Re: Create an extranet ?

Hi Jacky,

like everytime you give me an answer, it's perfect, thank you !

Could you confirm that I am using the right method in my first question please ?
"1. I have then manually configured IIS to disable this anonymous authentication and let only Windows integrated authentication. This is the right method ?"

Thank you

Hi Pascal,

Thanks for posting here.
From the description, I understand the issue is that you want to access the company''s internal website from the internet. If I am off base, please don't hesitate to let me know.

If you are using SBS 2K3 Standard version (without ISA installed), when you run CEICW, you will get the chance to publish the

WSS (Companyweb) out to the Internet without any further configuration.

However, Companyweb is not available externally when ISA (SBS 2K3 Premium) is installed. Below is the article that will be

published.

In addition, if you want to publish a new SharePoint Web Site Accessible to External Users, you can refer to the whitepaper

at http://www.microsoft.com/downloads/details.aspx?FamilyID=b51dcb25-0c63-4561-
b981-9a3c860b9f15&DisplayLang=en.

Please let me know if the information helps you resolve the problem, thanks!

===================================================
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back

it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back

up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
KBLink:256986.KB.EN-US: Description of the Microsoft Windows Registry
SUMMARY
=======
This article describes how to publish Intranet (http://Companyweb) by using Internet Security and Acceleration (ISA) Server

so that external clients can connect via Remote Web Workplace.


MORE INFORMATION
================
The following steps describe how to configure Microsoft Windows Small Business Server 2003 Premium Edition where ISA 2000 is

installed.

The configuration on the ISA Server requires the creation of a protocol definition, and a server publishing rule. The configuration on the Internet Information Services requires assigning a web certificate to the Companyweb.
The configuration on the Remote Web Workplace requires editing the registry on the server
How to Configure ISA Server
---------------------------
Create a New Protocol Definition That Is Named "Companyweb Inbound 444"
1. Start the ISA Management console, open the Policy Elements container, right-click Protocol Definitions, point to New, and

then click Definition. 2. Name the protocol definition "Companyweb Inbound 444" (without the quotation marks), and then click Next.
3. Type 444 in the Port number box. Leave the "Protocol type" setting as TCP. Change the "Direction" setting to Inbound, and

then click Next.
4. Leave the "Do you want to use a secondary connection." setting at No, click Next, and then click Finish.
Server Publish the Companyweb
1. Start the ISA Management console, open the publishing container, right-click Server Publishing rules, point to New, and

then click Rule.
2. Name the rule that you are creating (for example, "Companyweb"), and then click Next.
3. Type the internal address of your Small Business Server (for example, "192.168.16.2") under Internal server, type the appropriate address for the external interface on the Small Bussiness Server under ISA Server, and then

click Next.
4. Click Companyweb Inbound 444, and then click Next.
5. Select the appropriate client set. Note that if the server is used by computers that are on the Internet, Any request is

the best choice.
6. Click Next, and then click Finish.
7. Restart the Firewall service.
IMPORTANT: If your server is behind a hardware firewall, you need to verify TCP port 444 is open at the hardware firewall.


How to Configure Internet Information Services
---------------------------
1. Click "Start", point to "Administrative Tools", and then click "Internet Information Services (IIS) Manager".
2. In the left pane, click your server.
3. In the right pane, double-click "Web Sites".
4. In the right pane, right-click Companyweb, and then click "Properties".
5. Click "Directory Security", and then click "Server Certificate".
6. On the "Welcome to the Web Certificate Wizard" page, click "Next".
7. On the "Server Certificate" page, click "Assign an existing certificate", and then click "Next".
8. On the "Available Certificates" page, click the installed certificate you want to assign to this Web site, and then click

"Next". The name of the certicate is the one you specified during the Configure E-mail and Internet Connection Wizard (CEICW). Do

not select publishing.InternalDomain.local where InternalDomain.local is your internal DNS domain name. 9. On the "SSL Port" page, change the SSL port number from 443 to 444. 10. Click "Next". 11. On the "Certificate Summary" page, review the information about the certificate, and then click "Next".
12. On the "Completing the Web Server Certificate Wizard" page, click "Finish", and then click "OK".
How to Configure Remote Web Workplace
---------------------------
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your

operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly.

Use Registry Editor at your own risk.

To Publish Companyweb in Remote Web Workplace: 1. Start Registry Editor (Regedt32.exe).
2. Locate the following keys in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\A
dminLinks\HelpDesk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\A
dminLinks\STS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\K
WLinks\STS
3. Change the value for each key from 0 to 1.
4. Quit Registry Editor.

Important: When you run the Configure E-mail and Internet Connection Wizard (CEICW) in SBS 2003 Premium, the registry keys

above will be reset back to 0.

Reference:
816794 HOW TO: Install Imported Certificates on a Web Server in Windows Server
http://support.microsoft.com/?id=816794

More useful infomation:
How to publish http://Companyweb to the Internet by using ISA Server 2000 on a server that is running Windows Small Business

Server 2003, Premium Edition
http://support.microsoft.com/?id=838304

The "My Company's Internal Web Site" link on the default Web site Welcome page does not work when you connect to the site

over the Internet in Windows SBS 2003
http://support.microsoft.com/?id=838429

I appreciate your time. I am happy to be of assistance and look forward to your reply.

Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to assist with break/fix issues and simple how to questions. We also love to hear your product feedback! Let us know what you think by posting

from the web interface: Partner Feedback from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from this issue. ====================================================
This posting is provided "AS IS" with no warranties, and confers no rights. ====================================================

--
Pascal


.

Relevant Pages

  • RE: SBS 2003 SP1 Upgrade - MSDE 2000 Service Pack 4 did not instal
    ... C:\Program Files\Microsoft SQL Server ... you can directly insert the ISA 2004 installation CD ... import the ISA configuration information to restore back all configurations. ... following registry subkey on the server, ...
    (microsoft.public.windows.server.sbs)
  • Re: The Web site cannot be found - errors
    ... problems connecting with the internet. ... Internet Connection Wizard from the server. ... > files and ISA cache on all ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Usage Reports
    ... There is no other application on the SBS server box that can monitor ... internet activities as your needs rather than ISA server. ... Microsoft Internet Security and Acceleration Server 2004 is the ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 Rules
    ... internet website from the ISA server itself. ... All Users or SBS Internet Users ... Then can you access this problematic page from the workstation side this ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect the SBS to a remote IIS for Internet Printing
    ... the server can access the Internet with no problems at all. ... Checking network connection, and after a few seconds it says The ... the problem is cause by the configuration of ISA. ...
    (microsoft.public.windows.server.sbs)