Re: Time synchronisaton from SBS2k3 to stratum 2 time source

From: Karl Middleton (kmiddlet_at_icrystal.dot.com.dot.au)
Date: 02/10/04


Date: Tue, 10 Feb 2004 23:52:17 +1100

Dave,

I don't think so. I have the packet filter open for UDP 123 traffic.

I think it is permissions related.

W32TIME runs under the local system account. I believe that ISA will not
allow anything through that runs under local system. Changing the logon name
for the service doesn't work: generates an error message.

There is a knowledgebase article that talks about changing ACLs on the proxy
server. It reads like it is for Microsoft Proxy Server 2.0 so the article
has not been updated for ISA (don't Microsoft ever test out what their Kb
articles tell us poor dumb users to do?). As I said, I can't find how to
change the ACL in ISA to do the same thing as MS Proxy 2.0

Any thoughts?

"Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in message
news:%23FrccLN7DHA.2924@tk2msftngp13.phx.gbl...
> Is this just an issue with the packet filter in ISA? See this article -
the
> first section describes the packet filter you need to create to allow
sntp.
> http://support.microsoft.com/default.aspx?scid=kb;en-us;323621
>
>
> "Karl Middleton" <kmiddlet@icrystal.dot.com.dot.au> wrote in message
> news:Oj8G4PI7DHA.1460@tk2msftngp13.phx.gbl...
> > Good evening NG,
> >
> > Has anyone solved how to configure SBS2k3 Premium to let SNTP out to the
> > Internet to sync with a stratum 2 time source? On SBS2k I kludged using
> the
> > batch file on the MS Kb site running w32tm -once but the -once switch
> > doesn't work on w32tm under SBS2k3.
> >
> > My preference is to set the filters/permissions on ISA server to let the
> > w32time service check the stratum 2 source. The Kb article talks about
> > setting ACLs on the Proxy on IIS. I don't understand what they mean and
> > can't find such a beastie on the IIS manager.
> >
> > Can anyone assist?
> >
> > Thanks
> > Karl from Oz
> >
> >
> >
>
>



Relevant Pages

  • Re: Time synchronisaton from SBS2k3 to stratum 2 time source
    ... Are you getting an error message indicating that the sync is failing, ... I have the packet filter open for UDP 123 traffic. ... I believe that ISA will not ... It reads like it is for Microsoft Proxy Server 2.0 so the article ...
    (microsoft.public.windows.server.sbs)
  • Re: Help With DNS Through VPN
    ... the pre-defined DNS lookup filter is used to allow DNS queries FROM ... > the ISA server - not TO. ... For the actual procedure (creating the packet filter) to enable access ...
    (microsoft.public.isa)
  • Re: Opening IP 50 (ESP)? ISA management 2000 on 2000 server
    ... If you want to support VPN, the ISA Server ... For ICMP, yeah you are right, its done using Packet Filters. ... ping external sites then right click on the Packet Filter node in ISA ...
    (microsoft.public.isa)
  • RE: Windows Update
    ... create an outbound TCP packet filter on ... 443 (Local Port Dynamic, Remote Port Fixed on 443) using the following ... From within the ISA Management MMC console, ... accessing the Windows Update Site from the same box. ...
    (microsoft.public.isaserver)
  • RE: ISA help
    ... Open SBS Administrator Console. ... Click "Internet Connection Wizard". ... Choose "Enable ISA Server packet filtering" and make sure the "Terminal ... If the packet filter is OK, please check whether you're able to telnet 3389 ...
    (microsoft.public.windows.server.sbs)