EVENT ID 257 and 491 appeared and cannot windows updates

-

i cannot made windows update windows server 2008 standard service pack 2. when windows updates processed, event log have errors below each patch update.

event id 257

the cryptographic services service failed initialize catalog database. esent error was: -1032.

event id 491catalog database (1252) catalog database: attempt determine minimum i/o block size volume "c:\" containing "c:\windows\system32\catroot2\" failed system error 5 (0x00000005): "access denied. ".  the operation fail error -1032 (0xfffffbf8).

now have around 30 updates cannot run. have found solution forum

repair catalog database using esentutl

repair catalog database using esentutl:
  1. click start, point all programs, , click accessories.
  2. right-click command prompt, , click run administrator.
  3. if user account control dialog box appears, confirm action displays want, , click continue.
  4. in command prompt window, type net stop cryptsvc stop cryptographic services, , press enter.
  5. type esentutl /p %systemroot%\system32\catroot2\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\catdb, , press enter. default, %systemroot% located @ c:\windows.
  6. click ok confirm should run tool on databases corrupt. if tool reports database corrupt, need empty catroot2 folder, contents can rebuilt (as described below).
  7. type net start cryptsvc start cryptographic services, , press enter.

empty catroot2 folder content can rebuilt

  1. from administrative command prompt, run following commands:
    • net stop cryptsvc
    • md %systemroot%\system32\catroot2.old
    • xcopy %systemroot%\system32\catroot2 %systemroot%\system32\catroot2.old /s
  2. delete contents of catroot2 folder leave catroot2 folder in place
  3. restart cryptographic services running following command: net start cryptsvc .

however, not work case. would all have comment case? thanks! 

hello,

for resolving problem, kindly provide full permission installation drive (c:\ drive).

1.  go - services > cryptographic services > properties >logon (identity)

2.  give identity account (usually 'network service') full permission on c: drive.

plese revert.

deepak kotian




Windows Server  >  WSUS



Comments

Post a Comment

Popular posts from this blog

directory stack

-
witchcraft>> $algo -eq $null true witchcraft>> cd $algo.key # directory stack: --- ---------------- 0 c:\users\voodoomsr\valhala 1 c:\users\voodoomsr\valhala\witchcraft\expectopatronum 2 c:\users\voodoomsr\valhala\witchcraft\expectopatronum\comunidad 3 c:\users\voodoomsr\valhala\witchcraft\expectopatronum\comunidad\stack 4 c:\users\voodoomsr\valhala -> 5 c:\users\voodoomsr\valhala\witchcraft witchcraft>> hi all, found extrange thing don't understand. if execute set-location inexistence object list of directories. what that? i see it, can't reproduce it.   when enter you've got posted there, set-location error, because value of argument "path" null.     [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " " mistake!. after that, check alias cd , asigned function set-locationex. fu...
Read more

PowerShell List

-
hello everyone, i'm trying list vms in scvmm i'm using get-vm -vmmserver vmm01.mydomain.tld | export-csv c:\listvm.csv but returns info each vm, return properties want, way (that know) properties using: get-vm -vmmserver vmm01.mydomain.tld | format-list -property name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status but if add get-vm -vmmserver vmm01.mydomain.tld | format-list -property name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status | export-csv c:\listvm.csv now have mess... any way working nice , clean? thank you ok, found solution get-vm -vmmserver vmm01.mydomain.tld | select name, owner, description, operatingsystem, cpucount, memory, virtualizationplatform, hostname, status | export-csv c:\listvm.csv thank you. Windows Server  >  ...
Read more

Dns access list

-
hello i have situation following participants: mac osx server & windows 2003 dns server   problem: the mac osx server registering ip address in dns. i not want that. question: is there way control can register in windows dns? some sort of access list. know possible bind dns server regards k you have few options available in dns regarding dynamic updates.  can set zone's dynamic updates settings 1 of following: none, nonsecure , secure, , secure only. if set none, dynamic updates not allowed, nonsecure , secure allow clients update , secure only allow authenticated systems (members of domain example). if want control updates @ record level, can modify acl record once has been created.  zone can controlled via acl (properties, security tab). visit: anitkb.com , knowledge base. Windows Server  >  ...
Read more