RE: ISA 2004 or GPO's?
- From: v-edtian@xxxxxxxxxxxxxxxxxxxx (Edward Tian)
- Date: Fri, 22 Jul 2005 02:35:43 GMT
Hi Brian:
Thank you for your reply. :)
Sorry, I didn't assist in resolving the issue but I am glad to hear that
the problem has been resolved. It is my pleasure to work with you in this
post. If you encounter any difficulties in the future, please submit the
post to the newsgroup. We are glad to be of the assistance.
Again, thank you for using Microsoft newsgroup. Have a nice weekend, Brian!
:-)
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: ISA 2004 or GPO's?
| thread-index: AcWOClWhQgDlIn3FS8aVNxT5l781fw==
| X-WBNR-Posting-Host: 24.97.194.9
| From: "=?Utf-8?B?QnJpYW4xNDYyNA==?="
<Brian14624@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <0C32F235-3597-432D-9BB1-DA411499705A@xxxxxxxxxxxxx>
<s3JPS0QjFHA.588@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: ISA 2004 or GPO's?
| Date: Thu, 21 Jul 2005 08:39:08 -0700
| Lines: 139
| Message-ID: <5D47B33E-8512-4FA6-B9E8-AD5FA545F537@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:137823
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Sorry for not getting back yesterday but I was kind of busy. We have one
2k3
| sbs named Salem, exchange/isa(proxy)/dns/pdc, and one 2k3 server std,
named
| Winston, file/bdc/trendmicro, and this is where the smd server is
installed.
| The problem that I was encountering was that I set the ssl port to 4343,
| instead of 443, for the smb suite, which resulted in a proxy error. The
| proxy settings all have Salem, as the server, and 8080, as the port, and
| "Bypass proxy server" setting checked. So I put the
Winston.mydomain.local in
| the IE->Tools->Connections->Lan Settings->Advanced->Exceptions area, and
it
| kept dissapearing. This happened on all of the workstations that I tried
to
| log on to. All have the ISA firewall client installed, and the "Enable
web
| browser configuration" option checked. I tried creating a gpo, for my
user,
| with the
|
UserConfiguration->InternetExplorerMaintenance->Connection->ConnectionSettin
gs
| option set to "Import from this computer" (the sbs computer) and the
| "Auto-Run option" turned off. Winston.mydomain.local did not show up in
the
| IE exceptions list, but auto run was turned off, so I believe this has
| something to do with ISA/Firewall Client. I did notice in the Event
Viewer
| that it is packed with Source: Userenv ID: 1058 & 1030 events. I checked
the
| gpo being accessed, the "Small Business Server Domain Password Policy"
and
| the domain name is correct and all access is allowed but something is
causing
| this event. I'm starting to get off topic now, but to solve the problem
with
| accessing my smb suite server I just changed the port to 443, and turned
off
| the Default Website, and everything is forwarded on to the appropriate
| server. Now the proxy error, which I belive was something like "ISA proxy
| does not allow ssl access from this port, please contact your isa
| administrator" is gone and everything works well, other than the Userenv
| events so I'm gonna have to research that some. Thanks for the help...:)
|
| "Edward Tian" wrote:
|
| > Hi Brian:
| > Thank you for posting here.
| > From your description, I understand that in LAN Settings portion of IE,
you
| > configure the client to use the address of the server
| > (WINSTON.mydomain.local) as the Proxy Server, set to "Bypass proxy for
| > internal addresses" and use the same proxy address for all protocols.
After
| > doing that, the configuration always disappear when you logoff/logon or
| > lock the computer. If I'm off-base, please feel free to let me know.
| >
| > Before we go any further, I would like to check some points in order to
| > narrow down the issue:
| > 1. Does this problem occur on all the clients? If so, does it occur on
a
| > computer without Trend smb suite installed?
| > 2. Have you installed ISA firewall client on your client computers? If
so,
| > please double-click the ISA2004 firewall client icon, switch to 'Web
| > Browser' pane, uncheck 'Enable Web browser automatic configuration'
option.
| > Then click OK.
| > If the problem persists, I'd like to gather some GP information for
further
| > analysis. Please do the following steps at your convenience:
| > 1. On a problematic computer, click Start->Run->type 'CMD'.
| > 2. Under the command line, please type 'gpresult /v > c:\test.txt'
(without
| > the quotation mark)
| > 3. Send the .TXT file directly to my mailbox: v-edtian@xxxxxxxxxxxxx
| >
| > Hope this helps, I look forward to your update. If you have anything
| > unclear, please feel free to let me know, I am glad to be of assistance.
| >
| > Have a nice day, Brian!:)
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: ISA 2004 or GPO's?
| > | thread-index: AcWMsfbJRyaL4xB1SKS8eStmimRjbw==
| > | X-WBNR-Posting-Host: 24.97.194.9
| > | From: "=?Utf-8?B?QnJpYW4xNDYyNA==?="
| > <Brian14624@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: ISA 2004 or GPO's?
| > | Date: Tue, 19 Jul 2005 15:34:02 -0700
| > | Lines: 14
| > | Message-ID: <0C32F235-3597-432D-9BB1-DA411499705A@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:137190
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I have a funny little problem. For the administration of my Trend smb
| > suite,
| > | I put the address of the server, WINSTON.mydomain.local, in the
| > exceptions
| > | list of the Internet Properties->Connections->Lan Settings portion of
IE.
| > I
| > | am set to "Bypass proxy for internal addresses" and I use the same
proxy
| > | address for all protocols. Well, here's the problem, it always
| > disappears.
| > | If I logoff, and logon, it's gone, if I step away from my computer
for a
| > | while, the computer does NOT lock, it's gone, and if I lock the
computer
| > it's
| > | gone. I removed myself from all of the GPO's, to make sure it wasn't
| > being
| > | pushed down to my user but that didn't work. Also, the Trend server
is
| > NOT
| > | running on the proxy server itself, it is running on a separate
Win2k3
| > Std
| > | server. So I have one Win2k3 sbs, as pdc/exchange/isa/dns, and one
Win2k3
| > | Std, as bdc/file, and I'm thinking of installing dns as well but
that's a
| > | separate post all together. Any suggestions on why this setting keeps
| > | disappearing?
| > |
| >
| >
|
.
- References:
- ISA 2004 or GPO's?
- From: Brian14624
- RE: ISA 2004 or GPO's?
- From: Edward Tian
- RE: ISA 2004 or GPO's?
- From: Brian14624
- ISA 2004 or GPO's?
- Prev by Date: RE: ISA 2004 - monitoring report publishing problem
- Next by Date: Re: Upgrade from Eval to Oem???
- Previous by thread: RE: ISA 2004 or GPO's?
- Next by thread: applnch.exe error
- Index(es):
Relevant Pages
|