Select the product you need help with

FIX: The ISA Server Control service cannot start after you install the MS09-012 update on a computer that is running Windows Server 2003 and that has more than 4 CPU cores

Article ID: 970441 - View products that this article applies to.

SYMPTOMS

Consider the following scenario:

On a computer that is running Windows Server 2003 and that has more than 4 CPU cores, you install Microsoft ISA Server 2006 Standard Edition.
You install the MS09-012 update.
For more information about the MS09-012 update, click the following article number to view the article in the Microsoft Knowledge Base:
959454
(http://support.microsoft.com/kb/959454/ )
MS09-012: Vulnerabilities in Windows could allow elevation of privilege
You restart the computer.

In this scenario, the Microsoft ISA Server Control service cannot start. Additionally, Event ID 14109 is logged in the Application log.

Back to the top | Give Feedback

This problem occurs if certain hotfixes were installed before you install the security update. If the security update detects that these hotfixes are installed, the security update adds functionality that changes how Windows reports the number of CPUs that are available. This change was introduced in hotfix 932730. The change causes Windows Server 2003 to report the number of CPUs exactly how Windows Vista and Windows Server 2008 report the number of CPUs. Therefore, when Windows Server 2003 reports more than four CPU cores, the ISA Server Control service interprets this as more than four CPUs. This triggers an alert that shuts down the Microsoft ISA Server Control service and any dependent services.

Note Hotfix 932730 was not included with any Windows Server 2003 service pack. For more information about hotfix 932730, click the following article number to view the article in the Microsoft Knowledge Base:

932370

(http://support.microsoft.com/kb/932370/ )

The number of physical hyperthreading-enabled processors or the number of physical multicore processors is incorrectly reported in Windows Server 2003

Back to the top | Give Feedback

RESOLUTION

To resolve this problem, install the hotfix rollup package that is described in the following Microsoft Knowledge Base article:

970443

(http://support.microsoft.com/kb/970443/ )

Description of the ISA Server 2006 hotfix package: Description of the ISA Server 2006 hotfix package: April 21, 2009

Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Back to the top | Give Feedback

MORE INFORMATION

ISA Server uses the Windows GetLogicalProcessorInformation API to determine the number of logical processors. The update that is provided by hotfix 932370 changes how Windows Server 2003 reports CPU cores.

You can use the showprocs tool to show how hotfix 932370the changes that hotfix 932370. To download the showprocs tool, visit the following Web site:
http://isatools.org/tools/showprocs.zip

(http://isatools.org/tools/showprocs.zip)

For example, if your computer uses two CPU packages and each package contains four cores, the results of the showprocs tool shows the following summary reports:

Before you install hotfix 932370:
CPU Cores: 2
CPU Packages: 0
Logical CPU: 8
Per-processor licenses required: 2

After you install hotfix 932370:
CPU Cores: 4
CPU Packages: 2
Logical CPU: 8
Per-processor licenses required: 2

Back to the top | Give Feedback

REFERENCES

This problem does not affect Microsoft ISA Server 2006 Enterprise Edition. For more information, visit the following Microsoft Web sites:

Microsoft Security Bulletin MS09-012 - Important

(http://www.microsoft.com/technet/security/Bulletin/ms09-012.mspx)

Forefront TMG (ISA Server) Product Team Blog

(http://blogs.technet.com/isablog/archive/2009/04/18/ms09-012-and-isa-server-standard-edition-14109-failures.aspx)

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684

(http://support.microsoft.com/kb/824684/ )

Description of the standard terminology that is used to describe Microsoft software updates

Back to the top | Give Feedback