Symptoms
Consider the following scenario:
-
You run Microsoft Forefront Threat Management Gateway 2010 on a computer that is running the English version of Windows Server 2008 or of Windows Server 2008 R2.
-
You install the Multilingual User Interface (MUI) Language Packs to change the user interface to a non-English language.
-
Forefront Threat Management Gateway is configured to log on to the local Microsoft SQL Server Express database.
-
You install Service Pack 2 for Forefront Threat Management Gateway 2010.
In this scenario, many pending files for the Forefront Threat Management Gateway Large Logging Queue (LLQ) logging feature are created on the hard disk drive of the computer. Additionally, all the disk space on the hard disk drive may be exhausted when these files are created.
Cause
This problem occurs because the localization of the "NT AUTHORITY\NETWORK SERVICE" user name is not recognized. For example, this problem occurs when the user name is localized to Spanish as "NT AUTHORITY\Servicio de Red." Therefore, logging to the local SQL Server Express database fails, and the LLQ files build up.
Resolution
To resolve this problem, remove the original permission for "NT AUTHORITY\NETWORK SERVICE" from the localhost\MSFW database. Forefront Threat Management Gateway will automatically re-create the permission correctly. To do this, follow these steps:
-
Run an administrative command prompt as a user member of the "Forefront TMG Array Administrator" group or the "Forefront TMG Enterprise Administrator" group. To do this, click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
-
At the command prompt, type the following command, and then press Enter:
sqlcmd –E –S localhost\MSFW
-
Run the following SQL sentences:
sp_revokelogin ‘NT AUTHORITY\NETWORK SERVICE’
go
exit
Note Threat Management Gateway will automatically re-create the SQL express security descriptor by using the correct "Network service" entry, depending on the computer's regional settings.
