当我们重启 TMG 服务器以后,发现一些 TMG 相关服务没有启动,可能看到以下报错:
Event Type: Error
Event ID: 7022
Description:
The Microsoft Forefront TMG Control service hung on starting.
Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Firewall service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state
Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Managed Control service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state.
Event Type: Error
Event ID: 7001
Description:
The Microsoft Forefront TMG Job Scheduler service depends on the Microsoft Forefront TMG Control service which failed to start because of the following error:
After starting, the service hung in a start-pending state.
如果 TMG 的 array member 是在 workgroup 内的,并且在 TMG 上的存有 "Client Authentication" 类型的证书(在 local computer\ Personal store 下),那么可以尝试使用管理员权限打开命令行窗口,并使用以下脚本来调整 isactrl 的服务依赖:
sc config isactrl depend= RasMan/SSTPSVC/FwEng/ISASTG/bfe/mpssvc/HTTP/KeyIso
需要注意的是,每次在 TMG 打完补丁后,您必须再次运行以上脚本。
微软安全专家
James Yi