[SOLVED] Server 2019 TermServLic Service won´t start after windowsupdate

T

themoon19

Member
Joined
Oct 9, 2022
Posts
17
Hello guys,

I can´t start the remotedesktoplicensingservice after installing windowsupdates on 29.09.2022 KB5017315.

My attempts at solutions were:

SFC /Scannow "some files are corrupted"

In the CBS.log I found 2 corrupted files:
tls_branding_config.xml
LServer_PKConfig.xml

I did:

DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /restoreHealth /Source: form a same Server 2019 installed as DC
SFC /Scannow 100% good

The grants in the regkey
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermServLicensing\Data and Parameters

I set Networkservice and RDL to full access

After restart Server, same problem the rdl service does not want to start anymore


In the eventviewer I got 2 times eventID 37 Terminalservices-Licensing
and event ID 4097 Terminalservices-Licensing

Now I found this forum and mayby you can help me.
 

Attachments

Rich (BB code): 
2022-10-09 22:33:47, Info                  CSI    00000007 Hashes for file member [l:23]'tls_branding_config.xml' do not match.
 Expected: {l:32 ml:4096 b:c3b2a8c679b89829b173cd05bdfa46acb1b28a6d4da26fcf0295387a385a9262}.
 Actual: {l:32 b:8e6adaf781147f87780c1dd37e63b529f4a49482d541a7f417fe46458f395047}.
2022-10-09 22:33:47, Info                  CSI    00000008 Warning: Unable to repair payload file ([l:23]'tls_branding_config.xml') for component ([l:101 ml:140]'amd64_microsoft-windows-t..enseserver-tlsbrand_31bf3856ad364e35_10.0.17763.1075_none_9c481b71554a77d4') from backups directory with disposition (2). A backup file may not exist or may be corrupt. Falling back to WU.
2022-10-09 22:34:39, Info                  CSI    00000009 Hashes for file member [l:20]'LServer_PKConfig.xml' do not match.
 Expected: {l:32 ml:4096 b:a68ced28a12c6d3a25c153e76217f1830e2d94b9c71e4f9b2ebb2b01335af2b6}.
 Actual: {l:32 b:b45d90e43527e118b400d87486820dd8460912fabd1ef147e654b1afc0d4378c}.
2022-10-09 22:34:39, Info                  CSI    0000000a Warning: Unable to repair payload file ([l:20]'LServer_PKConfig.xml') for component ([l:98 ml:140]'amd64_microsoft-windows-t..enseserver-lrwizdll_31bf3856ad364e35_10.0.17763.1_none_f5101f628983b202') from backups directory with disposition (2). A backup file may not exist or may be corrupt. Falling back to WU.

Hi,

Open an elevated command prompt and run the following commands, copy and paste the result in your next post.
Code: 
certutil -hashfile "C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-tlsbrand_31bf3856ad364e35_10.0.17763.1075_none_9c481b71554a77d4\tls_branding_config.xml" SHA256
certutil -hashfile "C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-lrwizdll_31bf3856ad364e35_10.0.17763.1_none_f5101f628983b202\LServer_PKConfig.xml" SHA256
 
Hi,
both was executed successfully.

C:\Windows\system32>certutil -hashfile "C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-tlsbrand_31bf3856ad364e35_10.0.17763.1075_none_9c481b71554a77d4\tls_branding_config.xml" SHA256
SHA256-Hash von C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-tlsbrand_31bf3856ad364e35_10.0.17763.1075_none_9c481b71554a77d4\tls_branding_config.xml:
c3b2a8c679b89829b173cd05bdfa46acb1b28a6d4da26fcf0295387a385a9262
CertUtil: -hashfile-Befehl wurde erfolgreich ausgeführt.

C:\Windows\system32>certutil -hashfile "C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-lrwizdll_31bf3856ad364e35_10.0.17763.1_none_f5101f628983b202\LServer_PKConfig.xml" SHA256
SHA256-Hash von C:\Windows\WinSxS\amd64_microsoft-windows-t..enseserver-lrwizdll_31bf3856ad364e35_10.0.17763.1_none_f5101f628983b202\LServer_PKConfig.xml:
a68ced28a12c6d3a25c153e76217f1830e2d94b9c71e4f9b2ebb2b01335af2b6
CertUtil: -hashfile-Befehl wurde erfolgreich ausgeführt.
 
Hi,

This looks good, please post a copy of the COMPONENTS hive.

Upload your COMPONENTS hive.
  • Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
  • Please copy this file to your desktop.
  • Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
  • Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
  • If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.
 
Hi,

the 2 links I worked through without a solution,

so I uninstalled the remotedesktoprole again.
Did a machine reboot and reinstalled the remotedesktoprole.
Now I got the same problem with the
tls_branding_config.xml
LServer_PKConfig.xml

this is written in the cbs.log from 22.10.2022 9:36

mayby you can me help again, before I have the reinstall the whole machine.

Have a nice weeked
 

Attachments

Rich (BB code): 
2022-10-21 23:54:30, Info                  CSI    00003deb Hashes for file member [l:20]'LServer_PKConfig.xml' do not match.
 Expected: {l:32 ml:4096 b:a68ced28a12c6d3a25c153e76217f1830e2d94b9c71e4f9b2ebb2b01335af2b6}.
 Actual: {l:32 b:b45d90e43527e118b400d87486820dd8460912fabd1ef147e654b1afc0d4378c}.
2022-10-21 23:54:30, Info                  CSI    00003dec [SR] Cannot repair member file [l:20]'LServer_PKConfig.xml' of Microsoft-Windows-TerminalServices-LicenseServer-LRWIZDLL, version 10.0.17763.1, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch
2022-10-21 23:54:30, Info                  CSI    00003ded Hashes for file member [l:23]'tls_branding_config.xml' do not match.
 Expected: {l:32 ml:4096 b:c3b2a8c679b89829b173cd05bdfa46acb1b28a6d4da26fcf0295387a385a9262}.
 Actual: {l:32 b:8e6adaf781147f87780c1dd37e63b529f4a49482d541a7f417fe46458f395047}.
2022-10-21 23:54:30, Info                  CSI    00003dee [SR] Cannot repair member file [l:23]'tls_branding_config.xml' of Microsoft-Windows-TerminalServices-LicenseServer-TlsBrand, version 10.0.17763.1075, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch

Hi,

Here's the fix to replace the expected files.

Download
56f31e53c97da-SFCFix.PNG
SFCFix and save it to your desktop.
Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFix.zip and save it to your desktop.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
6190d993a26f3-SFCFix-Zip-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.
 

Attachments

You're welcome. Please attempt to update and let me know the result. If it fails attach a new copy of the CBS log.
 
Hi,

Does the DBpath value have the correct data in the registry key below, this should match the location of the LServer directory: %systemroot%\system32\lserver

Rich (BB code): 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermServLicensing\Parameters
 
Yes, the location matches the registrykey. The rights I check too.
 

Attachments

  • 74AFB06C-C88F-40CE-BCC0-C9DC92C6BDEF.jpeg
    74AFB06C-C88F-40CE-BCC0-C9DC92C6BDEF.jpeg
    53 KB · Views: 3
This looks fine and the CBS log is clean. So, please try to start the TSL service while ProcMon is running.

Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Try to start the RDL/TSL service
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square (CTRL +E) on the toolbar as shown below.



4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up the LogFile.PML and upload it to WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free and provide the link.
 
Hi,

  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
  • Copy and paste the following command line and press Enter.
Code: 
reg export "HKEY_USERS\.DEFAULT\Software\Microsoft\Cryptography" "%userprofile%\desktop\regexp.txt"
  • When finished, a logfile called regexp.txt is saved on your desktop.
  • Post the logfile as attachment in your next reply.
 
Could you please provide the following event logs.
  • Click the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator.
    Copy and paste the following commands one at a time into the command prompt and press enter after each.
    Code: 
    wevtutil epl SYSTEM "%userprofile%\Desktop\System.evt"
wevtutil epl APPLICATION "%userprofile%\Desktop\Application.evt"
PowerShell Compress-Archive -Path "%userprofile%\Desktop\*.evt" -DestinationPath "%UserProfile%\Desktop\EventLogs.zip"
  • These commands will collect the System and Application logs and create EventsLogs.zip on your Desktop.
  • Attach this file in your next reply.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top