RE: Please help - with the portal server



One more observation:

Since at this point i know for sure that the setup works perfectly fine in a
LAN settings - i was wondering may be - sps uses certain ports to communicate
with the server over the internet. I just have the windows authenticated
security. I tried opening up the ports that are generally used for
communication over the internet. I opened up teh ports which the IP address
(of my server) uses to communicate for ADS, SQL SERVER, HTTP(s).
2435, 1435, 80 and 243 ( if i remember correctly - i might be wrong but
these were ports posted on the internet which were used to communicate for
ads, sql and http respectively).

Do yo uthink this matters?

Thanks again victor
--
shiva@xxxxxxxx


"Shiva" wrote:

Hi Victor,
Here is my new setup and its set of problems - i would be so
thankful to you if you could guide me in the right direction.

1) I had a windows 2003 server setup with sql server on the same machine and
uploaded sps onto it.

2) I made my intranet portal and it was communicating with my ADS server,
exchange server etc., perfectly fine.

3) The only catch was - it didn't have a static IP address.

4) After some development i decided to give it a static IP address to
make it work within the intranet. IT worked perfectly fine. All services
worked.

5) The next step was to put it on dmz so that it can communicate with both
worlds - meaning i could access the website both from inside the lan and from
outside.

10) At this point i notice that my portal site is up and running. All the
content databases are connected but my only problem is when i try to do any
administrative work on
the webportal it gives me error messages.

11) For example when i click "Site Settings" at the top the error
message i get is:

[b]"Could not load the assembly
'Microsoft.SharePoint.Portal,Version=11.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c'.
Make sure that it is compiled before accessing the page."[/b]

12) Or when i click on "[b]Manage security[/b]" to the left side i get an
error "Could not load the assembly
'Microsoft.SharePoint.Portal,Version=11.0.0.0,Culture=neutral,PublicKeyToken=71e9bce111e9429c'.
Make sure that it is compiled before accessing the page."

13) When i click on "Manage Content" i get the error "Assembly
microsoft.sharepoint.portal.dll security permission grant set is incompatible
between appdomains."

Also when i go to the sharepoint central administration and try to change
the password for the config db account, content db account etc., - it gives
me an error - saying "Parameter incorrect'

Any ideas of what might be happening? and how do i fix it?


Thanks victor,
-Shiva

--
shiva@xxxxxxxx


"Victor" wrote:

Take a look:
http://office.microsoft.com/en-us/assistance/HA011912721033.aspx
and
http://www.microsoft.com/technet/prodtechnol/sppt/wss/revproxy.mspx

also this is a good collection of info on various things SPS:
http://www.microsoft.com/technet/prodtechnol/office/sps2003/deploy/default.mspx

And, if we are on a sbject of good things. go to http://www.mindsharp.com
and register for "Premium Content" it is a free deal, they have several nice
"best-practices" white papers, and videos available.



As far as passwords go, you may consider adding your SharePoint site to a
list of "Trusted Sites" in Internet Explorer. Default setting for "User
Authentication" (Internet Explorer - Tools - Options - Security - Trusted
Sites - Custom Level - scroll all the way down) in "Trusted Sites" zone is -
"Automatic logon with current username and password".

But how would yo do this for few hundred people, you ask? No fear, Active
Directory Group Policy... How?

here you go:

Use Group Policy to Add the Sites
Create a policy to add the Office Web sites to the Trusted sites zone. To do
this, you can create a local policy, or you can create a domain or
organizational unit policy. To create a policy in your domain:1. Log on to a
domain controller, and then start the Active Directory Users and Computers
utility.
2. Right-click the domain or Organizational Unit where you want to create
the Group Policy object, and then click Properties.
3. Click the Group Policy tab, and then click New.
4. Type a descriptive name in the New Group Policy Object box (for example,
type OfficeUpdate policy), and then press ENTER.
5. If you want to prevent this policy from being applied to certain users or
groups: a. Click Properties, and then click the Security tab.
b. Add the user or group that you want to prevent from having this policy
applied.
c. For that user or group, click to clear the Read and the Apply Group
Policy check boxes in the Allow column of the Permissions for Authenticated
Users list.
d. Click OK.

6. Click Edit.
7. Under User Configuration, expand Windows Settings, expand Internet
Explorer Maintenance, and then click Security.
8. In the right pane, right-click Security Zones and Content Ratings, and
then click Properties.
9. Click Import the current security zones and privacy settings, click
Continue after you read the message stating that these settings will be
ignored on computers that do not have the enhanced security configuration
feature enabled, and then click Modify Settings.
10. Click Trusted sites, and then click Sites.
11. In the Add this Web site to the zone box, type
http://officeupdate.microsoft.com, and then click Add.
12. In the Add this Web site to the zone box, type
http://office.microsoft.com, and then click Add.
13. Click Close, and then click OK.
14. In the Security Zones and Content Ratings dialog box, click OK.
15. On the File menu, click Exit.
16. Click Close, and then permit sufficient time for the policy to propagate
throughout the domain.

.



Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: CompanyWeb - Password Dialogue Box in Terminal Server only
    ... Configure trusted sites and security settings of IE using policy ... one XP workstation with the problematic user account and setup RDP session ...
    (microsoft.public.windows.server.sbs)