ISA Server 2004 Service Pack 3 - rollback failure and temporary resolution

Should the installation of ISA Server 2004 SP3 fail for any reason, a rollback operation will execute so that ISA components are returned to their pre-update versions.  If the ISA management console was opened while the update or rollback was in progress, this rollback process may fail.   This most often occurs when the ISA management was left open in a separate RDP session on that server.

We have had reports that the rollback is failing, which may result in leaving mixed components on the ISA Server, causing ISA service startup to fail.  We are investigating ways to prevent the update conflict and also to correct the rollback failures.

There are two options to resolve the rollback failure:

Option A; reinstall in repair mode (preferred)

A. Download Service Pack 3 from ISA Download Site for your ISA 2004 Edition

B. Make sure all ISA UI is closed and no other ISA utilities are in use

C. Reinstall SP3 using this command line:

Msiexec /p <FullPathToSp3Package> REINSTALL=all REINSTALLMODE=omus SKIP_DIAGLOGACLS=1 /l*v c:\sp3.log

Option B; re-register an ISA administration component

A. Start | Run

B. Type “cmd” <Enter>

C. Run the following commands:

1. cd /d "%programfiles%\Microsoft ISA Server" (use the quotes)

2. regsvr32 wspadmin.dll

3. md VPN\Netsh

4. net start fwsrv.

If none of these processes are successful, please contact PSS immediately.

 

Jim Harrison (ISA SE)

Comments

  • Anonymous
    January 01, 2003
    Hi all, The ISA Team (Jim Harrison) blog a post about roolback of SP3 - ISA 2004. More information at

  • Anonymous
    January 01, 2003
    How to resolve problems with the ISA SP3

  • Anonymous
    January 01, 2003
    Hi all, The ISA Team (Jim Harrison) post a blog about roolback of SP3 - ISA 2004. More information at

  • Anonymous
    January 01, 2003
    Hi all, The ISA Team (Jim Harrison) blog a post about roolback of SP3 - ISA 2004. More information at

  • Anonymous
    January 01, 2003
    I followed the instructions in Option A, I noticed that new functions (loggin tab) were installed but the Firewall Service still stopping, after many tries of restart the service, I just disable the Cache then restart the service and it works! Also I was played with Backup-Restore but I think disable the Cache was that make works. =)

  • Anonymous
    January 01, 2003
    Hi jim, Thanks for the valued info. Will spread the word Thanks, Tarek

  • Anonymous
    January 01, 2003
    Olá, O time do ISA Server (Jim Harrison) postou uma notícia sobre roolback do SP3 - ISA 2004. Mais informações

  • Anonymous
    January 01, 2003
    Olá, O time do ISA Server (Jim Harrison) postou uma notícia sobre roolback do SP3 - ISA 2004. Mais informações

  • Anonymous
    January 01, 2003
    Thanks for sharing your feedback!

  • Anonymous
    May 04, 2007
    Hi Jim, great information. regards Marc aka Jens Baier

  • Anonymous
    May 06, 2007
    Hi Guys, Dont know where else to post. Just installed SP3 for 2004 and the MMC had a cry on me. The first time it failed I turned off the MMC and ran it again, the second time it installed but when it came back up it said that the mmc couldnt initalise. I rolled it back and all is well again. Anyone had the same experience? Forgot to add this is on a Win2k on AD

  • Anonymous
    May 07, 2007
    Gracias, por publicar este tipo de informaci►2n

  • Anonymous
    May 09, 2007
    None of the solutions worked in my case.

  • Anonymous
    May 09, 2007
    The comment has been removed

  • Anonymous
    May 11, 2007
    this worked for me http://www.wehuberconsultingllc.com/wordpress/?p=506

  • Anonymous
    May 14, 2007
    The comment has been removed

  • Anonymous
    May 25, 2007
    Has this problem been fixed yet?

  • Anonymous
    June 04, 2007
    The comment has been removed

  • Anonymous
    June 30, 2007
    The comment has been removed

  • Anonymous
    July 02, 2007
    I figured out this problem and it turned out to be the latest update of trend micro office scan client. Scott

  • Anonymous
    July 03, 2007
    The comment has been removed

  • Anonymous
    July 13, 2007
    Same thing for me. I had to remove an unresolved account SID in the delegate administration. After that, the SP3 installation work succesfully.

  • Anonymous
    July 16, 2007
    Scott, What was the issue with Trend Micro Client and what was the solution? I am in the same boat as you. Thanks Frank

  • Anonymous
    July 20, 2007
    Tim and Francois you are stars, i was tearing my hair out will all the other fixes until i was your comments on administrators and sure enough an unresolved user account. Many thanks

  • Anonymous
    July 21, 2007
    Excellent information.   I still received an error during the install stating a dll couldn't be registered, but I chose ignore and completed the install and everything worked fine.  The first time, it wouldn't complete at all. Thank you for the update!

  • Anonymous
    September 19, 2007
    I just did the install. It failed a couple of times until I realised someone else being logged on having started the ISA Management. So, got them to close the console and the install went fine. However, after the reboot when I try to launch ISA Server Management I get this error: Snap-in failed to initialize. Name: Miscrosoft ISA Server 2004 CLSID:{1A8E5794-1AEC-4BA6-982D-A7F49F4699DC} I have no idea what is happening

  • Anonymous
    September 19, 2007
    Nevermind... I got it working. Reinstalled SP3 using the commandline described above, worked.

  • Anonymous
    October 24, 2007
    How i can remove unresolved account SID Role for ISA Server Enterprise Administrator and assign new account?

  • Anonymous
    March 27, 2013
    Funny, 6 years after the last comment, I have decided to go to sp3.  Thanks for the help.