Re: Remote Web Workplace Issues-Please help!

Hi Chip,

Thanks for updating.

Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
38110201-Remote Web Workplace Issues-Please help!

I am looking forward to hear from you.


Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<X-Tomcat-ID: 197023868
<References: <0FAECAA8-93C0-4AB6-B4C1-0DF75BEE29D6@xxxxxxxxxxxxx>
<#haqpQ6WHHA.1000@xxxxxxxxxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<Organization: Microsoft
<Date: Thu, 01 Mar 2007 10:13:30 GMT
<Subject: Re: Remote Web Workplace Issues-Please help!
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <109FJp#WHHA.4424@xxxxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 259
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:20254
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<
<Hi Chip,
<
<Thanks for posing in our newsgroup and also for Anna's great input.
<
<From your description, I know that when you logon on RWW, you got the
error
<"HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on
the
<requested resource." If I am off-base, please don't hesitate to let me
<know.
<
<Please let me know the following to make the situation more clearly:
<
<1. When you visit RWW from internal, what's the result?
<2. Can you visit other websites such as OWA successfully from the Internet?
<3. Do all the users or some of them have this problem?
<
<Please take the following steps to narrow down this issue:
<
<Step 1: I strongly recommend you to rerun the CEICW. The Wizard helps us
<publish RWW to Internet successfully.
<
<For more information, please refer to:
<825763 How to configure Internet access in Windows Small Business Server
<2003
<http://support.microsoft.com/?id=825763
<
<Step 2: Open the Server Management Console, go to the Standard
<Management\Security Groups, double click the Users group in the right
pane,
<click the Member Tab, make sure the following three groups and accounts
are
<listed and if not, add them and then check if it works:
<
<Authenticated Users
<Domain Users
<INTERACTIVE
<
<Step 3: Please try the steps to give the service account the "Impersonate
a
<client after Authentication" right.
<
<To do this:
<1. Start "gpmc.msc"
<2. Expand Default Domain Policy-> Computer Configuration -> Windows
<Settings -> Security Settings -> Local Policies -> User Rights Assignment
<3. Give the SERVICE account the "Impersonate a client after
<Authentication" right.
<
<Step 4: Please check the NTFS file system permissions, registry
<permissions, and Microsoft Windows user rights according to the KB 812614.
<
<For more information, please refer to:
<812614 Default permissions and user rights for IIS 6.0
<http://support.microsoft.com/kb/812614/
<
<Step 5: This problem occurs because the IIS worker process is recycled
<during the NTLM authentication handshake with the client. The state of the
<NTLM authentication is stored with the worker process. Therefore, the
state
<of any NTLM authentication that is in process is lost when the recycle
<action occurs. To resolve the problem, please contact CSS to get hotfix
<832911and install it.
<
<832911 FIX: Users sometimes receive an "HTTP 401.3 unauthorized due to
<access
<http://support.microsoft.com/?id=832911
<
<If the problem still exists, please help me collect the following
<information:
<
<MPS Report
<
<1) Download MPS report tool from:
<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
9
<15706/MPSRPT_SETUPPerf.EXE
<2) Run the MPSRPT_SETUPPerf.exe on the server box.
<3) Wait for 10~15 minutes.
<4) Open Windows explorer, navigate to
<%SYSTEMROOT%\MPSReports\Setup\Reports\cab\
<5) Send the .cab file to me
<
<2. IIS Metabase.
<1. Download the IIS Resource Kit tools from the following page:
<http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73
-
<B628-ADE629C89499&displaylang=en
<2. Install it, run MBExplorer (Metabase Explorer)
<3. Right click the "LM" node and choose "Export to file".
<4. Specify a file name, specify the password and finish the export.
<5. Send the file and the password to me.
<
<Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
<38110201-Remote Web Workplace Issues-Please help!
<
<If you need further assistance, please don't hesitate to let me know.
<
<
<Best regards,
<
<Robert Li(MSFT)
<
<Microsoft CSS Online Newsgroup Support
<
<Get Secure! - www.microsoft.com/security
<
<=====================================================
<
<This newsgroup only focuses on SBS technical issues. If you have issues
<regarding other Microsoft products, you'd better post in the corresponding
<newsgroups so that they can be resolved in an efficient and timely manner.
<You can locate the newsgroup here:
<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<
<When opening a new thread via the web interface, we recommend you check
the
<"Notify me of replies" box to receive e-mail notifications when there are
<any updates in your thread. When responding to posts via your newsreader,
<please "Reply to Group" so that others may learn and benefit from your
<issue.
<
<Microsoft engineers can only focus on one issue per thread. Although we
<provide other information for your reference, we recommend you post
<different incidents in different threads to keep the thread clean. In
doing
<so, it will ensure your issues are resolved in a timely manner.
<
<For urgent issues, you may want to contact Microsoft CSS directly. Please
<check http://support.microsoft.com for regional support phone numbers.
<
<Any input or comments in this thread are highly appreciated.
<
<=====================================================
<
<This posting is provided "AS IS" with no warranties, and confers no rights.
<
<--------------------
<<Reply-To: "Anna Clark" <anna.clark(remove this)@verizon.net>
<<From: "Anna Clark" <anna.clark(remove this)@verizon.net>
<<References: <0FAECAA8-93C0-4AB6-B4C1-0DF75BEE29D6@xxxxxxxxxxxxx>
<<Subject: Re: Remote Web Workplace Issues-Please help!
<<Date: Wed, 28 Feb 2007 20:51:35 -0500
<<Lines: 132
<<X-Priority: 3
<<X-MSMail-Priority: Normal
<<X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
<<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
<<Message-ID: <#haqpQ6WHHA.1000@xxxxxxxxxxxxxxxxxxxx>
<<Newsgroups: microsoft.public.windows.server.sbs
<<NNTP-Posting-Host: pool-71-101-114-105.tampfl.dsl-w.verizon.net
<71.101.114.105
<<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:20205
<<X-Tomcat-NG: microsoft.public.windows.server.sbs
<<
<<Hi Chip:
<<
<<
<<Here (below) is everything I have on RWW not working. If you get it
<<repaired, please let us know what the issue was. And if you find any
other
<<pointers that help, pleae post those back also.
<<
<<--
<<Regards:
<<
<<Anna Clark
<<-----
<<Please do post the conclusion or solution
<<to your issue so that others may benefit.
<<
<<Is 4125 busy with some other procedure, or not listening?
<<
<<Users cannot connect to remote desktops by using the Windows Small
Business
<<Server 2003 Remote Web Workplace
<<<http://support.microsoft.com/?id=886209>
<<
<<306802 </kb/306802/> (<http://support.microsoft.com/kb/306802/>)
<<
<<How to configure Small Business Server for full time Internet access with
<<two network adapters
<<
<<309633 </kb/309633/> (<http://support.microsoft.com/kb/309633/>)
<<
<<How to configure an SBS for full time Internet access with a single
network
<<adapter
<<
<<329155 </kb/329155/> (<http://support.microsoft.com/kb/329155/>)
<<
<<You receive a "The server may be too busy" error message when you try to
<<connect to Terminal Services on a Small Business Server 2000 computer
<<
<<154596 </kb/154596/> (<http://support.microsoft.com/kb/154596/>)
<<
<<How to configure RPC dynamic port allocation to work with firewalls
<<
<<315328 How to Use the Remote Desktop Feature of Windows XP Professional
<<<<http://support.microsoft.com/?id=315328>>
<<
<<
<<278295 How to lock down a Windows Server 2003 or Windows 2000 Terminal
<<Server
<<<<http://support.microsoft.com/?id=278295>>
<<
<<812614 Default permissions and user rights for IIS 6.0
<<
<<<http://support.microsoft.com/kb/812614/>
<<
<<HTTP 401.3 Denied by Resource ACL
<<
<<This error indicates that the web server was able to authentication,
<<
<<but the user does not have NTFS permissions to the content requested.
<<
<<Resolutions:
<<
<<Set the NTFS permissions based on this article for more details: Default
<<permissions and user rights for IIS 6.0,
<<http://support.microsoft.com/kb/812614/
<<
<<Verify that the correct authentication method is set. For example, when
you
<<use Integrated authentication, users are not prompted for authentication
<<credentials. In this instance, it may be unclear if the request is
<<authenticating or not.
<<
<<If the content is located on a remote share, verify that users have
<<sufficient NTFS and Share permissions.
<<
<<________________
<<
<<"ChipDancer" <ChipDancer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
<<news:0FAECAA8-93C0-4AB6-B4C1-0DF75BEE29D6@xxxxxxxxxxxxxxxx
<<> I am so at my wits end here guys so some help would really be
<appreciated.
<<>
<<> Some background:
<<> We just performed a SBS hardware migration, worked wonderful, everything
<<> works fine, with the little things that needed to be manually done as
<<usual,
<<> but for the life of me I can't get RWW to work for non-domain admins!
<<>
<<> When I go to log into RWW I get the little login box with the keys in
the
<<> upper left hand corner, and if I logon as a domain admin I'm at the main
<<RWWW
<<> login, logging into that I see the main menu for RWW, but that damned
<<little
<<> box keeps popping up and asking me for my login/password, canceling it
<<gets
<<> me out of it though, but our former install didn't have this irritating
<<> issue; from this point it works ok and I can log into any server or
<<desktop
<<> connected to the domain.
<<>
<<> But, if I try logging into the remote as a non-domain admin user the
<<little
<<> box keeps popping up and then after three trys results in a webpage with
<<the
<<> following coming up:
<<>
<<>
<<> You are not authorized to view this page
<<> You do not have permission to view this directory or page due to the
<<access
<<> control list (ACL) that is configured for this resource on the Web
<server.
<<>
<--------------------------------------------------------------------------
<<------
<<>
<<> Please try the following:
<<>
<<> Contact the Web site administrator if you believe you should be able to
<<view
<<> this directory or page.
<<> Click the Refresh button to try again with different credentials.
<<> HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on
<the
<<> requested resource.
<<> Internet Information Services (IIS)
<<>
<<>
<<> Anyone have a clue what is going on and how to resolve it please???
<<>
<<> Also note, we are using SP1 and both the company web and Exchange OWA
<work
<<> fine, as well as VPN.
<<>
<<> Thanks in advance,
<<>
<<> CD
<<>
<<
<<
<<
<
<

.