Re: Unable to login into SBS 2003 Domain server

Hi Ace,

I've responded to use the IP. Otherwise it prompts for a new IP.

re: RDP - im connecting to it int he office - same LAN - just with abcsbs01
which I've previously always used successfully. I've also tried 192.168.0.2
unsucessfully.
But I can connect from SBS to f/s using abcfs01 successfully.

Remote Web Workplace isnt setup, but I can do so later. Could OWA
internally be not functioning (apart from directly on the SBS/Exchange box)
because of a routing issue?

Here is GPResult:
C:\>gpresult

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 4/21/2009 at 1:36:14 AM


RSOP data for ABC\jeffr on ABCSBS01 : Logging Mode
---------------------------------------------------

OS Type: Microsoft(R) Windows(R) Server 2003 for Small
Busin
ess Server
OS Configuration: Primary Domain Controller
OS Version: 5.2.3790
Terminal Server Mode: Remote Administration
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\jeffr
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=ABCSBS01,OU=Domain Controllers,DC=abc,DC=local
Last time Group Policy was applied: 4/21/2009 at 1:33:24 AM
Group Policy was applied from: abcsbs01.abc.local
Group Policy slow link threshold: 500 kbps
Domain Name: abc
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Auditing Policy
Default Domain Controllers Policy
Windows Update Server
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Small Business Server Domain Password Policy
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Windows Firewall
Filtering: Disabled (GPO)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Windows Client Firewall Policy ITM & Etrust
Filtering: Disabled (GPO)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server - Windows Vista policy
Filtering: Denied (WMI Filter)
WMI Filter: Vista

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
BUILTIN\Pre-Windows 2000 Compatible Access
Windows Authorization Access Group
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
ABCSBS01$
Domain Controllers
Exchange Domain Servers
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
RAS and IAS Servers
Exchange Enterprise Servers


USER SETTINGS
--------------
CN=Jeff B,CN=Users,DC=abc,DC=local
Last time Group Policy was applied: 4/21/2009 at 12:13:16 AM
Group Policy was applied from: abcsbs01.abc.local
Group Policy slow link threshold: 500 kbps
Domain Name: ABC
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Windows Firewall
Filtering: Disabled (GPO)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Windows Client Firewall Policy ITM & Etrust
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

Small Business Server Client Computer
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

Small Business Server - Windows Vista policy
Filtering: Denied (WMI Filter)
WMI Filter: Vista

Small Business Server Domain Password Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Domain Admins
SBS Internet Users
SBS Mobile Users
SBS Report Users
Offer Remote Assistance Helpers


re: DHCP Scope - Yes adjusted . the scope for availalbe handout is
192.168.0.10 to 192.168.0.254. Not availalbe is 192.168.0.1 to 192.168.0.9

re: Firewall - When I selected Control Panel Windows Firewall, I got the
message Windows Firewall cannot run because another program or service is
running that might use the network address translation component (IPNat.sys).

Jeff


"Ace Fekay [Microsoft Certified Trainer]" wrote:

"Jeff" <Jeff@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B16FA6D4-B38F-4B5D-B097-7B853A1C049F@xxxxxxxxxxxxxxxx
Hi Ace,
I’ve installed DNS on the abcfs01 (192.168.0.3). DNS propagated so I
haven’t done anything more in relation to DNS on it. In networking, I
updated the DNS so that it points to itself and has the SBSDC as the
alternate DNS server. On the SBSDC I made the F/S the alternate DNS. On
workstations I added the FS as the alternate DNS.

In DHCP on the SBSDC, I added 192.168.0.3 to the 006 scope so both DNS’s
servers are listed.

Again when confirming the 192.168.0.2 address, I received the error that
the
IP was allocated to a NIC that was no longer installed in that PC. The
message popped up previously when I removed the ISP’s IPS from the DNS
server
list and responded to accept the IP. It is odd because I cannot recall a
NIC
referred to a Compaq Model and our servers are all IBM Series. Anyway I
used
the MS procedure to attempt to remove it (viz: set
devmgr_show_nonpresent_devices=1 and ran DEVMGMT.MSC, clicked View to Show
Hidden Devices, expanded the Network Adapters tree) but the hidden NIC
device
as per the error message was not listed. Could this be causing a
problem?

Here is the current IPConfig from JSRfs01

Windows IP Configuration

Host Name . . . . . . . . . . . . : abcfs01
Primary Dns Suffix . . . . . . . : abc.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : abc.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-0C-76-A0-0B-12
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.3
192.168.0.2

Windows firewall is turned off and I looked at Group Policies on the SBS.
None were enforced or configured, but I disabled SBS firewall in the GP
Management on the SBSDC.

Would the DNS be affecting the ability to remote desktop to the SBSDC?

The SBS-DC has connectivity but to the network (evidenced by the network
security and SBS being able to ping other PCs and receive ISP email, but
why
else couldn’t we ping the SBS?

Hmm, it could be a problem. How are you answering the error message? To use
the IP or not use the IP, or is it not allowing you to use it?

As for RDP to the SBS, how are you connecting to it? Are you connecting to
it from within the office, or from home? What name aer you using? Does it
work if you connect by the fqdn (sbsdc.abc.local) or the IP address? Does it
work if you use the companyweb site, choosing Remote WebWorkplace to
remotely connect to your desktop then choosing the SBSDC?

If you run a gpresults at a command prompt, what GPOs are being applied to
the SBS? Maybe there is a group policy on it controlling the firewall that
is blocking ICMP Echos (ping responses). Go into control panel, Windows
Firewall, is the setting grayed out?

Did you adjust the DHCP Scope's IP range?

Ace


.

Relevant Pages