Re: Can't logon to computer in SBS Domain..

Hi Ken,

Thanks for your reply.

I have performed a lot of research on this issue, and for this error
message, the most possible resolution is that we delete some registry keys
on the workstation. You have mentioned that you already deleted the
"certificate" key on the server, and I am not sure whether it is the SBS
server? I think we should delete this registry key on the workstation
which cannot be connected via Remote Desktop.

In addition, besides the "certificate" entry, we need also delete two other
entries: "X509 Certificate" and "X509 Certificate ID", if they exist.
Please delete the three entries under the following registry key on the
workstation, and then restart the computer:

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService\Parameters
]

For detailed information about this issue, please refer to the following KB
article:

"The RDP Protocol Component "DATA ENCRYPTION" Detected an Error..." error
message
http://support.microsoft.com/?id=323497

If the issue still exists after perform the above steps, please perform a
Clean Boot on the workstation and test the issue again. To perform a Clean
Boot, please refer to the following steps:

1. Click Start, click Run, type "msconfig" (without the quotation marks) in
the Open box, and then click OK.
2. In the Startup tab, click the "Disable All" button.
3. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button.
4. Click OK and restart your computer.

Please test this issue on the Clean Boot environment, if the issue
disappears in the Clean Boot environment, this issue may be caused by some
third-party software, please uninstall some third-party software for a
test, such as antivirus, anti-spy, firewall software.

If the issue persists, please help me to collect some information so that I
can perform further research on this issue:

1. System Information

a. On the workstation, click Start, click Run, type "msinfo32".
b. Click File menu, and then click Save.
c. Type a file name, and then click Save.
d. Send the saved file to me at v-stwang@xxxxxxxxxxxxxx

2. Event Log

a. Open Event Viewer, click on Application, and then click Action menu,
click "Save Log File As". Type a file name and then click Save.
b. Click on System, click Action menu, and then click "Save Log File As".
Type a file name and then click Save.
c. Send the two .evt files to me

3. NetDiag

a. On the workstation, click Start, click Run, type cmd, and then click OK.
b. Type "cd \", press Enter, type "netdiag /v /l" (without the quotation
marks), press Enter.
c. Please send the C:\netdiag.log file to me.

Regarding your questions:
1. This issue may be related to certificate, we need to perform some test
to narrow down the root cause. This issue is not related to GPO.
2. This issue has nothing to do with the IIS on the client workstation.
3. If you mean the Windows XP SP2, please refer to the following link to
download the SP2:
<http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30
-8245-9E368D3CDB5A&displaylang=en>

Hope the above information helps. Thanks for your time and I look forward
to hearing from you soon.

Have a nice day!

Steven Wang (MSFT)
Microsoft CSS Online Newsgroup Support

--------------------
>X-Tomcat-ID: 304191072
>References: <dfi3uo$m7v$1@xxxxxxxxxxxxxxxxx>
<#jUf$ApsFHA.3732@xxxxxxxxxxxxxxxxxxxx> <dfksvm$8i0$1@xxxxxxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-stwang@xxxxxxxxxxxxxxxxxxxx (Steven Wang [MSFT])
>Organization: Microsoft
>Date: Wed, 07 Sep 2005 13:07:37 GMT
>Subject: Re: Can't logon to computer in SBS Domain..
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>Message-ID: <rkBZf06sFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Lines: 140
>Path: TK2MSFTNGXA01.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151474
>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>
>Hi Ken,
>
>Thanks for your reply.
>
>>From your reply, I am still confused about the situation on your side. In
>order to understand your question more clearly, please let me know the
>following information:
>
>1. Does the user can access and log on to the Remote Web Workplace? If
>not, is there any error message?
>2. If the user can log on the RWW, what happens when you attempt to
connect
>to the client workstation desktop? Is there any error message? If so,
>please let me know the exact error message, so that I can perform further
>research on it.
>3. Whether you can connect and log on to the server desktop through RWW?
>
>Please let me know the above questions and some detailed information about
>what you have done to attempt to connect to the client workstation, so
that
>I am able to perform research on this issue. Thanks for your cooperation.
>
>More Information
>============
>#1. To enable and configure the Remote Web Workplace:
>
>1. Start the Configure E-mail and Internet Connection Wizard.
>2. On the Firewall page, ensure that Enable firewall is selected.
>3. On the Web Services Configuration page, select Remote Web Workplace.
>
>Important:
>You must also allow access to Outlook Web Access, Windows SharePoint
>Services, and the Monitoring Services Web site if you want users to access
>these services from the Remote Web Workplace.
>
>Notes:
>- To open the Configure E-mail and Internet Connection Wizard, click Start
>and then click Server Management. In the console tree, click Internet and
>E-mail. In the details pane, click Connect to the Internet.
>- If you have a firewall device on your network that does not support
>Universal Plug and Play (UPnP), you must manually configure the firewall
>settings. For more information about how to configure the firewall device,
>see your device manufacturer's documentation. For more information about
>how the wizard configures firewalls that support UPnP, see Using routers
>that support UPnP.
>- Users must type https:// to connect securely from their Web browser to
>the Web server. Connecting to the Remote Web Workplace from the Internet
>does not require users to create a virtual private network (VPN)
connection.
>
>#2. Knowledge Base
>Users cannot connect to your Small Business Server 2003 computer by using
>Remote Web Workplace
>http://support.microsoft.com/default.aspx?scid=kb;en-us;886206
>
>Users cannot connect to remote desktops by using the Windows Small
Business
>Server 2003 Remote Web Workplace
>http://support.microsoft.com/default.aspx?scid=kb;en-us;886209
>
>#3. About External Firewall VPN
>
>If you create the VPN connection by using a hardware firewall, the VPN
>tunnel will be established between the VPN client workstation and the
>firewall. It is unnecessary to enable VPN service on the SBS 2003 server.
>
>If anything is unclear or you have any concern, please feel free to let me
>know. I look forward to hearing from you.
>
>Have a nice day!
>
>Steven Wang (MSFT)
>Microsoft CSS Online Newsgroup Support
>
>--------------------
>>From: Frank Perdue <chicken1@xxxxxxx>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Subject: Re: Can't logon to computer in SBS Domain..
>>Date: Tue, 06 Sep 2005 16:08:23 -0400
>>Organization: PANIX Public Access Internet and UNIX, NYC
>>Lines: 41
>>Message-ID: <dfksvm$8i0$1@xxxxxxxxxxxxxxxxx>
>>References: <dfi3uo$m7v$1@xxxxxxxxxxxxxxxxx>
><#jUf$ApsFHA.3732@xxxxxxxxxxxxxxxxxxxx>
>>NNTP-Posting-Host: cpe-66-108-228-155.nyc.res.rr.com
>>Mime-Version: 1.0
>>Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>>Content-Transfer-Encoding: 7bit
>>X-Trace: reader1.panix.com 1126037302 8768 66.108.228.155 (6 Sep 2005
>20:08:22 GMT)
>>X-Complaints-To: abuse@xxxxxxxxx
>>NNTP-Posting-Date: Tue, 6 Sep 2005 20:08:22 +0000 (UTC)
>>User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
>>X-Accept-Language: en-us, en
>>In-Reply-To: <#jUf$ApsFHA.3732@xxxxxxxxxxxxxxxxxxxx>
>>Path:
>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onl
i
>ne.de!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!panix!not-for-mail
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151238
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>Looking to access Company Web from Share Point Services, in fact, the
>>Remote Web Workplace would be ideal. I have set up users from the
>>server side, and logged in on the client workstations. Still no way to
>>log in to the client.
>>
>>Also.. I have not found documentation on what happens using the EXTERNAL
>>FIREWALL VPN in terms of setting up the Server routing.. Do I enable VPN
>>routing on the server?
>>
>>TIA, again..
>>
>>Ken
>>
>>
>>Matt Gibson wrote:
>>> What kind of access are you looking for? Share level? RDP level?
>>>
>>> We need more information about the network and your needs.
>>>
>>> Matt Gibson - GSEC
>>>
>>> "Frank Perdue" <chicken1@xxxxxxx> wrote in message
>>> news:dfi3uo$m7v$1@xxxxxxxxxxxxxxxxxxxx
>>>
>>>>Newbie installs SBS server and now adds a networked pc to the domain.
>The
>>>>networked pc is given a static IP address on the inside of the
firewall,
>>>>DNS address is the Server, and gateway is the firewall address.
>>>>
>>>>Now, have a successful VPN connection to the firewall which will allow
>for
>>>>rdp access to the SBS Server, but can't get access to the PC on the
>>>>domain. Want users to be able to connect to the PC- using the
>>>>authenticated VPN to the firewall.
>>>>
>>>>Is this a GPO policy issue? Help!
>>>>
>>>>TIA,
>>>>
>>>>Ken
>>>
>>>
>>>
>>
>
>

.