ReSearch This KB – Service Stopped

Alert: Service Stopped

Management Pack Name: Windows Update Services 3.0

Management Pack Version: 6.0.5000.0

Rule or Monitor: Monitor

Rule or Monitor Name: Service Status

Rule or Monitor Notes: This monitor checks the WsusService state.

Issue:

There is no WsusService on this computer. WSUS were removed a week ago. This is Windows Server 2003 R2 SP2.

Problem: WSUS were removed (it doesn’t appear in Add\Remove Programs) but left many registry keys, folders and websites.

Resolution:

Ensure you have a good backup for this system.

Run this:

1. msiexec /x {2C0D7E35-EE6E-4DC7-BA13-2C68AEDEB59D}
2. sc delete wsusservice
3. run again: msiexec /x {2C0D7E35-EE6E-4DC7-BA13-2C68AEDEB59D}

Check registry and delete any of those keys if found:

HKLM\software\Microsoft\windows\currentversion\installer\userdata\s-1-5-18\products

Look under Each GUID > InstallProperties

On the right side look for a with Microsoft Windows Server Update Services 3.0 SP

Delete the GUID

Delete these keys:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: API Remoting Web Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSusCertServer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Reporting Web Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Server Web Methods
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Client Web Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Client Web Service Methods
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Server Web Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WsusService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSUS: Update Regulation Web Methods
HKLM\System \CCS\Services\WsusService
HKCRoot\wsuscertserver.certmanager
HKCRoot\wsuscertserver.certmanager.1
HKCRoot\wsuscertserver.Utilites
HKCRoot\wsuscertserver.Utilites.1

Delete the following from IIS:

1. WSUS Administration Virtual Directory
2. Application Pool > WsusPool

In the filesystem:

%ProgramFiles%\Update Services should be gone. Delete it if it’s still there

\WSUSContent\UpdateServicesDbFiles should be empty. Delete the SUSDB.mdf and SUSDB_log.ldf files if they are still there.

Uninstalling WSUS 3.0 SP2 does not uninstall the database.

If WSUS 3.0 SP2 is uninstalled, the Windows Internal Database will not be uninstalled. The instance may be shared by more than one application, and it will cause other applications to fail if it is removed.

If it is necessary to uninstall Windows Internal Database, the following
commands will uninstall the application:

(on 32-bit platforms)

Copy

msiexec /x {CEB5780F-1A70-44A9-850F-DE6C4F6AA8FB} callerid=ocsetup.exe

(on 64-bit platforms)

Copy

msiexec /x {BDD79957-5801-4A2D-B09E-852E7FA64D01} callerid=ocsetup.exe

If you want to uninstall Windows Internal Database Service Pack 2 from Windows Server 2008 or Windows Server 2008 R2, you can do so by using Server Manager.

However, the removal of Windows Internal Databasedoes not remove the default .mdf and .ldf files, which will cause a subsequent WSUS 3.0 SP2 installation to fail. You can delete these files from the %windir%\SYSMSI\SSEE directory.

Reboot the server.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.