First published on MSDN on Mar 08, 2019
me aware of a Windows Defender regression that c
block Service Fabric cluster upgrades.
Certain Windows Defender signatures contain a regression that can potentially hang Windows Task Scheduler
Windows applications that rely on Task Scheduler.
You can learn more about
regression in this
This regression will only impact
Service Fabric cluster upgrades for
customers running Windows Server 2016.
Other OS images and Service Application upgrades are not affected as part of this regression.
a machine that is impacted by the regression, Windows Task scheduler would be in hung state
ny type of Service Fabric cluster upgrade would take down the Service Fabric node hosted on the machine permanently until an OS reboot / reimage happens.
Signatures that contain the regression have been rolled out broadly to most Azure machines running Windows Server 2016 + Windows Defender with a standard Defender signature update config. It is likely
Windows Server 2016 machines Task Scheduler are already in hung state
If Task Scheduler is in hung state, a
ny Service Fabric cluster upgrade could bring down Service Fabric nodes and roll back due to node health policy violations.
you started a
Service Fabric cluster upgrade
brought down nodes permanently post rollback
. Please follow the steps below
On machines hosting down nodes,
%\System32\SchTasks.exe to verify if the Task Scheduler is in hung state. The command is supposed to return the list of scheduled tasks, if it does not return, then Task Scheduler is hung.
Reboot the machines and check if the nodes come back. If they don’t, reimage the machines.
If you cannot even RDP into the machines, directly reimage them.
SF runtime 6.3 support will be extended to March 31st, 2019.