[Server2019 Essentials x64] "We are having difficulties downloading updates"

[MetalicMan]

Thanks!
Can still see only DoSvc, can change startup on others, no problem

 

[Maxstar]

Okay, let's check the following.

1. Open Start and type regedit.
2. Navigate to the following registry key.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc

3. Right click the Dosvc key and click on Permissions.
4. On the security tab, select the User you want to provide permission.
5. Under Permissions for Administrators,check the box next to Full control under Allow.
6. Click on Apply > OK and exit Registry Editor.
7. Open Services Control Panel and now try to change the starttype of the DoSvc service again.

 

[MetalicMan]

behavior doesn't changes

 

[Maxstar]

Could you please post a screenshot of the Security tab when Operadores de servidor is selected.

 

[MetalicMan]

 

[Maxstar]

Please check the Pemitir option and click Aplicar and try to change the starttype of the DoSvc service again.

 

[MetalicMan]

Thanks.
Tried, throws same error when changing start type

 

[Maxstar]

Hmm, are the built-in administrator accounts still active? It seems there are some restrictions set for the highlighted permissions.
Are you able to bypass the "server operators" permissions with another account on this system? (Note: these permissions are not default, do you have them on other systems as well?).

SERVER OPERATORS    ALLOW    Create content/Delete content/List content/Self Write/Read Property/Delete/Read Control    (I)
SERVER OPERATORS    ALLOW    Delete/Generic Write/Generic Read    (CI-I-OI)
BUILTIN\Administrators    ALLOW    All Access    (I)
BUILTIN\Administrators    ALLOW    Generic All    (CI-I-OI)

 

[MetalicMan]

Thanks.

Yes, the one I'm using is builtin "Administrador"

 

[Maxstar]

Could you please explain the server operators permissions and why they are set?

 

[MetalicMan]

Thanks, I don't remember changing operator permissions.
Does it works to create a new admin account without being bultin?

 

[Maxstar]

Do you have similar servers in your network? So we can compare some settings of the DoSvc service and/or the presence of server operators permissions for this service.

Creating a new account could be an option to try, just to see what happens.

 

[MetalicMan]

Thanks!

I have another server2019 from another network, and can compare the key permissions.
Creating new user didn't solved

 

[Maxstar]

1. Could you please run the instructions in post #72 on the other server to check the permissions.
2. Export the DoSvc service with the following command:

reg save "HKLM\SYSTEM\CurrentControlSet\Services\DoSvc" "%userprofile%\Desktop\DoSvc.hiv"

3. Provide a screenshot of Services.msc to see if that system has the Otimização da Entrega (DoSvc) service and let me know if you are able to change the starttype.

 

[MetalicMan]

Thanks
here goes the info from the other server.
service does exists, but I can't change startup type

 

[Maxstar]

service does exists, but I can't change startup type

The DoSvc service is started, so you can't change the starttype until this service is stopped. But this looks good, and the permissions are the same as on the problematic server.

Some notes:

Excerpt of the server without DoSvc problems:

permissões de "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc":
Owner: NT AUTHORITY\SYSTEM
DACL(AI):

Excerpt of the problematic server:

permissões de "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc":
Owner: NT AUTHORITY\SYSTEM
DACL(NP):

(NP) - Do not propagate inherit. ACE inherited by containers and objects from the parent container, but does not propagate to nested containers. Applies only to directories.

Source: icacls

I'll need to take a closer look into this, but this might be the (access denied) issue so it seems.

 

[Maxstar]

Hi,

Please perform the following stept on the problematic server to check the permissions of other keys as well.

Start the

Farbar Recovery Scan Tool again.

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[MetalicMan]

Hi again and thanks!

Here goes the log

 

[Maxstar]

Hi,

Could you please perform the following steps with Process Monitor running.

1. Open Start and type Services.msc
2. Change the Starttype of DoSvc (Otimização da Entrega) to Automatic (Delayed Start).
3. Also try to start the service so this will be logged as well.


Step#1 - Capture Process Monitor Trace
1. Download and run Process Monitor. Leave this running while you perform the next steps.
2. Perform the steps above.
3. Stop Process Monitor as soon as it fails. You can simply do this by clicking the square (CTRL +E) on the toolbar as shown below.



4. Select the File menu...Save... and save the file to your desktop. This is likely the default location. The name (unless changed) will be LogFile.PML. This is fine.
5. Zip up the LogFile.PML and upload it to WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free and provide the link.

 

[MetalicMan]

Thanks!
Still trows the error while trying to change startup type