RE: Monitoring and Reporting Errors

Hi Robert,
I keep trying to send you the logs but i get an error message back from the
MS smtp servers saying that i am being bounced for sending spam...??



You do not have permission to send to this recipient. For
assistance, contact your system administrator.
<southislandnetworks.com #5.7.1 smtp;550 5.7.1 <Your e-mail was
rejected by an anti-spam content filter on gateway (131.107.115.215). Reasons
for rejection may be: obscene language, graphics, or spam-like
characteristics. Removing these may let the e-mail through the filter.>>


do you have any other way to view them



"John _ X" wrote:

Thanks for the input Robert,

I do not get any errors when i use the local system account. In fact,
everything is working as it should be. There are no problems. It is only as
network authority that causes all the problems.

I tried your suggestions, but still network auth fails to work. I will try
to get the logs and send them to you. ...

"Robert Li [MSFT]" wrote:

Hi John,

Thanks for posting in our newsgroup.

From your description, I know that you get error when you view the report
from e-mail. If you change the DefaultAppPool to run as Local Service
account, the system works OK. If I am off-base, please don¡¯t hesitate to
let me know.

Based on my research, the DefaultAppPool runs under Network Service account
by default. If you change that to local system account, you will get Server
Application Unavailable error.

Please take the following steps to see if the problem can be resolved:

Step 1:Please verify the Monitoring VD settings in IIS server:

1. Open IIS snap-in.
2. Go to Default Web Site/Monitoring.S
3. Right click Monitoring and click Properties.
4. Click Virtual Directory tab.
5. Please ensure you have input proper Local Path (C:\Inetpub\Monitoring)
and also ensure the checkbox of Read, Log Visit and Index this resource are
checked.
And also ensure Application Settings as follows:

--Application Name: Monitoring
--Execute Permissions: Script only
--Application Pool: DefaultAppPool

6. Click Directory Security tab.
7. Click Edit under "Authentication and access control".
8. Make sure that only the option "Integrated Windows Authentication"
checked.
9. Click Edit under "IP address and domain name restriction".
10. Make sure that "Granted access" has been selected.
11. Click Edit under "Secure communications".
12. Make sure that "Require secure channel (SSL)" is UNchecked.

13. Please double-check the default application pool in IIS. To do so:

1). Open IIS Manager.
2). Go to Server/Application Pools/DefaultAppPool.
3). Right click DefaultAppPool and click Properties.
4). Click the Identity tab.
5). Make sure the application pool is using "Predefined: Network Service"
as its identify.

14. Run IISReset command and check whether the problem persists.

Step 2: Please change the ASP.NET version to 1.1.4322 on the Monitoring
Virtual Directory. To do so:

1. Open IIS snap-in.
2. Go to Default Web Site/Monitoring.
3. Right click Monitoring and click Properties.
4. Click ASP.NET tab, please change the ASP.NET version to 1.1.4322.
5. Run IISReset command to take effect the change.

Step 3: If the issue persists, please verify the permissions as follows:

1. Start Windows Explorer and go to C:\Windows\Microsoft.Net\Framework.

2. Right click the "v1.1.4322" folder and choose Properties.

3. Click the Security tab.

4. Click Add to add the "Local Service" and "Network Service" accounts and
then give them both the following permissions:

Read & Execute
List Folder Contents
Read

5. Double click to open the "v1.1.4322" folder. Right click the "Temporary
ASP.NET Files" folder and choose Properties.

6. Click the Security tab.

7. Add the "IIS_WPG", "Local Service" and "Network Service" accounts to the
list and then give them the "Full Control" permission. Click OK.

8. At a command prompt, type "IISRESET" (without the quotation mark) and
then press ENTER. Then check if everything is working well.

Step 4: Run the following command where at command prompt:

secedit /configure /db c:\windows\temp\seceditsv.sdb /cfg
"c:\windows\security\templates\setup security.inf" /log
c:\windows\temp\seceditsv.log

This sets the local security policy back to default, and allowed the
License Logging Service and other such services to start using the Network
service account. Restart the SBS Server to have a check

If the issue persists, please help me collect the following information for
analyze:

1. Please help to collect the IIS metabase for analyze:

To collect the IIS metabase on Server:

1). On Exchange Server, install .NET Framework Version 1.1:
http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842-
8157-034d1e7cf3a3&DisplayLang=en.
2). Install MBExplorer by installing IIS 6 Resource Kit Tools:
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
B628-ADE629C89499&displaylang=en.
3). Once it is installed, access it from Start, Programs, IIS Resources,
Metabase Explorer.
4). In the left pane, right click ''LM'' (under your server computer name)
to choose ''Export to file'', and then save it as IIS.mbk.
5). Compress this mbk file and send it to me for analysis. Please let me
know the password if you set on this iis mbk file.

2. Please collect the Setup MPS Reports for analyze:

1) Please download the MPSRPT_SETUPPerf.EXE from the following link and
then run this tool to gather some information from the problematic computer:
http://www.microsoft.com/downloads/details.aspx?familyid=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&displaylang=en
2) Double-click on the MPSRPT_SETUPPerf.EXE file.
[Note] This process may take some time; however, it will not have a
negative effect on the performance.
c. A CAB file will be generated in the
%systemroot%\MPSReports\Setup\Reports\Cab directory called
%COMPUTERNAME%_MPSReports.CAB. The CAB file will contain the reports
generated by the MPS Reporting Tool.

Please send the log files to my mailbox: v-robeli@xxxxxxxxxxxxx with
subject: 38391797-Monitoring and Reporting Errors.

I am looking forward to hear from you.

If you need further assistance, please don¡¯t hesitate to let me know.


Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

.

Relevant Pages

  • RE: OWA
    ... 825763 How to configure Internet access in Windows Small Business Server ... Open IIS snap-in, go to Default Web Site/exchange and open its ... Under Directory Security tab, ... Check if everyone has full mailbox access to the organization or mailbox ...
    (microsoft.public.exchange.admin)
  • Re: Page Cannot Be Displayed Errors
    ... not IIS, but something else. ... >>> directly on the web server, ... >>>>> I have done some additional checking in the logs. ... >>>>> either the request isn't even getting to IIS at this point, ...
    (microsoft.public.inetserver.iis)
  • Re: MS Vulnerability? I was hacked!
    ... The DNS server encountered an invalid domain name offset ... can I pull logs of what they did? ... >So that leads me to belive its something in IIS. ... >>gave up after having no success. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Cannot open the /connectcomputer site
    ... performancee logs and alerts service. ... There is no connectcomputer site in IIS. ... what errors are in the event logs on the server? ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Problem...
    ... Is there anything in your IIS web server ... What are you seeing in your firewall logs that is INCOMING to your ... A very typical scenario is for a hacker to use an IIS web service ... > I know those are the tools that would be used for making an FTP server. ...
    (microsoft.public.security)
Loading