Re: Please enter password for HTTP proxy
- From: bzyf <bzyfon@xxxxxxxxxxxxxx>
- Date: Tue, 21 Mar 2006 22:26:39 -0800
Hi,
thank You, I really appreciate Your help !!
there are my results:
Crina Li wrote:
Hi bzyf,
Thanks for your update.
To narrow down the problem, would you please try the following steps?
1. On problematic client, open IE and then click Internet Options on Tools menu.
2. Click connection tab and then click LAN Settings.
3. Make sure you have not selected Automatically detect settings and Use automatic configuration script.
4. Clear the Exceptions and then click OK.
5. Click Advanced tab on Internet Options.
6. Make sure you have selected Enable Integrated Windows Authentication. 7. Try to see if the problem still occurs.
Enable integrated wind...... was already checked
If the issue still occurs, please let me know the result of clean boot and also help me collect the ISA log:
After clean boot: NO Alert now !!!
1. Open ISA Management, and then point to Monitoring Configuration | Logs
2. Double click ISA Server Firewall Service in the right pane, click to select Enable Logging for this service, click Fields tab, click Select All, and then click OK.
3. Please repeat Step 2) to enable logging IP Packet Filter and Web Proxy Services.
4. Run command "net stop isactrl" (without the quotation marks) to stop all ISA Services.
5. Backup all files in the folder C:\Program Files\Microsoft ISA Server\ISALogs, and then delete them.
6. In ISA Management | <server name> | Monitoring | Services, start all ISA services.
7. Reproduce the issue.
8. Wait for about 3 minutes, and then send that day's firewall, web proxy and IP Packet filter log below in C:\Program Files\Microsoft ISA Server\ISALogs to me at v-crinal@xxxxxxxxxxxxx:
I sent this files to You.
-bzyf
.
Firewall log: FWSEXTDyyyymmdd.log
Web Proxy log: WEBEXTDyyyymmdd.log
IP Packet Filter log: IPPEXTDyyyymmdd.log
9. Please also let me know the IP address of the testing client so that I can filter the data.
I appreciate your time and look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue.
Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: bzyf <bzyfon@xxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Please enter password for HTTP proxy
| Date: Mon, 20 Mar 2006 23:37:06 -0800
| Organization: Posted via Supernews, http://www.supernews.com
| Message-ID: <121vb937nfqqd65@xxxxxxxxxxxxxxxxxx>
| User-Agent: Thunderbird 1.5 (Windows/20051201)
| MIME-Version: 1.0
| References: <121pc6mhnfteq9f@xxxxxxxxxxxxxxxxxx> <8LGgDW$SGHA.7904@xxxxxxxxxxxxxxxxxxxxx>
| In-Reply-To: <8LGgDW$SGHA.7904@xxxxxxxxxxxxxxxxxxxxx>
| Content-Type: text/plain; charset=ISO-8859-1; format=flowed
| Content-Transfer-Encoding: 7bit
| X-Complaints-To: abuse@xxxxxxxxxxxxx
| Lines: 271
| Path: TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!newshub.sdsu.edu!router2.astraweb.com!mrouter.astraweb.com!news.astraw
eb.com!router1.astraweb.com!sn-xt-sjc-04!sn-xt-sjc-07!sn-post-01!supernews.c
om!corp.supernews.com!not-for-mail
| Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:254527
| X-Tomcat-NG: microsoft.public.windows.server.sbs
| | Hi,
| | Thank you for Your prompt answer
| | I got no luck :(
| | I reply inline:
| | Crina Li wrote:
| > Hi bzyf,
| > | > Thank you for posting in SBS newsgroup.
| > | > I am sorry for the delayed response due to weekend. Please understand that | > the newsgroups are staffed weekdays by Microsoft Support professionals to | > answer your systems and applications questions. Your understanding is | > greatly appreciated!
| > | > From your post, my understanding on this issue is: A few of the computers | > is having a problem where it is being asked to authenticate to the proxy | > server when trying to use internet or Outlook, even though they are logged | > on to the SBS server that hosts the ISA. If I have misunderstood your | > concern, please feel free to let me know. | > | > To narrow down the problem, would you please help me collect the following | > information?
| > | > 1. Compare the IE settings to make sure the problematic clients are the | > same as the good ones. Find a good computer, start IE, click | > Tools->Internet Options, click the Connections tab, click the LAN Settings | > button, write down the settings on this page, click Advanced and then wring | > down the settings. Compare the same settings on the problematic clients and | > then correct them. Does the issue disappear?
| | Setting for both good and problematic are almost the same:
| | Use proxy for your lan.... checked
| | Address: MMSERVER port: 8080
| | Bypass proxy server for local.... checked
| | in Advanced:
| | HTTP: MMSERVER : 8080
| ===
| ===
| === same
| ===
| ===
| | Use the same proxy server for all.. checked
| | the only difference is: problematic has Exeptions
| | Do not use proxy for addresses beginning with
| | ;localhost
| | When I clear this Proxy alert still pop ups
| and this Exeption is back after I logoff/logon
| | | | | > 2. Have the other good clients installed ISA Firewall Client? If so, make | > sure the problematic clients also have Firewall Client installed. If the | > problematic clients have ISA 2000 Firewall Client installed, uninstall it | > and then reinstall the ISA 2000 Firewall Client.
| | Both good and bad client have installed ISA Firewall Client.
| Uninstalling and reinstalling it does not help.
| | | > 3. Make sure the users logon the domain on the problematic clients. This | > issue can occur if the users do not log on the domain and they use the | > computer local user accounts.
| | I find in system Properties => Computer Names that Primary Dns Suffix
| field is empty so I correct this. This changed full computer name to
| JUREKG01.MM.local ( on "good" one this is ANNAG01.MM.local)
| | I also restart DHCP and find both clients in there.
| | > | > Also please double check network configuration on SBS and client computer:
| > | > On SBS server:
| > | > External NIC:
| > IP: assigned by your ISP or your hardware router
| > Gateway: your ISP or your Hardware router IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| > | > Internal NIC:
| > IP: Fixed IP
| > Gateway: None
| > DNS: SBS INTERNAL NIC IP as the only entry
| | | SERVER IPCONFIG:
| | Windows IP Configuration
| | | | Host Name . . . . . . . . . . . . : mmserver
| | Primary Dns Suffix . . . . . . . : MM.local
| | Node Type . . . . . . . . . . . . : Unknown
| | IP Routing Enabled. . . . . . . . : Yes
| | WINS Proxy Enabled. . . . . . . . : Yes
| | DNS Suffix Search List. . . . . . : MM.local
| | | | Ethernet adapter Server Local Area Connection:
| | | | Connection-specific DNS Suffix . :
| | Description . . . . . . . . . . . : NETGEAR FA311/312 PCI Adapter
| | Physical Address. . . . . . . . . : 00-02-E3-02-9F-CC
| | DHCP Enabled. . . . . . . . . . . : No
| | IP Address. . . . . . . . . . . . : 192.168.0.2
| | Subnet Mask . . . . . . . . . . . : 255.255.255.0
| | Default Gateway . . . . . . . . . :
| | DNS Servers . . . . . . . . . . . : 192.168.0.2
| | Primary WINS Server . . . . . . . : 192.168.0.2
| | | | Ethernet adapter Internet:
| | | | Connection-specific DNS Suffix . :
| | Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast | Ethernet NIC
| | Physical Address. . . . . . . . . : 00-05-5D-34-B3-99
| | DHCP Enabled. . . . . . . . . . . : No
| | IP Address. . . . . . . . . . . . : 192.168.1.10
| | Subnet Mask . . . . . . . . . . . : 255.255.255.0
| | Default Gateway . . . . . . . . . : 192.168.1.1
| | DNS Servers . . . . . . . . . . . : 192.168.0.2
| | NetBIOS over Tcpip. . . . . . . . : Disabled
| | > | > In the DNS console (dnsmgmt.msc), right click your ServerName and click | > properties. In the Forwarders tab, your ISP DNS server IP should be | > inputted there.
| > | | Everything correct there.
| | | > On workstation inside your SBS local subnet
| | Bad client IPCONFIG
| | | Windows IP Configuration
| | | | Host Name . . . . . . . . . . . . : JUREKG01
| | Primary Dns Suffix . . . . . . . : MM.local
| | Node Type . . . . . . . . . . . . : Hybrid
| | IP Routing Enabled. . . . . . . . : No
| | WINS Proxy Enabled. . . . . . . . : No
| | DNS Suffix Search List. . . . . . : MM.local
| | MM.local
| | | | Ethernet adapter Local Area Connection:
| | | | Connection-specific DNS Suffix . : MM.local
| | Description . . . . . . . . . . . : 3Com 3C910 Integrated Fast | Ethernet Controller (3CSOHO100B-TX Compatible)
| | Physical Address. . . . . . . . . : 00-0A-48-02-FA-7C
| | Dhcp Enabled. . . . . . . . . . . : Yes
| | Autoconfiguration Enabled . . . . : Yes
| | IP Address. . . . . . . . . . . . : 192.168.0.148
| | Subnet Mask . . . . . . . . . . . : 255.255.255.0
| | Default Gateway . . . . . . . . . : 192.168.0.2
| | DHCP Server . . . . . . . . . . . : 192.168.0.2
| | DNS Servers . . . . . . . . . . . : 192.168.0.2
| | Primary WINS Server . . . . . . . : 192.168.0.2
| | Lease Obtained. . . . . . . . . . : Monday, March 20, 2006 | 9:56:27 PM
| | Lease Expires . . . . . . . . . . : Sunday, March 26, 2006 | 9:56:27 PM
| > | > IP: Assigned by DHCP on SBS
| > Gateway: SBS internal NIC IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| > | > If the problem still persists, please perform a clean boot on problematic | > client as following:
| >
| > 1. Click Start, click Run, and then in the Open box, type "MSCONFIG" | > (without the quotation marks). Click OK.
| > 2. In the System Configuration Utility (MSConfig) window, click to select | > the Selective Startup button.
| > 3. Click to clear the check mark from the "Load startup items" below | > Selective Startup.
| > 4. Click the Services tab, click to check the "Hide All Microsoft Services" | > box, and remove all the check marks from the remained Non-Microsoft | > Services. Please note that the Exchange services could be marked as | > non-Microsoft. Please do not disable those services. | > 5. Click OK to close the MSConfig window. Click Yes when you are asked to | > restart your computer in order to enable the changes.
| > 6. After restarting, please check whether this issue will reoccur.
| | Sorry to late to run this
| | | > | > Please do not hesitate to let me know if you have any questions or concern.
| > | > I appreciate your time and look forward to hearing from you.
| > | > Best regards,
| > | > Crina Li (MSFT)
| > | > Microsoft CSS Online Newsgroup Support
| > | > Get Secure! - www.microsoft.com/security
| > |
- Follow-Ups:
- Re: Please enter password for HTTP proxy
- From: "Crina Li"
- Re: Please enter password for HTTP proxy
- References:
- Please enter password for HTTP proxy
- From: bzyf
- RE: Please enter password for HTTP proxy
- From: "Crina Li"
- Re: Please enter password for HTTP proxy
- From: bzyf
- Re: Please enter password for HTTP proxy
- From: "Crina Li"
- Please enter password for HTTP proxy
- Prev by Date: Re: Outlook Web Access shows Loading.....
- Next by Date: Re: Free R2 update for SBS 2K3 OEM versions
- Previous by thread: Re: Please enter password for HTTP proxy
- Next by thread: Re: Please enter password for HTTP proxy
- Index(es):