Re: RAS/VPN problems

Hello Quentin,

Thank you for posting back!

I understand that besides your original issue, you cannot use OWA from the
Internet. We will troubleshoot your issues one by one to see whether these
issues are related. Thanks for your understanding!

Please see my following suggestions:

1> Check the permission setting:

1. On the server, Start -> Run "regedit" (without quotation marks).

2. Expand to My
Computer\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess.

3. Right click RemoteAccess, select Permissions.

4. Make sure that Adminstrators, System and Network Service have Full
Control down the tree.

5. Network Configuration Operator only has Query Value, Enumerate Subkeys,
Notify and Read Control permissions. (Click Advanced -> Highlight Network
Configuration Operator -> Click Edit)

Make sure there are no any Deny boxes have being checked.

6. Uncheck the box "Allow inheritable permissions from the parent to
propagate¡­¡­.".

7. If the issue persists, please see:

a. Repeat Steps 1, 2 and 3. click Add.

b. Add account: Everyone. Grant Full Control to it.

c. Test this issue again.

2> I need to know whether this issue be reproduced?

I am appreciated your time and cooperation, and looking forward to hearing
from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>NNTP-Posting-Date: Fri, 12 Aug 2005 04:49:20 -0500
>X-Trace-PostClient-IP: 196.38.237.242
>From: "Quentin" <qbucke@xxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>References: <EPadnZ2dnZ2-xd6-nZ2dnUJxZ9-dnZ2dRVn-zZ2dnZ0@xxxxxxxx>
<l1Kb6HwnFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: RAS/VPN problems
>Date: Fri, 12 Aug 2005 11:49:10 +0200
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0009_01C59F33.DC17C160"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>Message-ID: <89ydnXDQMbw87WHfRVn-vQ@xxxxxxxx>
>Lines: 603
>NNTP-Posting-Host: 168.209.98.66
>X-Trace:
sv3-nbiHpg70bYCk87tv8k/7kAV57ZXrruWHBr1EkMZDR3JLDoJIQsgdwhNPtOi/zrnC4Sq++d6Y
vqR9jg4!pkg6WukrxaRGsOkgSgvhJgSH+eCBdFoii2SEavbGZXWwpT9/nd4MpVOVpJ0EHhLOXpg=
>X-Complaints-To: abuse@xxxxxxxx
>X-DMCA-Complaints-To: abuse@xxxxxxxx
>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
>X-Postfilter: 1.3.32
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!border1.nntp.dca.gigan
ews.com!local01.nntp.dca.giganews.com!nntp.is.co.za!news.is.co.za.POSTED!not
-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143633
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi,
>I have checked all the settings in the registry and they are all correct.
>I receive the system report via e-mail to notify me if any of the services
stop the report is as listed below:
>Alert on POPTECH-SVR01 at 8/12/2005 8:02:50 AM
>RemoteAccess service is Stopped.
>This service enables virtual private network (VPN) and network address
translation (NAT) routing services for the Small Business Server computer
and other computers connected to the network. If this service is stopped,
these services will be unavailable.
>For more information about this event, see the event logs on the server
computer. You can restart this service by using the View Services task in
the Server Management Monitoring and Reporting taskpad.
>You can disable this alert by using the Change Alert Notifications task.
>i get this error once or twice a day every day even when no one is working.
>Here are the only even log entries around the same time.
>Event Type: Error
>Event Source: Microsoft Firewall
>Event Category: None
>Event ID: 14102
>Date: 12/08/2005
>Time: 08:03:03 AM
>User: N/A
>Computer: POPTECH-SVR01
>Description:
>Failed to save the Routing and Remote Access service configuration in the
registry. The registry key:
System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip, registry
value: - could not be accessed for writing. The VPN configuration of the
server is incomplete.
>For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 05 00 00 00 ....
>Event Type: Warning
>Event Source: Microsoft ISA Server Web Proxy
>Event Category: None
>Event ID: 14148
>Date: 12/08/2005
>Time: 08:02:57 AM
>User: N/A
>Computer: POPTECH-SVR01
>Description:
>The Web Proxy filter failed to bind its socket to 10.100.163.1 port 80.
This may have been caused by another service that is already using the same
port or by a network adapter that is not functional. To resolve this issue,
restart the Microsoft Firewall service. The error code specified in the
data area of the event properties indicates the cause of the failure.
>For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 40 27 07 80 @'.?
>Hope this helps.
>Apart from the above we can access the company web site etc, but OWA has
stpped working when connectinng from outside our internal network.
>thanks
>Quentin
>""Brandy Nee [MSFT]"" <v-branee@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:l1Kb6HwnFHA.3120@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hello Quentin,
>>
>> Thank you for posting to the SBS Newsgroup.
>>
>> I understand that you noticed the RAS services sometimes stops working.
If
>> I have misunderstood your concern, please let me know.
>>
>> I have performed research on the error information you have applied
"could
>> not be accessed for writing", I noticed that this is a Permission issue.
>> Please see my following suggestion:
>>
>> 1. On the server, Start -> Run "regedit" (without quotation marks).
>>
>> 2. Expand to My Computer\HKEY_LOCAL_MACHINE\
>> System\CurrentControlSet\Services\RemoteAccess\Parameters\IP.
>>
>> 3. Right click IP. Go to Permissions. The default permissions settings
are:
>>
>> Account Unknown: Read
>>
>> Administrators: Full Control
>>
>> Local Service: Read
>>
>> Network Configuration Operators: Read
>>
>> Network Service: Read
>>
>> SYSTEM: Full Control
>>
>> Users: Read
>>
>> Make sure there is no any Deny box has being checked.
>>
>> 4. Click Advanced.
>>
>> 5. Double check all the Group or user permissions. Also, you need to
fully
>> meet the Permissions entries:
>>
>> a. Type:Allow.
>>
>> b. Apply To: This key and subkeys.
>>
>> c. Inherited From:
MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess.
>>
>> d. Check the box "Allow inheritable permissions from the parent
to...­..".
>>
>> e. Highlight each Group or User Name in the Permissions entries Pool , >
click Edit and make sure there is no any Deny box has being check.
>>
>> 6. Click OK.
>>
>> 7. Reproduce the issue.
>>
>> If the issue persists, I need to gather more information for further
>> research:
>>
>> a. Where did you find "the RAS services goes down for a few seconds and
>> restarts"? Please full give out the detail steps.
>>
>> b. Does your server work well on your side now, besides this issue? For
>> example, clients can receive/send email correctly, clients can access
>> companyweb, OWA, and RWW.
>>
>> I am appreciated your time. If anything is unclear, please feel free to
let
>> me know. I am looking forward to hearing from you!
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your >
issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>
>>
>> --------------------
>>>NNTP-Posting-Date: Thu, 11 Aug 2005 01:14:55 -0500
>>>X-Trace-PostClient-IP: 196.38.237.242
>>>From: "Quentin" <qbucke@xxxxxxxxxxxxx>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>Subject: RAS/VPN problems
>>>Date: Thu, 11 Aug 2005 08:14:48 +0200
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>X-RFC2646: Format=Flowed; Original
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>Message-ID: <EPadnZ2dnZ2-xd6-nZ2dnUJxZ9-dnZ2dRVn-zZ2dnZ0@xxxxxxxx>
>>>Lines: 26
>>>NNTP-Posting-Host: 168.209.98.66
>>>X-Trace:
>>
sv3-1Nt4lYZKDjdOMLNGDe4+75plHU9BE9wguYAeJFj5y8NPEdMbom0dIad+lH9b70qmjw4K/dMp
>>
oATdFcA!dCS21vtBEEkB48zi4px8Zahret0KjVMnHAdtauAkX+X7oOMoyWHaraI/NXCodBkdgWzh
>> 9qbd/2cn!qU2hmHyswVvXBmPTkoU=
>>>X-Complaints-To: abuse@xxxxxxxx
>>>X-DMCA-Complaints-To: abuse@xxxxxxxx
>>>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
>>>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
>> complaint properly
>>>X-Postfilter: 1.3.32
>>>Path:
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>>
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!newscon06.news.prodigy
>>
com!prodigy.net!border1.nntp.dca.giganews.com!local01.nntp.dca.giganews.com
>> !nntp.is.co.za!news.is.co.za.POSTED!not-for-mail
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143293
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>> Hi,
>>>
>>> We are currently running SBS 2003 Prem edition with ISA 2004 will
>> all
>>>the patches installed. Every day the RAS services goes down for a few
>>>seconds and restarts, i can't find any error directly relating to it,
but
>> i
>>>found the error as listed below, can anybody help ?? ISA and SBS are on
>> the
>>>same server with 2 NIC's
>>>
>>>
>>>
>>>
>>>
>>>
>>> Source Event ID Last Occurrence Total Occurrences
>>> Microsoft Firewall 14102 10/08/2005 04:28 PM 3 *
>>> Failed to save the Routing and Remote Access service
>>>configuration in the registry. The registry key:
>>>System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip, registry
>>value: - could not be accessed for writing. The VPN configuration of the
>>>server is incomplete.
>>>
>>>
>>>Thanks
>>>Quentin
>>>
>>>
>>>
>>
>

.

Relevant Pages

  • RE: LDAP & Find People not working
    ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... > | Yes, the scanner is on the local area network, so as you indicated below, ... > | So I wonder why the scanner does not see the LDAP server. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot Connect via remote desktop
    ... You can establish the RDP connection and it is stops work soon. ... work stably for your network. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot Connect via remote desktop
    ... You can establish the RDP connection and it is stops work soon. ... work stably for your network. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: "Delayed Write Failed" error message when you write a file to
    ... Check the network. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... message when you write a large file to a server. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003 Premium and ISA2004 SP3 FTP and POP3 problems
    ... Based on my research on the error code, I think this is a know network ... Can you access external FTP on SBS? ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)