| Author |
Message |
Stevef
Guest
|
Posted:
Wed Oct 19, 2005 12:50 am Post subject:
RSoP Tool |
|
|
When I remove ISA 2004 from the SBS 2003 server my RSoP tools works as it
should, when I re-install ISA 2004 it will not work. I get an RPC error, can
not communicate with computer. This is a valuable tool that helps me diagnois
GPO issues.
The event viewer log is below:
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10009
Date: 10/18/2005
Time: 3:25:50 PM
User: N/A
Computer: JAMINT
Description:
DCOM was unable to communicate with the computer STEVEF-PC using any of the
configured protocols.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp. |
|
| Back to top |
|
 |
Stevef
Guest
|
Posted:
Wed Oct 19, 2005 12:50 am Post subject:
RE: RSoP Tool |
|
|
Update:
I can disable the RPC filter in ISA2004 and it works, however it (the
filter)must be there for something right... Can I get this to work just
internally. What do you suggest?
"Stevef" wrote:
| Quote: | When I remove ISA 2004 from the SBS 2003 server my RSoP tools works as it
should, when I re-install ISA 2004 it will not work. I get an RPC error, can
not communicate with computer. This is a valuable tool that helps me diagnois
GPO issues.
The event viewer log is below:
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10009
Date: 10/18/2005
Time: 3:25:50 PM
User: N/A
Computer: JAMINT
Description:
DCOM was unable to communicate with the computer STEVEF-PC using any of the
configured protocols.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
|
|
|
| Back to top |
|
 |
Edward Tian
Guest
|
Posted:
Wed Oct 19, 2005 12:50 pm Post subject:
RE: RSoP Tool |
|
|
Hi:
Thank you for posting here.
From the description, I understand that the RSoP doesn't work when ISA 2004
in installed on the SBS Server. If you disable the RPC-filter in ISA 2004,
it works fine. If I have misunderstood your concern, please feel free to
let me know.
Based on my research, there is a known issue regarding the RPC filter of
ISA 2004. This problem occurs because the ISA Server RPC filter is not
compatible with the changes in the RPC protocol that are introduced by
Windows Server 2003 SP1. When you enable the ISA Server RPC filter, the RPC
filter enforces strict compliance with a subset of the RPC protocol that is
used by Microsoft Exchange Server MAPI communications.
More information:
Some firewalls may reject network traffic that originates from Windows
Server 2003 Service Pack 1-based computers
http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
May I know if the ISA Server 2004 comes with the SBS 2003 Premium SP1 or it
is a stand-alone version? The problem was fixed in ISA 2004 SP1 and you can
refer to this KB article for more detailed information:
The ISA Server RPC filter blocks RPC traffic after Windows Server 2003
Service Pack 1 is installed on a computer that is running ISA Server 2004
or ISA Server 2000
http://support.microsoft.com/?id=887222
To work around this problem, we need to disable the ISA Server RPC filter.
If you have already installed the ISA 2004 SP1, please help to gather the
ISA log for further analysis:
1) Schedule a down time.
2) Open ISA 2004 management console.
3) Expand the server node and highlight 'Monitoring'.
4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
9) Click 'Apply' to save changes and update the configuration.
10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.
11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.
12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.
13) Reproduce the problem, stop the service, and then gather the resulting
W3C files to my mailbox v-edtian@microsoft.com for analysis.
14) Please also let me know the IP address of the testing clients so that I
can filter the data.
Please feel free to let me know if you have further concerns.
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| Subject: RSoP Tool
| Date: Tue, 18 Oct 2005 13:55:02 -0700
| Lines: 22
| Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162425
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| When I remove ISA 2004 from the SBS 2003 server my RSoP tools works as it
| should, when I re-install ISA 2004 it will not work. I get an RPC error,
can
| not communicate with computer. This is a valuable tool that helps me
diagnois
| GPO issues.
|
| The event viewer log is below:
|
| Event Type: Error
| Event Source: DCOM
| Event Category: None
| Event ID: 10009
| Date: 10/18/2005
| Time: 3:25:50 PM
| User: N/A
| Computer: JAMINT
| Description:
| DCOM was unable to communicate with the computer STEVEF-PC using any of
the
| configured protocols.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp.
|
| |
|
| Back to top |
|
 |
Stevef
Guest
|
Posted:
Wed Oct 19, 2005 8:50 pm Post subject:
RE: RSoP Tool |
|
|
Hello Edward,
Your understanding is correct.
ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
I just tried to install SP1 KB 891024 and I got the following Windows
Installer error:
The upgrade patch can not be installed by the Windows
Installer Service because the program to be upgraded may be missing, or
the upgrade patch may upgrade a different version of the program.
Verify that the program to be upgraded exists on your computer and that you
have the correct upgrade patch.
I have version 4.0.2163.213
Note: Don't know if it matters but I have ISA2003 installed on my e:\ RAID5
array for reasons of space and speed. My C drive is dedicated to %systemroot%
only. This works great for everything else.
I'll have the logs to you shortly. Thanks for your help.
Steve
"Edward Tian" wrote:
| Quote: | Hi:
Thank you for posting here.
From the description, I understand that the RSoP doesn't work when ISA 2004
in installed on the SBS Server. If you disable the RPC-filter in ISA 2004,
it works fine. If I have misunderstood your concern, please feel free to
let me know.
Based on my research, there is a known issue regarding the RPC filter of
ISA 2004. This problem occurs because the ISA Server RPC filter is not
compatible with the changes in the RPC protocol that are introduced by
Windows Server 2003 SP1. When you enable the ISA Server RPC filter, the RPC
filter enforces strict compliance with a subset of the RPC protocol that is
used by Microsoft Exchange Server MAPI communications.
More information:
Some firewalls may reject network traffic that originates from Windows
Server 2003 Service Pack 1-based computers
http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
May I know if the ISA Server 2004 comes with the SBS 2003 Premium SP1 or it
is a stand-alone version? The problem was fixed in ISA 2004 SP1 and you can
refer to this KB article for more detailed information:
The ISA Server RPC filter blocks RPC traffic after Windows Server 2003
Service Pack 1 is installed on a computer that is running ISA Server 2004
or ISA Server 2000
http://support.microsoft.com/?id=887222
To work around this problem, we need to disable the ISA Server RPC filter.
If you have already installed the ISA 2004 SP1, please help to gather the
ISA log for further analysis:
1) Schedule a down time.
2) Open ISA 2004 management console.
3) Expand the server node and highlight 'Monitoring'.
4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
9) Click 'Apply' to save changes and update the configuration.
10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.
11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.
12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.
13) Reproduce the problem, stop the service, and then gather the resulting
W3C files to my mailbox v-edtian@microsoft.com for analysis.
14) Please also let me know the IP address of the testing clients so that I
can filter the data.
Please feel free to let me know if you have further concerns.
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com
| Subject: RSoP Tool
| Date: Tue, 18 Oct 2005 13:55:02 -0700
| Lines: 22
| Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162425
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| When I remove ISA 2004 from the SBS 2003 server my RSoP tools works as it
| should, when I re-install ISA 2004 it will not work. I get an RPC error,
can
| not communicate with computer. This is a valuable tool that helps me
diagnois
| GPO issues.
|
| The event viewer log is below:
|
| Event Type: Error
| Event Source: DCOM
| Event Category: None
| Event ID: 10009
| Date: 10/18/2005
| Time: 3:25:50 PM
| User: N/A
| Computer: JAMINT
| Description:
| DCOM was unable to communicate with the computer STEVEF-PC using any of
the
| configured protocols.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp.
|
|
|
|
|
| Back to top |
|
 |
Edward Tian
Guest
|
Posted:
Thu Oct 20, 2005 12:50 pm Post subject:
RE: RSoP Tool |
|
|
Hi Steve:
I have consulted with our ISA specialist and here are some updates
regarding this issue:
RPC data may be blocked, and Outlook may not start in Windows Server 2003
with SP1
http://support.microsoft.com/?id=897716
You can download the hotfix from this link:
Download details: ISA Server 2004 Standard Edition RPC Filter Blocks
Outlook Traffic from Computers Running Windows Server 2003 Service Pack 1
(SP1)
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=
0b3b8b50-9a7a-43ca-8e30-ccfcd8ad5fa3&displaylang=en
Please perform the test again after applying this hotfix and tell us the
outcome.
Look forward to hearing how it goes!
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXU370j6MuOx8SOTbulBRKFavdoyw==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
<exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: RSoP Tool
| Date: Wed, 19 Oct 2005 12:03:06 -0700
| Lines: 186
| Message-ID: <2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162778
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Edward,
|
| Your understanding is correct.
| ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
| I just tried to install SP1 KB 891024 and I got the following Windows
| Installer error:
| The upgrade patch can not be installed by the Windows
| Installer Service because the program to be upgraded may be missing, or
| the upgrade patch may upgrade a different version of the program.
| Verify that the program to be upgraded exists on your computer and that
you
| have the correct upgrade patch.
|
| I have version 4.0.2163.213
|
| Note: Don't know if it matters but I have ISA2003 installed on my e:\
RAID5
| array for reasons of space and speed. My C drive is dedicated to
%systemroot%
| only. This works great for everything else.
|
| I'll have the logs to you shortly. Thanks for your help.
|
| Steve
|
| "Edward Tian" wrote:
|
| > Hi:
| > Thank you for posting here.
| >
| > From the description, I understand that the RSoP doesn't work when ISA
2004
| > in installed on the SBS Server. If you disable the RPC-filter in ISA
2004,
| > it works fine. If I have misunderstood your concern, please feel free
to
| > let me know.
| >
| > Based on my research, there is a known issue regarding the RPC filter
of
| > ISA 2004. This problem occurs because the ISA Server RPC filter is not
| > compatible with the changes in the RPC protocol that are introduced by
| > Windows Server 2003 SP1. When you enable the ISA Server RPC filter, the
RPC
| > filter enforces strict compliance with a subset of the RPC protocol
that is
| > used by Microsoft Exchange Server MAPI communications.
| >
| > More information:
| >
| > Some firewalls may reject network traffic that originates from Windows
| > Server 2003 Service Pack 1-based computers
| > http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
| >
| > May I know if the ISA Server 2004 comes with the SBS 2003 Premium SP1
or it
| > is a stand-alone version? The problem was fixed in ISA 2004 SP1 and you
can
| > refer to this KB article for more detailed information:
| >
| > The ISA Server RPC filter blocks RPC traffic after Windows Server 2003
| > Service Pack 1 is installed on a computer that is running ISA Server
2004
| > or ISA Server 2000
| > http://support.microsoft.com/?id=887222
| >
| > To work around this problem, we need to disable the ISA Server RPC
filter.
| >
| > If you have already installed the ISA 2004 SP1, please help to gather
the
| > ISA log for further analysis:
| > 1) Schedule a down time.
| >
| > 2) Open ISA 2004 management console.
| >
| > 3) Expand the server node and highlight 'Monitoring'.
| >
| > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
| > Pane' is showed there.
| >
| > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
| >
| > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
| >
| > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
| >
| > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
| >
| > 9) Click 'Apply' to save changes and update the configuration.
| >
| > 10) Temporarily disable the Firewall service. To do that, please click
| > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
| > choose 'Stop'.
| >
| > 11) Clear the current existing W3C logs. To do that, go to the log
saving
| > directory and clean any existing .W3C logs. By default, the logs will
be
| > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
| > be able to deleted, that's normal.) You may backup them first and
then
| > delete them.
| >
| > 12) Go back to the ISA 2004 management console, and then Start the
stopped
| > 'Microsoft Firewall' service.
| >
| > 13) Reproduce the problem, stop the service, and then gather the
resulting
| > W3C files to my mailbox v-edtian@microsoft.com for analysis.
| >
| > 14) Please also let me know the IP address of the testing clients so
that I
| > can filter the data.
| >
| > Please feel free to let me know if you have further concerns.
| >
| > Have a nice day!
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: RSoP Tool
| > | thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| > | X-WBNR-Posting-Host: 208.42.161.109
| > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| > | Subject: RSoP Tool
| > | Date: Tue, 18 Oct 2005 13:55:02 -0700
| > | Lines: 22
| > | Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162425
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | When I remove ISA 2004 from the SBS 2003 server my RSoP tools works
as it
| > | should, when I re-install ISA 2004 it will not work. I get an RPC
error,
| > can
| > | not communicate with computer. This is a valuable tool that helps me
| > diagnois
| > | GPO issues.
| > |
| > | The event viewer log is below:
| > |
| > | Event Type: Error
| > | Event Source: DCOM
| > | Event Category: None
| > | Event ID: 10009
| > | Date: 10/18/2005
| > | Time: 3:25:50 PM
| > | User: N/A
| > | Computer: JAMINT
| > | Description:
| > | DCOM was unable to communicate with the computer STEVEF-PC using any
of
| > the
| > | configured protocols.
| > |
| > | For more information, see Help and Support Center at
| > | http://go.microsoft.com/fwlink/events.asp.
| > |
| > |
| >
| >
| |
|
| Back to top |
|
 |
Edward Tian
Guest
|
Posted:
Thu Oct 20, 2005 12:50 pm Post subject:
RE: RSoP Tool |
|
|
Hi Steve:
I have received your log files. Currently I am performing research on the
log files and will update you as soon as possible. Thank you for your
understanding!
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXU370j6MuOx8SOTbulBRKFavdoyw==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
<exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: RSoP Tool
| Date: Wed, 19 Oct 2005 12:03:06 -0700
| Lines: 186
| Message-ID: <2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162778
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Edward,
|
| Your understanding is correct.
| ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
| I just tried to install SP1 KB 891024 and I got the following Windows
| Installer error:
| The upgrade patch can not be installed by the Windows
| Installer Service because the program to be upgraded may be missing, or
| the upgrade patch may upgrade a different version of the program.
| Verify that the program to be upgraded exists on your computer and that
you
| have the correct upgrade patch.
|
| I have version 4.0.2163.213
|
| Note: Don't know if it matters but I have ISA2003 installed on my e:\
RAID5
| array for reasons of space and speed. My C drive is dedicated to
%systemroot%
| only. This works great for everything else.
|
| I'll have the logs to you shortly. Thanks for your help.
|
| Steve
|
| "Edward Tian" wrote:
|
| > Hi:
| > Thank you for posting here.
| >
| > From the description, I understand that the RSoP doesn't work when ISA
2004
| > in installed on the SBS Server. If you disable the RPC-filter in ISA
2004,
| > it works fine. If I have misunderstood your concern, please feel free
to
| > let me know.
| >
| > Based on my research, there is a known issue regarding the RPC filter
of
| > ISA 2004. This problem occurs because the ISA Server RPC filter is not
| > compatible with the changes in the RPC protocol that are introduced by
| > Windows Server 2003 SP1. When you enable the ISA Server RPC filter, the
RPC
| > filter enforces strict compliance with a subset of the RPC protocol
that is
| > used by Microsoft Exchange Server MAPI communications.
| >
| > More information:
| >
| > Some firewalls may reject network traffic that originates from Windows
| > Server 2003 Service Pack 1-based computers
| > http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
| >
| > May I know if the ISA Server 2004 comes with the SBS 2003 Premium SP1
or it
| > is a stand-alone version? The problem was fixed in ISA 2004 SP1 and you
can
| > refer to this KB article for more detailed information:
| >
| > The ISA Server RPC filter blocks RPC traffic after Windows Server 2003
| > Service Pack 1 is installed on a computer that is running ISA Server
2004
| > or ISA Server 2000
| > http://support.microsoft.com/?id=887222
| >
| > To work around this problem, we need to disable the ISA Server RPC
filter.
| >
| > If you have already installed the ISA 2004 SP1, please help to gather
the
| > ISA log for further analysis:
| > 1) Schedule a down time.
| >
| > 2) Open ISA 2004 management console.
| >
| > 3) Expand the server node and highlight 'Monitoring'.
| >
| > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
| > Pane' is showed there.
| >
| > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
| >
| > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
| >
| > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
| >
| > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
| >
| > 9) Click 'Apply' to save changes and update the configuration.
| >
| > 10) Temporarily disable the Firewall service. To do that, please click
| > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
| > choose 'Stop'.
| >
| > 11) Clear the current existing W3C logs. To do that, go to the log
saving
| > directory and clean any existing .W3C logs. By default, the logs will
be
| > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
| > be able to deleted, that's normal.) You may backup them first and
then
| > delete them.
| >
| > 12) Go back to the ISA 2004 management console, and then Start the
stopped
| > 'Microsoft Firewall' service.
| >
| > 13) Reproduce the problem, stop the service, and then gather the
resulting
| > W3C files to my mailbox v-edtian@microsoft.com for analysis.
| >
| > 14) Please also let me know the IP address of the testing clients so
that I
| > can filter the data.
| >
| > Please feel free to let me know if you have further concerns.
| >
| > Have a nice day!
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: RSoP Tool
| > | thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| > | X-WBNR-Posting-Host: 208.42.161.109
| > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| > | Subject: RSoP Tool
| > | Date: Tue, 18 Oct 2005 13:55:02 -0700
| > | Lines: 22
| > | Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162425
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | When I remove ISA 2004 from the SBS 2003 server my RSoP tools works
as it
| > | should, when I re-install ISA 2004 it will not work. I get an RPC
error,
| > can
| > | not communicate with computer. This is a valuable tool that helps me
| > diagnois
| > | GPO issues.
| > |
| > | The event viewer log is below:
| > |
| > | Event Type: Error
| > | Event Source: DCOM
| > | Event Category: None
| > | Event ID: 10009
| > | Date: 10/18/2005
| > | Time: 3:25:50 PM
| > | User: N/A
| > | Computer: JAMINT
| > | Description:
| > | DCOM was unable to communicate with the computer STEVEF-PC using any
of
| > the
| > | configured protocols.
| > |
| > | For more information, see Help and Support Center at
| > | http://go.microsoft.com/fwlink/events.asp.
| > |
| > |
| >
| >
| |
|
| Back to top |
|
 |
Stevef
Guest
|
Posted:
Fri Oct 21, 2005 12:50 am Post subject:
RE: RSoP Tool |
|
|
Hello Edward,
Thank you for your email.
While the discription of this hotfix did not exactly fit my problems I took
your advice and installed it anyway. The install was uneventful, I had no
problems. However the original problem still remains. Should I remove the
hotfix???
Steve
"Edward Tian" wrote:
| Quote: | Hi Steve:
I have consulted with our ISA specialist and here are some updates
regarding this issue:
RPC data may be blocked, and Outlook may not start in Windows Server 2003
with SP1
http://support.microsoft.com/?id=897716
You can download the hotfix from this link:
Download details: ISA Server 2004 Standard Edition RPC Filter Blocks
Outlook Traffic from Computers Running Windows Server 2003 Service Pack 1
(SP1)
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=
0b3b8b50-9a7a-43ca-8e30-ccfcd8ad5fa3&displaylang=en
Please perform the test again after applying this hotfix and tell us the
outcome.
Look forward to hearing how it goes!
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXU370j6MuOx8SOTbulBRKFavdoyw==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com
| References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com
exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl
| Subject: RE: RSoP Tool
| Date: Wed, 19 Oct 2005 12:03:06 -0700
| Lines: 186
| Message-ID: <2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162778
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Edward,
|
| Your understanding is correct.
| ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
| I just tried to install SP1 KB 891024 and I got the following Windows
| Installer error:
| The upgrade patch can not be installed by the Windows
| Installer Service because the program to be upgraded may be missing, or
| the upgrade patch may upgrade a different version of the program.
| Verify that the program to be upgraded exists on your computer and that
you
| have the correct upgrade patch.
|
| I have version 4.0.2163.213
|
| Note: Don't know if it matters but I have ISA2003 installed on my e:\
RAID5
| array for reasons of space and speed. My C drive is dedicated to
%systemroot%
| only. This works great for everything else.
|
| I'll have the logs to you shortly. Thanks for your help.
|
| Steve
|
| "Edward Tian" wrote:
|
| > Hi:
| > Thank you for posting here.
|
| > From the description, I understand that the RSoP doesn't work when ISA
2004
| > in installed on the SBS Server. If you disable the RPC-filter in ISA
2004,
| > it works fine. If I have misunderstood your concern, please feel free
to
| > let me know.
|
| > Based on my research, there is a known issue regarding the RPC filter
of
| > ISA 2004. This problem occurs because the ISA Server RPC filter is not
| > compatible with the changes in the RPC protocol that are introduced by
| > Windows Server 2003 SP1. When you enable the ISA Server RPC filter, the
RPC
| > filter enforces strict compliance with a subset of the RPC protocol
that is
| > used by Microsoft Exchange Server MAPI communications.
|
| > More information:
|
| > Some firewalls may reject network traffic that originates from Windows
| > Server 2003 Service Pack 1-based computers
| > http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
|
| > May I know if the ISA Server 2004 comes with the SBS 2003 Premium SP1
or it
| > is a stand-alone version? The problem was fixed in ISA 2004 SP1 and you
can
| > refer to this KB article for more detailed information:
|
| > The ISA Server RPC filter blocks RPC traffic after Windows Server 2003
| > Service Pack 1 is installed on a computer that is running ISA Server
2004
| > or ISA Server 2000
| > http://support.microsoft.com/?id=887222
|
| > To work around this problem, we need to disable the ISA Server RPC
filter.
|
| > If you have already installed the ISA 2004 SP1, please help to gather
the
| > ISA log for further analysis:
| > 1) Schedule a down time.
|
| > 2) Open ISA 2004 management console.
|
| > 3) Expand the server node and highlight 'Monitoring'.
|
| > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
| > Pane' is showed there.
|
| > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
|
| > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
|
| > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
| > Tasks', and then switch the 'log storage format' from 'MSDE database'
| > (default) to 'File'.
|
| > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
|
| > 9) Click 'Apply' to save changes and update the configuration.
|
| > 10) Temporarily disable the Firewall service. To do that, please click
| > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
| > choose 'Stop'.
|
| > 11) Clear the current existing W3C logs. To do that, go to the log
saving
| > directory and clean any existing .W3C logs. By default, the logs will
be
| > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
| > be able to deleted, that's normal.) You may backup them first and
then
| > delete them.
|
| > 12) Go back to the ISA 2004 management console, and then Start the
stopped
| > 'Microsoft Firewall' service.
|
| > 13) Reproduce the problem, stop the service, and then gather the
resulting
| > W3C files to my mailbox v-edtian@microsoft.com for analysis.
|
| > 14) Please also let me know the IP address of the testing clients so
that I
| > can filter the data.
|
| > Please feel free to let me know if you have further concerns.
|
| > Have a nice day!
|
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
|
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
|
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
|
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
|
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
|
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
|
| > --------------------
| > | Thread-Topic: RSoP Tool
| > | thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| > | X-WBNR-Posting-Host: 208.42.161.109
| > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com
| > | Subject: RSoP Tool
| > | Date: Tue, 18 Oct 2005 13:55:02 -0700
| > | Lines: 22
| > | Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162425
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | When I remove ISA 2004 from the SBS 2003 server my RSoP tools works
as it
| > | should, when I re-install ISA 2004 it will not work. I get an RPC
error,
| > can
| > | not communicate with computer. This is a valuable tool that helps me
| > diagnois
| > | GPO issues.
| > |
| > | The event viewer log is below:
| > |
| > | Event Type: Error
| > | Event Source: DCOM
| > | Event Category: None
| > | Event ID: 10009
| > | Date: 10/18/2005
| > | Time: 3:25:50 PM
| > | User: N/A
| > | Computer: JAMINT
| > | Description:
| > | DCOM was unable to communicate with the computer STEVEF-PC using any
of
| > the
| > | configured protocols.
| > |
| > | For more information, see Help and Support Center at
| > | http://go.microsoft.com/fwlink/events.asp.
| > |
| > |
|
|
|
|
|
|
| Back to top |
|
 |
Edward Tian
Guest
|
Posted:
Fri Oct 21, 2005 8:50 am Post subject:
RE: RSoP Tool |
|
|
Hello Steve:
Thanks for the update.
I am sorry to hear the problem persists. You may keep the hotfix since it
is designed for the RPC issue. (However, it doesn't actually solve the
problem)
Here, I would like to provide some further suggestions:
1. modify the system policy in ISA Server 2004 to permit DCOM network
traffic from the ISA Server computer to the client. To do this, follow
these steps:
a. Start the ISA Server Management tool.
b. Expand the ServerName node, where ServerName is the name of your ISA
Server 2004 computer, and then click Firewall Policy.
c. In the right pane, click the Tasks tab, and then click Edit System
Policy.
d. Under Authentication Services, click Active Directory.
e. Click to clear the Enforce strict RPC compliance check box, and then
click OK.
f. Click Apply to save your changes and to update firewall policy.
I appreciate your time and patience and look forward to your update.
Have a nice weekend!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXVxUMcex8djjV2QyC1Gg3Jawd3Mg==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
<exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl>
<2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com>
<#pKoqsW1FHA.2244@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: RSoP Tool
| Date: Thu, 20 Oct 2005 15:26:06 -0700
| Lines: 313
| Message-ID: <84197BD6-84A5-4A1A-B2ED-51DC9CCC52A6@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:163160
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Edward,
|
| Thank you for your email.
|
| While the discription of this hotfix did not exactly fit my problems I
took
| your advice and installed it anyway. The install was uneventful, I had no
| problems. However the original problem still remains. Should I remove the
| hotfix???
|
| Steve
|
| "Edward Tian" wrote:
|
| > Hi Steve:
| > I have consulted with our ISA specialist and here are some updates
| > regarding this issue:
| >
| > RPC data may be blocked, and Outlook may not start in Windows Server
2003
| > with SP1
| > http://support.microsoft.com/?id=897716
| >
| > You can download the hotfix from this link:
| > Download details: ISA Server 2004 Standard Edition RPC Filter Blocks
| > Outlook Traffic from Computers Running Windows Server 2003 Service Pack
1
| > (SP1)
| >
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=
| > 0b3b8b50-9a7a-43ca-8e30-ccfcd8ad5fa3&displaylang=en
| >
| > Please perform the test again after applying this hotfix and tell us
the
| > outcome.
| >
| > Look forward to hearing how it goes!
| >
| > Have a nice day!
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: RSoP Tool
| > | thread-index: AcXU370j6MuOx8SOTbulBRKFavdoyw==
| > | X-WBNR-Posting-Host: 208.42.161.109
| > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| > | References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
| > <exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl>
| > | Subject: RE: RSoP Tool
| > | Date: Wed, 19 Oct 2005 12:03:06 -0700
| > | Lines: 186
| > | Message-ID: <2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162778
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello Edward,
| > |
| > | Your understanding is correct.
| > | ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
| > | I just tried to install SP1 KB 891024 and I got the following Windows
| > | Installer error:
| > | The upgrade patch can not be installed by the Windows
| > | Installer Service because the program to be upgraded may be missing,
or
| > | the upgrade patch may upgrade a different version of the program.
| > | Verify that the program to be upgraded exists on your computer and
that
| > you
| > | have the correct upgrade patch.
| > |
| > | I have version 4.0.2163.213
| > |
| > | Note: Don't know if it matters but I have ISA2003 installed on my e:\
| > RAID5
| > | array for reasons of space and speed. My C drive is dedicated to
| > %systemroot%
| > | only. This works great for everything else.
| > |
| > | I'll have the logs to you shortly. Thanks for your help.
| > |
| > | Steve
| > |
| > | "Edward Tian" wrote:
| > |
| > | > Hi:
| > | > Thank you for posting here.
| > | >
| > | > From the description, I understand that the RSoP doesn't work when
ISA
| > 2004
| > | > in installed on the SBS Server. If you disable the RPC-filter in
ISA
| > 2004,
| > | > it works fine. If I have misunderstood your concern, please feel
free
| > to
| > | > let me know.
| > | >
| > | > Based on my research, there is a known issue regarding the RPC
filter
| > of
| > | > ISA 2004. This problem occurs because the ISA Server RPC filter is
not
| > | > compatible with the changes in the RPC protocol that are introduced
by
| > | > Windows Server 2003 SP1. When you enable the ISA Server RPC filter,
the
| > RPC
| > | > filter enforces strict compliance with a subset of the RPC protocol
| > that is
| > | > used by Microsoft Exchange Server MAPI communications.
| > | >
| > | > More information:
| > | >
| > | > Some firewalls may reject network traffic that originates from
Windows
| > | > Server 2003 Service Pack 1-based computers
| > | > http://support.microsoft.com/default.aspx?scid=KB;EN-US;899148
| > | >
| > | > May I know if the ISA Server 2004 comes with the SBS 2003 Premium
SP1
| > or it
| > | > is a stand-alone version? The problem was fixed in ISA 2004 SP1 and
you
| > can
| > | > refer to this KB article for more detailed information:
| > | >
| > | > The ISA Server RPC filter blocks RPC traffic after Windows Server
2003
| > | > Service Pack 1 is installed on a computer that is running ISA
Server
| > 2004
| > | > or ISA Server 2000
| > | > http://support.microsoft.com/?id=887222
| > | >
| > | > To work around this problem, we need to disable the ISA Server RPC
| > filter.
| > | >
| > | > If you have already installed the ISA 2004 SP1, please help to
gather
| > the
| > | > ISA log for further analysis:
| > | > 1) Schedule a down time.
| > | >
| > | > 2) Open ISA 2004 management console.
| > | >
| > | > 3) Expand the server node and highlight 'Monitoring'.
| > | >
| > | > 4) In the right pane, switch to the 'Logging' tab, make sure the
'Task
| > | > Pane' is showed there.
| > | >
| > | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
| > 'Logging
| > | > Tasks', and then switch the 'log storage format' from 'MSDE
database'
| > | > (default) to 'File'.
| > | >
| > | > 6) Switch to the 'Fields' tab, click 'Select All', and then click
OK.
| > | >
| > | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
| > 'Logging
| > | > Tasks', and then switch the 'log storage format' from 'MSDE
database'
| > | > (default) to 'File'.
| > | >
| > | > 8) Switch to the 'Fields' tab, click 'Select All', and then click
OK.
| > | >
| > | > 9) Click 'Apply' to save changes and update the configuration.
| > | >
| > | > 10) Temporarily disable the Firewall service. To do that, please
click
| > | > Monitoring | Services tab, and then right click 'Microsoft
Firewall' to
| > | > choose 'Stop'.
| > | >
| > | > 11) Clear the current existing W3C logs. To do that, go to the log
| > saving
| > | > directory and clean any existing .W3C logs. By default, the logs
will
| > be
| > | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF
may
| > not
| > | > be able to deleted, that's normal.) You may backup them first and
| > then
| > | > delete them.
| > | >
| > | > 12) Go back to the ISA 2004 management console, and then Start the
| > stopped
| > | > 'Microsoft Firewall' service.
| > | >
| > | > 13) Reproduce the problem, stop the service, and then gather the
| > resulting
| > | > W3C files to my mailbox v-edtian@microsoft.com for analysis.
| > | >
| > | > 14) Please also let me know the IP address of the testing clients
so
| > that I
| > | > can filter the data.
| > | >
| > | > Please feel free to let me know if you have further concerns.
| > | >
| > | > Have a nice day!
| > | >
| > | > Best Regards
| > | > Edward Tian(MSFT)
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | > ======================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | > ======================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | > --------------------
| > | > | Thread-Topic: RSoP Tool
| > | > | thread-index: AcXUJjXFOYc2EyxsRMOrKCkc3spF+Q==
| > | > | X-WBNR-Posting-Host: 208.42.161.109
| > | > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com>
| > | > | Subject: RSoP Tool
| > | > | Date: Tue, 18 Oct 2005 13:55:02 -0700
| > | > | Lines: 22
| > | > | Message-ID: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:162425
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | When I remove ISA 2004 from the SBS 2003 server my RSoP tools
works
| > as it
| > | > | should, when I re-install ISA 2004 it will not work. I get an RPC
| > error,
| > | > can
| > | > | not communicate with computer. This is a valuable tool that helps
me
| > | > diagnois
| > | > | GPO issues.
| > | > |
| > | > | The event viewer log is below:
| > | > |
| > | > | Event Type: Error
| > | > | Event Source: DCOM
| > | > | Event Category: None
| > | > | Event ID: 10009
| > | > | Date: 10/18/2005
| > | > | Time: 3:25:50 PM
| > | > | User: N/A
| > | > | Computer: JAMINT
| > | > | Description:
| > | > | DCOM was unable to communicate with the computer STEVEF-PC using
any
| > of
| > | > the
| > | > | configured protocols.
| > | > |
| > | > | For more information, see Help and Support Center at
| > | > | http://go.microsoft.com/fwlink/events.asp.
| > | > |
| > | > |
| > | >
| > | >
| > |
| >
| |
|
| Back to top |
|
 |
Stevef
Guest
|
Posted:
Fri Oct 21, 2005 8:50 pm Post subject:
RE: RSoP Tool |
|
|
That did it, thank you for your help. It's almost always something simple in
the end isn't it :-).
Can I ask one last question? Going back to my previous response, why doesn't
it let me install ISA2004 SP1
Thanks again Ed!
Steve
"Edward Tian" wrote:
| Quote: | Hello Steve:
Thanks for the update.
I am sorry to hear the problem persists. You may keep the hotfix since it
is designed for the RPC issue. (However, it doesn't actually solve the
problem)
Here, I would like to provide some further suggestions:
1. modify the system policy in ISA Server 2004 to permit DCOM network
traffic from the ISA Server computer to the client. To do this, follow
these steps:
a. Start the ISA Server Management tool.
b. Expand the ServerName node, where ServerName is the name of your ISA
Server 2004 computer, and then click Firewall Policy.
c. In the right pane, click the Tasks tab, and then click Edit System
Policy.
d. Under Authentication Services, click Active Directory.
e. Click to clear the Enforce strict RPC compliance check box, and then
click OK.
f. Click Apply to save your changes and to update firewall policy.
I appreciate your time and patience and look forward to your update.
Have a nice weekend!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RSoP Tool
| thread-index: AcXVxUMcex8djjV2QyC1Gg3Jawd3Mg==
| X-WBNR-Posting-Host: 208.42.161.109
| From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com
| References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com
exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl
2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com
#pKoqsW1FHA.2244@TK2MSFTNGXA01.phx.gbl
| Subject: RE: RSoP Tool
| Date: Thu, 20 Oct 2005 15:26:06 -0700
| Lines: 313
| Message-ID: <84197BD6-84A5-4A1A-B2ED-51DC9CCC52A6@microsoft.com
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:163160
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Edward,
|
| Thank you for your email.
|
| While the discription of this hotfix did not exactly fit my problems I
took
| your advice and installed it anyway. The install was uneventful, I had no
| problems. However the original problem still remains. Should I remove the
| hotfix???
|
| Steve
|
| "Edward Tian" wrote:
|
| > Hi Steve:
| > I have consulted with our ISA specialist and here are some updates
| > regarding this issue:
|
| > RPC data may be blocked, and Outlook may not start in Windows Server
2003
| > with SP1
| > http://support.microsoft.com/?id=897716
|
| > You can download the hotfix from this link:
| > Download details: ISA Server 2004 Standard Edition RPC Filter Blocks
| > Outlook Traffic from Computers Running Windows Server 2003 Service Pack
1
| > (SP1)
|
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=
| > 0b3b8b50-9a7a-43ca-8e30-ccfcd8ad5fa3&displaylang=en
|
| > Please perform the test again after applying this hotfix and tell us
the
| > outcome.
|
| > Look forward to hearing how it goes!
|
| > Have a nice day!
|
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
|
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
|
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
|
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
|
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
|
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
|
| > --------------------
| > | Thread-Topic: RSoP Tool
| > | thread-index: AcXU370j6MuOx8SOTbulBRKFavdoyw==
| > | X-WBNR-Posting-Host: 208.42.161.109
| > | From: =?Utf-8?B?U3RldmVm?= <Stevef@discussions.microsoft.com
| > | References: <D0E3F455-E63C-4C15-BF4C-BD3CC95B7856@microsoft.com
| > <exn6yMJ1FHA.2848@TK2MSFTNGXA01.phx.gbl
| > | Subject: RE: RSoP Tool
| > | Date: Wed, 19 Oct 2005 12:03:06 -0700
| > | Lines: 186
| > | Message-ID: <2602262A-433C-4F72-915C-C4B09A56546D@microsoft.com
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162778
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello Edward,
| > |
| > | Your understanding is correct.
| > | ISA2004 came with my SBS 2003 Premium SP1. It is NOT a stand alone.
| > | I just tried to install SP1 KB 891024 and I got the following Windows
| > | Installer error:
| > | The upgrade patch can not be installed by the Windows
| > | Installer Service because the program to be upgraded may be missing,
or
| > | the upgrade patch may upgrade a different version of the program.
| > | Verify that the program to be upgraded exists on your computer and
that
| > you
| > |
| |