RE: Isa Server 2006 RPC filter blocks RPC traffic

Should I apply ISA 2004 sp1 on this ISA 2006 as mentioned in the KB?
No. This is supported only for versions that is listed in the Applies To
section of the article. Besides, I dont think ISA 2006 would let you install
ISA2004 Sp1 over it ;)
I have not been able to find a fix addressing this, it would be a good idea
to contact Microsoft PSS.

What are the consequences running the ISA 2006 with "RPC filter" disabled?http://www.microsoft.com/technet/isa/2000/proddocs/isafp1/rpcaboutfilter.mspx?mfr=true


--
Shijaz Abdulla
MVP, MCSE:Security, CCNA

Articles: www.shijaz.com/isaserver
Forums: www.tech-links.org


"richard" wrote:

I have exactly the same problem as mentioned in this kb.:

http://support.microsoft.com/kb/887222

But this is an ISA 2006 on a new server with an Windows Server 2003 R2 sp1
OEM installation.
Logging on takes at least 5 min. This error shows in the system log:
-------------------------------------------------
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 11-01-2007
Time: 11:38:11
User: NT AUTHORITY\SYSTEM
Computer: xxx
Description:
Windows cannot determine the user or computer name. (The RPC server is
unavailable. ).
Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
-------------------------------------------------

When i disable the "RPC filter" application filter in ISA, everything is fine.

Amongst a lot of things (uninstall ISA, rejoin the Domain, install ISA
again), I have tried to enable/disable "Enforce strict RPC compliance", but
at no use. As long as the RPC filter is enabled, I am stuck!

Should I apply ISA 2004 sp1 on this ISA 2006 as mentioned in the KB?

What are the consequences running the ISA 2006 with "RPC filter" disabled?

The plan was that the ISA 2006 should replace an ISA 2000, as a back-end
firewall handlening VPN-connections, server publishing (Exchange 2003, Portal
Services) and more.

Thanks in advance!
--
Regards,

Richard
.

Relevant Pages

  • Re: Per user reporting in ISA2006?
    ... ISA, it never would install correctly. ... I contacted tech support. ... the type of worthless tech support I can expect from them. ...
    (microsoft.public.isa.configuration)
  • Re: Installing ISA 2000 Admin Tools on Vista
    ... ISA 2000 has been in extended support for over a year now. ... basically I can't install ISA 2000 Admin ... Tools/Management Console on a Windows Vista Ultimate PC. ...
    (microsoft.public.isa)
  • RE: Domain Auth Problems After Upgrade to ISA 2006?
    ... my mistake due to a misunderstanding of the RPC Filter. ... "I have disabled Strict RPC Compliance on the Active Directory rule ... When I did these new ISA 2006 installations, ...
    (microsoft.public.isa)
  • RE: Domain Auth Problems After Upgrade to ISA 2006?
    ... I'd like to provide you with the following RPC Filter information ... 2003 Service Pack 1 is installed on a computer that is running ISA Server ... |> When I check the live logs while a user attempts VPN authentication, ...
    (microsoft.public.isa)
  • Re: ISA 2004 Install failure
    ... And if I don't have a support call to burn on the issue? ... I have had a bad ISA install like yours and I would urge you to contact ...
    (microsoft.public.windows.server.sbs)