WSUS - IIS installed on a separate server

Hi,
I have an IIS installed in a DMZ.
I want to install WSUS in my secure network and use IIS server in a DMZ.
It is possible to install WSUS with IIS installed on another server?
Thank you!
Marco R.

Dude.. I see you are an 'mvp' but really?>
your response does not address the QUESTION, makes NO sense and is simply not accurate.
I can install IIS on as many servers as I want, regardless of where I've already installed it.
Installing IIS on a WSUS server (which as you pointed out happens automatically) does not in any way inhibit me from installing it on another server or servers, or every server I own. Installing IIS has NO dependency on WSUS (although
WSUS does seem to depend on IIS)
But the question remains WSUS seems to be presented as a web-based service via IIS. Great!.. so why CAN'T we have a front-end Reverse Proxy? If the prox is acutally a PROXY, then by the very definition of "PROXY" it is acting
on behalf of another. Why CAN'T it simply re-write the request and pass it on "on behalf of" the requesting computer?

Similar Messages

Installing APEX on separate server from production database

I have a security request to install APEX on a separate server from the application content. I have searched terms I know and have only found vague references, but not meaningful assistance. Rather than try to talk me into installing on the same server, can someone point me to some documentation for achieving this without the use of database links which is another security risk? The APEX Listener and APEX instance can be installed on one server but the application content needs to be installed on a separate server.
Edited by: user4552785 on Apr 16, 2012 12:18 PM

You can easily set up an Oracle HTTP Server elsewhere to connect to your APEX instance (along with images directory and other static files). However, the application schema is tightly embedded in the same instance as the APEX schema, so that will have to stay there.
What security concerns are you trying to alleviate? By default, APEX applications run as the user APEX_PUBLIC_USER and then this user masquerades as your application schema (and occasionally a little bit of APEX_0XXXXX). Even if you could manage to move your application schema to another instance, you haven't achieved a whole lot from a security standpoint.

How does WSUS work when an SCCM 2012 R2 server is newly installed? Should WSUS be installed and configured on same server?

Let me clarify.
We had a functional WSUS server delivering our updates to ours workstations. The location of the WSUS server was pushed out by Group policies.
Later, an SCCM 2012 R2 installation was installed. The original WSUS server was removed. Now WSUS type services appear to be broken.
I tried to start WSUS on the SCCM 2012 R2 server and it does not start. (I assume its not configured).
I want to get WSUS running again but am not sure how to do this safely in conjunction with our SCCM 2012 R2 installation. Do I just reinstall WSUS on the SCCM server and configure? Or is there other preferred methods?
I was not involved in SCCM's installation, so I do not know what was done.
Geoff.

Update functionality is provided via the Software Update Point
https://technet.microsoft.com/en-us/library/gg712312.aspx
... which requires WSUS to be installed - it basically takes control of WSUS.
Any existing group policies defining WSUS servers should be removed so that the SCCM client (which I assume is installed on computers already) can configure accordingly. Otherwise you will have group policy and SCCM client over writing one another to configure
the update server

Issue with reinstallation of WSUS, Post install config fails

Hi
I am trying to reinstall WSUS role. Steps followed
1. Uninstallation of WSUS role and windows internal database, restarted the machine
2. Delete the Data file from Windows\WID folder
3. Deleted the update service registry form registries
4. Deleted WSUS administration site for IIS.
5. Deleted the files from Program files\update services.( Retained WSUSutil in sub folder tools as this was not coming up with installation).
6. Restarted the machine.
7. Installed WSUS - Successful.
8. Tried to run the post install configuration from console.. It errored out.
9. Executed the command "wsusutil postinstall CONTENT_DIR=<<Folder path on WSUS server>>
10. It erred out and the content of the error log is as below.
2015-02-03 23:06:07 Starting service W3SVC
2015-02-03 23:06:07 Configuring IIS...
2015-02-03 23:06:07 Start: ConfigureWebsite
2015-02-03 23:06:07 Configuring website on port 8530
2015-02-03 23:06:08 System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
   at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.Install(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Any pointers on how to resolve this issue would be of great help. I can not uninstall IIS on this server as this is acting as only distribution point for my SCCM Setup.
Regards
Leela

Hi ,
Refer to below steps for clean uninstallation of WSUS.
Workaround 1: To uninstall WSUS roles and features using Windows PowerShell
In PowerShell, review features installed by calling: Get-WindowsFeature UpdateServices*
To remove features, call: Uninstall-WindowsFeature <featureName>
Workaround 2: To uninstall WSUS roles and features using the Server Manager Console
In Server Manager, launch Remove Roles and Features Wizard (RRW), unselect items to be uninstalled, and complete the Wizard:
In Server Roles tab unselect ‘Windows Server Update Services’ option
In Features tab unselect ‘Remote Server Administration Tools -> Role Administration Tools -> Windows Server Update Services Tools’ option
We recommend restarting the server to ensure that all WSUS components are removed. After uninstalling WSUS roles and features, you may reinstall the WSUS roles and features
And try to reinstall. It worked for me.
Regards,
Arjun

MMC crashes when running WSUS Post Install tasks

After an upgrade from 2008 R2 to 2012 R2 I had issues with WSUS not running. I have removed roles for WSUS, IIS and the WID, renamed the WID directory in C;\Windows to .old, reboot and reinstall but I still have the same issue. When trying to run the post
installation tasks it prompts for the location to store the updates but almost as soon as Run is clicked I receive an error that the microsoft Management Console has stopped working with the following details.
Problem signature:
Problem Event Name: CLR20r3
Problem Signature 01: mmc.exe
Problem Signature 02: 6.3.9600.16384
Problem Signature 03: 5215ef8f
Problem Signature 04: System
Problem Signature 05: 4.0.30319.34003
Problem Signature 06: 522ec39f
Problem Signature 07: 3fec
Problem Signature 08: 3b8
Problem Signature 09: System.ComponentModel.Win32
OS Version: 6.3.9600.2.0.0.272.7
Locale ID: 2057
Additional Information 1: b376
Additional Information 2: b376ba95bedbd518328ed0407772d20c
Additional Information 3: 2cdd
Additional Information 4: 2cdd6573ca3a99b682060228c5ceb1c2
At the same time two errors are logged in the Application log,
ID1026 .NET Runtime
Application: mmc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ComponentModel.Win32Exception
Stack:
at System.Diagnostics.Process.StartWithCreateProcess(System.Diagnostics.ProcessStartInfo)
at Microsoft.UpdateServices.UI.SnapIn.Dialogs.PostInstallDialog.RunPostInstall(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
and Event ID 1000 Application Error
Faulting application name: mmc.exe, version: 6.3.9600.16384, time stamp: 0x5215ef8f
Faulting module name: KERNELBASE.dll, version: 6.3.9600.16408, time stamp: 0x523d557d
Exception code: 0xe0434352
Fault offset: 0x000000000000ab78
Faulting process id: 0x196c
Faulting application start time: 0x01d030500ca78295
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 4b72991e-9c43-11e4-80c4-f01fafe08a8b
Faulting package full name:
Faulting package-relative application ID:
I've tried running the .NET verification tool on all versions of .NET and all verify ok. I have also tried uninstalling .Net 3.5 and reinstalling. Unfortunately I can't reinstall .NET4.5 as this is the only DC and I can't have downtime to rebuild from
scratch. Any ideas?
Many thanks,
Baz

After an upgrade from 2008 R2 to 2012 R2
You *cannot* upgrade a WSUS server from WS2008R2 to WS2012R2, so could you please clarify what you actually did do?
Otherwise, given the error messages, I'm inclined to think you really did *Upgrade* the WS2008R2 to WS2012R2 server with the WSUS role installed, and if so, then you're basically going to have to reformat and reinstall WS2012R2 from scratch.
This scenario is plainly documented in the
WS2012R2/WSUS v6 documentation:
New and changed functionality
Warning
Upgrade from any version of Windows Server that supports WSUS 3.2 to Windows Server® 2012 R2 requires that you first uninstall WSUS 3.2.
In Windows Server 2012, upgrading from any version of Windows Server with WSUS 3.2 installed is blocked during the installation process if WSUS 3.2 is detected, and you are prompted to first uninstall Windows Server Update Services prior to upgrading Windows
Server 2012.
However, because of changes in Windows Server 2012 R2, when upgrading from any version of Windows Server and WSUS 3.2 to Windows Server 2012 R2, the installation is not blocked. Failure to uninstall WSUS 3.2 prior to performing a Windows Server 2012 R2 upgrade
will cause the post installation tasks for WSUS in Windows Server 2012 R2 to fail. In this case, the only known corrective measure is to format the hard drive and reinstall Windows Server 2012 R2.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Database instance for SCCM 2012 and WSUS on a single primary site server

I am going to install SCCM 2012 and its SQL database on a single physical server. This is going to be a single primary site server. The default SQL instance will be dedicated to SCCM 2012 with no other named instances to be added on the SQL server down
the road.
During the WSUS server role installation, there is the Database Options page asking for using (1) Windows Internal Database, (2) existing db server on this computer, or (3) an external db server.
Since SCCM 2012 doesn't share db instance with others, how should I handle the WSUS db that's going to be hosted on the same SCCM/SQL physical server? Do I really need to create a separate SQL instance just for the WSUS db?
Thanks and regards.

Even though you can do it, it is the best practice to have SCCM 2012 and WSUS installed on separate instances.
http://technet.microsoft.com/en-us/library/hh692394
When the Configuration Manager and WSUS databases use the same SQL Server and share the same instance of SQL Server, you cannot easily determine the resource usage between the two applications. When you use a different SQL Server instance
for Configuration Manager and WSUS, it is easier to troubleshoot and diagnose resource usage issues that might occur for each application.

Lock up during install on WIN2K Advanced Server

I am trying to install Oracle8i Personal Edition ver. 8.1.7 on Windows 2000 advanced server. When I try to install using the Universal Installer it locks up about 20% of the way through, with no error message. Is anybody aware of any known issues. Please Help.
Thank you

Oops, that was 512Meg , not 512K...
I've downloaded the 9.0.1 zip 9iFS_90110.zip (105,219,938 bytes)
and tried to install on 2 separate servers with no success.
I follow the install instructions:
"1. Launch the Oracle Universal Installer from the CD, located
in the following
path:
<CD-ROM>\install\win32\setup.exe "
..but nothing happens. There is a brief flurry of activity of
the drive, but nothings shows up in the Windows Task List and it
absolutely doesn't start... on either server. One is 512K which
might be tight but the other is 1G ram which ought to be
sufficient.
I can find no log entries or error messages.
The only anomoly I can see is that the downloaded zip file is
102,754 KB, not the 105,219,938 bytes advertised.
Any suggestions?
John

[Forum FAQ] "Unable to connect to the server by using Windows PowerShell Remoting" error while installing RDS roles on Server 2012 R2

When you try to install RDS role on server 2012 R2 using standard deployment, this issue may occur (Figure 1).
“Unable to connect to the server by using Windows PowerShell remoting”.
Figure 1: Unable to connect to the server by using Windows PowerShell remoting
First of all, we need to verify the configurations as it suggested:
1. The server must be available by using Windows PowerShell remotely.
2. The server must be joined to a domain.
3. The server must be running at least Windows Server 2012 R2.
4. The currently logged on user must be a member of the local Administrators group on the server.
5. Remote Desktop Services connections must be enabled by using Group Policy.
In addition, we need to check if the “Windows Remote Management “service is running and related firewall exceptions have been created for WinRM listener.
To enabling PowerShell remoting, we can run this PowerShell command as administrator (Figure 2).
Enable-PSRemoting -Force
Figure 2: Enable PowerShell Remoting
However, if issue persists, we need to check whether it has enough memory to work.
By default, remote shell allots only 150 MB of memory. If we have IIS or SharePoint App pool, 150 MB of memory is not sufficient to perform the remoting task. Therefore, we need to increase
the memory via the PowerShell command below:
Set-Item WSMan:\localhost\Shell\MaxMemoryPerShellMB 1000
Then, you need to restart the server and the issue should be resolved.
You can get more information regarding Remote Troubleshooting by below link:
about_Remote_Troubleshooting
If you need further assistance, welcome to post your questions in the
RDS forum.
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

i found another possible reason, this solution worked for me:
http://oyvindnilsen.com/solution-for-powershell-remoting-error-it-cannot-determine-the-content-type-of-the-http-response-from-the-destination-computer/
I tried to set up powershell remoting on a server and kept getting this error:
Enter-PSSession : Connecting to remote server failed with the following error message : The WinRM client cann
ot process the request. It cannot determine the content type of the HTTP response from the destination comput
er. The content type is absent or invalid. For more information, see the about_Remote_Troubleshooting Help to
pic.
After a bit of troubleshooting I discovered that the problem was that the authentication packets was to big (over 16k), this will cause WinRM to reject the request. The reason for authentication packets getting too big can be because the user is member of very
many security groups or in my case because of the SidHistory attribute.
The solution was to increase the MaxFieldLength and MaxRequestBytes keys in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters
If the keys does not exists you can create them, be sure to use the DWORD type.
I sat MaxFieldLength to DEC value 40000 and MaxRequestBytes to DEC value 32768 and rebooted the server. Problem solved.

How to install yosemite on lion server without server application

I have osx 10.7.5 (that's all it says when I click about this app, but I know the computer was installed with lion with server app originally). I don't need nor want the server app, and am happy to remove it one way or another. Server is currently disabled. I want to know how to upgrade to mavericks or yosemite without any server aspect at all. Can it be done? I have googled until my head has exploded and am none the wiser. Most people seem to be unsuccessful. I did previously try to install mavericks when it came out but it came up with some random scary message and I cancelled it.
Both my mac mini 2011 disks are in use for different reasons - one tends to be more operational such as the operating system and apps, the other to save all my photos, videos and files mainly. I have a separate ext hard drive for time machine back ups.
I have no tech skills whatsoever, so baby language please. Be specific. Outline EVERY step in simple language. Or I will cry!
Thanks!
Jodi

There's nothing special you have to do. Just upgrade. The Server app won't come back.

SharePoint 2013 workflows for SPD - need a separate server to run workflow engine?

Hi there,
I have a single machine dev installation of SharePoint 2013. How to have SP 2013 Workflows done in SharePoint Designer - so we can migrate them from one environment to the other without having to make manual changes again.
Does this need any special software installed? Can we install it on our APP server?
Thanks.

Hi Frob,
If you want to be able to move workflow manager to another environment, then you need to install the workflow manager in a separate server.
When you want to use the workflow manager in another environment, you need to leave the workflow manager from the existing farm.
And then join the workflow manager to the farm where you want to use the workflow manager and also re-register the workflow service.
Here is a similar issue for you to take a look:
http://sharepoint.stackexchange.com/questions/132524/move-workflow-manager-to-new-farm-in-a-new-domain
More references:
https://msdn.microsoft.com/en-us/library/jj193527(v=azure.10).aspx
https://msdn.microsoft.com/en-us/library/jj193433(v=azure.10).aspx
Best regards,
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Can R12.1.3 and R11.5.10 be installed on the same server?

Hello there,
We are currently running Oracle eBiz R11.5.10, and would like to install the latest version R12.1.3 for testing purposes.
Can R12.1.3 be installed on the same server (for both database and application tiers) as for R11.5.10? Any pitfalls that we need to be aware of if we do this?
Thanks for the advice.
Cheers!

Nothing would stop you from installing 11i and R12 on the same server as long as ORACLE_HOMEs, APPL_TOPs, and COMMON_TOPs of each instance are installed in separate directories. The only pitfall would be the performance (unless you have sufficient resources).
Please don't consider this plan for production instances!
Thanks,
Hussein

WSUS 2012 Installing Report Viewer

Hello,
Setting up my first WSUS on a Server 2012 machine. To view a computer status and it through an error stating that I needed to install Microsoft Report Viewer 2008 Redistributable. I downloaded Report viewer then tried to install it and the install
stated I needed .Net 2.0. I know that .Net 3.5 includes 2.0 so I tried to install the feature through server manager. Server manager couldn't find the files. I downloaded 3.5 and tried to install it specifying where the files were and Server Manager
still could not find the installation. I researched other fixes on line and found there is a Report Viewer 2012. I downloaded it then tried to install it and it stated it needed Microsoft System CLR types for SQL server 2012. I
don't have nor do I need Microsoft SQL server and would like to avoid installing it if it is not necessary. So I looked into some other things people have done to fix this issue and came across a fix where I has to use Power Shell to run a command
on the ISO image to enable the 3.5 feature. This didn't work either. So what do I need to do to get this going?

Hi,
Pls make sure that the .net 3.5 has been installed thru the adding feature wizard,and then install the Report Viewer 2008 Redistributable.If possible,restart your server and try it again.
After that, make sure Report Viewer 2008 Redistributable has been installed.
Regards,
Clarence
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedbackhere.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

What is required to install in remote desktop server services - windows server 2008R2 for VMs internet access ?

Hi!
I have a lab with a hyper-v host with windows server 2012 R2 (in workgroup).
I have many vms since Windows Server 2003 including WS 2012 R2.
My colleagues an I wan't to acess lab vms from desktop (windows 7 e 8) trought the internet.
My understanding this can be accomplished with remote desktop server services. What I need minimum
to install in version Windows Server 2008 R2 sp1 (enterprise edition) 64 Bits ? Best Regards
Best regards

you need a small VM, 2-4GB RAM that's internet facing in order to host RDWeb role which runs on IIS. users connect to the web page portal and login, and can launch an RDP session to whatever VMs you have. this requires you to obtain RD CALs.
you can also go with the RDGateway route but it's somewhat more complicated, requiring certificates.
in either case, you need a server with specific port forwarding to the internet through whatever firewall/proxy you have and licensing to go along with it.
it's much easier to just setup a VPN in my opinion.

IBR on separate server - Custom Conversions

I have a custom conversion process that interupts the IBR process to do some work on a document before the rendering step. It works well while IBR is installed on the same server as the Content Server, but I am struggling to get it going when I move IBR onto a separate server.
When run on the same server, the "DocConverter.hda" contains the location of the original location of the document in the vault, but when on a separate server, everything points to a local folder. It appears that a pre-process copies in a copy of the document into a temp directory, and after the completion of the rendering, a post-process copies the pdf out to the weblayout folder. My process needs to know the location of the original document in the vault, but I cannot find any references to the pre/post processes in the documentation or even the logs.
Anyone know how this works?
I am running CS 7.5.1 and PDFConverter 7.6 on a Windows Server 2003 platform with a Sql Server 2005 back end.
Cheers,
Desmo

David is correct. Depending on exactly what you are changing (always should be in a component), you need to restart the Content Server first and then restart the refinery because of the way the conversion information gets passed to the refinery from the Content Server. If you are changing the top level file formats entry, you may need to check in a new version of the file vs just resubmitting the file to the refinery using the Repository Manger applet to make sure the right conversion gets called.
If you don't want to create this yourself, Fishbowl Solutions has a product called Native File Updater (part of the Document Automation Suite) that will likely work for you.
http://www.fishbowlsolutions.com/StellentSolutions/StellentComponents/fs_docauto_webcopy?WT.mc_id=fb_sig_to
Hopefully that helps,
Tim

Install Fails With SQL Server Version - Status: Incorrect

Hi. I am working to install BPC 7 in a single server environment. During installation the setup diangostic detects a problem with [[Microsoft and 3rd Party Software]], below is what appears:
X - SQL Server Version
____    OK - Required: 10.0.1600.22 or higher
____    OK - Currently: Not Installed
____    X   - Status: Incorrect
X - SQL Reporting Services Server Version
____    OK - Required: 10.0.1600.22 or higher
____    OK - Currently: Not Installed
____    X   - Status: Incorrect
X - OLAP Server Version
____    OK - Required: 10.0.1600.22 or higher
____    OK - Currently: Not Installed
____    X   - Status: Incorrect
Under [[Computer Services Status]] SQL Server is alright:
OK - MS SQL Server Service
____    OK - Required: Running
____    OK - Currently: Running
____    OK - Status: OK
OK - MS SQL Server Agent Service
____    OK - Required: Running
____    OK - Currently: Running
____    OK - Status: OK
OK - SQL Integrated Service
____    OK - Required: Running
____    OK - Currently: Running
____    OK - Status: OK
OK - SQL Report Service
____    OK - Required: Running
____    OK - Currently: Running
____    OK - Status: OK
OK - MS SQL Server OLAP Service
____    OK - Required: Running
____    OK - Currently: Running
____    OK - Status: OK
What I've Checked so far:
- Collation
- Account for installation is SQL SysAdmin and a Windows account
- Mixed mode authentication
I should mention, this is a single server install on a 64 bit version of Windows, with 64 bit version of SQL.
Any experience, ideas or suggestions are welcome.
Joe
Edited by: jwainz on Mar 29, 2010 5:55 PM

I think the clearest statement about this is on page 11 of the Master Guide (SAP BPC 7.0 M Master Guide at [http://service.sap.com/instguidesEPM-BPC]).
Look at the rows for OLAP Server and Microsoft SQL Server. In each of those, you wil find this statement:
"Can be 64‒bit when separate from Application/web services"
On page 10 in the Installation Guide, for look at the rows for Application server Web Server. The prerequisites are as follow:
App Server:
Windows Server 2003 or Windows Server 2003 R2 Standard or Enterprise Edition SP2 (32-bit) configured with NTFS, set to English (United States)
Web Server:
Windows Server 2003 or Windows Server 2003 R2 Standard or Enterprise Edition SP2 (32-bit) configured with NTFS
Finally, the PAM is a bit confusing. For product SAP BPC 7.0 FOR MICROSOFT, click on the tab Operating Systems and then click on the tab BPC Server. That is the software that you install for the Application Server and the Web Server server types. The Operating System Version listed is WINDOWS SERVER 2003/IA32 32BIT

WSUS - IIS installed on a separate server

Similar Messages

Maybe you are looking for