ISA Security Question

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ smallbiz
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Cisco PIX Firewall I recently added a Cisco Pix Firewall so we could use Cisco's secure 3DeS VPN Tunnels. The pix doesn't want to work with 2 nics in the SBS2000 Server. I reconfiged for using only 10.0.0.2 and disabled the second NIC. Now I'm getting NetLogon DNS Event 5774 Errors... Anyone know where to start to make all of the necessary changes from TWO NICS down to ONE NIC??? -Dennis Tag: ISA Security Question Tag: 145880
  - 2
    - Upgrade Windows 2000 Server to Windows Server 2003 Small Business Hi, Is it possible to buy a version upgrade from Windows 2000 Server to Windows Server 2003 Small Business Server? Best regards, Dennis. Tag: ISA Security Question Tag: 145879
  - 3
    - removing router I have sbs2k running just fine, I was using a linksys router BEFSR41 router...and life was good. 2 stable years into this solution, users started having internet connection problems, intermediately Internet connection would drop, It seemed like router was the device causing this, I replaced the unit with a newer version of the same router (v3), every thing worked just fine with the exception of the VPN in to the box, After calling Linksys support there seems to be an issue with this newer version V3 unit...as not be "stable for VPN" go figure newer version isn't as stable. So in hopes of getting VPN back I am considering hooking the cable modem directly to the external nic, I do not want to re-run ICW, and I am lost after trying to hard code the IP address/ sub net, and gateway from the router (dynamically received from the ISP to the router) on to the external nic. Tag: ISA Security Question Tag: 145878
  - 4
    - XP pro client cant see active directory I have 2003SBS PDC w/xp pro clients and NONE of my clients (although they seem to authenticate just fine) can browse active directory objects or even see active directory on the server. I get permission denied errors connecting to server or client shares. I used the network id wizard to join the domain and my users are all copies of the admin account. I know I'm doing something silly that can be easily fixed but I can't figure it out. I have changed the NICs and Switches thinking its hardware but to no avail. I have one nic in the server and Terminal Services loaded. DNS-wise I have the server pointing to itself and the clients pointing only to the server. Tag: ISA Security Question Tag: 145875
  - 5
    - Auto install Client apps when joining a computer to SBS 2003 I am setting up SBS 2003 so that when I join computers to the SBS, Office XP and other software are installed automatically. I have added the software to the clientapps directory and all users have read/write access. It works great, however my problem is this. I want a complete install without user interface, but I cannot figure out in what file to place the product key so that this screen does not appear during the setup. Can any one help? Tag: ISA Security Question Tag: 145872
  - 6
    - Helth Monitor alert Hi all, Getting Health Monitor Alert - System Processor Use: Warning condition WMI status:0. It's because the processor queue is set to alert if the length is >2. Do I need to worry about this or change the queue length? The Server should be more than powerful enough - Dell dimension 8200 with a Pentium 4, 1.8GHz CPU & 1.5 Gb RAM. Another problem which is baffling me are event id 1001, 1008 - source IISInfoCtrs & Perflib respectively. I've checked them on the Kb & it's something to do with the performance counters, which I've never been into. These errors have occurred after event id 2003, & following Kb 267831. Has anyone come across this & give advice? I don't want to dig the hole deeper. TIA, Gary Tag: ISA Security Question Tag: 145871
  - 7
    - Help! Changing out Computers We are running SBS2000, 20 user. We are replacing 5 older computers with new systems. We will be installing the new computers on the network with the old ones still on the network to make the transition easier for the users. The computers will have different names than the older ones. Will there be an issue with this plan? Thank you for your help in advance! Candace Sparks Tag: ISA Security Question Tag: 145867
  - 8
    - VPN I have configured my Cisco 837 Router to accept VPN using Cisco VPN Client. I have a Network with a SBS2K server. When I connect from home (Windows ME machine) using my Network logon and password I can ping devices on my network, I can even search for devices but when I try and connect to them, it says must supply password, 'Resource:\\COMPUTERNAME\1PC$, Password: ' What do I need to do so I can browse the network properly (ie as if I was in the office). Thank you Mark Tag: ISA Security Question Tag: 145865
  - 9
    - Internet Connection error - icwlog.txt Hi, I've run through the SBS internet connection wizard with a dedicatated broadband & router configuration. However the process keeps falling with an interupt message when the wizard tr register connection. As below "The Internet Connection wizard was interrupted because of an error or user intervention. Details have been recorded in the file Icwlog.txt which can be found in <path>". I have searched and found various technotes relating to this type of error, plus other entries in the forum but my icwlog.txt contains errors beginning at line calling _ResetDNSListeners (dynamic). Error 0x80072550 returned from call to _ResetDNSListeners (). - any help would be greatly appreciated. Full icwlog.txt below with highlight around problem line. 10/12/2003 11:50 calling CNetCommit::Commit (2320024). calling CoCreateInstance (PropertyPagePropertyBag). Call to CoCreateInstance () returned ok. calling RegOpenKeyEx (HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\BackOffice\Connectivity\ICW). Call to RegOpenKeyEx () returned ok. calling RegQueryValueEx (Last_Hardware_Option). Call to RegQueryValueEx () returned ok. calling WriteInt4 (185707440, 3147E58D-2F9E-44D3-967C- CA5E9F76F33B, 3, 0). Return value from call to WriteInt4() not logged. calling _GetRegStringValue (Last_1st_Nic_Guid). Return value from call to _GetRetStringValue() not logged. calling _GetRegStringValue (Last_2nd_Nic_Guid). Return value from call to _GetRetStringValue() not logged. calling WriteString (185707440, 1CBC9355-81AD-4D26-8EA6- 989A55C5EEB9, {B9F6032B-5CF6-4225-9329-12F984158001}, 0). Return value from call to WriteString() not logged. calling WriteString (185707440, 1CBC9356-81AD-4D26-8EA6- 989A55C5EEB9, {7D174609-1322-49D2-B7F7-0A14A2D7BC6F}, 0). Return value from call to WriteString() not logged. calling GetDNSAddresses ({7D174609-1322-49D2-B7F7- 0A14A2D7BC6F}). Return value from call to GetDNSAddresese() not logged. calling _GetDefaultGateway ({7D174609-1322-49D2-B7F7- 0A14A2D7BC6F}). Return value from call to GetDefaultGateway() not logged. calling WriteString (185707440, 450F273D-B279-4B7D-A506- 9D9ED54ED702, 213.120.62.98, 0). Return value from call to WriteString() not logged. calling WriteString (185707440, 450F273E-B279-4B7D-A506- 9D9ED54ED702, 213.120.62.99, 0). Return value from call to WriteString() not logged. calling RegCloseKey (). Return value from call to RegCloseKey() not logged. calling PPPBag->QueryInterface (IPropertyPagePropertyBag). Call to PPPBag->QueryInterface () returned ok. calling CNetCommit::Common (2320024). calling ReadInt4 (2320024, 3147E58D-2F9E-44D3-967C- CA5E9F76F33B, 456544, 456516). Call to ReadInt4 () returned ok. calling ReadString (2320024, 1CBC9355-81AD-4D26-8EA6- 989A55C5EEB9). Return value from call to ReadString() not logged. calling ReadString (2320024, 1CBC9356-81AD-4D26-8EA6- 989A55C5EEB9). Return value from call to ReadString() not logged. calling DoFulltime (2320024). calling ReadString (2320024, 1CBC9356-81AD-4D26-8EA6- 989A55C5EEB9). Return value from call to ReadString() not logged. calling ReadString (2320024, 1CBC9355-81AD-4D26-8EA6- 989A55C5EEB9). Return value from call to ReadString() not logged. calling == ({B9F6032B-5CF6-4225-9329-12F984158001}, {7D174609-1322-49D2-B7F7-0A14A2D7BC6F}). calling _IsNICStatic ({B9F6032B-5CF6-4225-9329- 12F984158001}). Return value from call to _IsNICStatic() not logged. calling ReadString (2320024, 450F273C-B279-4B7D-A506- 9D9ED54ED702). Return value from call to ReadString() not logged. calling IsValidIP (217.34.58.246). Return value from call to IsValidIP() not logged. calling ReadString (2320024, 450F273D-B279-4B7D-A506- 9D9ED54ED702). Return value from call to ReadString() not logged. calling ReadString (2320024, 450F273E-B279-4B7D-A506- 9D9ED54ED702). Return value from call to ReadString() not logged. calling IsValidIP (213.120.62.98). Return value from call to IsValidIP() not logged. calling IsValidIP (213.120.62.99). Return value from call to IsValidIP() not logged. calling CLSIDFromString ({7D174609-1322-49D2-B7F7- 0A14A2D7BC6F}). Call to CLSIDFromString () returned ok. calling ClearAllGatewaysExcept (2320024, 454348). calling ClearDefaultGateway ({B9F6032B-5CF6-4225-9329- 12F984158001}). calling CLSIDFromString ({B9F6032B-5CF6-4225-9329- 12F984158001}). Call to CLSIDFromString () returned ok. calling ClearDefaultGateway (454128). calling SetNetConfig (454128, -1.-1.-1.-1, , ). calling CoCreateInstance (CNetCfg). Call to CoCreateInstance () returned ok. calling spNetCfg->QueryInterface (INetCfgLock). Call to spNetCfg->QueryInterface () returned ok. calling spNetCfgLock->AcquireWriteLock (1000, BO ICW). Call to spNetCfgLock->AcquireWriteLock () returned ok. calling spNetCfg->Initialize (0). Call to spNetCfg->Initialize () returned ok. calling spNetCfg->FindComponent (ms_tcpip, 454028). Call to spNetCfg->FindComponent () returned ok. calling spNetCfgComponent->QueryInterface (INetCfgComponentPrivate). Call to spNetCfgComponent->QueryInterface () returned ok. calling spNetCfgComponentPrivate->QueryNotifyObject (ITcpipProperties). Call to spNetCfgComponentPrivate->QueryNotifyObject () returned ok. calling spTcpipProperties->GetIpInfoForAdapter (454128, 454080). Call to spTcpipProperties->GetIpInfoForAdapter () returned ok. calling spTcpipProperties->SetIpInfoForAdapter (454128, 761352, DefGw=;GwMetric=1;IfMetric=1;DNS=;WINS=;). Call to spTcpipProperties->SetIpInfoForAdapter () returned ok. calling spNetCfg->Apply (). Call to spNetCfg->Apply () returned ok. calling CoTaskMemFree (761352). Return value from call to CoTaskMemFree() not logged. calling spNetCfg->Uninitialize (). Return value from call to spNetCfg->Uninitialize() not logged. calling spNetCfgLock->ReleaseWriteLock (). Return value from call to spNetCfgLock->ReleaseWriteLock() not logged. Call to SetNetConfig () returned ok. Call to ClearDefaultGateway () returned ok. Call to ClearDefaultGateway () returned ok. calling ClearDefaultGateway ({B9F6032B-5CF6-4225-9329- 12F984158001}). calling CLSIDFromString ({B9F6032B-5CF6-4225-9329- 12F984158001}). Call to CLSIDFromString () returned ok. calling ClearDefaultGateway (454128). calling SetNetConfig (454128, -1.-1.-1.-1, , ). calling CoCreateInstance (CNetCfg). Call to CoCreateInstance () returned ok. calling spNetCfg->QueryInterface (INetCfgLock). Call to spNetCfg->QueryInterface () returned ok. calling spNetCfgLock->AcquireWriteLock (1000, BO ICW). Call to spNetCfgLock->AcquireWriteLock () returned ok. calling spNetCfg->Initialize (0). Call to spNetCfg->Initialize () returned ok. calling spNetCfg->FindComponent (ms_tcpip, 454028). Call to spNetCfg->FindComponent () returned ok. calling spNetCfgComponent->QueryInterface (INetCfgComponentPrivate). Call to spNetCfgComponent->QueryInterface () returned ok. calling spNetCfgComponentPrivate->QueryNotifyObject (ITcpipProperties). Call to spNetCfgComponentPrivate->QueryNotifyObject () returned ok. calling spTcpipProperties->GetIpInfoForAdapter (454128, 454080). Call to spTcpipProperties->GetIpInfoForAdapter () returned ok. calling spTcpipProperties->SetIpInfoForAdapter (454128, 188047656, DefGw=;GwMetric=1;IfMetric=1;DNS=;WINS=;). Call to spTcpipProperties->SetIpInfoForAdapter () returned ok. calling spNetCfg->Apply (). Call to spNetCfg->Apply () returned ok. calling CoTaskMemFree (188047656). Return value from call to CoTaskMemFree() not logged. calling spNetCfg->Uninitialize (). Return value from call to spNetCfg->Uninitialize() not logged. calling spNetCfgLock->ReleaseWriteLock (). Return value from call to spNetCfgLock->ReleaseWriteLock() not logged. Call to SetNetConfig () returned ok. Call to ClearDefaultGateway () returned ok. Call to ClearDefaultGateway () returned ok. Call to ClearAllGatewaysExcept () returned ok. calling ClearDefaultGateway ({B9F6032B-5CF6-4225-9329- 12F984158001}). calling CLSIDFromString ({B9F6032B-5CF6-4225-9329- 12F984158001}). Call to CLSIDFromString () returned ok. calling ClearDefaultGateway (454292). calling SetNetConfig (454292, -1.-1.-1.-1, , ). calling CoCreateInstance (CNetCfg). Call to CoCreateInstance () returned ok. calling spNetCfg->QueryInterface (INetCfgLock). Call to spNetCfg->QueryInterface () returned ok. calling spNetCfgLock->AcquireWriteLock (1000, BO ICW). Call to spNetCfgLock->AcquireWriteLock () returned ok. calling spNetCfg->Initialize (0). Call to spNetCfg->Initialize () returned ok. calling spNetCfg->FindComponent (ms_tcpip, 454192). Call to spNetCfg->FindComponent () returned ok. calling spNetCfgComponent->QueryInterface (INetCfgComponentPrivate). Call to spNetCfgComponent->QueryInterface () returned ok. calling spNetCfgComponentPrivate->QueryNotifyObject (ITcpipProperties). Call to spNetCfgComponentPrivate->QueryNotifyObject () returned ok. calling spTcpipProperties->GetIpInfoForAdapter (454292, 454244). Call to spTcpipProperties->GetIpInfoForAdapter () returned ok. calling spTcpipProperties->SetIpInfoForAdapter (454292, 187934968, DefGw=;GwMetric=1;IfMetric=1;DNS=;WINS=;). Call to spTcpipProperties->SetIpInfoForAdapter () returned ok. calling spNetCfg->Apply (). Call to spNetCfg->Apply () returned ok. calling CoTaskMemFree (187934968). Return value from call to CoTaskMemFree() not logged. calling spNetCfg->Uninitialize (). Return value from call to spNetCfg->Uninitialize() not logged. calling spNetCfgLock->ReleaseWriteLock (). Return value from call to spNetCfgLock->ReleaseWriteLock() not logged. Call to SetNetConfig () returned ok. Call to ClearDefaultGateway () returned ok. Call to ClearDefaultGateway () returned ok. calling SetDefaultGateway (454348, 217.34.58.246). calling SetNetConfig (454348, 217.34.58.246, , ). calling CoCreateInstance (CNetCfg). Call to CoCreateInstance () returned ok. calling spNetCfg->QueryInterface (INetCfgLock). Call to spNetCfg->QueryInterface () returned ok. calling spNetCfgLock->AcquireWriteLock (1000, BO ICW). Call to spNetCfgLock->AcquireWriteLock () returned ok. calling spNetCfg->Initialize (0). Call to spNetCfg->Initialize () returned ok. calling spNetCfg->FindComponent (ms_tcpip, 454248). Call to spNetCfg->FindComponent () returned ok. calling spNetCfgComponent->QueryInterface (INetCfgComponentPrivate). Call to spNetCfgComponent->QueryInterface () returned ok. calling spNetCfgComponentPrivate->QueryNotifyObject (ITcpipProperties). Call to spNetCfgComponentPrivate->QueryNotifyObject () returned ok. calling spTcpipProperties->GetIpInfoForAdapter (454348, 454300). Call to spTcpipProperties->GetIpInfoForAdapter () returned ok. calling spTcpipProperties->SetIpInfoForAdapter (454348, 749792, DefGw=217.34.58.246;GwMetric=1;IfMetric=1;DNS=;WINS=;). Call to spTcpipProperties->SetIpInfoForAdapter () returned ok. calling spNetCfg->Apply (). Call to spNetCfg->Apply () returned ok. calling CoTaskMemFree (749792). Return value from call to CoTaskMemFree() not logged. calling spNetCfg->Uninitialize (). Return value from call to spNetCfg->Uninitialize() not logged. calling spNetCfgLock->ReleaseWriteLock (). Return value from call to spNetCfgLock->ReleaseWriteLock() not logged. Call to SetNetConfig () returned ok. Call to SetDefaultGateway () returned ok. calling SetDNSForwarders (213.120.62.98, 213.120.62.99). calling RegOpenKeyEx (HKEY_LOCAL_MACHINE, SYSTEM\CurrentControlSet\Services\DNS\Parameters). Call to RegOpenKeyEx () returned ok. calling RegSetValueEx (Forwarders, 213.120.62.98 213.120.62.99). Call to RegSetValueEx () returned ok. calling RegSetValueEx (IsSlave, 0). Call to RegSetValueEx () returned ok. calling RegSetValueEx (ForwardingTimeout, 5). Call to RegSetValueEx () returned ok. calling RegCloseKey (). Return value from call to RegCloseKey() not logged. calling _RestartService (DNS). Call to _RestartService () returned ok. Call to SetDNSForwarders () returned ok. calling _IsServiceInstalled (DHCPServer). calling LoadLibrary (dhcpsapi.dll). calling GetProcAddress (DhcpRpcFreeMemory). Call to GetProcAddress () returned ok. calling GetProcAddress (DhcpSetServerBindingInfo). Call to GetProcAddress () returned ok. calling GetProcAddress (DhcpGetServerBindingInfo). Call to GetProcAddress () returned ok. calling DhcpGetServerBindingInfo (127.0.0.1, 0, 454308). Call to DhcpGetServerBindingInfo () returned ok. calling DhcpRpcFreeMemory (638952). Return value from call to DhcpRpcFreeMemory() not logged. calling FreeLibrary (1917452288). Return value from call to FreeLibrary() not logged. calling GetIPFromAdapterGuid ({B9F6032B-5CF6-4225-9329- 12F984158001}). Call to GetIPFromAdapterGuid () returned ok. calling PrepareForResetDNSListeners (). Call to PrepareForResetDNSListeners () returned ok. calling _ResetDNSListeners (dynamic). *********************************************************** * Error 0x80072550 returned from call to _ResetDNSListeners (). calling _SetRegStringValue (HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\BackOffice\Connectivity\ICW, Last_2nd_Nic_Guid, {7D174609-1322-49D2-B7F7-0A14A2D7BC6F}). Return value from call to _SetRegStringValue() not logged. calling _SetRegStringValue (HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\BackOffice\Connectivity\ICW, Last_1st_Nic_Guid, {B9F6032B-5CF6-4225-9329-12F984158001}). Return value from call to _SetRegStringValue() not logged. Error 0x80072550 returned from call to DoFulltime(). calling ::RegCreateKeyEx (HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\BackOffice\Connectivity\ICW). Return value from call to ::RegCreateKeyEx() not logged. calling RegSetValueEx (Last_Hardware_Option, 3). Return value from call to RegSetValueEx() not logged. calling RegCloseKey (). Return value from call to RegCloseKey() not logged. Error 0x80072550 returned from call to CNetCommit::Common (). Error 0x80072550 returned from call to CNetCommit::Commit (). Tag: ISA Security Question Tag: 145863
  - 10
    - Urgent - Can I get remote acess to server administrator on SBS2K I have Administrator rights on all our systems. We have a problem with our server & I am not in the office can I get access to the server admin console? The problem we had was then a user tried to open folders on the server a message popped up saying "their are no available logons at this time" We have rebooted the server and when the users started their pc's it took about 10 mins for the pc to load personal settings & when they had loaded up they are crashing when using many different file types? -- Regards Simon Hardstaff --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.548 / Virus Database: 341 - Release Date: 05/12/2003 Tag: ISA Security Question Tag: 145862
  - 11
    - Terminal Service over Web I tried to connect to the SBS server over the web by typing http:\\servername\myconsole I get a screen with two buttons: connect and disconnect and a large area below the buttons with a small icon which is not readable. When I push the connect button, the system seems to not work (task manager reports program not responding for many minutes). TS in admin mode works fine using the TS client program, I was just trying to get it to work over the web so I can admin the server if necessary while away from the office. Any one seen this before? Tag: ISA Security Question Tag: 145860
  - 12
    - SMTP Queues SBS 2K We have a small network (25 users) all using win2k & a SBS 2k server, this connects to the outside world via a linux firewall, if the firewall (or the ADSL line) goes down any mail sent during this time ends up in the destination unreachable queue, understandable, however all subsequent outgoing mail ends up there also, & the only way to move them is to stop & restart the SMTP service, any ideas why this is happening? and more importantly how to stop from happening? & all firewall hardware & software has been replaced anyway, however we are able to produce this behaviour at will by simply rebooting the firewall or disconnecting the adsl line, as soon as there is no connection outgoing mails go into the destination unreachable queue & stay there and all mail sent after this even though the connection is back up go in there as well, we can clear them (usually) by stopping & starting SMTP service but this shouldn't happen? Any & all suggestions gratefully recieved, I don't have all that much hair left! __________________________________________________________________ Mike ICQ#: 122232506 Current ICQ status: + More ways to contact me __________________________________________________________________ The wise man learns more from his enemies than a fool does from his friends. - Chinese Proverb Tag: ISA Security Question Tag: 145857
  - 13
    - regarding SBS 2003 - OWA problems regarding SBS 2003 - OWA - problems with opening mails - confiuration, buttons missing etc Tag: ISA Security Question Tag: 145853
  - 14
    - SBS remote office > Exchange head office...? Hi all, Theoretical set-up - looking for advice on feasibility and/or potential problems [indeed, if this is workable!] Remote Office: 6 users Currently running bog-standard W2K Server Outlook clients connecting directly to individual POP3 mailboxes at ISP - NO internal mail whatsoever Broadband connection via Broadband Router on LAN - 512k ADSL Head Office: W2K Server Exchange2K Server Cisco 1700 Router Cisco PIX 515E Firewall Mailsweeper Websweeper McAffee EPolicy Orchestrator McAffee Virusscan Broadband is 2Mb SDSL Customer is looking to have the Remote Office link with the Head Office in the following way: 1] ALL email either incoming or outgoing to go via Head Office - they [at present] are looking for all internal mail within the Remote Office to also pass via Head Office, but I'm dubious as to whether this is the most efficient method of achieving things for them 2] 'Constant' VPN access during working hours to allow file/document sharing between sites We've [thus far] told the customer that they've got the following basic options: 1] Set-up the constant VPN connection between the offices either server-server or router-router and configure all the Outlook clients at the Remote Office as offline clients of the Head Office Exchange Server - downside is that all the internal mails are sent to the Head Office then back to the Remote Office which is pretty bandwidth inefficient. 2] Go SBS at the Remote Office - this will provide firewalling at the Remote Office [at present its just the NAT on the Router!], internal mail at the Remote Office stays within the Remote Office while external email can be forwarded to a Smart Host of the client's Head Office Exchange Server and incoming mail can be downloaded from the Head Office Exchange Server via POP3 [or SMTP?] Reasoning for SBS: 1] If the VPN link to Head Office goes down, the client in the Remote Office still has internal mail and we could [if the outage were a long one] configure them to send outgoing emails directly out via DNS. They'd get ISA to protect their network [and adding a 2nd NIC] in order to provide FAR more security than relying on the existing router's NAT. Basically to provide a degree of fault-tolerance in addition to ease of remote administration and increased security. Reasoning for non-SBS [more from customer's perspective than ours]: 1] Cheaper - perhaps slightly tighter integration with their Head Office existing set-up Notes: 1] Client does NOT wish to go W2K3 at this stage - therefore it would need to be SBS2K if we went down that route Anyone got any pointers/advice/potential pitfalls? Regards, David Tag: ISA Security Question Tag: 145848
  - 15
    - Problem... I have just noticed that any user can open any user's Inbox, Calendar etc... from their Outlook client. How do I lock it down just to that user - so that they can access their Mailbox only and nobody else's? This is urgent! Skc Tag: ISA Security Question Tag: 145841
  - 16
    - Putting SBS 2003 Terminal Server in application mode?! Hi, Allthough Microsoft says application mode has been removed from SBS 2003 Terminal Services I read something on http://www.bagsolutions.orcon.net.nz Does this work, has anyone got experiences (or other solutions) with putting SBS 2003 TS in application mode? Thanks, Bas. Tag: ISA Security Question Tag: 145840
  - 17
    - RRAS and Internet We have just deployed our replacement SBS2000 box. I have a problem when I go to Start>Programs>Admin Tools>Routing and Remote Access and Enable RRAS for VPN users to clients through our server. When I enable the service, I get pop-up warnings saying that DHCP will assign IP addresses to any clients. Furthermore, as soon as the RRAS service is enabled, a few clients are experiencing problems browsing the web - as if the RRAS blocks access to the web. On clients that have this problem, the ISA firewall client can update to the SBS, but cannot browse the web although their browser is set to look at the Proxy server (ISA on SBS). Please can someone help me on this. The SBS has two NICs - LAN and WAN. The LAN IP is 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it goes through a Firewall that NATs the IP). The WAN card is hardcoded with the IP, even though the firewall runs DHCP. The SBS is fully patched via Windows Update and Service Packed for SBS SP 1a. skc Tag: ISA Security Question Tag: 145832
  - 18
    - SBS SSL Issues Hello all, I am trying to connect to a secure web site, that is using a unnormal port address of 19638, I am using a SBS server with ISA firewall, and I know that I need to add this port to the exsisting range of ports that my server hold. But I have no idea how to do it, I have tried the SDK for SBS and that does not help, tried all meta sites but still no luck. Can anybody help ? Thanks Mike Tag: ISA Security Question Tag: 145831
  - 19
    - Help! Help! Cannot add CALs: Message: Your Server is not running Microsoft Small Business Server Hi, Help needed urgently! Our new SBS-2000 server is nearly installed and is going in "use" tomorrow. Today, I wanted to add additional client access licenses. I have a SBS-2000 client add pack for 20 clients. When I run setup.exe from the diskette, I get the following error message: "Your computer is not running Microsoft Small Business Server. You can only add licenses to a computer running Microsoft Small Business Server" But I definitevely have SBS-2000. I also detected another strange thing: For some reasons I do not have the "Business Server Administration Console", it simply does not exist on my server!!!. Reading some newsgroups articles, I found out, that the console should be in the folder "C:\Program Files\Microsoft BackOffice\Managment...." But also: I do not have a folder named " C:\Program FilesMicrosoft BackOffice"!! Reading the Knowledge Base article KB234929, I tried to apply the registry patch to HKLM\Software\Microsoft\Small Business\Version. The key was empty, so i changed it to Value = 5.0 (5.0 for SBS-2000). After that, I got another error message when I tried to run setup.exe with the following text "You can not add more licenses becaus this would place your computer over the allowed maximum numbers of licences. The I ran setup.exe -v from the diskette which displayed the following infos: Use count: 0x0000000 Concurrent Limit: 0x00014 Previous Limit: 0x0005 Current Limit: 0x000a So, that's all I know for now. What's going wrong with my installation of SBS-2000? Are there any tips that could me? Any help is greatly appreciated ... Thanks a lot in advance ... Michael Schaefer Tag: ISA Security Question Tag: 145827
  - 20
    - Merv! Where art thou? Merv, mate! You may remember me from such posts as last week. I posted with subject of "Internet failed!" (this is about 3 pages back). You had suggested looking at the routing table which I have, and for your amusement have posted. If you can, I would appreciate any feedback you or anyone else can give. This has got me stumped and I would hate to lose this round. :) Tippy. Tag: ISA Security Question Tag: 145824
  - 21
    - Publishing Outlook Web Access with ISA Server and Exchange on the same machine Does anyone know of a way of manually configuring ISA to publish outlook web access when the ISA server and exchange server are the same machine ??? the ICW (internet connection wizard) for SBS crashes. so we set up a destination set to include www.lfe.org.au/exchange*, www.lfe.org.au/exchweb* and www.lfe.org.au/public* then set up a web publishing rule using this destination set to point to the internal IP address of our ISA server on port 81. our website (www.lfe.org.au) works doing this but OWA doesn't ?? any ideas please ? ....thanks.... Sam Tag: ISA Security Question Tag: 145822
  - 22
    - configuring a report Hi I have configured sbs system admin to email me a report on the health of the system. It does this. Only problem is that when I try to open the report in Outlook it can't associate a program to read it. Any help appreciated. ps I tried both in raw mode as as well as XML Tag: ISA Security Question Tag: 145814
  - 23
    - ISA blocking access to web site SBS2000 has been setup and things had been working great for almost 2 years but we finally hit a snag. We are not able to get to the web site wwwdotmydomain.com (not the real domain). When we setup the server we were told that this office would host their own web site and email so we setup the domain as mydomain.com with a Dell PowerEdge2500 with many bells and whistles. Well the owner 2 years later transfered his web site and email to be hosted by his ISP. For email all I really had to do was configure Exchange with POP3. When I try to hit the web site now from the LAN it asks me for a Domain Username and Password. The LAN's domain is mydomain.com which may be a problem with the ISP hosting mydomain.com I can get to the web site using the IP Address, and I have modified the host table on the server and get a reply back with the correct address when trying to ping wwwdotmydomain.com but I can not get to wwwdotmydomain.com without it asking me for a domain username and password. Any help would be great, thank you. Tag: ISA Security Question Tag: 145813
  - 24
    - server errors Hi, My server has the following errors: Critical - 12/7/2003 10:08:28 AM - Server Memory Pool Paged Failures > 5 Server Memory : Critical condition. WMI Status: 2147749889 Critical - 12/7/2003 10:08:28 AM - Redirector Network Errors/sec > 1 Redirector : Critical condition. WMI Status: 2147749889 Critical - 12/7/2003 10:08:28 AM - Server Access Errors Errors Granted Access > 10 Server Access Errors : Critical condition. WMI Status: 2147749889 I have 2 gb of ram and dual zenon p2 2.6 gb processors. Could someone please explain what the errors mean, and what I should do. Regards Simon Tag: ISA Security Question Tag: 145808
  - 25
    - SBS2k with 1 NIC and no ISA server Am migrating an SBS install from one box to another. This new box is on a network that has a 2Mg broadband feed supplied by an ISP that is firewalled by them. The broadband feed is presented to us as an ethernet cable with an IP that is on the internal range of our network. I have asked they map a fixed external IP to our new SBS2K box internal IP for email delivery, TS etc. The question: with this set up I cannot see how I would use ISA server (needs 2 NICS right?) and so am not going to install it. Instead I am going to have DHCP give out the broadband ethernet IP as the default gateway. I am pretty happy with the ISP's firewall technology (Nortel Shasta), but does this set up pose problems I have not foreseen? Will DNS set-up from default be fine or will it need work? Anyone with any info, pointers about SBS2K with 1 nic would be most welcome. thanks Gerry Tag: ISA Security Question Tag: 145781
- Next
  - 1
    - Operation Failed SBS2000 server with all patches and latest service packs. Workstations are Windows 2000Pro running Outlook 2002 with latest service packs and patches. A couple of the workstations intermitently experience problems opening e-mail attachments. When the users try to open the attachment Outlook will display the following error: "Operation Failed." If they click Ok and try opening the attachment again, sometimes it will open fine and sometimes they wait a few minutes and can open the attachment. I'm stumped on this one. Any help or information would greatly appreciated. Tag: ISA Security Question Tag: 145778
  - 2
    - DotNetNuke on SBS Bit OT, but I'm a gonna try here... How many folk are running a dotnetnuke site on SBS??? One at least - I am - using it to put all the documentation for the client online for them. I *really* like it. At the moment, it's internal access only. In the near future, I want to allow external access over SSL (we'll generate a certificate ourselves). I also have a problem on the client install of my dotnetnuke site, it seems to have gone all case sensitive on me (it's running fine on my own PC). Are there any DotNetNuke NG's or good support sites I could check out? -- Duncan Tag: ISA Security Question Tag: 145773
  - 3
    - SBS2K => SBS3K - upgrade OK, read a bit here about migrations n' stuff - but for many of us, with smaller networks, it's not economic to migrate to a new server. I have a client, for eg. with a one year old server (nice PC, will last another couple of years I hope) - they don't wanna fork out another $20K for another server (it's just not necessary). The current one is doing the job nicely. So it'll be an upgrade, or fresh install of SBS3K. And yet!!! - I've read very little on this NG on *upgrading* experiences that folk have had - surely many of you have done this. I'd like to know of your experience, and what can go wrong. Are folk waiting for SBS3K SP1 or something? :) -- Duncan Tag: ISA Security Question Tag: 145772
  - 4
    - Understanding Exchange and the M Drive What actually resides on the M drive and why should you not scan it or back it up? I want to make sure that the users have enough space for their mailboxes. Thanks, Chon Tag: ISA Security Question Tag: 145771
  - 5
    - migrating SBS2000 to a new server Hi there, I have a SBS2000 server that has outgrown its current hardware. Is there a good how-to on migrating an existing Small Business Server 2000 to new Hardware while preserving all the settings..... TIA TonyR Tag: ISA Security Question Tag: 145770
  - 6
    - OWA prompts for password multiple times I have OWA installed and the article 327349 says to unclear the check box for Ask Unauthentuicated users for identification to fix this problem of prompting for password. Will this open up the access to anyone? Peter V Tag: ISA Security Question Tag: 145766
  - 7
    - name resolution query I can connect from a remotecomputer to my sbs server and link to other computers on the network by ip number but not by name - cannot ping by name can anyone help Regards Richard Tag: ISA Security Question Tag: 145765
  - 8
    - sophos av anyone used sophos AV with sbs2k? have a client that has licence for it. personally i know symantec and avg better, so have limited experience of this one regards Tag: ISA Security Question Tag: 145763
  - 9
    - What is the best/simplest way to lock down Outlook 2000 in the "Enterprise"? I've been reviewing the SANS Top 20 Vulnerabilities and other security documents. I don't see any settings in Group Policy for securing Outlook. It there an effective way to accomplish many of the recommendatuions, like closing the preview pane and blocking script-laden messages, without physically visiting every desktop? roberto Tag: ISA Security Question Tag: 145761
  - 10
    - <<< WOW what a boring month -- No Security Bulletins today>>> Just about fell out of my chair last night when I saw this on the web site http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/Default.asp No Security Bulletins for December Monthly Release (December 8, 2003) Microsoft had no security bulletins to release December 9, 2003, as part of its monthly release cycle for December. If no other patches come out between now and 12/31....I think TBergstom won the contest... SECURITY CONTEST: http://www.sbslinks.com/Security%20Contest.htm -- http://www.sbslinks.com/really.htm Tag: ISA Security Question Tag: 145759
  - 11
    - STORE.EXE constantly running Hello, STORE.EXE is constantly running on my server and sucking up all my HD space with something??? I don't see any email messages coming in or out. I did notice 2 days ago that I received about 4500+ NDR's from email trying to go out but I don't know where they came from. This raised a flag as to the possibility of my server being used as a spam relay but that has not panned out, at least not that I can see. I have run 2 different virus scans with 2 different scanners and come up empty. Does anyone have any suggestions as to what could be causing this and what I can do about it. Thanks for any and all info. Chris Tag: ISA Security Question Tag: 145756
  - 12
    - Connecting outlook to exchange Hi I am having great problems creating an account for connecting to a mailbox on our Exchange Server with in Outlook 2002. There is currently a POP3 account set up as the default Profile. I have tried to set up a new Profile under "email Account" in outlook and when i select "Exchange Server" And enter the Exchange server name and the users username and click next the following error message: "Outlook could not log on. Check to make sure you are connected to the network and are using the proper server and mailbox name. The microsoft Exchange Address Book was unable to log onto the Microsoft Exchange Server computer. Contact your system administrator if the problem persists." After this i tried to delete all of the profiles on the clients outlook by going to "Mail" in the Control Panel". The network connection between the client and server are fine. Can someone please help. Many thanks Brian Tag: ISA Security Question Tag: 145755
  - 13
    - Keep SBS2K for SQL Server and SBS2K3 for Exchange I currently have Small Business Server 2000 running SQL Server. I would like to start using Small Business Server 2003 for Exchange 2003. Can I have the new SBS2003 as the main DC server while still running SQL Server 2000 on the other. Tag: ISA Security Question Tag: 145754
  - 14
    - Tape Backup Suggestions We are currently upgrading our storage from 80gig to 180gig and lookup for suggestions as far as what tape backup everyone uses. I have DLT40 drives at the moment. Thanks Eddie Tag: ISA Security Question Tag: 145752
  - 15
    - VPN SBS2K to SBS2K3 We have a LAN in Denver with SBS2K, and a LAN in Phoenix with SBS2K3. Both have DSL with Static IP. Phoenix is setup totally stock, and Denver is behind a Cisco Pix501 firewall. We can VPN for Phx to Den easily, but are unable to VPN from Den to Phx. I've been able to VPN to Phx from every machine I've tried that isn't on the Denver LAN, so I suspect is has something to do with the the Cisco Firewall. Unfortunately I don't have much confidence in the company that set up our firewall. The guy who did the work is gone and the new guy seems lost. He suggested a tunnel which would require purchasing another Cisco 501 for Phx. Is a tunnel possible without the new piece of equipment? Is it possible to VPN from our Den LAN to our Phx LAN without a tunnel? I'll paste the log file to the end of the message. Thanks, Steve ****************************************************************** Operating System : Windows NT 5.1 Service Pack 1 Dialer Version : 7.2.2600.1106 Connection Name : Connect to Small Business Server All Users/Single User : Single User Start Date/Time : 12/9/2003, 9:33:43 ****************************************************************** Module Name, Time, Log ID, Log Item Name, Other Info For Connection Type, 0=dial-up, 1=VPN, 2=VPN over dial-up ****************************************************************** [cmdial32] 9:33:43 03 Pre-Init Event CallingProcess = C:\WINDOWS\Explorer.EXE [cmdial32] 9:33:51 04 Pre-Connect Event ConnectionType = 1 [cmdial32] 9:33:51 06 Pre-Tunnel Event UserName = stevemahon Domain = LHPLLC DUNSetting = Connect to Small Business Server Tunnel DeviceName = TunnelAddress = 207.108.140.97 [cmdial32] 9:34:30 20 On-Error Event ErrorCode = 721 ErrorSource = RAS [cmdial32] 9:34:35 06 Pre-Tunnel Event UserName = stevemahon Domain = LHPLLC DUNSetting = Connect to Small Business Server Tunnel DeviceName = TunnelAddress = 207.108.140.97 [cmdial32] 9:35:14 20 On-Error Event ErrorCode = 721 ErrorSource = RAS [cmdial32] 9:35:19 06 Pre-Tunnel Event UserName = stevemahon Domain = LHPLLC DUNSetting = Connect to Small Business Server Tunnel DeviceName = TunnelAddress = 207.108.140.97 [cmdial32] 9:35:57 20 On-Error Event ErrorCode = 721 ErrorSource = RAS [cmdial32] 9:36:02 06 Pre-Tunnel Event UserName = stevemahon Domain = LHPLLC DUNSetting = Connect to Small Business Server Tunnel DeviceName = TunnelAddress = 207.108.140.97 [cmdial32] 9:36:07 19 On-Cancel Event Tag: ISA Security Question Tag: 145747
  - 16
    - volume I am having trouble getting the volume to work. I can hear the sounds, but they are not very loud. I have adjusted the volume controls but that hasn't worked. Can anyone tell me how to do this please ? Tag: ISA Security Question Tag: 145746
  - 17
    - help - corrupt DHCP? I am getting dhcpserver event id's 1010, 1014 and 1016. From reading various posts, while my system is working, this indicates I may have a corrupt dhcp/wins I could do with some help in how to correct this. My current range is 192.0.0.1 to 192.0.0.254 and is set up as follows: a) I have exclusions set up for: 192.0.0.1 to 192.0.0.10 for various servers and switches 192.0.0.245 to 192.0.0.254 for some barcoding equipment a number of relatively random numbers assigned to printers b) I have reservations on 3 ip addresses for printers c) Finally 1 server which was previously assigned an address by dhcp has had its address fixed in its set up but this address is not yet added to the excluded or reserved lists. My current proposed course of action is to stop dhcp and then delete %SystemRoot%\System32\Dhcp\dhcp.mdb and then restart dhcp. Can anyone advise if this is ok? Regards Richard Tag: ISA Security Question Tag: 145741
  - 18
    - SBS2K Backup/Reconfigure Drives/Restor We have an SBS2K installation where the C: drive is only 4gb and we are running out of space frequently. The system has 3 18gb SCSI drives configured as follows using Disk Manager. C: is 4gb mirrored on Disk0 & Disk1. D: is 14gb Raid-5 on Disk0, Disk1, and Disk2. Our original thought was that this would be a safe and well performing configuration. Eventually our Data storage requirement outgrew the 14gb D drive, so I installed 3 large IDE drives arranged in a Raid-5 where all the user and company files now reside. My hope is to complete a full backup of C: and D:, then reconfigure the drives using Recover Disks, and restore. Everything backedup on C: will resore to C: and the same on D:, Its just that they will different sizes and probably different raid configurations. My questions are: Will the restored windows system recognize the change and load properly? Will the shares be OK? Will SQL and Exchange server be OK? Do you have any suggestions for configuration? Thank you, Steve Mahon Tag: ISA Security Question Tag: 145738
  - 19
    - Creating share on new volume Hi all, I would like to make our Access XP database available on a seperate volume from the C Drive. I've created a new volume (Drive E) which is a Default share. I would like to put the database alone in this partition but can't locate it from the client computers. I can locate it if I put it in the company share on the C: Drive - \\ServerName\CompanySharedFolder\Database but how can I access \\ServerName\DriveE\Database ? I tried creating a new share on Drive E with max share permissions & full control for all users but I can't locate a shortcut to it from the client desktops. Any help appreciated. TIA Gary Tag: ISA Security Question Tag: 145737
  - 20
    - ISA restrict Web Sites??? Hi, I have a SBS2K server with 35 windows 2K client machines . I have a slight problem with specific web pages in the company. Some of the days work at our company is reducing due to users playing on games at http://www.miniclip.com to which is reducing the amount of work being produced in the day. I am having trouble finding out if ISA server can restrict access to these sites, I have looked on the web searching through google and all I am getting is to purchase software for the job. Does anyone know of anyway I can do this as this is becoming a potential danger to the amount of work done throughout the day. Thanks in advance Andy C Tag: ISA Security Question Tag: 145735
  - 21
    - browsing network over VPN hello I am trying to connect to a domain (windows 2000 SBS) using VPN I know how to set it up and i can connect to the domain fine. I can also connect to exchange. What i need to do is connect to the network so i can access files. In the past i have taken a PC that has been on a network of site and connected it via VPN and have been able to browse the network. Tag: ISA Security Question Tag: 145733
  - 22
    - Event Viewer disappearing act We recently migrated from our old SBS2000 box to a new one. We had to re-join all the Windows 2000 Pro client to the new SBS (DC) due to the SSID issue. A client is running Windows 2000 Server (non-DC) and we have noticed that his Event Viewer contents are dissappearing. When he click on the Application Log, for instance, the header says 1,279 item(s), but nothing is displayed. This is intermittent, as when he click away from it and then back onto it, then it comes back again. Surely something very weird but very hard to pinpoint! Please help. skc Tag: ISA Security Question Tag: 145731
  - 23
    - error on internal domain name I installed my server as server.co.za instead of server.local and cannot access my website. I created an Ahost record and a local host record - DOESN'T WORK!!! The website is on a server which is hosting several other websites and the ip of that server does not resolve my problem. Please help! Tag: ISA Security Question Tag: 145730
  - 24
    - Not able to browse the Internet overseas? I have a customer that is having a problem with a Notebook that they travel with. The Notebook is setup to connect to a SBS 2000 server but occasionally it is brought overseas to connect to the Internet. I checked and they are receiving a valid IP address, Default Gateway and DNS server(s). In order to enable browsing I had then uncheck the Proxy Server in the Lan Settings of IE. The bypass Proxy Server for Local Address was checked as I thought this would allow for Browsing if there wasn't a Proxy. Any idea why we needed to make this change and is this standard operating? Thanks, John Tag: ISA Security Question Tag: 145725
  - 25
    - exchange queues and bad mail Because I keep getting these so called microsoft security updates I end up with loads of mail in the SMTP queue, sometimes it prevents mail from going out. If i delete them they seem to still take ages to clear? Is it safe to go into the actual directory and delete then out of there or does it have to be done via the program? can i do the same witht he bad mail section? Is there an easy way of clearing everything int he queue without haveing to click each one and say delete? Thanks a lot Tag: ISA Security Question Tag: 145719

If you uncheck the "Ask all unauthenitcated user for
identification" on the incoming web request tab do you
open the network up to anyone? This was a fix from MS so
I do not get the prompts for passwords multiple times.
Thanks.

Peter V

Top