RE: Internet Connection Wizard failing at Firewall Config and Secu

Crina Li,

Tried all that you suggested but still the same result. Had the following
errors in the event logs.

System:

Event ID 5774
Source: NETLOGON
The dynamic registration of the DNS record 'OFFSPRING.LOCAL. 600 in a
207.70.161.242' failed on the following DNS server:
DNS server IP address: 192.168.100.1
Returned Response Code : 5
Returned Status Code: 9905

DNS Server:

Event ID: 4015
Source: DNS
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly.

Application:

Event ID: 8026
Source: MSExchangeAL
LDAP Bind was unsuccessful on directory OFFSPRING1.OFFSPRING.LOCAL for
distinguished name...

Event ID: 2104
Source: MSExchangeDSAccess
Process STORE.EXE (PID=3356). All the DS Server in domain are not responding.

Event ID: 2102
Source: MSExchangeDSAccess
Process STORE.EXE (PID=2288). All the DS Server in domain are not responding.

Event ID: 8250
Source: MSExchangeAL
The Win32 API call "DsGetDCNameW" returned error code (0x862). The
specified component could not be found in the configuration information. The
service could not be initialized. Make sure that the operating system was
installed properly.

Event ID: 1000
Source: Windows SharePoint Service
#50070. Unable to connect to the database STS_Config on
OFFSPRING1\SharePoint. Check the database connection information...

Also ran DCDiag.exe:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\OFFSPRING1
Starting test: Connectivity
......................... OFFSPRING1 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\OFFSPRING1
Starting test: Replications
......................... OFFSPRING1 passed test Replications
Starting test: NCSecDesc
......................... OFFSPRING1 passed test NCSecDesc
Starting test: NetLogons
......................... OFFSPRING1 passed test NetLogons
Starting test: Advertising
......................... OFFSPRING1 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... OFFSPRING1 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... OFFSPRING1 passed test RidManager
Starting test: MachineAccount
......................... OFFSPRING1 passed test MachineAccount
Starting test: Services
......................... OFFSPRING1 passed test Services
Starting test: ObjectsReplicated
......................... OFFSPRING1 passed test ObjectsReplicated
Starting test: frssysvol
......................... OFFSPRING1 passed test frssysvol
Starting test: frsevent
......................... OFFSPRING1 passed test frsevent
Starting test: kccevent
......................... OFFSPRING1 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 02/13/2006 09:19:50
Event String: The dynamic registration of the DNS record

......................... OFFSPRING1 failed test systemlog
Starting test: VerifyReferences
......................... OFFSPRING1 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : OFFSPRING
Starting test: CrossRefValidation
......................... OFFSPRING passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... OFFSPRING passed test CheckSDRefDom

Running enterprise tests on : OFFSPRING.LOCAL
Starting test: Intersite
......................... OFFSPRING.LOCAL passed test Intersite
Starting test: FsmoCheck
......................... OFFSPRING.LOCAL passed test FsmoCheck

Thanks again for trying to resolve this problem with me.

--
Gyro


""Crina Li"" wrote:

Hi Gyro,

Thanks for your update.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

From the current situation, please try the following steps:

1. Does the SBS server use the latest version of HP Smart Start software?
Is there something named "Enhanced Internet Security"? If so, would you
please disable it and test it again?
2. This issue can occur if the ZoneMap registry key is deleted or corrupted.

Please rename the following registry key if it exists:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings
\ZoneMap

Then import the key from a working system and see how it goes.

3. Please disable RRAS and then rerun CEICW to see how thing goes.
4. In addition, we can try to uninstall and re-install Internet Explorer
Enhanced Security Configuration from Add/Remove Windows Components to
resolve this issue.
5. Make sure that the Network Service account is added to the following
policy settings on the domain controller:

- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token.

You can do so as following (It is an example for Generate security
audits):

1) In Server Management, expand Advanced Management\Group Policy
Management, drill down to Domain Controllers and right-click Default Domain
Controllers Policy, then click Edit.
2) Expand Computer Configuration\Windows Settings\Security Settings\Local
Policies, click User Rights Assignment.
3) In the right pane, double-click Generate security audits, make sure
NETWORK SERVICE and LOCAL SERVICE are listed. If not, add them. Close Group
Policy Object Editor.
4) Restart the server and test again.

If the issue still occurs, would you please help me confirm what the brand
of the SBS server is and if there are any error messages regarding the
issue on event log?

I am appreciated your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Internet Connection Wizard failing at Firewall Config and
Secu
| thread-index: AcYwEyvzu7mXcVX4S8uQTRN6FCj7Fw==
| X-WBNR-Posting-Host: 207.70.161.242
| From: "=?Utf-8?B?R3I4R3lybw==?=" <Gr8Gyro@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <DF5EFF15-3089-4EF5-8431-17172AF3ACE9@xxxxxxxxxxxxx>
<q74GJPfLGHA.608@xxxxxxxxxxxxxxxxxxxxx>
<B140EE43-91FD-4CBA-A96E-1F15611841C1@xxxxxxxxxxxxx>
| Subject: RE: Internet Connection Wizard failing at Firewall Config and
Secu
| Date: Sun, 12 Feb 2006 12:30:32 -0800
| Lines: 530
| Message-ID: <F4C8F13C-016D-415D-9002-759608FD8DE0@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:243985
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Crina Li,
|
| A knowledgeable person over at Experts Exchange has been trying to help
out
| with this problem but unfortunately everything we try doesn't seem to
solve
| the problem. Here is the latest IPCONFIG and the ICWLOg file. Any
| assistance you or anyone else can provide would be greatly appreciated.
I
| need to get this resolved.
|
| I've also tried reinstall the NIC drivers but to no avail.
|
| Windows IP Configuration
| Host Name . . . . . . . . . . . . : OFFSPRING1
| Primary Dns Suffix . . . . . . . : OFFSPRING.LOCAL
| Node Type . . . . . . . . . . . . : Hybrid
| IP Routing Enabled. . . . . . . . : Yes
| WINS Proxy Enabled. . . . . . . . : No
| DNS Suffix Search List. . . . . . : OFFSPRING.LOCAL
| Ethernet adapter Network Connection:
| Connection-specific DNS Suffix . :
| Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
| Physical Address. . . . . . . . . : 00-11-43-EE-DB-94
| DHCP Enabled. . . . . . . . . . . : No
| IP Address. . . . . . . . . . . . : 207.70.161.242
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
| Default Gateway . . . . . . . . . : 207.70.161.254
| DNS Servers . . . . . . . . . . . : 192.168.100.1
| NetBIOS over Tcpip. . . . . . . . : Disabled
| Ethernet adapter Server Local Area Connection:
| Connection-specific DNS Suffix . :
| Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
| Connection #2
| Physical Address. . . . . . . . . : 00-11-43-EE-DB-95
| DHCP Enabled. . . . . . . . . . . : No
| IP Address. . . . . . . . . . . . : 192.168.100.1
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
| Default Gateway . . . . . . . . . :
| DNS Servers . . . . . . . . . . . : 192.168.100.1
| Primary WINS Server . . . . . . . : 192.168.100.1
|
| 2/12/2006 1:29 PM
| C:\Program Files\Microsoft Windows Small Business
| Server\Networking\ICW\wizinet.dll, version 5.2.2893.0
| calling CNetCommit::ValidatePropertyBag ().
| Call to Querying for the property bag () returned ok.
| Call to Reading hardware selection () returned ok.
| Hardware selection: 0
| Call to Validating hardware selection () returned ok.
| Call to Reading LAN NIC Guid () returned ok.
| LAN NIC Guid: {D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
| Call to Validating LAN NIC Guid () returned ok.
| Call to Validating NIC properties () returned ok.
| Broadband selection: 0
| Call to Validating broadband selection () returned ok.
| calling CNetCommit::ValidateFulltimeConnectionProperties ().
| Call to Reading LAN NIC Guid () returned ok.
| LAN NIC Guid: {D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
| Call to Validating LAN NIC Guid () returned ok.
| Call to Reading 2nd NIC Guid () returned ok.
| External NIC Guid: {497D5A1E-27C1-4A3A-87FD-700E614962DB}
| Call to Validating external NIC Guid () returned ok.
| Call to Validating NIC properties () returned ok.
| Call to Reading Default Gateway () returned ok.
| Default Gateway: 207.70.161.254
| Call to Validating Default Gateway IP () returned ok.
| Call to Reading preferred DNS server IP () returned ok.
| Preferred DNS server: 207.70.128.240
| Call to Validating prefferred DNS server IP () returned ok.
| Call to Reading alternate DNS server IP () returned ok.
| Alternate DNS server: 207.70.172.240
| Call to Validating alternate DNS server IP () returned ok.
| Call to Validating preferred & alternate DNS servers () returned ok.
|
| 2/12/2006 1:29 PM
| C:\Program Files\Microsoft Windows Small Business
| Server\Networking\ICW\wizrfire.dll, version 5.2.2893.0
| calling CRFireCommit::ValidatePropertyBag (0xfed108).
| Call to Reading web publishing selection () returned ok.
| Call to Reading OWA publishing selection () returned ok.
| Call to Reading RUP publishing selection () returned ok.
| Call to Reading Monitoring publishing selection () returned ok.
| Call to Reading OMA publishing selection () returned ok.
| Call to Reading RPC publishing selection () returned ok.
| Call to Reading Companyweb publishing selection () returned ok.
| Call to Reading ROOT publishing selection () returned ok.
| Web publishing selections:
| OWA publishing: 1
| RUP publishing: 1
| Monitoring publishing: 0
| OMA publishing: 1
| RPC publishing: 1
| Companyweb publishing: 1
| ROOT publishing: 1
| Call to CRFireCommit::ValidatePropertyBag () returned ok.
|
| 2/12/2006 1:29 PM
| C:\Program Files\Microsoft Windows Small Business
| Server\Networking\ICW\wizcert.dll, version 5.2.2893.0
| Calling CCertCommit::ValidatePropertyBag
| Require SSL for OWA: 1
| Require SSL for Remote Portal: 1
| Require SSL for Monitoring: 0
| Require SSL for OMA: 0
| Require SSL for CompanyWeb: 0
| Require 128 Bit Encryption: 1
| Cert selection: 1
| Web server name: www.offspringfinancial.com
| CCertCommit::ValidatePropertyBag returned OK
|
| 2/12/2006 1:29 PM
| C:\Program Files\Microsoft Windows Small Business
| Server\Networking\ICW\wizemail.dll, version 5.2.2893.0
| calling CEmailCommit::ValidatePropertyBag ().
| calling pdispPPPBag->QueryInterface (IPropertyPagePropertyBag, 0x6e50c).
| Call to pdispPPPBag->QueryInterface () returned ok.
| calling ReadInt4 (0xfed108, DB5E5E45-3598-4F1D-8FF7-0ED35B9EB6A4).
| Call to ReadInt4 () returned ok.
| The out param of ReadInt4() is 1.
| calling CValidatePropertyUtil.ValidatePropertyInteger ().
| Call to CValidatePropertyUtil.ValidatePropertyInteger () returned ok.
| calling ReadBool (0xfed108, F71526DD-9C19-4fe9-B7DB-FD4360909275).
| Call to ReadBool () returned ok.
| The out param of ReadBool() is 1.
| calling CValidatePropertyUtil.ValidatePropertyBool ().
| Call to CValidatePropertyUtil.ValidatePropertyBool () returned ok.
| calling ReadBool (0xfed108, DB5E5E46-3598-4F1D-8FF7-0ED35B9EB6A4).
| Call to ReadBool () returned ok.
| The out param of ReadBool() is 1.
| calling CValidatePropertyUtil.ValidatePropertyBool ().
| Call to CValidatePropertyUtil.ValidatePropertyBool () returned ok.
| calling ReadBool (0xfed108, 1DB7A50F-98F8-452f-868B-1AAC56585DD0).
| Call to ReadBool () returned ok.
| The out param of ReadBool() is 1.
| calling CValidatePropertyUtil.ValidatePropertyBool ().
| Call to CValidatePropertyUtil.ValidatePropertyBool () returned ok.
| calling ReadInt4 (0xfed108, C9D8697B-0D4C-4767-8F1F-4CE415098774).
| Call to ReadInt4 () returned ok.
| The out param of ReadInt4() is 0x2.
| calling CValidatePropertyUtil.ValidatePropertyLong ().
| Call to CValidatePropertyUtil.ValidatePropertyLong () returned ok.
| calling ReadString (0xfed108, 01637C90-B142-41C4-8520-6B2E0F891BE7).
| Call to ReadString () returned ok.
| The out param of ReadString() is offspringfinancial.com.
| calling ReadBool (0xfed108, 1DB7A50F-98F8-452f-868B-1AAC56585DD0).
| Call to ReadBool () returned ok.
| The out param of ReadBool() is 1.
| calling ReadInt4 (0xfed108, C9D8697B-0D4C-4767-8F1F-4CE415098774).
| Call to ReadInt4 () returned ok.
| The out param of ReadInt4() is 0x2.
| calling CValidatePropertyUtil.ValidatePropertyHostName ().
| Call to CValidatePropertyUtil.ValidatePropertyHostName () returned ok.
| calling AttachCommiter.Validate(pPPPBag) (0xfed108,
| 01637C90-B142-41C4-8520-6B2E0F891BE7).
| calling CAttachCommiter::Validate (0xfed108).
| calling CAttachCommiter::Validate:ReadVariant (0x0).
| calling CAttachCommiter::Validate:m_spDoc.CoCreateInstance (0x0).
| calling CAttachCommiter::Validate:m_spDoc->loadXML (0x0).
| Call to CAttachCommiter::Validate () returned ok.
| Call to CEMailCommit::ValidatePropertyBag () returned ok.
| calling CNetCommit::Commit (16699656).
| calling CNetCommit::ValidatePropertyBag ().
| Call to Querying for the property bag () returned ok.
| Property bag is not dirty, skipping validation
| calling CNetCommit::Common ().
| calling CNetCommit::GetLanNicInfo ().
| LAN NIC Guid: {D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
| Call to Converting LAN NIC Guid () returned ok.
| Call to Getting IP address for the LAN NIC () returned ok.
| Call to Reading in the LAN NIC info () returned ok.
| Call to Fixing the TCP/IP NIC Binding order () returned ok.
| Dhcp server is installed and not disabled
| Call to Set DHCP Server to start up automatically () returned ok.
| DNS server is installed and not disabled
| Call to Changing startup type for DNS () returned ok.
| Call to Clearing DNS server entries on the LAN NIC () returned ok.
| Call to Setting DNS server IP for the LAN NIC () returned ok.
| Call to Resetting DNS recursion timeout () returned ok.
| Call to Resetting client dns query timouts in config.dat () returned ok.
| Call to DsGetDcName for local domain name () returned ok.
| Call to Installing RRAS (LAN) () returned ok.
.

Relevant Pages

  • CEICW Fails at RegisterMSBOExchangeBP
    ... Ethernet adapter Server Local Area Connection: ... Call to Reading hardware selection returned ok. ... calling CNetCommit::ValidateRouterConnectionProperties. ... Call to Reading preferred DNS server IP returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: CEICW Fails at RegisterMSBOExchangeBP
    ... > Call to Reading hardware selection returned ok. ... > calling CNetCommit::ValidateRouterConnectionProperties. ... > Call to Reading preferred DNS server IP returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Please Help CEICW Fails At Firewall For RWW
    ... Call to Reading hardware selection returned ok. ... calling CNetCommit::ValidateRouterConnectionProperties. ... Call to Reading preferred DNS server IP returned ok. ... Call to Reading web publishing selection returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem creating new exchange mailbox
    ... Call to Reading hardware selection returned ok. ... calling CNetCommit::ValidateRouterConnectionProperties. ... Call to Reading preferred DNS server IP returned ok. ... Call to Reading web publishing selection returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: CEICW Fails at RegisterMSBOExchangeBP
    ... Call to Reading hardware selection returned ok. ... calling CNetCommit::ValidateRouterConnectionProperties. ... Call to Reading preferred DNS server IP returned ok. ... Call to Reading the port mappings returned ok. ...
    (microsoft.public.windows.server.sbs)