Re: R2 w/ISA 'User' type account cannot use my company's internal website

Hi Gary,

Thanks for your update. I appreciate your time and efforts the issue.

I have researched the SBS 2003 R2 test environment and documents, there is
no such internal website issue and Help and Support issue in your side
addressed till now.

I. The Windows SBS 2003 R2 has included the Exchange Server 2003 Service
Pack 2, we need not separately apply the exchange 2003 SP1 to the server.
And I would like to provide some information about the SBS 2003 R2 for your
reference.

The Windows SBS 2003 R2 standard version contains the following components:

1. Exchange Server 2003 Service Pack 2.

2. Windows SharePoint? Services 2.0 Service Pack 2.

3. Windows SBS 2003 R2 Technologies.

For Windows Small Business Server 2003 R2 Premium Technologies, you also
can install the following components:

1. Installing SQL Server 2005 Workgroup Edition

2. Installing ISA Server 2004

3. Installing FrontPage 2003

More detail information are addressed in the following document:
SBS 2003 R2: Features at a Glance
http://www.microsoft.com/windowsserver2003/sbs/r2/features.mspx

Windows Small Business Server 2003 R2: Technology Upgrade Program
https://www.microsoft.com/windowsserver2003/sbs/r2/upgrade.mspx

Windows Small Business Server 2003 R2: Powering Small Businesses
http://www.microsoft.com/windowsserver2003/sbs/r2/default.mspx

II. To the internal website issue, please help me collect the following
information for analyze:

1. Please reproduce the issue with a problematic user account and a
Administrator account, and collect the IIS log and IIS metabase for analyze.

Note: Please let me know the IP address of the SBS server box and the IP
address of test machine.

2. Please run command "msinfo32" (no quotation marks) on the SBS server box
to launch System Information console. And click File and then Save. Save
the system information to a .nfo file to send to me. My working mailbox:
v-yanniw@xxxxxxxxxxxxx

3. Please dump the attributes of (1) the problematic user and (2) a working
user using the LDIFDE utility referring to the following steps:

You can use the following command: ldifde -f C:\username.txt -d
"<DN_of_the_user>"

Note: To get a user's distinguishedName, please follow the steps below:

(1) Start ADSIEdit snap-in.
(2) Expand Domain container -> Users.
(3) Right click a problematic user on the right panel -> Properties.
(4) Select "Show only attributes that have values".
(5) Double click the distinguishedName attribute and copy the value.
(6) Paste it into the following command: ldifde -f C:\problematic_user.txt
-d "<DN_of_the_user>".
(7) Repeat the same steps to dump a working user to working_user.txt.

III. To the Help and Support issue:

There are many factors that may lead to the help and support component
missing when re-apply the services packages. For current situation, please
refer to the following steps to re-install it.

a. Logon the server as an administrator, Run
..-->%windir%\PCHealth\HelpCtr\Binaries\helpsvc.exe /install
/regserver/svchost netsvcs /reinstall

b. Wait till helpsvc.exe completes installation (watch process activity in
Task Manager)

c. Copy the hscsp*.cab and hscmui.cab (hscmui.cab on USA systems only) from
%windir%\PCHealth\HelpCtr\Binaries to %windir%\PCHealth\HelpCtr\BATCH and
wait for it to be processed.

d. Then check if you can properly run "Help and Support Center".

If the issue persists, please save the collect Application, System and
Security log files as .evt format and send to my working mailbox:
v-yanniw@xxxxxxxxxxxxxx

I appreciate your time. I am glad to be further assistance to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
X-Tomcat-ID: 159111086
References: <123572DF-9EC8-4A02-8D63-DA5671EF01BD@xxxxxxxxxxxxx>
<xn0eox91fa59v1p000@xxxxxxxxxxxxxxxxxxxx>
<eyiSiiCrGHA.4988@xxxxxxxxxxxxxxxxxxxx>
<xn0ep40x08eoax001@xxxxxxxxxxxxxxxxxxxx>
<ovgDD7ksGHA.3920@xxxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Mon, 07 Aug 2006 09:42:59 GMT
Subject: Re: R2 w/ISA 'User' type account cannot use my company's internal
website
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <zzBbkXguGHA.2004@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 166
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:287538
NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122

Hi Gary,

Thanks for your update. I am back now and I am sorry for the inconvenience
for my sick leaving. I really appreciate your time to the issue.

If you have already installed the earlier released media, we have not
experienced issues in production with regard to this release.
The product group is currently reviewing methods of upgrading any already
installed SBS 2003 R2 servers.

Thanks for your inquiry regarding the SBS 2003 R2 recall incident. At this
time, we are advising customers/partners to not install the earlier
released media at this time.

If you have already installed the earlier released media, we have not
experienced issues in production with regard to this release. The product
group is currently reviewing methods of upgrading any already installed
SBS
2003 R2 servers.

We are happy to assist with any break/fix issues here. You can check in
the
following web site to get more detailed information regarding SBS R2
recall.

http://blogs.technet.com/sbs/

For current situation, I would like to suggest that we continue trouble
shoot the issue by checking the settings referred my previous post and let
me know the result. And our product group is working under investigation
so
we will let you know once we have any update. Thanks again for your
understanding!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
X-Tomcat-ID: 297031588
References: <123572DF-9EC8-4A02-8D63-DA5671EF01BD@xxxxxxxxxxxxx>
<xn0eox91fa59v1p000@xxxxxxxxxxxxxxxxxxxx>
<eyiSiiCrGHA.4988@xxxxxxxxxxxxxxxxxxxx>
<xn0ep40x08eoax001@xxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Fri, 28 Jul 2006 14:04:30 GMT
Subject: Re: R2 w/ISA 'User' type account cannot use my company's
internal
website
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <ovgDD7ksGHA.3920@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 72
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:285063
NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122

Hi Gary,

Thanks for your update. I appreciate your time. I do understand your
situation.

Ok, I will wait for you. Please don't hesitate to let me know when you
need
further assistance on this issue. I am glad to be further assistance to
you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

--------------------
From: "Steve Foster [SBS MVP]" <steve.foster@xxxxxxxxxxxxx>
Subject: Re: R2 w/ISA 'User' type account cannot use my company's
internal
website
References: <123572DF-9EC8-4A02-8D63-DA5671EF01BD@xxxxxxxxxxxxx>
<xn0eox91fa59v1p000@xxxxxxxxxxxxxxxxxxxx>
<eyiSiiCrGHA.4988@xxxxxxxxxxxxxxxxxxxx>
Organization: Picamar Limited
User-Agent: XanaNews/1.18.1.3
Message-ID: <xn0ep40x08eoax001@xxxxxxxxxxxxxxxxxxxx>
X-Ref: msnews.microsoft.com ~XNS:00001B69
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Newsgroups: microsoft.public.windows.server.sbs
Date: Mon, 24 Jul 2006 09:53:10 -0700
NNTP-Posting-Host: dsl-212-135-222-181.dsl.easynet.co.uk 212.135.222.181
Lines: 1
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:283751
X-Tomcat-NG: microsoft.public.windows.server.sbs

Gary J. Dikkema wrote:

There are some subtle differences between SE and PE systems Steve...
at
least in these two systems.

Yes, ISA200[0|4] is the major one.

So what exactly is the error seen on the workstations, and what exactly
are they trying to access?

Is the ISA2004 Firewall Client installed?
Is IE6 configured to point to the SBS as proxy?

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.






.