Problems with SEPM and WSUS on the same server

[Migration User]

Hi,

I did a clean install of Windows Server 2008 R2, WSUS and SEPM (in that order) and I can't deploy clients using the SEPM console. Both WSUS and SEPM is installed on their own websites with different ports.
SEPM is on website ID 2 and WSUS is on website ID 974403262. All the file paths and app pools are correct on SEPM and WSUS websites, but the support tool gives me the following errors:

Error

These SEPM IIS Locations are using an Application Pool of: WsusPool /LM/W3SVC/974403262/ROOT /LM/W3SVC/974403262/ROOT/Content /LM/W3SVC/974403262/ROOT /LM/W3SVC/974403262/ROOT/Content

Error

SEPM Virtual Directories with incorrect permissions: Location Expected Actual /LM/W3SVC/974403262/ROOT None Scripts only /LM/W3SVC/974403262/ROOT None Scripts only

Error	SEPM Virtual Directories with Anonymous Authentication access DISABLED: Location Anonymous User
Error	SEPM Virtual Directories with incorrect paths: Location Path /LM/W3SVC/974403262/ROOT c:\Program Files\Update Services\WebServices\Root\ /LM/W3SVC/974403262/ROOT c:\Program Files\Update Services\WebServices\Root\ /LM/W3SVC/974403262/ROOT/Content c:\WSUS\WsusContent\ /LM/W3SVC/974403262/ROOT/Content c:\WSUS\WsusContent\

Error	Sql Client is not using its configured port '1433' with a state of 'Established'. The application wsusservice.exe is using the port.
Failed	SepM is using port 8014 and IIS location /LM/W3SVC/974403262 is using port 8530,8530

So clearly SEPM tries to use wrong website, but why and how can I fix this?
WSUS and SEPM are new/clean installs so no need to worry about losing any data.

Thanks,
Petrus

[Migration User]

Check this out :-

Windows Server Update Services (WSUS) no longer functions after installation of Symantec Endpoint Protection Manager

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111913581148

[Migration User]

HI,

thanks for the answer, but I don't think that helps me. The content directories are both ok, but SEPM uses the wrong website for some reason.
I haven't installed anything in the defautl website

[Migration User]

Open the file conf.properties in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc with notepad and assure that it is using the port which you designated for SEPM only(scm.iis.http.port=) 

[Mick2009]

Hi Petrus,

What version of SEP are you using?  Is it the latest (SEP 11 RU5-?)

Another thing to check: are the correct IIS roles installed-?  See

How to install a Web Server (IIS) role on a Windows 2008 Server

These are points that you have probably already checked, but please confirm to the forum that they are in order.
Thanks and best regards, Mick

[Migration User]

Mick,

the version is SEP 11 RU5, the IIS components are installed too.

AravindKM, the ports are correct in the conf-file.

I removed WSUS and reinstalled SEPM and it caused a whole lot of new problems so I decided to reinstall Windows.

This time I installed Windows Server 2008 x86 and then SEPM and at this point everything was working fine. After that I installed WSUS SP2 and the same issue came up on the Support Tool.

Both SEPM and WSUS are on their own websites and SEPM uses SQL Server on a different computer. WSUS uses the same SQL Server.

Error	These SEPM IIS Locations are using an Application Pool of: WsusPool /LM/W3SVC/1984488945/ROOT /LM/W3SVC/1984488945/ROOT/Content /LM/W3SVC/1984488945/ROOT /LM/W3SVC/1984488945/ROOT/Content
Error	SEPM Virtual Directories with incorrect permissions: Location Expected Actual /LM/W3SVC/1984488945/ROOT None Scripts only /LM/W3SVC/1984488945/ROOT None Scripts only
Error	SEPM Virtual Directories with Anonymous Authentication access DISABLED: Location Anonymous User
Error	SEPM Virtual Directories with incorrect paths: Location Path /LM/W3SVC/1984488945/ROOT c:\Program Files\Update Services\WebServices\Root\ /LM/W3SVC/1984488945/ROOT c:\Program Files\Update Services\WebServices\Root\ /LM/W3SVC/1984488945/ROOT/Content c:\WSUS\WsusContent\ /LM/W3SVC/1984488945/ROOT/Content c:\WSUS\WsusContent\

Error	Sql Client is not using its configured port '1433' with a state of 'Established'. The application wsusservice.exe is using the port.
Failed	SepM is using port 8014 and IIS location /LM/W3SVC/1984488945 is using port 8530,8530

Any ideas where I could look? Logs, settings, anything?

[Migration User]

Installing WSUS into the default website (port 80) didn't help. Still same errors.

[Migration User]

Change the sql listening port in your remote SQL server (SEPM database server ) and use the same while  reinstating the SEPM.Refer below doc for changing the port of SQL.
How to configure SQL server to listen on different ports on different IP addresses?

 

[Migration User]

I'm not the DB admin, so i dont want to go the port settings.
But I did the next best thing and installed WSUS with the local DB.

Even if the wsuservice.exe is stopped, the IIS websites are still messed up.

For the record, SEPM seems to work fine. The few test clients report back and update policies, deployment works also. But I'm planning to install WDS and SCCM on this server too and I'd like that SEPM works fine with WSUS so that I won't run into problems later.

I found one similar case here on Symantec forums, but it wasn't resolved either. Weird that there aren't more threads about this since I have been able to duplicate the issues multiple times with two different servers. Maybe it won't show on day to day usage, but why the support tool errors then?

[Migration User]

I have been able to use WSUS and SEPM on the same server. Big thing for me was to make sure SEPM and WSUS both went into their own websites. Even if you put WSUS in its own website, it still uses stuff in the Default Website. WSUS will use the unqiue website/port you set up but it will always use bits out of the default website on port 80.