Skip Ribbon Commands
Skip to main content

Quick Launch

Todd Klindt's home page > Todd Klindt's Office 365 Admin Blog > Posts > KB973917 breaks SharePoint to pieces
January 04
KB973917 breaks SharePoint to pieces

In the last week I've had two separate incidents where KB973917 was installed on a server and it either prevented a formerly working SharePoint farm from working, or it prevented a clean machine from getting SharePoint installed. I wanted to add a blog post to the chorus of blog posts already out there on this, to make it easier for folks to find.

The first problem I encountered was a MOSS farm running on 64 bit Windows 2003 server. It had been happily running for months. Now all of a sudden whenever someone tried to hit it with a web browser they were met with an "Internal Server Error" and the Application Pool would crash with "Unknown error." The app pool would restart, but would crash again as soon as someone hit it. This was with all web apps, including Central Admin. To make things more confusing, SharePoint itself seemed to be fine. I could use STSADM to do anything STSADM does and it worked great. I could enumerate sites and webs, anything. IIS seemed to be broken, not SharePoint. I asked the customer what they had changed, and they answered, "Nothing." J In their defense, it had been over two weeks since they had applied any patches. Our friend KB973917 was in that list though. I had seen something go across Twitter about a patch breaking SharePoint, but I hadn't paid much attention. I looked through all the patches that had been installed in the last round and started searching on Bing for "<patch> SharePoint." Searching for "KB973917 SharePoint" yielded me a bunch of hits with titles that suggested this might be what I was looking for. Particularly KB2009746 hit the nail on the head and described exactly what I was seeing. Contrary to what the KB said, I did uninstall the evil KB973917, and that alone didn't fix the issue. When I reinstalled SP2 for Windows Server 2003 though IIS started working again, and therefore SharePoint was happy. I probably could have just reinstalled SP2 and been fine.

Today I stumbled onto another problem that was caused by KB973917. I had a fresh build of Windows Server 2008 and I was blessing it with an install of MOSS 2007. SP2 for MOSS was built in. The install went very quickly until it got to the "Applying Updates" part where it installs the patches that are slipstreamed. This went very, very slow. After 35 minutes it crashed, giving me the "Windows is looking for a solution" message box. This was odd. I had heard of something similar to this (though not identical) before, and it was caused by the security on the box being very tight and SharePoint not being able to write to places in the file system and Registry that it needed to. I removed all GPOs that had been pushed down, and disabled UAC and tried again. Same failure. There were no clues in the event log. The SharePoint installer log was very little help, it really only showed this:

Executing command path: 'C:\Program Files (x86)\Common Files\Microsoft Shared\SERVER12\Server Setup Controller\wrapinst.exe', args: 'timeout=2950 MsiPath=msxml\msxml6.msi'

Error: Command: 'C:\Program Files (x86)\Common Files\Microsoft Shared\SERVER12\Server Setup Controller\wrapinst.exe' failed to return after 600000 milliseconds Type: CommandFailed.

Error: Command: 'C:\Program Files (x86)\Common Files\Microsoft Shared\SERVER12\Server Setup Controller\wrapinst.exe' failed to return after 600000 milliseconds Type: CommandFailed.

Error: Command: 'C:\Program Files (x86)\Common Files\Microsoft Shared\SERVER12\Server Setup Controller\wrapinst.exe' failed to return after 600000 milliseconds Type: CommandFailed.

Catalyst execution finished: 01/04/2010 12:10:32. Return code: 30008. Exception caught: CommandFailed.

PERF: TickCount=4334578 Name=RunSetup Description=End function

There was my 35 minutes, 600000 milliseconds (10 minutes) at a time. I did some searching and nothing really jumped out. At this point I wondered if something was wrong with the machine, so we jumped over to another machine and tried to install. Same problem. Three attempts, three failures. I tried a few more things to no avail. Almost as a joke I suggested to the customer to uninstall the evil KB973917 and install SP2 for Windows Server 2008. I suggested that only because it seemed the last part of the SharePoint install was trying to configure IIS on the box, and KB973917 broke IIS on the Windows 2003 box I had seen the week before. We did it and SharePoint installed successfully. Another SharePoint casualty of the much maligned KB973917.

I don't completely understand why this patch is wreaking such havoc on IIS and SharePoint. I want to get this post out in case anyone else is having weird problems and can't quite seem to stitch it all together. I've wasted too many hours on this bugger myself, hopefully I can save you folks an hour or two. J



KB973917 only breaks servers that previously was SP1

According to KB2009746 it only breaks servers that was updated to SP2.

So maybe the problem isnt an issue on servers that are installed with a slipstreamed SP2 (both 2003 and 2008) ?
 on 1/5/2010 2:26 AM

Re: KB973917 breaks SharePoint to pieces

Hi Todd,

After reading this post I rushed to my SP farm and checked whether KB973917 was installed on my Windows 2008 SP2 boxes.  The update was installed however I have not and hope to God that I won't experience the same issues that you have encountered.

I am actually just about to embark on setting up a new MOSS farm on Windows 2008 R2 so I will see if I encounter the installation issue then.

Cheers mate.
 on 1/5/2010 7:46 PM

Background information

 on 1/7/2010 1:14 PM

Have you tried the Reinstall Windows Server 2003 SP2

Have you tried the suggestion from Frederik's link? I'm curious how the reinstall of Windows Server 2003 SP2 goes and whether it would bring your SharePoint Server back online.
Thanks for the heads up post.
 on 1/11/2010 9:19 AM

Re: Have you tried the Reinstall Windows Server 2003 SP2

Reinstalling SP2 on both Windows 2003 and Windows 2008 fixed the problem in every instance. It hasn't not fixed it for me yet.

Todd O. KlindtNo presence information on 1/11/2010 9:23 AM


Thanks for the article Todd.  I had the update installed on my server and it was creating a bunch of havoc.  Luckily, after reading your post, I removed it and the problems went away.  I would like to know if you (or anyone else out there) has come up with the reason for this and a possible solution.  I work for the Department of Defense and this update must be installed by regulation.  Obviously I do not want to reinstall it but I may be forced to soon.

Thanks again.

 on 1/14/2010 12:03 PM


I looks like its messing with SPN's for the sites. I know its evil and ditry but does the issue present itself with NTLM authentication? My theory would be to reregister the the SPN's assuming you have a web/app tier and database tier correct?.
 on 2/12/2010 10:16 PM

Re: Reason

I'm not sure if Kerberos is the problem or not. In one case the patch prevented SharePoint from installing. I didn't have a chance to even pick Kerberos before it failed. The installer failed while trying to install and configure IIS.

Todd O. KlindtNo presence information on 2/18/2010 11:34 AM

DNS Record missing From w2k8 Exchange 2007 after KB973917

Since updating and rebooting our exchange server, the dns record was missing. First thing to mind was that someone deleted the record accedantly. After creating a new record, problem was solved.
As of today, after installing the update on the new OCS EXCHANGE UM server. After rebooting, the dns record from the OCS server was dissapeared.

Anyone an idea how this can happen, before installing this to all of the servers and if there is an sollution for this problem.

Fred van Irsel
The Netherlands
 on 3/11/2010 6:12 AM

Add Comment

Items on this list require content approval. Your submission will not appear in public views until approved by someone with proper rights. More information on content approval.


Body *

Today's date *

Select a date from the calendar.
Please enter today's date so I know you are a real person


Want a message when I reply to your comment? Put your Twitter handle here.