FIX: The ISA Server Control service cannot start after you install the MS09-012 update on a computer that operates with more than 4 CPU cores

Article translations Article translations
Article ID: 970450 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • On a computer that is running Windows Server 2003 and that has more than 4 CPU cores, you install Microsoft Internet Security and Acceleration (ISA) Server 2004 Standard Edition.
  • You install the MS09-012 update.
    For more information about the MS09-012 update, click the following article number to view the article in the Microsoft Knowledge Base:
    959454 MS09-012: Vulnerabilities in Windows could allow elevation of privilege
  • You restart the computer.
In this scenario, the Microsoft ISA Server Control service cannot start. Additionally, Event ID 14109 is logged in the Application log.

CAUSE

This problem occurs if a Windows hotfix that was released after February 7, 2007 is installed before the security update is installed. This problem occurs because of a change in how Windows reports the number of CPUs that are available. This change was introduced in hotfix 932730. The change causes Windows Server 2003 to report this information exactly as Windows Vista and as Windows Server 2008 reports the information. When Windows reports more than four CPU cores, the ISA Server Control service interprets this to mean more than four CPUs. This triggers a warning and then shuts down the Microsoft ISA Server Control service and any dependent services.

Note Hotfix 932730 was not included with any Windows Server 2003 service pack. For more information about hotfix 932730, click the following article number to view the article in the Microsoft Knowledge Base:
932370 The number of physical hyperthreading-enabled processors or the number of physical multicore processors is incorrectly reported in Windows Server 2003

RESOLUTION

To resolve this problem, install the hotfix rollup package that is described in the following Microsoft Knowledge Base article:
970454 Description of the ISA Server 2004 hotfix package: June 2, 2009

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

ISA Server uses the Windows GetLogicalProcessorInformation API to determine the number of logical processors. The update provided by hotfix 932370 changes how Windows Server 2003 reports CPU cores.

You can use the showprocs tool to demonstrate this difference. The showprocs tool can be downloaded from the following URL:
http://isatools.org/tools/showprocs.zip

For example, if your computer uses two CPU packages and each package contains four cores, the showprocs tool will provide the following summary reports.

Before you install hotfix 932370:
CPU Cores : 2
CPU Packages : 0
Logical CPU : 8
Per-processor licenses required: 2

After you install hotfix 932370:
CPU Cores : 4
CPU Packages : 2
Logical CPU : 8
Per-processor licenses required: 2

REFERENCES

This problem does not affect ISA Server 2004 Enterprise Edition. For more information, visit the following Microsoft Web sites:

Microsoft Security Bulletin MS09-012 - Important
Forefront TMG (ISA Server) Product Team Blog

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 970450 - Last Review: July 24, 2009 - Revision: 1.0
APPLIES TO
  • Microsoft Internet Security and Acceleration Server 2004 Standard Edition
Keywords: 
kbexpertiseinter kbfix kbsurveynew kbqfe KB970450

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com