CEICW fails on firewall configuration every time. Please help.

I was trying to install CRM addons for outlook when I realized my websites
couldn't be accessed on any machine other than the SBS server, even though I
could ping the sites just fine. I've installed SBS several times before and
haven't run into this issue before. I installed the rest of SBS as I usually
have done via the Swing It! guide. I followed the microsoft guides to
install CRM and all points where it asks me to verify installation checked
out fine.

I believe this all has to do with my ISA 2004 setup. The only way I can
complete the CEICW wizard is if I disable the firewall. Every other time it
gives me the usual "An error occurred while configuring a component" during
the firewall configuration portion.

But there's more... This new SBS server is almost identical to the
production server with the exception of different hardware and the new server
has CRM added to it. I backed up ISA from the current production server into
an xml file. I then restored my new server using this XML file. It says
everything imported fine, but it doesn't want to start the firewall service
after that. By running the CEICW wizard and letting the firewall portion of
it fail I am able to then start the firewall service, but still not able to
run the CEICW successfully.

I've already looked at http://support.microsoft.com/?id=875421 and my DNS
settings are correctIy.

I saw another post saying to change the Internet Users group pre-2000 name,
but mine is already as it was suggested so i'm basically stuck with fixes my
server already has.

I have even removed all the firewall policy rules and CEICW still fails.
Btw, all SBS components match the same version number/service pack as the
original server.

I also took a peek at
http://www.smallbizserver.net/Default.aspx?PageContentID=57&tabid=185 but my
errors

Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Error 0x800700b7 returned from call to Recreating the SBS web listener().
Error 0x800700b7 returned from call to
CStingrayCommit::CreateWebPublishingRules().
Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing rules().
Error 0x800700b7 returned from call to
CStingrayCommit::CommitWebPublishingRules().
Error 0x800700b7 returned from call to Creating Web publishing rules().
Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().

don't seem to follow those listed. My ISA console was also closed whenever
I ran the wizard.



Here's the whole icwlog.txt for you hardcore MVPs.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizinet.dll, version 5.2.2893.0
calling CNetCommit::ValidatePropertyBag ().
Call to Querying for the property bag () returned ok.
Call to Reading hardware selection () returned ok.
Hardware selection: 2
Call to Validating hardware selection () returned ok.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizproxy.dll, version 5.2.2893.0
CStingrayCommit::ValidatePropertyBag
Call to Querying for IPropertyPagePropertyBag () returned ok.
Call to Initializing the StringrayUtil () returned ok.
Call to Reading the firewall selection () returned ok.
Firewall selection: 1
CStingrayCommit::ValidateUpnpProperties
Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
Call to Validating Upnp properties () returned ok.
CStingrayCommit::ValidatePortMappings
Call to Reading the port mappings () returned ok.
Call to Loading port mappings XML () returned ok.
Call to Validating the predefined port mappings XML () returned ok.
Call to Reading the custom port mappings () returned ok.
Loading port mapping XML
Call to Validating the custom port mappings XML () returned ok.
Call to CStingrayCommit::ValidatePortMappings () returned ok.
Call to Validating port mappings () returned ok.
CStingrayCommit::ValidateWebPublishingRules
Call to Reading web publishing selection () returned ok.
Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
Call to Validating web publishing rules () returned ok.
Call to CStingrayCommit::ValidatePropertyBag () returned ok.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizcert.dll, version 5.2.2893.0
Calling CCertCommit::ValidatePropertyBag
Require SSL for OWA: 1
Require SSL for Remote Portal: 1
Require SSL for Monitoring: 0
Require SSL for OMA: 0
Require SSL for CompanyWeb: 0
Require 128 Bit Encryption: 1
Cert selection: -1
CCertCommit::ValidatePropertyBag returned OK

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizemail.dll, version 5.2.2893.0
calling CEmailCommit::ValidatePropertyBag ().
calling pdispPPPBag->QueryInterface (IPropertyPagePropertyBag, 0x6e50c).
Call to pdispPPPBag->QueryInterface () returned ok.
calling ReadInt4 (0x2591d8, DB5E5E45-3598-4F1D-8FF7-0ED35B9EB6A4).
Call to ReadInt4 () returned ok.
The out param of ReadInt4() is -1.
calling CValidatePropertyUtil.ValidatePropertyInteger ().
Call to CValidatePropertyUtil.ValidatePropertyInteger () returned ok.
Call to CEMailCommit::ValidatePropertyBag () returned ok.
calling CNetCommit::Commit (2462168).
calling CNetCommit::ValidatePropertyBag ().
Call to Querying for the property bag () returned ok.
Property bag is not dirty, skipping validation
calling CNetCommit::Common ().
Call to Initializing the Stingray util () returned ok.
Call to Configuring the time service () returned ok.
Call to Notifying RWW for ISA () returned ok.
Call to CNetCommit::Common () returned ok.
Call to CNetCommit::Commit () returned ok.
CStingrayCommit::CommitEx
CStingrayCommit::ValidatePropertyBag
Call to Querying for IPropertyPagePropertyBag () returned ok.
Call to Initializing the StringrayUtil () returned ok.
Call to Reading the firewall selection () returned ok.
Firewall selection: 1
CStingrayCommit::ValidateUpnpProperties
Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
Call to Validating Upnp properties () returned ok.
CStingrayCommit::ValidatePortMappings
Call to Reading the port mappings () returned ok.
Call to Loading port mappings XML () returned ok.
Call to Validating the predefined port mappings XML () returned ok.
Call to Reading the custom port mappings () returned ok.
Loading port mapping XML
Call to Validating the custom port mappings XML () returned ok.
Call to CStingrayCommit::ValidatePortMappings () returned ok.
Call to Validating port mappings () returned ok.
CStingrayCommit::ValidateWebPublishingRules
Call to Reading web publishing selection () returned ok.
Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
Call to Validating web publishing rules () returned ok.
Call to CStingrayCommit::ValidatePropertyBag () returned ok.
Call to Validating the property bag () returned ok.
Call to Reading the guid for the LAN NIC () returned ok.
Call to Getting the IP address for the LAN NIC () returned ok.
Call to Getting the SM for the LAN NIC () returned ok.
LAN NIC Info:
Guid: {A193DDA6-057A-443B-B4DE-9958D1ABD018}
IP: 192.168.16.3
SM: 255.255.255.0
Call to Removing RRAS NAT () returned ok.
CStingrayCommit::DoGeneralConfiguration
Call to Removing SBS access rules () returned ok.
Call to SBS MS Update Access Rule () returned ok.
Call to Creating SBS Internet Access Rule () returned ok.
Call to Setting default logon domain for OMA () returned ok.
Call to Configuring anonymous access for SBS dirs () returned ok.
Call to Disabling auto discovery () returned ok.
Call to Configuring IIS to listen only on the LAN () returned ok.
Call to Setting local domain name () returned ok.
Call to Disabling H323 application filter () returned ok.
Call to Setting up web proxy listeners () returned ok.
Call to CStingrayCommit::DoGeneralConfiguration () returned ok.
Call to Doing general configuration () returned ok.

8/9/2005 4:33 PM
Firewall Rule: SBS DHCP Client
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS HTTP 80 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS POP3 110 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS DnsLookupPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IcmpPingQueryPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IdentdPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpReceivePredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpCallPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SMTP 25 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SmtpPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NNTP 119 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS Remote Web Workplace CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RPC over HTTP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Business Card Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business CompanyWeb Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business TSWEB Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RUP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Monitoring Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OMA Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OWA Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Site and Content Rule
Cannot find the firewall rule, ignoring the error
Call to Removing ISA2k related firewall rules () returned ok.
Custom protocol name: SBS FTP 20 In CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS FTP 20 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS NTP 123 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS Remote Web Workplace CustomFilter
Cannot find the custom protocol, ignoring the error
Call to Removing ISA2k related custom protocols () returned ok.
Call to Removing inbound access rule allowing anybody in () returned ok.
Call to Removing inbound access rule allowing anybody out () returned ok.
CStingrayCommit::CommitPortMappings
CStringray::RemoveAllSpecialRules
Call to Resetting the rule enumeration () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule ISA6: SSL 443
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule ISA38: MSN Packet Filter (Outbound)
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS FTP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS RDP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Smtp Server Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS POP3 Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Localhost Dhcp Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to CStringray::RemoveAllSpecialRules () returned ok.
Call to Removing all special firewall rules () returned ok.
CStingrayCommit::CreateStandardPortMappings
Call to Enabling the DHCP system policy () returned ok.
Call to Enabling the CRL download system policy () returned ok.
Call to Creating the DHCP access rule () returned ok.
Call to Disabling ICMP () returned ok.
Call to CStingrayCommit::CreateStandardPortMappings () returned ok.
Call to Creating the standard filters () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 5
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound SMTP access rule () returned ok.
Call to Creating the outbound POP3 access rule () returned ok.
Call to Creating the outbound NNTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS Smtp Server Access Rule TCP 25 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 1723
Call to Creating the outbound PPTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Call to Creating outbound PPTP access rule () returned ok.
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound RDP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS RDP Server Access Rule TCP 3389 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound FTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS FTP Server Access Rule TCP 21 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 80
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating predefined port mappings () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 3
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Reading Name () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule ISA6: SSL 443 TCP 443 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping for RWW () returned
ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule SBS RWW Inbound Access Rule TCP 4125 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Reading Name () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule ISA38: MSN Packet Filter (Outbound) TCP 1863 returned 0
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating custom port mappings () returned ok.
Call to CStingrayCommit::CommitPortMappings () returned ok.
Call to Creating port mappings () returned ok.
CStingrayCommit::CommitWebPublishingRules
Call to Removing all sbs web publishing rules () returned ok.
RUP is not published
Call to Fixing the inheritance for default web site () returned ok.
Call to Unpublishing the default web site () returned ok.
Call to Fixing the inheritance for companyweb dir () returned ok.
Call to Unpublishing companyweb () returned ok.
Call to Publishing the default web site () returned ok.
Call to Publishing companyweb () returned ok.
CStingrayCommit::CreateWebPublishingRules
Call to Reading publishing server name () returned ok.
Call to Creating A record for publishing () returned ok.
Call to Checking the existence of the SBS listener () returned ok.
CStringrayCommit::GetSBSCertHash
Call to Getting the web listener SSL port () returned ok.
SSL Port: 443
Call to Getting the listener cert hash () returned ok.
Call to CStringrayCommit::GetSBSCertHash () returned ok.
Call to Reading the cert hash out of the listener () returned ok.
Call to Reading the Internet Server Name () returned ok.
Internet Server Name: www.lloydresearch.com
Error 0x800700b7 returned from call to Recreating the SBS web listener().
Error 0x800700b7 returned from call to
CStingrayCommit::CreateWebPublishingRules().
Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing rules().
Error 0x800700b7 returned from call to
CStingrayCommit::CommitWebPublishingRules().
Error 0x800700b7 returned from call to Creating Web publishing rules().
Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().
calling GetBOConnector ().
Call to GetBOConnector () returned ok.
calling spADs->PutEx (ADS_PROPERTY_CLEAR, msExchSmtpOutboundSecurityPassword).
Call to spADs->PutEx () returned ok.
calling spADs->SetInfo ().
Call to spADs->SetInfo () returned ok.
.

Relevant Pages

  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet on nodes
    ... disabled state (someone please confirm this for SBS Standard, ... firewall service should result in 'ISA lockdown'. ... print' from both the server and a WS. ... Was not able to connect to the internet on the WS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... calling CNetCommit::ValidateFulltimeConnectionProperties. ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 and SBS websites
    ... And that one if left enabled will keep the firewall service ... Call to Reading hardware selection returned ok. ... Call to Reading web publishing selection returned ok. ... Call to Notifying client setup for Default gateway as the SBS server ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... Ethernet adapter Server Local Area Connection: ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)