Re: SBS won't pass Internet Connection every once a while!!!

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Thank you very much for all the info.

1) I have 2 installed but only using one. the other one is simply
disconnected.
2) I did this and saved it to a text file for later.
3) No
4) In most of the time the server come back to work by it self after
serveral minutes/hours.

I did the registry modification and thank you.



"Jerry zhao (MSFT)" <v-jerryz@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:SIXoOYBbFHA.388@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Mike,
>
> Thanks for your update.
>
> 1. How many NICs are you installed on your SBS server?
>
> 2. If the issue still not happens, you can also run "route print",
> "ipconfig /all" on the SBS server, then when the issue occurs, you can
> compare the result to see if there are any difference.
>
> 3. While the issue happening, can the clients in the SBS domain access the
> internet using IP address? Can them ping the site in the internet? (For
> example www.hotmail.com)
>
> 4. If the issue happens and you do not restart the server, will the issue
> persist? Or the server would come back to work well after a while?
>
> As for the error of the DHCP, the issue may occur if the Network Service
> security account does not have sufficient privileges to access the
> following registry subkeys:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
>
> Network Service account is a predefined local account that is used to
> start
> a service and provide the security context for that service. The name of
> the account is "NT AUTHORITY\NetworkService". The Network Service account
> has limited access to the local computer and authenticated access (as the
> computer account) to network resources.
>
> As Network Service is a local account, it is not stored in Active
> Directory
> database and thus you can''t find it by searching in Active Directory. You
> may manually enter "NT Authority\NetworkService".
>
> To resolve this issue, assign the Network Service account full control
> access to the following registry subkeys:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
>
> To do this, use one of the following methods:
>
> Method 1: By using Registry Editor
> ----------------------------------
> To do this, follow these steps:
> 1. On the Windows Server 2003-based domain controller, start Registry
> Editor (Regedit.exe).
> 2. Locate, and then click the following registry subkey:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
> 3. Right-click "Dhcp", and then click "Permissions".
> 4. Click Add, type network service
> 5. Do it again for TCPIP
>
>
> Method 2: By using Group Policy
> -------------------------------
> Create a Group Policy object to assign the Network Service account on the
> Windows Server 2003 domain controller, permissions to these registry
> subkeys. To do this, follow these steps:
> 1. On a domain controller, start Active Directory Users and Computers.
> 2. Expand your domain, right-click the "Domain Controllers"
> organizational unit, and then click "Properties".
> 3. Click the "Group Policy" tab, click "New", type a descriptive name for
> this new policy, and then press ENTER.
> 4. Click "Properties", and then click the "Security" tab.
> 5. In the "Name" list, click "ENTERPRISE DOMAIN CONTROLLERS", and then
> click to clear the "Read" check box in the "Allow" column of the
> "Permissions" box.
> 6. Click "Add", click your domain in the "Look in" list, click the Windows
> Server 2003-based domain controller, click "Add", and then
> click "OK".
> 7. In the "Name" list, click the Windows Server 2003-based domain
> controller that you added, and then click to select the following check
> boxes in the "Allow" column of the "Permissions" box:
> "Read"
> "Apply Group Policy"
> 8. Click "Apply", and then click "OK".
> 9. Click "Edit".
> 10. Under "Computer Configuration", expand "Windows Settings", expand
> "Security Settings", right-click "Registry", and then click "Add Key".
> 11. In the "Registry" box, expand "MACHINE", expand "SYSTEM", expand
> "CurrentControlSet", expand "Services", click "Dhcp", and then click
> "OK".
> 12. Click Add.
>
>
> If you have any questions or concerns, please feel free to let me know.
> It's my pleasure to be of assistance.
>
> Best regards,
>
> Jerry Zhao (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>


.

Relevant Pages

  • Re: enableSessionState Error in /Remote
    ... Check permissions on the following directory. ... It's possible the Network Service account doesn't have the needed ... Check to see that the Local Service and Network Service ... Everything is standard except the DHCP server which is on a Seperate> box. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS wont pass Internet Connection every once a while!!!
    ... How many NICs are you installed on your SBS server? ... As for the error of the DHCP, the issue may occur if the Network Service ... Network Service account is a predefined local account that is used to start ... On the Windows Server 2003-based domain controller, ...
    (microsoft.public.windows.server.sbs)
  • Re: asp.net debuggin error
    ... some times ASPNET or Network Service account (depending on OS, ... case it would be Network Service) is not part of debugger users group. ... the debugger component on the server failed to connect to the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: iis6 / windows server 2003/ network service account
    ... Network Service account only has limited priviledges on the system. ... it should not have any explicit permission to the registry. ...
    (microsoft.public.inetserver.iis)
  • Re: iis6 / windows server 2003/ network service account
    ... It's not the application that is accessing the registry, it's IIS. ... So I am trying to figure out why network service lost it's ... Network Service account only has limited priviledges on the system. ...
    (microsoft.public.inetserver.iis)