Re: Multiple errors

Hi Henrik,

Thanks for your update. I am glad to know that things are getting fine now.
I appreciate your time and effort to try my suggestions and get this
resolved.

Basically the ISA server uses the "SBS Protected Networks access rule" to
allocate IP address to the LAN clients. If there is any deny rule or rules
that applied to specific users/groups placed above the "SBS Protected
Networks access rule", the DHCP request may not apply to the correct access
rule. From your ISA info, I find that there are several deny firewall rules
placed above the "SBS Protected Networks access rule", this leads that the
DHCP requests are blocked since they are not applied by correct access
rule.

Now you just need keep the "SBS Protected Networks access rule" at the top
order. And enable those two system rules: Allow DHCP requests from ISA
Server to all networks; Allow DHCP replies from DHCP servers to ISA Server

Please do not hesitate to post in this newsgroup if you need any assistance
in the future! We are glad to help-)!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
The customer mail content:
=======================
Hi,

Thank you for your answer.

I did as you told me, and it works! Great! Do we need to change anything
now?

Henrik Georgson

=======================

--------------------
X-Tomcat-ID: 134305717
References: <1154968314.008773.88230@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<1155066090.516053.24270@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<MmBPNL6uGHA.5584@xxxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Mon, 14 Aug 2006 08:48:41 GMT
Subject: Re: Multiple errors
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <GjEb153vGHA.3028@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 396
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:289477
NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122

Hi Johan and Henrik,

Thanks for your update. I appreciate your time.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

For current situation, let us perform the following tests to see if it
works:

1. Open ISA 2003 server console, Navigate to Firewall Policy -> SBS
Protected Networks access rule, move the "SBS Protected Networks access
rule" to the top order.

2. Then navigate to Firewall Policy->View->Show System Policy Rules,
disable the following two system rules:

1). Allow DHCP requests from ISA Server to all networks

2). Allow DHCP replies from DHCP servers to ISA Server

3. Click Apply button to take effect the change.

Then please test to see if client computers can receive IP address
properly.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
The customer mail content:
===========================
Hi,

Johan are now not available because of vacation. So I, Henrik, have made
the
tests and gathered the logs. When I turned off the firewall the DHCP worked
fine and one of the clients got 192.168.0.117 as IP-address. Hope you got
all information you need.

Best Regards
Henrik Georgon

===========================

--------------------
X-Tomcat-ID: 183736240
References: <1154968314.008773.88230@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<1155066090.516053.24270@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
Organization: Microsoft
Date: Wed, 09 Aug 2006 10:58:45 GMT
Subject: Re: Multiple errors
X-Tomcat-NG: microsoft.public.windows.server.sbs
Message-ID: <MmBPNL6uGHA.5584@xxxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Lines: 590
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:288219
NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182

Hi Johan,

Thanks for your update. I appreciate your time and efforts the issue.

Let us perform the following test to trouble shoot the issue:

Please run command "net stop fweng" to stop all ISA services on the
server
box, and then go to client computers to check if the computer can get IP
address from the DHCP server.

I. If the issue disappears, that indicates that it is some firewall rule
that block the DHCP traffic. Please collect the ISAinfo of the ISA 2004
for
me to analyze.

II. If the issue persists, that indicates that it is DHCP server issue.
Please help me collect the DHCP log for analyze. The DHCP audit logs are
located by default at %windir%\System32\Dhcp. Please mail me all logs
under
the DHCP folder.

More info:
Analyzing server log files
http://technet2.microsoft.com/WindowsServer/en/Library/2a535b4d-1771-485b-
8
b
fa-459d35d563fb1033.mspx

The steps to gather the ISA info and ISA logs:

- To collect the ISA info:

1) Download the file from the following URL:

http://www.isatools.org/isainfo/ISAInfo.zip

2) Extract all files to a folder on ISA server.
3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
the
current folder.
4) Please send these files to me at v-yanniw@xxxxxxxxxxxxx

- To collect the ISA logs:

1) Schedule a down time.

2) Open ISA 2004 management console.

3) Expand the server node and highlight 'Monitoring'.

4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.

5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

9) Click 'Apply' to save changes and update the configuration.

10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.

11) Clear the current existing W3C logs. To do that, go to the log
saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
be able to deleted, that's normal.) You may backup them first and then
delete them.

12) Go back to the ISA 2004 management console, and then Start the
stopped
'Microsoft Firewall' service.

13) Reproduce the problem, stop the service, and then gather the
resulting
W3C files to me for analysis.

14) Please also let me know the IP address of the testing clients so that
I
can filter the data.

I am glad to be further assistance to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.


--------------------
From: johan@xxxxxxxxxxxx
Newsgroups: microsoft.public.windows.server.sbs
Subject: Re: Multiple errors
Date: 8 Aug 2006 12:41:30 -0700
Organization: http://groups.google.com
Lines: 408
Message-ID: <1155066090.516053.24270@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
References: <1154968314.008773.88230@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<1155022319.562580.228050@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<iSL77IuuGHA.760@xxxxxxxxxxxxxxxxxxxxx>
<1155046598.954623.125510@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
NNTP-Posting-Host: 213.64.165.217
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1155066095 30576 127.0.0.1 (8 Aug 2006
19:41:35 GMT)
X-Complaints-To: groups-abuse@xxxxxxxxxx
NNTP-Posting-Date: Tue, 8 Aug 2006 19:41:35 +0000 (UTC)
In-Reply-To: <1155046598.954623.125510@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1;
InfoPath.1),gzip(gfe),gzip(gfe)
Complaints-To: groups-abuse@xxxxxxxxxx
Injection-Info: n13g2000cwa.googlegroups.com;
posting-host=213.64.165.217;
posting-account=vYzdLwwAAAC9LEvnWXzut7wKIIRigtdT
Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed
.

Loading