SharePoint 2010 Server stops working after installing KB 2756920

I just noticed an issue with Windows Server 2008 R2 (RTM) / Windows 7 (RTM) where SharePoint Server 2010 is installed!

Seems that it is caused by a recent Security Update, described in “MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2”    –> related content: http://technet.microsoft.com/en-us/security/bulletin/ms13-004

NOTE!
Support for Server 2008 R2 RTM +SP1 started on Febr. 22nd 2011! From that point, you need to be at least on SP1 anyway.
Check out the lifetime support matrix here:  http://support.microsoft.com/lifecycle/?p1=14134


***   Update 2013-01-14   ***

meanwhile there is a related KB out, that may help also:  
WCF services that are hosted on IIS on Windows 7 or Windows Server 2008 R2 may receive an exception error message after you install an update for the .NET Framework 3.5 SP1 for WCF  when you Need to stay on RTM for any reasons.

Short shot to Resolution:

To work around this issue, make sure that the versions of System.ServiceModel.dll and System.ServiceModel.WasHosting.dll are in sync.

To resolve this issue, install update 2637518  (http://support.microsoft.com/kb/2637518)   or any .NET Framework 3.0 SP2 hotfix that contains both assemblies.

We recommend that you install update 2637518   (http://support.microsoft.com/kb/2637518)   to resolve this issue. 
However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

To download this hotfix from the Microsoft Download Center, go to the following Microsoft Download Center webpage:

http://go.microsoft.com/fwlink/?LinkID=242859 

Note If you are already experiencing this problem, install update 2637518  (http://support.microsoft.com/kb/2637518
You do not have to reinstall the update that caused this issue to surface.

Restart requirement:   You may have to restart the computer after you apply this update

 

 *** End of Update ***


Symptom:

Problems with SharePoint 2010 Server after installing Windows Updates, like
– Errors in the navigation panes
– Complete failure to open any site
– SharePoint sites will return 503 server error…

When you check the Server’s Event- and/or ULS logs, you may find some errors similar to these:

ERROR:

WebHost failed to process a request.
Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/17653682
Exception: System.ServiceModel.ServiceActivationException: The service ‘/SecurityTokenServiceApplication/securitytoken.svc’ cannot be activated due to an exception during compilation. The exception message is: Method not found: ‘System.String System.ServiceModel.Activation.Iis7Helper.ExtendedProtectionDotlessSpnNotEnabledThrowHelper(System.Object)’.. —> System.MissingMethodException: Method not found: ‘System.String System.ServiceModel.Activation.Iis7Helper.ExtendedProtectionDotlessSpnNotEnabledThrowHelper(System.Object)’.
at System.ServiceModel.WasHosting.MetabaseSettingsIis7V2.WebConfigurationManagerWrapper.BuildExtendedProtectionPolicy(ExtendedProtectionTokenChecking tokenChecking, ExtendedProtectionFlags flags, List`1 spnList)
at System.ServiceModel.WasHosting.MetabaseSettingsIis7V2.WebConfigurationManagerWrapper.GetExtendedProtectionPolicy(ConfigurationElement element)
at System.ServiceModel.WasHosting.MetabaseSettingsIis7V2.ProcessWindowsAuthentication(String siteName, String virtualPath, HostedServiceTransportSettings& transportSettings)
at System.ServiceModel.WasHosting.MetabaseSettingsIis7V2.CreateTransportSettings(String relativeVirtualPath)
at System.ServiceModel.Activation.MetabaseSettingsIis.GetTransportSettings(String virtualPath)
at System.ServiceModel.Activation.MetabaseSettingsIis.GetAuthenticationSchemes(String virtualPath)
at System.ServiceModel.Channels.HttpChannelListener.ApplyHostedContext(VirtualPathExtension virtualPathExtension, Boolean isMetadataListener)
at System.ServiceModel.Channels.HttpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.BindingContext.BuildInnerChannelListener[TChannel]()
at System.ServiceModel.Channels.MessageEncodingBindingElement.InternalBuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.BinaryMessageEncodingBindingElement.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.BindingContext.BuildInnerChannelListener[TChannel]()
at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)
at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)
at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)
at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
at System.ServiceModel.ServiceHostBase.InitializeRuntime()
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustServiceHost.InitializeRuntime()
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
— End of inner exception stack trace —
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath)
Process Name: w3wp
Process ID: 3060

[…]


An exception occurred when trying to issue security token: The requested service, ‘http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc/…could not be activated. See the server’s diagnostic trace logs for more information

[…]


Exception occured while connecting to WCF endpoint: System.ServiceModel.ServiceActivationException: The requested service, ‘http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc/…’ could not be activated. See the server’s diagnostic trace logs for more information.   

Server stack trace:    
at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory factory, WebException responseException, ChannelBinding channelBinding)

[…]


Cause:

The problem applies to Windows Server 2008 R2 RTM or Windows 7 RTM only, and does not apply when service pack 1 is installed.
With SP1 installed, the fix is no longer applicable to the OS and will not be installed.

 

Resolution:

When you are on RTM version and have installed the KB 2756920, uninstall the patch or use the last known good “restore Point before the Update was installed.

Once uninstalled (reboot may be required), your sites and service applications should return to normal.
It is recommended once the update is uninstalled to install Windows Server 2008 R2 SP1 as the problematic update does not apply to SP1, details on this service pack can be found in KB976932.

 

Following .Net Updates are available:

Microsoft .NET Framework 3.5.1
(KB2756921) – MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1

Microsoft .NET Framework 4
(KB2742595) – MS13-004: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

Microsoft .NET Framework 4.5
(KB2742613)  – MS13-004: Description of the security update for the .NET Framework 4.5 on Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2

6 thoughts on “SharePoint 2010 Server stops working after installing KB 2756920

  1. After installing SharePoint server 2010 service pack 2 we are encountering the following the error in our custom webpart when we try to edit the webpart
    System.NullReferenceException: Object reference not set to an instance of an object.    at Microsoft.SharePoint.WebControls.ScriptLink.ResolveScriptReferenceHandler(Object sender, ScriptReferenceEventArgs e)     at System.EventHandler`1.Invoke(Object sender, TEventArgs e)     at System.Web.UI.ScriptManager.OnResolveScriptReference(ScriptReferenceEventArgs e)     at System.Web.UI.ScriptManager.RegisterScripts()     at System.Web.UI.ScriptManager.OnPagePreRenderComplete(Object sender, EventArgs e)     at System.EventHandler.Invoke(Object sender, EventArgs e)     at System.Web.UI.Page.OnPreRenderComplete(EventArgs e)     at Microsoft.SharePoint.WebPartPages.WikiEditPage.OnPreRenderComplete(EventArgs e)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

    Like

  2. Hallo Steve,
    leider ist die Installation von SP1 nicht immer so einfach möglich, da das Update bis zu 7,5GB Speicherplatz auf C: erfordert. Daher meine Fragen:
    Muss das Update zwingend auf allen WFE / Appservern erfolgen? Die SecurityTokenServiceApplication läuft ja auf allen Servern….?
    Gibt es Möglichkeiten nur die Problemrelevanten Bestandteile von SP1 zu installieren?
    Problematik ist, dass auf den relevanten Servern nur ca. GB Datenplatz zur Verfügung stehen.
    Würde mich sehr über ein Feedback freuen!
    Gruß ans Team Mirko D.

    Like

  3. Hallo Mirko,
    SP1 für Server 2008 R2 ist spätestens ab 22.Febr. 2013 erforderlich für den weiteren Support. Unter "Update…"  bzw. im ersten Kommentar findest Du jedoch weitere Info dazu, wenn SP1 nicht machbar sein sollte. Wenn der Server selobst schon weniger als 7,5GB freien Speicher auf C: hat, solltest Du jedoch ernsthafte Überlegungen machen, ob das nicht sowieso bald ein Problem wird 😉
    Grüsse, Steve

    Like

Leave a comment