Re: Active X issue

Hi Rob,

Thanks for updating.

The win32time service is set to automatically start. If this services
stops, the client workstations and SBS server will not sync successfully.

For this issue, we must first make sure that the Time service on the SBS
server is running fine, so that the client workstation could synchronize
with it.

1. Go to the SBS 2003 server, check the time zone setting. Make sure the
time zone setting is correct.

2. Open 'Services' console in 'Administrative Tools'. In the services
console, double-click 'Windows Time'. If the startup type is 'Disabled',
please change it to 'Automatic' and then click 'Start' button to start this
service.

3. Start-->Run-->Type 'regedit' (without the quotation marks) and press
Enter. In the Registry Editor, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters

In the right panel, double-click 'Type'. If the value data is 'NoSync',
change it to 'Nt5DS'. Go to services console, restart the Windows Time
service.

4. After doing the above steps, reboot the client workstations and then try
to logon the domain. If the problem still occurs, please open a command
prompt, type 'w32tm /monitor /computers:localhost' (without the quotation
marks) and press Enter. What's the output?

In a SBS 2003 environment, by default, domain members are configured to
synchronize their time from the DC at the root of the forest (authoritative
time source) where the W32TIME service should be running. (You do not need
to configure the Time server on workstation. It is atomically configured
when you join them to the domain) However, sometimes, this service could be
disabled and then the connectivity issues occurred.

If you want to manually set the Time source on the Windows XP workstation,
the following information may be helpful.

1. On this Windows XP/2000 Client workstation, please make sure that "time
zone setting" and "daily day time saving" configuration is correct and same
with your SBS server.

2, Run the following command to set the SBS server as Time server of your
client workstation

net time \\SBSServerName /Set /Yes

3. Use the following command to force a synchronization

w32tm /resync

4. Please use the following command on the client workstation and test the
result. Please let me know the result.

w32tm /monitor /computers:localhost

If the problem persists, please kindly help me collect the MPS Report on
both SBS server and a problematic client. Send to cab to me with subject:
39653254-Active X issue. Thanks for your time and patience.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<X-Tomcat-ID: 127211760
<References: <1182275534.587498.124760@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
<#8QHtnusHHA.4888@xxxxxxxxxxxxxxxxxxxx>
<aZntkW$sHHA.2116@xxxxxxxxxxxxxxxxxxxxxx>
<QFqNhtMtHHA.3684@xxxxxxxxxxxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<Organization: Microsoft
<Date: Mon, 25 Jun 2007 10:41:25 GMT
<Subject: Re: Active X issue
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <Eb3zlVxtHHA.2312@xxxxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 308
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:46045
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<
<Hi,
<
<Thanks for updating.
<
<I am sorry for the delay due to the weekend.
<
<Let's configure the SBS server to synchronize with the external time
<servers by following the steps below:
<
<1. Click Start, click Run, type "cmd" (without the quotation marks) and
<press ENTER.
<
<2. Type the following, where PeerList is a comma-separated list of Domain
<Name System (DNS) names or Internet protocol (IP) addresses of the desired
<time sources:
<
<w32tm /config /syncfromflags:manual /manualpeerlist:PeerList
<
<So, you would run:
<
<w32tm /config /syncfromflags:manual
</manualpeerlist:timex.usg.edu,rolex.usg.edu,tock.usno.navy.mil
<
<3. Run the following commands:
<
<w32tm /config /update
<
<net stop w32time
<net start w32time
<
<w32tm /resync
<
<4. Try again.
<
<Reference:
<
<262680 A List of the Simple Network Time Protocol Time Servers That Are
<Available on the Internet
<http://support.microsoft.com/?id=262680
<
<In addition, you can manually set the workstation clock to be the same
time
<as the SBS server. After that, restart computer and see if the group
policy
<is applied.
<
<I am looking forward to hear from you.
<
<If you need further assistance, please don't hesitate to let me know.
<
<Best regards,
<
<Robert Li(MSFT)
<
<Microsoft CSS Online Newsgroup Support
<
<Get Secure! - www.microsoft.com/security
<
<=====================================================
<
<This newsgroup only focuses on SBS technical issues. If you have issues
<regarding other Microsoft products, you'd better post in the corresponding
<newsgroups so that they can be resolved in an efficient and timely manner.
<You can locate the newsgroup here:
<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<
<When opening a new thread via the web interface, we recommend you check
the
<"Notify me of replies" box to receive e-mail notifications when there are
<any updates in your thread. When responding to posts via your newsreader,
<please "Reply to Group" so that others may learn and benefit from your
<issue.
<
<Microsoft engineers can only focus on one issue per thread. Although we
<provide other information for your reference, we recommend you post
<different incidents in different threads to keep the thread clean. In
doing
<so, it will ensure your issues are resolved in a timely manner.
<
<For urgent issues, you may want to contact Microsoft CSS directly. Please
<check http://support.microsoft.com for regional support phone numbers.
<
<Any input or comments in this thread are highly appreciated.
<
<=====================================================
<
<This posting is provided "AS IS" with no warranties, and confers no rights.
<
<--------------------
<<X-Tomcat-ID: 173562093
<<References: <1182275534.587498.124760@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
<<#8QHtnusHHA.4888@xxxxxxxxxxxxxxxxxxxx>
<<aZntkW$sHHA.2116@xxxxxxxxxxxxxxxxxxxxxx>
<<MIME-Version: 1.0
<<Content-Type: text/plain
<<Content-Transfer-Encoding: 7bit
<<From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<<Organization: Microsoft
<<Date: Fri, 22 Jun 2007 12:46:33 GMT
<<Subject: Re: Active X issue
<<X-Tomcat-NG: microsoft.public.windows.server.sbs
<<Message-ID: <QFqNhtMtHHA.3684@xxxxxxxxxxxxxxxxxxxxxx>
<<Newsgroups: microsoft.public.windows.server.sbs
<<Lines: 215
<<Path: TK2MSFTNGHUB02.phx.gbl
<<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:45609
<<NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
<<
<<Hi Rob,
<<
<<Thanks for updating. I researched your MPS Report, I found that the Group
<<Policy is not applied on workstation:
<<
<<Event Type: Error
<<Event Source: Userenv
<<Event Category: None
<<Event ID: 1097
<<Date: 6/18/2007
<<Time: 10:45:56 AM
<<User: NT AUTHORITY\SYSTEM
<<Computer: WS5
<<Description:
<<Windows cannot find the machine account, The clocks on the client and
<<server machines are skewed. .
<<
<<For more information, see Help and Support Center at
<<http://go.microsoft.com/fwlink/events.asp.
<<
<<
<<Please take the steps in KB 886516:
<<
<<A Group Policy object is not applied as expected after you restart a
<<Windows XP-based client computer or a Windows Server 2003-based computer
<<http:// support.microsoft.com/kb/886516
<<
<<I am looking forward to hear from you.
<<
<<If you need further assistance, please don't hesitate to let me know.
<<
<<Best regards,
<<
<<Robert Li(MSFT)
<<
<<Microsoft CSS Online Newsgroup Support
<<
<<Get Secure! - www.microsoft.com/security
<<
<<=====================================================
<<
<<This newsgroup only focuses on SBS technical issues. If you have issues
<<regarding other Microsoft products, you'd better post in the
corresponding
<<newsgroups so that they can be resolved in an efficient and timely
manner.
<<You can locate the newsgroup here:
<<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<<
<<When opening a new thread via the web interface, we recommend you check
<the
<<"Notify me of replies" box to receive e-mail notifications when there are
<<any updates in your thread. When responding to posts via your newsreader,
<<please "Reply to Group" so that others may learn and benefit from your
<<issue.
<<
<<Microsoft engineers can only focus on one issue per thread. Although we
<<provide other information for your reference, we recommend you post
<<different incidents in different threads to keep the thread clean. In
<doing
<<so, it will ensure your issues are resolved in a timely manner.
<<
<<For urgent issues, you may want to contact Microsoft CSS directly. Please
<<check http://support.microsoft.com for regional support phone numbers.
<<
<<Any input or comments in this thread are highly appreciated.
<<
<<=====================================================
<<
<<This posting is provided "AS IS" with no warranties, and confers no
rights.
<<
<<--------------------
<<<X-Tomcat-ID: 154278124
<<<References: <1182275534.587498.124760@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
<<<#8QHtnusHHA.4888@xxxxxxxxxxxxxxxxxxxx>
<<<MIME-Version: 1.0
<<<Content-Type: text/plain
<<<Content-Transfer-Encoding: 7bit
<<<From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<<<Organization: Microsoft
<<<Date: Thu, 21 Jun 2007 11:16:38 GMT
<<<Subject: Re: Active X issue
<<<X-Tomcat-NG: microsoft.public.windows.server.sbs
<<<Message-ID: <aZntkW$sHHA.2116@xxxxxxxxxxxxxxxxxxxxxx>
<<<Newsgroups: microsoft.public.windows.server.sbs
<<<Lines: 134
<<<Path: TK2MSFTNGHUB02.phx.gbl
<<<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:45347
<<<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<<<
<<<Hi,
<<<
<<<Thanks for updating.
<<<
<<<Please take the following steps:
<<<
<<<Step 1: Please test if you can install the ActiveX control on the client.
<<<
<<<1. From a client computer, logon RWW as a domain user.
<<<
<<<2. Click connects to my Client Desktops.
<<<
<<<3. Can you see the image below?
<<<
<<<
<<<
<<<4. Click install, can you install successfully? If you can install
Remote
<<<Desktop AcitveX Control successfully, the problem may be related to
<<ActiveX
<<<from mlxexchange.com.
<<<
<<<Please also collect the MPS Report on a problematic workstation after
you
<<<reproduce the issue and I need to check the application log. Thanks for
<<<your time and understanding.
<<<
<<<1) Download MPSreport_network from
<<<
<<<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0
b
<d
<<9
<<<15706/MPSRPT_NETWORK.EXE
<<<2) Run MPSRPT_NETWORK.exe on the server box.
<<<3) The tool will automatically collect the information. This procedure
<<will
<<<take 10~15 minutes.
<<<4) Open Windows Explorer, navigate to the folder:
<<<%SystemRoot%\MPSReports\Network\Reports\Cab\
<<< 5) Send the .cab file directly to me.
<<<
<<<Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
<<<39653254-Active X issue.
<<<
<<<I am looking forward to hear from you.
<<<
<<<If you need further assistance, please don't hesitate to let me know.
<<<
<<<Best regards,
<<<
<<<Robert Li(MSFT)
<<<
<<<Microsoft CSS Online Newsgroup Support
<<<
<<<Get Secure! - www.microsoft.com/security
<<<
<<<=====================================================
<<<
<<<This newsgroup only focuses on SBS technical issues. If you have issues
<<<regarding other Microsoft products, you'd better post in the
<corresponding
<<<newsgroups so that they can be resolved in an efficient and timely
<manner.
<<<You can locate the newsgroup here:
<<<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<<<
<<<When opening a new thread via the web interface, we recommend you check
<<the
<<<"Notify me of replies" box to receive e-mail notifications when there
are
<<<any updates in your thread. When responding to posts via your
newsreader,
<<<please "Reply to Group" so that others may learn and benefit from your
<<<issue.
<<<
<<<Microsoft engineers can only focus on one issue per thread. Although we
<<<provide other information for your reference, we recommend you post
<<<different incidents in different threads to keep the thread clean. In
<<doing
<<<so, it will ensure your issues are resolved in a timely manner.
<<<
<<<For urgent issues, you may want to contact Microsoft CSS directly.
Please
<<<check http://support.microsoft.com for regional support phone numbers.
<<<
<<<Any input or comments in this thread are highly appreciated.
<<<
<<<=====================================================
<<<
<<<This posting is provided "AS IS" with no warranties, and confers no
<rights.
<<<
<<<--------------------
<<<<From: "Kevin Weilbacher [SBS-MVP]" <kweilbacMVP@xxxxxxx>
<<<<References: <1182275534.587498.124760@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
<<<<Subject: Re: Active X issue
<<<<Date: Tue, 19 Jun 2007 23:20:16 -0400
<<<<Lines: 43
<<<<X-Priority: 3
<<<<X-MSMail-Priority: Normal
<<<<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<<<<X-RFC2646: Format=Flowed; Original
<<<<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
<<<<Message-ID: <#8QHtnusHHA.4888@xxxxxxxxxxxxxxxxxxxx>
<<<<Newsgroups: microsoft.public.windows.server.sbs
<<<<NNTP-Posting-Host: pool-72-77-192-81.tampfl.fios.verizon.net
72.77.192.81
<<<<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<<<<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:45044
<<<<X-Tomcat-NG: microsoft.public.windows.server.sbs
<<<<
<<<<you might want to review Jeremy Moskowitz's web site -
<<<<http://www.gpanswers.com/
<<<<He's the Group Policy MVP
<<<<
<<<<This link here from a Technet post he wrote seems to indicate he's
<<lookjed
<<<<dealing with Group Policy and allowing/disallowing ActiveX
<<<<http://www.microsoft.com/technet/technetmag/issues/2005/05/GroupPolicy/d
e
<f
<<a
<<<ult.aspx
<<<<
<<<<However, if you are new to Group Policy, tread carefully.
<<<<1. Make sure you know how to backup and restore your GPO's:
<<<<http://blogs.msdn.com/sbsdocsteam/archive/2005/07/18/440063.aspx
<<<<2. Get a good book and learn more about GPO''s. For example, very
rarely
<<<<would you want to make GPO changes directly to the domain. One screw up
<<<and
<<<<your whole server could be looked up. Best approach is to create OU's
<and
<<<<move computers or users into the OU and link the customiozed GPO's to
<the
<<<<OU's.
<<<<
<<<<Chapter 4 of Harry Brelsford's Advances Windows SBS 2003 Best Practices
<<<<addresses creating GPO's in an SBS environment.
<<<<
<<<<--
<<<<Kevin Weilbacher [SBS-MVP]
<<<<"The days pass by so quickly now, the nights are seldom long"
<<<<
<<<<
<<<<<jblackinc@xxxxxxxxx> wrote in message
<<<<news:1182275534.587498.124760@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
<<<<> Hi,
<<<<>
<<<<> I am really struggling with an active X issue. There is one website in
<<<<> which our domain needs to be able to access/install active x controls.
<<<<> I created a GPO at the domain level, edited the User Configuration ->
<<<<> Windows Settings -> Internet Explorer Maint -> Security -> Security
<<<<> Zone entry. I added the site I needed into the trusted zones and set
<<<<> the zone for "Low" and made sure that Active X controls are allowed to
<<<<> be installed.
<<<<>
<<<<> Does anyone have any ideas? Any help would be greatly appreciated.
<<<<>
<<<<> Thanks in Advance.
<<<<>
<<<<
<<<<
<<<<
<<<
<<<
<<
<<
<
<

.