RE: ISA 2004 = RemoteAccess service is Stopped



Hi:
Thanks for posting here.

>From the description, I understand that after you installed the ISA Server
2004, the Remote access service would stop occasionally and the remote
client can no longer connect to the SBS Server via VPN. If I am off base,
please do let me know.

The Remote Access Service is one part of the ISA's core services which is
responsible for remote access such as VPN. If the service is stopped, the
VPN connection will be unable to establish.

Before we go any further, I would like to suggest you re-run the wizard in
order to make sure the internet setting is correctly configured. Please
open the Server Management console and navigate to 'To Do List'. Click
'Connect to the Internet' and you will see the wizard. Please enable the
VPN function in the process of the wizard. More info:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Open Routing and Remote Access console. Right-click the Server Name and
choose 'Disable Routing and Remote Access' option. This option will remove
all current RRAS configurations and stop the service. After doing this,
open Server Management console and navigate to 'Internet and E-mail'
snap-in. Click 'Configure Remote Access' to enable the VPN service. (Please
enter the FQDN the VPN client will use to connect to your SBS Server, if
you do not have a valid public FQDN, please replace it with your public IP
address).

Then, please go to the remote VPN client and follow the KB article below to
configure the VPN connection:

How to configure a VPN connection to your corporate network in Windows XP
Professional
http://support.microsoft.com/default.aspx?scid=KB;EN-US;305550

After performing the above steps, try to establish the VPN connection to
the SBS Server again, will the problem be solved?

If the problem persists, please help me gather the following information in
order to narrow down this problem:
1. How many network cards are installed on the SBS Server?

2. What error information did you receive when the VPN connection failed?
You may capture a screenshot on the error information and send the .jpg
file to my mailbox: v-edtian@xxxxxxxxxxxxx

3. Please check the Event Viewer to see if there exists any event log. If
any, please also send it to my mailbox for further analysis.

4. Does the problem occur on all the remote clients? What if you try using
a domain admin account?


In addition, to find out if the VPN traffic is blocked by the ISA Server,
we may also need to analyze the ISA log:

Please help to gather the ISA logs:

1) Schedule a down time.

2) Open ISA 2004 management console.

3) Expand the server node and highlight 'Monitoring'.

4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.

5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

9) Click 'Apply' to save changes and update the configuration.

10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.

11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.

12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

13) Reproduce the problem, stop the service, and then gather the resulting
W3C files to me for analysis.

14) Please also let me know the IP address of the testing remote client so
that I can filter the data.

Please also help to gather the ISA Info:

1) Download the file from the following URL:

http://www.isatools.org/isainfo/ISAInfo.zip

2) Extract all files to a folder on ISA server.
3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
current folder.
4) Please send these files to me.

Thanks for your time and patience.
Hope the above information helps, please feel free to let me know if there
is anything I can do for you.

Have a nice day!

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "bdtmike" <bdtmike@xxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: ISA 2004 = RemoteAccess service is Stopped
| Date: 14 Nov 2005 22:56:08 -0800
| Organization: http://groups.google.com
| Lines: 11
| Message-ID: <1132037768.618533.15050@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 68.123.222.78
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1132037773 21937 127.0.0.1 (15 Nov 2005
06:56:13 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 15 Nov 2005 06:56:13 +0000 (UTC)
| User-Agent: G2/0.2
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
..NET CLR 1.1.4322; .NET CLR 2.0.50215),gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: g49g2000cwa.googlegroups.com; posting-host=68.123.222.78;
| posting-account=WjtlpwwAAACo4EOE42pZUveAUWBEGwIB
| Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!g49g2000cwa.googlegroups.com!not-fo
r-mail
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:222331
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I've been using SBS 2003 without problems. I've set up a VPN using the
| wizard and all was good. Then I installed ISA 2004. After installing
| this, I receive random email alerts telling me that RemoteAccess
| service has stopped.
| Does ISA use a different service? Is the Remote Access service for SBS
| no longer neccessary? Even with RA running, I still can't establish my
| old VPN connection that used to work for SBS. Any ideas on what I
| should do?
|
| Thanks.
|
|

.



Relevant Pages

  • Re: gateway vpn how-to?
    ... After configuring the "Set up Local ISA VPN Server" wizard, ... After that, reboot the server. ... VPN client connections", finish the configuration afterwards. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote access recurrent disconnection
    ... My VPN and RWW is already configured as you have described below. ... server and rerun the CEICW for the remote access to work. ... As from then every 3 hours I have to run this wizard for remote access to ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN disconnection
    ... Server 2003 SP2 or the Scalable Networking Pack on a Windows Small Business ... Please Run the Configure Remote Access wizard to configure VPN. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Issues, Cannot ping network resources
    ... resources through VPN after applied SP1. ... You may then reboot the SBS server to see if the issue will be ... Additionally you can upgrade ISA 2000 to 2004 to fix the issue. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN with SBS Premuim
    ... Windows 2003 SP2 networking issues, and then re-ran the CEICW again this time ... I understand that after installing ISA 2004 on the SBS ... server, VPN does not work. ... if you installed SP2 on the SBS server without ...
    (microsoft.public.windows.server.sbs)