Re: Server inaccessible

Owen skrev:
In article <1157584039.965097.128930@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
erik.r58c@xxxxxxxxx says...

In addition to Merv's suggestions ... Any possibility firewall settings
on the workstations have been changed (e.g., changes to a group policy
on the server) OR was a different firewall installed on the
workstations? I see similar symptoms sometimes with ZoneAlarm if it is
not properly configured to recognize the IP range of the SBS LAN
(although the newer versions of ZA are much better about reporting
network changes).

-- Owen Williams (SBS MVP)

A week before this happened F-Secure was upgraded from v.5.52 to 6.02,
but I unloaded it on the workstations during all my testing the past
week and didn't think it would be a problem.

Today i ran the Security Configuration Wizard and immediately lost
contact to the Internet. The DNS had stopped passing request on to the
root servers. I then rolled back the settings but the DNS still had
problems. I also could not use remote desktop from the Internet, but
from the local client PCs it still worked.

I also updated the Intel 1000 CT network driver on the server. The old
one was from 2003. The clients was running realtek chips on the
motherboard (Shuttel PCs). No drivers was updated in months.

During all this rebooting I suddenly noticed that the client hadd
intermittent connection to the server when the server booted. It
managed to syncronise its documents for a short time and then lost
contact again.

This led me to look at det GPOs since they are aplied late in the boot
process. I have little experience with GPOs and ended up with disabling
all of them. Now I had some access although very slow.

I reenabled the Default Domain Controllers Policy and the Default
Domain Policy.

After the SCW problems I noticed that a lot of services was disabled
(inkluding the plug & play and event log services). Exchange was also
down and the services complained about dependecies when I tried to
start them. It would also not show the dependencies. This might be the
cause for the slowness.

I then changed all the disabled services to manual (excluding the ones
I obviously didn't need) and started everything. The DNS however got
stuck in a "Starting" state.

After a reboot the DNS came back online and now everything seemes to
work. I can now access the Internet, the shares and Exchange. The users
are happy.

I however are a little concerned about thoe SBS GPOs. How could they
suddenly be a problem. What are the implications that they are
disabled?

I suspect that it might have been a conflict beetwen the Windows
Firewall policy (since the client PCs was prevented from disabling the
firewall) and the F-Secure firewall.

Thank you for giving me hints about the GPOs and the network driver.

Erik

.

Relevant Pages

  • Re: Trend Micro Client Server for SMB
    ... Disabling the firewall DID solve the problem. ... to the server properly and without delay. ... I am looking into the SBS documentation to do a better job with my DNS ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Firewall Greyed Out
    ... policy called "Small Business Server Windows Firewall?" ... profile," seems to indicate that this policy is being applied correctly. ... Navigate to the firewall settings to see where the policy applied from. ...
    (microsoft.public.windows.server.sbs)
  • Re: Prevented from adding users
    ... Disabling the policy has not resolved the problem. ... setting I should configure my print server name? ... Without stepping through the debugger on this I am unsure why the client ...
    (microsoft.public.windowsxp.print_fax)
  • Re: OE Send/Recieve Broken - NOT firewall/av-related
    ... AFAIK there have been no "auto-updates...pushed in the last few days", John. ... > Your server has unexpectedly terminated the connection. ... > NO FIREWALL, ... > don't point me to AV/Firewall disabling instructions. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • RE: [fw-wiz] Personal/Host-based Firewalls
    ... I am running Windows 2000 Server and IIS: When I get patches I can end ... When someone finds that disabling the firewall, ... benachrichtigen Sie bitte den Absender und loeschen Sie bitte die ...
    (Firewall-Wizards)