
2012-10-23 20:58:49 Error MWUSSetup Install Windows Internal database: Failed to execute "ocsetup "WSSEE" /quiet /norestart" (Error 0x80070643: Fatal error during installation.)
2012-10-23 20:58:49 Error MWUSSetup CInstallDriver::PerformSetup: Installation of wYukon failed (Error 0x80070643: Fatal error during installation.)
2012-10-23 20:58:49 Error MWUSSetup CSetupDriver::LaunchSetup: Setup failed (Error 0x80070643: Fatal error during installation.)
Would anyone on the thread have suggestions for what I might be able to do, to wipe the slate clean with the Internal
Database on this box?
The WID is not used for anything else, but there is other production software installed, (using SQL - not relevant, just
mentioning) and reinstalling the OS is not an option.

Failed to Connect "Group Policy Client Service" Windows 7 x64

This error pops up everytime boot / start-up. I've tried everything, for the last month. including
http://support.microsoft.com/kb/2421599 In the "Resolution Section" did step by step, But did not work for me...
Also
http://blogs.technet.com/b/mempson/archive/2010/01/10/userenvlog-for-windows-vista-2008-win7.aspx Didn't work either. :(
Is this a Winlogin problem? Or does have to do with other computers in my homegroup?
But in Safe Mode & Safe Mode with Networking, this issue does Not appear / pop-up at start up. "Group Policy Client Service"
""HP Premium Remote Services"" tells me that in order to fix, I have to Re-Install Windows. And have been in contact today with Hp Premium Remote Services for over 7 hours with NO Resolution!!
Hate to make a Recovery Partition on a New PC, in order to Re-Install Windows...
This is a Brand New HP Pavilion HPE H8-1234 AMD Processor that I installed on 7/23/2012. Running windows 7 64-bit home premium, OS: Internet Explorer 9.
Have a copy of Windows 7 Ultimate using Anytime Upgrade, My question is would that rectify the "Group Policy Client Service" error?
Always run MalwareBytes Anti-Malware and Hitman Pro, in addition with Norton, on a regular basis. So that I know my system is clean...
Any MS Engineers or Tech's have any ideas, suggestions OR help, How to Fix this issue,With-Out having to use: System Recovery/Restore. To factory condition...
Would be Very Greatly Appreciated! HELP Me Pleeeze !!!!
***Because this issue Baogles my Mind! After all I'am only dealing with half a Brain, LOL- Due to Brain Tumor Surgery...

I FOUND SOLUTION TO THIS PROBLEM!
I had this issue on my laptop since November, and it really bugged me. I sifted through the event log and found the pattern of events that preceded the issue, and, probably, caused it.
In short, the pattern is as follows: Windows updates run automatically as scheduled, and when reboot is initiated after the updates are finished, the computer crashes (probably during reboot sequence). When it boots up, it reports that the last shutdown
was unexpected, and the issue begins to occur.
I spent 2 days trying to dig out a solution from the Internet, to no avail, until I came across
this page. It doesn't say anything about this particular problem, but it gives more information about SVCHOST process that starts many services, including Group Policy Client. It looks like during reboot a vital registry settings were lost during
crash and Group Policy Client "doesn't know" how to start. Let me explain:
There are two places to look in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain
gpsvc key (a folder), which is responsible for service parameters and configuration. I found that the key was intact, so, you do not touch anything here - just check that the key exists.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1. Below are descriptions what must be present
there.
There must be Multi-String value called GPSvcGroup. My laptop was missing it. So, you should create multi-string value named
GPSvcGroup and assign it value GPSvc.
Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
Then open newly-created GPSvcGroup folder and create 2 DWORD values:
First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
Second is called CoInitializeSecurityParam and it must have value of 1.
Once you complete all steps above, reboot the computer and the problem will be fixed.
I am so relieved I was able to fix it, and hope this will help others with the similar issue.
Here is the link to the video walkthrough if you have any troubles understanding what has to be done: http://youtu.be/4m5KEmckWK4
I did try the above, but it did not fix my issue with the ""group policy client service failed the logon".
This problem was happening on 5 different RDS Nodes. All I did was rename the Roaming Profile, then delete the locally stored profile on each RDS Server: right click COMPUTER > PROPERTIES > ADVANCED SYSTEM SETTINGS > USER PROFILES > delete the
offending User(s).
Hope that helps.
Life is dangerous, no one has ever survived. So enjoy!

Group Policy Client service failed! Help!

A few days ago I was booted out of my account, while watching a DVD. My system restarted itself, but not before flashing some sort of blue screen. Unfortunately I was unable to read the content of it. After restarting, I was presented with a light blue login screen, instead of my normal screen. However, my name and profile picture remained the same. I was able to login with my password, only to be informed that I had been set up with a temporary account. I was unable to access my files, and had no idea how to access my regular account. After logging out, and restarting in hopes that it would go back to normal... my system went into recovery mode, and afterwards presented me with the same temporary account login screen. Only this time, I was unable to login. Instead I received "The Group Policy Client service failed the logon. Access denied" message. I'm the only user (administrative), and my computer has no internet connection. So, I'm not sure if this is a simple error; a result from my low capacity battery needing to be replaced, or a virus. I've checked previous forums, but I've had no luck. I can't login to my computer at all, and it's very frustrating. I've also backed up my files, just in case my system has to be restored to its factory settings (I hope not). Could any one tell me how to resolve this? Please!
- Frustrated (Pavilion dv6-1350us) User

Hello @chigi93 ,
Welcome to the HP Forums!
I understand you were booted from your account and can now only log in with a temporary account.
Windows does this when the main account is unavailable. The account most likely needs to be repaired.
Please follow this document to fix a corrupted profile: Fix a corrupted user profile.
If that doesn't work please go through this document: You receive a "The User Profile Service failed the logon” error message.
Let me know if that works.
Please click the "Kudos, Thumbs Up" at the bottom of this post if you want to say "Thanks" for helping!
Please click "Accept as Solution" if you feel my post solved your issue, it will help others find the solution.
The Great Deku Tree
I work on behalf of HP.

How to find reporting services are installed in which mode

Hi All,
I'm currently working on migrating SQL server from one datacenter to other. The source environment has reporting services installed and as per the info given by the client they are using reportingservices with sharepoint integrated mode.
When I checked the SQL server reporting server configuration manager, i donot see any databases within the databases option.
From SSMS I can see two databases with names reportserver$DEN2010 and reportserver$DEN2010tempdb, the sql server instance name is DEN2010. What i want to know is these databases are created by using which of the below options ?
1. Install the sharepoint mode integrated mode default configuration.
Will the databases with instance names created by default when you select the above option ?
2. Install but donot configure the report server option.
Thanks in Advance,
Regards, Kranthi
Thanks in advance.

Hi Kranthi_06,
According to your description, you have an environment with reporting services installed, the info given by the client they are using reportingservices with sharepoint integrated mode. In SSMS, you can see two databases with names reportserver$DEN2010 and
reportserver$DEN2010tempdb.
In Native Mode, in the SQL Server Installation Wizard, if we select Install and configure option, the ReportServer database will be created automatically through Setup. If we choose the Install only option, we must use the Reporting Services Configuration
Manager to create the database manually. By default, the database format is ReportServer and ReportServerTempDB. In SharePoint Mode, we need to create at least one Reporting Services service application by using SharePoint Central Administration or Reporting
Services PowerShell cmdlets, then three databases are created for each Reporting Services service application and the database names by default include a guid that represents the service application. The following are example names of the three SharePoint
mode databases:
ReportingService_90a9f37075544f22953c4a62e4a9f370
ReportingService_90a9f37075544f22953c4a62e4a9f370TempDB
ReportingService_90a9f37075544f22953c4a62e4a9f370_Alerting
For SSRS 2008 R2 or early versions, we can identify report server mode using the Reporting Services Configuration Manager. For SSRS 2012 or later versions, Reporting Services Configuration Manager no longer supports Reporting Services SharePoint mode. Configuration
of SharePoint mode is completed using SharePoint Central Administration.
Reference:
Verifying SharePoint integrated mode installation
Create a Report Server Database
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu

Client Servicing APs and wIPS Monitor Mode APs, and mixing AP models question???

Similar Messages

Maybe you are looking for