Hello Guys,

I wanted to share the solution to this problem with you all …

Problem:

The environment: UAG SP1 Update1 + TMG SP2 Rollup 1 KB2649961

The TMG service ISASTRL (Microsoft Forefront TMG Control) on a UAG machine hang and staying in starting status

The symptoms are: slow login, you cannot see the desktop after login, when you open task manager and try to open services.msc the server freeze

The following posts didn't solve the problem

http://www.nptech.com/blog/2012/01/20/forefront-tmg-2010-headaches-after-sp2-installation/

http://www.chris-mohan.com/2011/01/when-isactrl-ruins-your-day-on-a-tmg/

http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/thread/a62e83b5-0756-49a9-8e9c-99565746a769/

http://msdynamicswiki.com/2012/01/10/forefront-threat-management-gateway-2010-services-do-not-start-as-expected-when-the-ftmg-2010-servers-are-in-a-workgroup-array/

http://social.technet.microsoft.com/Forums/lv-LV/Forefrontedgesetup/thread/7e9b7795-3e1f-4b91-9f88-fb89797eed60

Solution:

The Forefront UAG client components were installed on the UAG machine, the Forefront client services causes the ISACTRL service to hang

You need to uninstall the Forefront UAG Client components from Add/Remove programs (appwiz.cpl) and restart the server

HTH

Idan Plotnik

Identity and Security Engineer, Forefront MVP