+ Post New Thread
Results 1 to 8 of 8
Windows Thread, MSI deployment fails after DCPROMO in Technical; Introduced a new DC a couple of weeks ago (2003 SP2) and have transferred all FSMO roles over and set ...
  1. #1
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74

    MSI deployment fails after DCPROMO

    Introduced a new DC a couple of weeks ago (2003 SP2) and have transferred all FSMO roles over and set it as the new DNS that all workstations use the system has been running well so it was time to DCPROMO the old server, the demotion went fine with no errors, netdiag and dcdiag all check ok on the remaining DC's and i've confirmed that the FSMO roles are on the new box.

    The old DC held some shared areas and a share containing MSI applications for deployment, since the demotion msi files will not deploy from this server (i can access them manually) but it is accessible as a file server drives map ok and no other errors. If i move an msi package to another server (same permissions) and create a share it will deploy ok from there so i'm sure that the GPO's and DNS are operating ok. I've checked all of the resource records and flushed the DNS cache (the IP hasn't changed but thought i'd try) after this i can still ping the server and access it in every way but packages still fail.

    I've been having a read of the document below and am starting to think that it's a kerberos issue SEE: Appendix C: Troubleshooting, Problem: The Application Event Viewer indicates errors that the MSI package installation failed with an error ‘Package source not located’.

    I can't try this untill tomorrow but wondered has anyone had this issue before?


    http://home.fnal.gov/~jklemenc/dl/AD...or-Dummies.doc

    .
    Last edited by cookie_monster; 24th July 2008 at 06:16 PM.

  2. #2

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,881
    Thank Post
    1,316
    Thanked 1,738 Times in 1,087 Posts
    Blog Entries
    19
    Rep Power
    563
    2 or 3 things to try.

    The old box but a new folder shared under a different name and ACLs set from scratch ... does this work?

    The original folder has the share dropped and ACLs reset, reboot the box and then add the same share with the correct ACLs set.

    Finally, remove the box from the domain, remove all shares and reset all ACLs. Add it back to the domain, recreate shares, reset ACLs and go again.

    Had to use all 3 of the above at one time or another for similar problems. Probably a simpler solution but it sort of worked ...

  3. #3
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    I've already tried a new share on the same box with new ACL's and it didn't work.

    I haven't tried removing the box from the domain yet as it's now back in use so i'll have to try that later, all of the other shares are working as they were before.

    Cheers.

  4. #4

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Just checking, have you checked the permissions on the distribution share allow domain computers and the everyone group. I had issues where new computers that had just been joined had not had their group membership replicated to to the server that was shareing the files and so was denying them access at first.

    The kerberos issue should only apply if the full dns name was used when the application was deployed and should be fine if you have used the machine name.

  5. #5
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    This server was used to deploy software this morning right before the DCPROMO and it worked just fine i then performed the DCPROMO and the issue started nothing changed in between so the same ACL's that have been working are still set.

    The share has everyone set but i've never had domain computers and it's always worked ok. I'm seeing this with clients that are already on the network and new builds as well.


    @ Tony: did you see this after demoting a DC as well?

    Cheers guys.

  6. #6

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,881
    Thank Post
    1,316
    Thanked 1,738 Times in 1,087 Posts
    Blog Entries
    19
    Rep Power
    563
    After removing it from the domain I waited over a weekend for all records to be scavenged before adding it back on.

    I did consider doing a manual scavenge but couldn't be bothered, and hoped for the best.

    The first two usually sort things out though.

    One other thing to try that I never did (but was told it could be an option) is to use the IP address instead of the FQDN.

  7. Thanks to GrumbleDook from:

    cookie_monster (25th July 2008)

  8. #7
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    I think i'll head in early and remove and rejoin it to the domain, the DC will have been demoted for over 24 hours by then.

  9. #8
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,185
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Hmm well i've removed the server from the domain rebooted then rejoined and recreated the shares but the packages are still failing. Every other share is still fine



    EDIT: Hmm hang on it seems to of sprung to life.
    Last edited by cookie_monster; 25th July 2008 at 09:49 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. MSI fails to start service
    By Lithium in forum Windows
    Replies: 3
    Last Post: 23rd June 2008, 03:36 PM
  2. Mimio software MSI for deployment through GPO
    By Kyle in forum How do you do....it?
    Replies: 2
    Last Post: 16th May 2008, 03:34 PM
  3. DCPROMO and DNS
    By faza in forum Wireless Networks
    Replies: 15
    Last Post: 7th March 2008, 03:28 PM
  4. Dodgy Serif MSI Deployment
    By FN-GM in forum Windows
    Replies: 2
    Last Post: 6th February 2008, 02:30 PM
  5. server 2003 msi deployment
    By choran in forum Windows
    Replies: 2
    Last Post: 24th January 2008, 03:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •