Error message when you try to install Windows Server Update Services together with SQL Server Desktop Engine (Windows) on a Windows Server 2003-based domain controller: "InstallSQLAgentSecurity failed (SERVER,LocalSystem,87)" (920655)



The information in this article applies to:

  • Microsoft Windows Server Update Services

SYMPTOMS

Consider the following scenario. You try to install Microsoft Windows Server Update Services (WSUS) together with Microsoft SQL Server Desktop Engine (Windows) on a Microsoft Windows Server 2003-based domain controller. When the SQL Server Desktop Engine (Windows) component is being installed, the installation stops and is rolled back. You receive an error message that resembles the following:
InstallSQLAgentSecurity failed (SERVER,LocalSystem,87).

CAUSE

This problem occurs because SQL Server Desktop Engine (Windows) cannot communicate with the primary domain controller (PDC) emulator in Active Directory to create the service principal name (SPN) for the SQL account that connects to the database.

RESOLUTION

To resolve this problem, verify that the WSUS server can connect to the IPC$ share on the server that hosts the role of the PDC emulator. If the WSUS server is a domain controller, it may be easier to transfer the PDC role to the domain controller that is running WSUS to complete the installation.

Modification Type:MajorLast Reviewed:6/14/2006
Keywords:kbtshoot KB920655 kbAudEndUser kbAudITPRO