Re: RDP Suddenly Stopped?

Hi Tarek,

Would this fix apply to our situation, we're running Win2003 Server Standard
Edition R2, with ISA 2006, and SP2 has been installed for nearly a year
(sorry if I didn't mention this in my original post). This update seems to
be aimed at SBS 2003, running ISA 2004, who experience a problem AFTER
installing SP2.

I'll give the fix a try, but I just wanted to check I'm not going to cause
any further problems...

Thanks

Ben

"ElMajdal" <ElMajdal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4FCDA788-F71E-434A-9089-25BFFD28F457@xxxxxxxxxxxxxxxx
HI,

try this update :
http://support.microsoft.com/default.aspx?scid=kb;EN-US;936594
--
_____________________________

Tarek Majdalani
Computer Engineer, CIW, MCSA: Security 2000/2003, TS: Windows Vista
MVP -- ISA Firewalls
Website : http://www.elmajdal.net/ISAServer


"Ben" wrote:

Hi,

We had a problem yesterday morning where all internet traffic and email
suddently stopped, this included RDP, which we use to manage ISA from a
remote admin station. After physically going to the ISA server we saw
that
it looked like a few updates had been installed, as the Microsoft Update
prompt was asking for a reboot (not sure why updates would have been
installed, we usually do this manually out of hours). After the reboot
internet traffic and email started flowing again, however RDP still won't
work. Remote desktop is enabled in the system properties, and the ISA
system
policy rule for RDP has been enabled. As I said this has beed working
fine
for 2 years, its just since the updates, yet I can't see any update
installed yesterday that would have affected RDP or ISA.

Looking at the logging it doesn't seem to be blocked, nothing is denied,
it
just doesn't seem to be able to make a working connection. There are 2
entries in the log for each attempt to connect which are below:

Original Client IP - 192.168.0.52
Server Name - ISA
Transport - TCP
GMT Log Time - 10/26/2007 8:20:28 AM
Source Port - 1696
Processing Time - 0
Result Code - 0x0 ERROR_SUCCESS
Cache Information - 0x0
Error Information - 0x0
Log Record Type - Firewall
Log Time - 10/26/2007 9:20:28 AM
Destination IP - 192.168.0.1
Destination Port - 3389
Protocol - RDP (Terminal Services)
Action - Initiated Connection
Rule - [System] Allow remote management from selected computers using
Terminal Server
Client IP - 192.168.0.52
Source Network - Internal
Destination Network - Local Host
Bytes Sent - 0
Bytes Received - 0


Original Client IP - 192.168.0.52
Server Name - ISA
Transport - TCP
GMT Log Time - 10/26/2007 8:20:28 AM
Source Port - 1696
Processing Time - 0
Result Code - 0x80074e21 FWX_E_ABORTIVE_SHUTDOWN
Cache Information - 0x0
Error Information - 0x0
Log Record Type - Firewall
Log Time - 10/26/2007 9:20:28 AM
Destination IP - 192.168.0.1
Destination Port - 3389
Protocol - RDP (Terminal Services)
Action - Closed Connection
Rule - [System] Allow remote management from selected computers using
Terminal Server
Client IP - 192.168.0.52
Source Network - Internal
Destination Network - Local Host
Bytes Sent - 48
Bytes Received - 40





.

Relevant Pages

  • Re: RDP Suddenly Stopped? - SOLVED
    ... So I went to the ISA server, ... default RDP listener, and it all started working again. ... Would this fix apply to our situation, we're running Win2003 Server ... Destination IP - 192.168.0.1 ...
    (microsoft.public.isa)
  • Re: Serious(ly weird) ISA 2004 problem
    ... Log Time Destination IP Destination Port Protocol Action Rule Client IP ... Information Original Client IP Server Name Referring Server Destination ... > ISA rule which routes them all internally to the same web server and same ...
    (microsoft.public.isa)
  • Re: Windows 2008 TSG THRU ISA 2006
    ... Jim Harrison (ISA SE) ... Original Client IP Client Agent Authenticated Client Service Referring ... Server Destination Host Name Transport HTTP Method MIME Type Object ... SourceSourceProxy Destination Proxy Bidirectional Client Host Name Filter ...
    (microsoft.public.isa.publishing)
  • RDP Suddenly Stopped?
    ... After physically going to the ISA server we saw that ... internet traffic and email started flowing again, however RDP still won't ... Remote desktop is enabled in the system properties, ... Destination IP - 192.168.0.1 ...
    (microsoft.public.isa)
  • Re: Inbound Access to terminal server
    ... RDP must be removed from the WAN adapter. ... port 3389 before ISA can grab the port. ... you server publish RDP from ...
    (microsoft.public.isa)
Loading