12 Replies Latest reply on Dec 1, 2011 3:42 AM by Lee Harris

    Deploying IIS6 on Windows Server 2003

      Hi,

       

      I'm having some fun trying to get IIS 6.0 installed onto W2K3 Server Enterprise R2 via BladeLogic 8.1. I've got a BlPackage that contains the following:

       

      A unattended setup file for IIS (C:\Temp\iisparts.txt) that just contains the standard stuff Microsoft show as an example when you Google "silent install of IIS 6".

      A couple of registry key updates to make the machine look for the i386 folder under C:\Setup instead of under D:\

       

      An external command that actually does the installation which is...

       

      sysocmgr /i:%windir%\inf\sysoc.inf /u:c:\Temp\iisparts.txt

       

      If I run the above command on the target server manually from the command line either as the local admin or a domain admin it works fine and I see the IIS thing get added into Administrative Tools.

       

      The users.local file has:

       

      BLAdmins:* rw,map=Administrator

       

      When I run the package through BL however, although the deploy job completes and shows as successful, it doesn't actually install, but there is some weird log output that I think maybe related...

       

      Info    Nov 29, 2011 6:37:34 PM     [stdout: 4]  4    Silent Install

      Info    Nov 29, 2011 6:37:41 PM     [stdout: 4]  4    Silent Install

      Info    Nov 29, 2011 6:37:37 PM     [stdout: 4]     104.2482.0: 0xe0000102 (INF: -536870654)  4    Silent Install

      Info    Nov 29, 2011 6:37:37 PM     [stdout: 4]     104.2587.0: 0xe0000102 (INF: -536870654)  4    Silent Install

      Info    Nov 29, 2011 6:37:36 PM     [stdout: 4]     104.685.0: 0xe0000102 (INF: -536870654): Components   4    Silent Install

      Info    Nov 29, 2011 6:37:34 PM     [stdout: 4]     401.339.0: 0x80070002 (WIN32: 2)   4    Silent Install

      Info    Nov 29, 2011 6:37:35 PM     [stdout: 4]     429.2137.0: 0x31 (WIN32: 49): 8009030C: LdapErr: DSID-0C0904DC, comment: AcceptSecurityContext error, data 52e, v1db1    4    Silent Install

      Info    Nov 29, 2011 6:37:35 PM     [stdout: 4]     429.2137.0: 0x31 (WIN32: 49): 8009030C: LdapErr: DSID-0C0904DC, comment: AcceptSecurityContext error, data 52e, v1db1    4    Silent Install

      Info    Nov 29, 2011 6:37:34 PM     Executing command: "if "2003"=="2003" sysocmgr /i:%windir%\inf\sysoc.inf /u:c:\Temp\iisparts.txt    4    Silent Install

      Info    Nov 29, 2011 6:37:34 PM     Processing asset EXTERNALCMD    4    Silent Install

       

      Has anyone done this successfully, or know what these errors are all about?

       

      Many Thanks - Lee

        • 1. Re: Deploying IIS6 on Windows Server 2003

          Have you tried doing it this way without BSA first? (Just from a CMD shell window on the server)

          • 2. Deploying IIS6 on Windows Server 2003

            Yep it does, I mentioned that in the original post...

             

            "If I run the above command on the target server manually from the command line either as the local admin or a domain admin it works fine and I see the IIS thing get added into Administrative Tools"

             

            Thanks!

            • 3. Deploying IIS6 on Windows Server 2003
              Bill Robinson

              check the location of the installsource in the registry (some key like that) - it's probably looking to a network share or cdrom that can't be accessed when run via the agent.

              • 4. Deploying IIS6 on Windows Server 2003

                Thats what the reg keys in the BlPackage do. I update HKLM\Software\Microsoft\Windows\CurrentVersion\Setup\SourcePath and ServicePackSourcePath to be C:\Setup (where a copy of the i386 folder lives) from their original value of D:\ but I still get the problem.

                • 5. Re: Deploying IIS6 on Windows Server 2003

                  What do you see in the system’s security logs? Any failed events? (LDAPerr: AcceptSecurityContext error)

                  • 6. Deploying IIS6 on Windows Server 2003

                    Just had a look, theres not a single Audit Failure in the security event log...

                    • 7. Re: Deploying IIS6 on Windows Server 2003

                      Anything interesting in the RSCD.log?

                      • 8. Deploying IIS6 on Windows Server 2003

                        Hmm, just found this in the transaction logs...

                         

                        11/30/11 17:52:03.379 DEBUG    bldeploy - Full command line C:\Program Files\BMC Software\BladeLogic\8.1\RSCD\sbin\bldeploy.exe 9f77ad99a6df3fbea1d4b3e37ab22617 -N=/temp/stage/29ac889069e3348ab21ae815600fba47 -P=10.0.21.152 -Q=params.txt -PKG=IIS-149.1 -DryRun -Xr -V2 -js0 -jr0 -jc0

                        11/30/11 17:52:03.379 DEBUG    bldeploy - Resetting username size to 4096

                        11/30/11 17:52:03.379 DEBUG    bldeploy - GetUserNameExA failed for NameUserPrincipal re-attempting GetUserNameA: (1332 No mapping between account names and security IDs was done.

                         

                        )

                        11/30/11 17:52:03.379 DEBUG    bldeploy - Running as User: BladeLogicRSCD

                        11/30/11 17:52:03.379 DEBUG    bldeploy -  Privileges:

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeChangeNotifyPrivilege - Enabled by default

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeSecurityPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeBackupPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeRestorePrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeSystemtimePrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeShutdownPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeRemoteShutdownPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeTakeOwnershipPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeDebugPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeSystemEnvironmentPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeSystemProfilePrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeProfileSingleProcessPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeIncreaseBasePriorityPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeLoadDriverPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeCreatePagefilePrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeIncreaseQuotaPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeUndockPrivilege - Disabled

                        11/30/11 17:52:03.379 DEBUG    bldeploy -   SeManageVolumePrivilege - Disabled

                        11/30/11 17:52:03.395 DEBUG    bldeploy -   SeImpersonatePrivilege - Enabled by default

                        11/30/11 17:52:03.395 DEBUG    bldeploy -   SeCreateGlobalPrivilege - Enabled by default

                        11/30/11 17:52:03.395 DEBUG    bldeploy - Validating existence of wait lock C:\Program Files\BMC Software\BladeLogic\8.1\RSCD\Transactions\locks\reboot.lck

                        11/30/11 17:52:03.395 DEBUG    bldeploy - Deployment running in multi-job mode

                        • 9. Re: Deploying IIS6 on Windows Server 2003
                          Bill Robinson

                          I don’t see it actually running anything here…

                          • 10. Deploying IIS6 on Windows Server 2003

                            I know, I just took a bit of the log that had something interesting in it. I assure you it does run a command further down...

                             

                            11/30/11 17:52:14.629 INFO     bldeploy - [4][Silent Install] Executing command: "if "2003"=="2003" sysocmgr /i:%windir%\inf\sysoc.inf /u:c:\Temp\iisparts.txt

                            if "2003"=="2008 R2" servermanagercmd -install Web-Server"

                             

                            The external command has an if statement in it, so it works for both Win2008 and Win2003 (or should) and installs IIS.

                            • 11. Re: Deploying IIS6 on Windows Server 2003
                              Bill Robinson

                              So is that an issue or not ?

                              • 12. Re: Deploying IIS6 on Windows Server 2003

                                Sorry, no, I don't believe that's an issue. It had the same problem deploying IIS6 before I added the if statement. I want the package to be able to run against either 2003 or 2008 R2 and install the relevant version of IIS on either (so 6 on 2003 and 7 on 2008 R2). The jobs works fine on 2008 R2 where I'm using the servermanagercmd to install IIS, but not on 2003.