RE: Configure Remote Access
- From: v-chayan@xxxxxxxxxxxxxxxxxxxx ("Charles Yang [MSFT]")
- Date: Wed, 28 Sep 2005 02:30:02 GMT
HI,
Welcome to SBS newsgroup.
Issue descriptions:
================
I understand that you encountered error c0040393 in rras log when running
remote access wizard.
Analyzing and suggestions:
=================
Based on my research, this issue may occur if the following policy settings
are not assigned to the Network Service account on the domain controller:
- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token
The Network Service account must be added to the policy settings in the
list. This issue may occur if Group Policy settings that were applied at
the domain level have modified the policy settings for the Network Service
account on the domain controller. This issue mostly occurs after you
promote a member server to a domain controller, or on a migration from a
Windows 2000 network where SBS 2003 was joined to the 2000 domain.
To resolve this issue, make sure that the Network Service account is added
to the following policy settings on the domain controller:
- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token
To configure the policy settings for the Network Service account on the
domain controller, follow these steps:
1. Click "Start", point to "Administrative Tools", and then click "Domain
Controller Security Policy".
2. Expand "Local Policies", and then click "User Rights Assignment". The
policy settings are displayed in the right pane.
3. Double-click the policy setting that you want to add the Network Service
account to.
4. If the Network Service account is not in the list of users and groups
that are assigned to that policy setting, click "Add User or Group".
5. In the "Select User or Groups" dialog box, type "Network Service"
(without the quotation marks) in the "Enter the object names to select"
box, and then click "OK".
6. Verify that "NETWORK SERVICE" is displayed in the list of users and
groups that are assigned to that policy setting, and then click "OK".
7. Close the policy editor.
8. Run GPUPDATE /FORCE from a command prompt.
9. Reboot the server.
I appreciate your time to cooperate in this issue, please feel free to post
back. I am glad to be of assistance.
Best regards,
Charles Yang (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Configure Remote Access
| thread-index: AcXDaj8MHilhGGZ/RI6b7vsVd6XiMQ==
| X-WBNR-Posting-Host: 213.123.142.110
| From: "=?Utf-8?B?SnVsaWFuIENvb3Blcg==?=" <Julian
Cooper@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Configure Remote Access
| Date: Tue, 27 Sep 2005 06:49:14 -0700
| Lines: 64
| Message-ID: <CD506453-3C87-4F1B-B944-A2C2C0A05990@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156821
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| After installing:
| Windows Server 2003 SP1
| Sharepoint services SP
| WinXP SP2 SP
| SBS2003 SP1
| ISA2004
|
| I am unable to successfuly run Configure Remote Access - The rraslog
| contents are listed belw
|
|
| 27/09/2005 14:45
| C:\Program Files\Microsoft Windows Small Business
| Server\Networking\RRASWiz\wizrras.dll, version 5.2.2893.0
| Calling CRRASCommit::CommitEx
| Calling CRRASCommit::ValidatePropertyBag
| pdispPPPBag->QueryInterface returned OK
| PropertyBag 25ff50
| Reading property value for enabling Remote Access returned OK
| bRemoteAccess = 1
| Reading property value for VPN returned OK
| bVPN = 0
| Reading property value for RAS returned OK
| bRAS = 1
| Calling CRRASCommit::ValidateRASProperties
| Reading the list of modems to be enabled for RAS returned OK
| Validating the modems in the list returned OK
| Reading the primary phone number returned OK
| Primary phone number is 01579351182
| Reading the alternate phone number returned OK
| Alternate phone number is
| Calling CRRASCommit::ValidateDHCPProperties
| DHCP server is installed on the box
| CRRASCommit::ValidateDHCPProperties returned OK
| CRRASCommit::ValidateRASProperties returned OK
| CRRASCommit::ValidatePropertyBag returned OK
| pdispPPPBag->QueryInterface returned OK
| Pointer to the property bag 25ff50
| Calling CRRASCommit::CommitRRAS
| Arguments:
| PropertyBag 25ff50
| bRAS 1
| bVPN 0
| Getting the GUID of the private NIC returned OK
| Private NIC Guid is {0F0A087F-B114-4298-8F20-64B785F6B434}
| Checking whether RRAS is already running returned OK
| RRAS is not running
| Installing RRAS returned OK
| Configuring ports returned OK
| Saving RRAS method returned OK
| Method is 1
| Where 1 = RAS, 2 = VPN 3 = both
| CRRASCommit::CommitRRAS returned OK
| Committing RRAS returned OK
| Initializing Stingray library returned OK
| Enabling VPN Client Access returned OK
| Setting maximum number of vpn clients returned OK
| Dhcp server is installed and running on this box
| Enabling DHCP client addressing returned OK
| *** Saving changes and restarting services returned ERROR c0040393
| *** CRRASCommit::ConfigureISA2k4() returned ERROR c0040393
| *** Configure ISA2k4 returned ERROR c0040393
| *** CRRASCommit::CommitEx returned ERROR c0040393
|
|
.
- Prev by Date: Re: <<what is the difference between OWA and Outlook via the internet?
- Next by Date: RE: WMI Error
- Previous by thread: Re: <<what is the difference between OWA and Outlook via the internet?
- Next by thread: RE: Configure Remote Access
- Index(es):
Relevant Pages
|
