Windows 服务器更新服务

Question

我正在尝试添加 Windows Server 更新服务，但每当我尝试启动它以进行安装后，它都会给我这个错误..

我尝试为默认域控制器策略添加 II_IUSRS、NETWORK、NETWORK SERVICES、SERVICES 以 作为服务登录。

我也尝试将其添加到默认域策略，但似乎没有任何效果。

2021-09-08 12:12:40  Postinstall started
2021-09-08 12:12:40  Detected role services: Api, UI, WidDatabase, Services
2021-09-08 12:12:40  Start: LoadSettingsFromXml
2021-09-08 12:12:40  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2021-09-08 12:12:40  Value is true
2021-09-08 12:12:40  End: GetConfigValue
2021-09-08 12:12:40  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2021-09-08 12:12:40  Value is D:\WSUS_database
2021-09-08 12:12:40  End: GetConfigValue
2021-09-08 12:12:40  Content directory is D:\WSUS_database
2021-09-08 12:12:40  Database roleservice is not installed
2021-09-08 12:12:40  End: LoadSettingsFromXml
Post install is starting
2021-09-08 12:12:40  Start: Run
2021-09-08 12:12:40  Fetching WsusAdministratorsSid from registry store
2021-09-08 12:12:40  Value is S-1-5-21-2939769649-1620940919
2021-09-08 12:12:40  Fetching WsusReportersSid from registry store
2021-09-08 12:12:40  Value is S-1-5-21-2939769649-1620940919
2021-09-08 12:13:40  Configuring content directory...
2021-09-08 12:13:40  Configuring groups...
2021-09-08 12:13:40  Starting group configuration for WSUS Administrators...
2021-09-08 12:13:40  Found group in regsitry, attempting to use it...
2021-09-08 12:13:40  Searching for existing group...
2021-09-08 12:13:40  Existing group was found
2021-09-08 12:13:40  Writing group to registry...
2021-09-08 12:13:40  Finished group creation
2021-09-08 12:13:40  Starting group configuration for WSUS Reporters...
2021-09-08 12:13:40  Found group in regsitry, attempting to use it...
2021-09-08 12:13:40  Searching for existing group...
2021-09-08 12:13:40  Existing group was found
2021-09-08 12:13:40  Writing group to registry...
2021-09-08 12:13:40  Finished group creation
2021-09-08 12:13:40  Configuring permissions...
2021-09-08 12:13:40  Fetching content directory...
2021-09-08 12:13:40  Fetching ContentDir from registry store
2021-09-08 12:13:40  Value is D:\WSUS_database
2021-09-08 12:13:40  Fetching group SIDs...
2021-09-08 12:13:40  Fetching WsusAdministratorsSid from registry store
2021-09-08 12:13:40  Value is S-1-5-21-2939769649-1620940919
2021-09-08 12:13:40  Fetching WsusReportersSid from registry store
2021-09-08 12:13:40  Value is S-1-5-21-2939769649-1620940919
2021-09-08 12:13:40  Creating group principals...
2021-09-08 12:13:40  Granting directory permissions...
2021-09-08 12:13:40  Granting permissions on content directory...
2021-09-08 12:13:40  Granting registry permissions...
2021-09-08 12:13:40  Granting registry permissions...
2021-09-08 12:13:40  Granting registry permissions...
2021-09-08 12:13:40  Configuring shares...
2021-09-08 12:13:40  Configuring network shares...
2021-09-08 12:13:40  Fetching content directory...
2021-09-08 12:13:40  Fetching ContentDir from registry store
2021-09-08 12:13:40  Value is D:\WSUS_database
2021-09-08 12:13:40  Fetching WSUS admin SID...
2021-09-08 12:13:40  Fetching WsusAdministratorsSid from registry store
2021-09-08 12:13:40  Value is S-1-5-21-2939769649-1620940919
2021-09-08 12:13:40  Content directory is local, creating content shares...
2021-09-08 12:13:40  Creating share "UpdateServicesPackages" with path "D:\WSUS_database\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2021-09-08 12:13:40  Deleting existing share...
2021-09-08 12:13:40  Creating share...
2021-09-08 12:13:40  Share successfully created
2021-09-08 12:13:40  Creating share "WsusContent" with path "D:\WSUS_database\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2021-09-08 12:13:40  Deleting existing share...
2021-09-08 12:13:40  Creating share...
2021-09-08 12:13:40  Share successfully created
2021-09-08 12:13:40  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2021-09-08 12:13:40  Deleting existing share...
2021-09-08 12:13:40  Creating share...
2021-09-08 12:13:40  Share successfully created
2021-09-08 12:13:40  Finished creating content shares
2021-09-08 12:13:40  Stopping service WSUSService
2021-09-08 12:13:40  Stopping service W3SVC
2021-09-08 12:13:40  Configuring WID database...
2021-09-08 12:13:40  Configuring the database...
2021-09-08 12:14:11  System.InvalidOperationException: Cannot start service MSSQL$MICROSOFT##WID on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not respond to the start or control request in a timely fashion
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.UpdateServices.Administration.ConfigureDB.StartAndConfigWidService()
   at Microsoft.UpdateServices.Administration.ConfigureDB.Configure()
   at Microsoft.UpdateServices.Administration.ConfigureDB.Run(String instanceName, Action`1 logWriter, Boolean contentLocal)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: Cannot start service MSSQL$MICROSOFT##WID on computer '.'.

Answer 1

• 确保没有为 Windows Server 2019 以外的操作系统版本安装 .NET Framework 4.7，因为 Windows Server 2019 之前的操作系统版本与此版本的 .NET Framework 不兼容。

• 尝试通过组策略将“作为服务登录”权限授予“NT SERVICE\ALL SERVICES”，并将用于安装 WSUS 角色的服务帐户添加到用于安装 WSUS 角色的成员服务器上的“IIS_IUSRS”组中.不要忘记将计算机从定义用户权限的 GPO 中排除。

• 尝试重新启动服务器，然后在“Services.msc”部分中，打开“Windows 内部数据库”服务的属性并检查登录选项卡。在该选项卡中，在安装后过程完成期间将其临时更改为“本地系统”帐户。

• 最后，如果上述任何选项都不适合您，请尝试将“NT SERVICE\MSSQL$MICROSOFT##WID”帐户添加到本地安全策略中的“作为服务登录”权限服务器，然后再次尝试安装后过程。

更多信息请参考以下链接：-

https://docs.microsoft.com/en-US/troubleshoot/windows-server/deployment/error-install-windows-internal-database