Software update point and WSUS Synch fails in CM1802

Question

WCM.log throws the below error message:

System.Data.SqlClient.SqlException (0x80131904): Login failed for user ‘domainmachineaccount$’.~~ at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)~~ at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPGetConfiguration()~~ at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Load()~~ at Microsoft.UpdateServices.Internal.ClassFactory.CreateWellKnownType(Type type, Object[] args)~~ at Microsoft.UpdateServices.Internal.ClassFactory.CreateInstance(Type type, Object[] args)~~ at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.GetConfiguration()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.SetUpstreamServerSettings(Boolean SyncFromMicrosoftUpdate, Boolean ReplicaServer, String UpstreamWSUSServerName, Int32 UpstreamWSUSServerPortNumber, Boolean UseSSL, Boolean HostBinariesOnMU, Int32 ReportingLevel, Int32 MaximumAllowedComputers)~~ClientConnectionId:00000000-0000-0000-0000-000000000000

software distribution.log:

ClientConnectionId:3e80e9b0-65c8-41d2-ab04-6996f8115a09
2020-05-04 08:18:32.457 UTC Warning w3wp.48 SoapExceptionProcessor.SerializeAndThrow Discarding stack trace for user NT AUTHORITYSYSTEM, IP Address ::1, exception System.Data.SqlClient.SqlException (0x80131904): Login failed for user ‘doaminmachineaccount$’.
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
at System.Data.SqlClient.SqlConnection.Open()
at Microsoft.UpdateServices.DatabaseAccess.DBConnection.Connect(String connectionString)
at Microsoft.UpdateServices.DatabaseAccess.DBConnection.Connect()
at Microsoft.UpdateServices.Internal.GenericDataAccess.ExecuteSP(String spName, DBParameterCollection args, IExecuteSPHandler handler, Int32 queryTimeoutInSeconds)
at Microsoft.UpdateServices.Internal.GenericDataAccess.ExecuteSP(String spName, DBParameterCollection args, IExecuteSPHandler handler)
at Microsoft.UpdateServices.Internal.DatabaseAccess.CommonDataAccess.ExecuteSPSingleResultSet(String spName, DBParameterCollection args, Type resultType, Int32 queryTimeoutInSeconds)
at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccess.ExecuteSPGetComponentsWithErrors()
at Microsoft.UpdateServices.Internal.ApiRemoting.ExecuteSPGetComponentsWithErrors()
ClientConnectionId:3e80e9b0-65c8-41d2-ab04-6996f8115a09

 

Additional details:

———————

domainmachineaccount$ is part of SUSDB.

When I try to launch WSUS console, It is empty and when I try to login with Server name. It throws the error message.

Cannot  connect to “Server Name” SQL server may not be running on the server. Please verify SQL server is running and configured  correctly on the server. Contact your network administration if the problem persists.

 

WSUS+SUP+Primary site+SQL are configured in single server:- This is test Environment.

SQL looks good and able to access the SCCM DB’s. Access has been provided to SUSDB to local system account.

Applied the tech net article solution but not luck: https://www.cookadam.co.uk/memcm-wsus-woes-wsusctrl-log-cannot-open-database-susdb-requested-by-the-login-the-login-failed-login-failed-for-user-domainserver.

your help is much appreciated.

Regards,

Satish.

 

 

Answers ( 6 )

    0
    2020-05-06T14:26:05+05:30

    Reply appreciate your update here to help the community

    1
    2020-05-06T13:40:20+05:30

    Hi Anoop,

    Thanks for your help. Issue is fixed now.
    As suggested, I have uninstalled SUP, WSUS and Detached SUSDB and removed the SUSDB both .mdf and .ldf files.
    Reinstalled WSUS, SUP and Initiated Synch.
    Every thing is smooth now.

    Regards,
    Satish Thota.

    Best answer
    1
    2020-05-04T15:47:45+05:30

    When was the last time WSUS cleaned?

    2
    2020-05-04T11:05:49+05:30

    Thank you for the details

    All the questions should be like this with all the information.. Kudos !!

    – I shall be looking at the following log as well if there is anything over there? – If you can check WSUSCtrl.log which Records details about the configuration, database connectivity, and health of the WSUS server for the site.

    – Another point to check is about the SUP installation and it went well isn’t it?

    – After installing the WSUS, you didn’t try to configure it manually right? It should be configured automatically during SUP installation

    – I hope your user account (trying to connect WSUS console) has full admin access on SQL DB

    – I have seen this issue several times in my lab … the easiest solution to perform a clean install again …

    – Remove SUP, WSUS, DB, etc… restart

    – Install it again one by one in the same order

    Does this make sense? already tried this?

      1
      2020-05-04T14:08:56+05:30

      WSUSCtrl.log:
      AllowProxyCredentialsOverNonSsl)~~ClientConnectionId:00000000-0000-0000-0000-000000000000 SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      Failed to set WSUS Local Configuration. Will retry configuration in 1 minutes SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      Attempting connection to local WSUS server SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      Successfully connected to local WSUS server SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      System.Data.SqlClient.SqlException (0x80131904): Login failed for user ‘domain\machineaccountname’.~~ at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)~~ at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPGetComponentsWithErrors()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.get_ComponentsWithErrors()~~ClientConnectionId:00000000-0000-0000-0000-000000000000 SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      Failures reported during periodic health check by the WSUS Server STSCCM001.pontest.test. Will retry check in 1 minutes SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)
      Waiting for changes for 1 minutes SMS_WSUS_CONTROL_MANAGER 5/4/2020 3:55:46 PM 5680 (0x1630)

      Another point to check is about the SUP installation and it went well isn’t it?
      SUP is installed and configured successfully. The Last successful Synch is in Dec 2019.

      – After installing the WSUS, you didn’t try to configure it manually right? It should be configured automatically during SUP installation.
      Yes this is not configured Manually. The Synch used to happen with SUP.

      – I hope your user account (trying to connect WSUS console) has full admin access on SQL DB
      Yes, I have given sysadmin access to both System and domain\Machineaccountname$

        0
        2020-05-04T14:22:30+05:30

        I don’t see anything interesting in the log snippet 🙁

        “System.Data.SqlClient.SqlException (0x80131904): Login failed for user ‘domainmachineaccountname’” This shall send me to SQL logs and check the logs of SQL to understand batter

        ==========

        Your Reply – Yes, I have given sysadmin access to both System and domainMachineaccountname$

        Anoop’s Reply I’m more specifically asking about the USER (not the machine account) who logged into that server and launching WSUS console has full access (Full Admin) to SQL DB or not

Leave an answer

Sorry, you do not have permission to answer to this question .