Re: CEICW fails at firewall configuration SBS SP2 - ISA SP3 Please Help.

On Jul 12, 2:58 am, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
wrote:
Hello Customer,

Thanks for your posting here.

From your problem description, I understand this issue is: when you running
the CEICW wizard after you install windows 2003 sp2, you received some
error messages. If I'm off base, please let me know.

Based on my research, this is a known issue for the incorrect setting on
IIS, please check the default web site settings:

a. Open the IIS Management snap-in.
b. Open the properties of the Default Web Site and go to the Directory
Security tab.
c. Go to the IP Address and Domain Name Restrictions setting and change the
setting. Just do the opposite of what is set. If currently set to grant
all, change it to deny all except for the local IP and subnet mask of the
server.
d. Select all to apply the change to all sub websites.
e. Select all again to apply the change all the way down.

If the issue persists, I would like to provide the following action plan:

1. Please ensure that you have correctly install SBS 2003 sp1. Please check
the steps thru the following documents:

Downloading and Installing Windows Small Business Server 2003 Service Pack 1http://download.microsoft.com/download/e/0/f/e0fee8ce-768d-41c0-8871-...
b3fc3/ToDownLoadFilesandReadInstructions.htm

Installation Instructions for Service Pack 1 for Windows Small Business
Server 2003, Premium Technologieshttp://download.microsoft.com/download/2/e/9/2e902d14-da2e-43ba-8bd6-...
356b6/SP1Setup_prem.htm

Note: please skip the windows 2003 sp1 installation step since you had
install the windows 2003 sp2.

2. Make sure your SBS internal and external network interface DNS is
pointing to the internal IP address of your SBS server.

3. Do you have any site hosted in the SBS server other than the four
build-in sites? If you have the sites in IIS that were created with Visual
basic, please remove them.

4. If your SBS server is HP/Compaq and you have HP Smart Start or some
other third-party network manage software installed, please uninstall them
and restart the SBS server, run CEICW again to see if there is any change.

5. Corrected permissions on the wwwroot directory (You can check the
permissions with the good SBS)

If the issue persists, please go to the following steps:

6: Reinstalled Administration tools

a. Rename the Intranet key in HKLM\Software\Microsoft\SmallBusinessServer.

b. Click Start, point to Control Panels and click Add or Remove Programs.

c. Select "Windows Small Business Server 2003" and click Change/Remove.

d. In the "Component Selection" page, change Action to Reinstall for Server
Tools.

e. Follow the instructions to finish.

f. Restart SBS and rerun CEICW.

Then test this issue.

7: Recreate the web listener

a. Open ISA 2004 console

b. Extend Firewall Policy, select Toolbox tab in right panel, click Network
Objects->Web Listeners

c. Delete SBS CompanyWeb Listener and SBS Web Listener

Note: You have to delete the rules which using these 2 web listeners first.

d. Click Apply button.

e. Go through the follow KB and Rerun CEICW again carefully.

How to configure Internet access in Windows Small Business Server 2003http://support.microsoft.com/kb/825763/en-us

8: If the issue reoccur after complete the above steps, please try to run
the CEICW after a clean boot to test this issue:

To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.

b. In the System Configuration Utility (MSConfig) window, click to select
the Selective Startup button.

c. Click to clear the check mark from the "Load startup items" below
Selective Startup.

d. Click the Services tab, click to check the "Hide All Microsoft Services"
box, and remove all the check marks from the remained Non-Microsoft
Services. Please note that the Exchange services could be marked as
non-Microsoft. Please do not disable those services.

e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.

f. After restarting, please check whether this issue will reoccur.

g. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.

If the above actions do not help, please help me collect the following
information:

1. The icwlog.txt file in the "C:\Program Files\Microsoft Windows Small
Business Server\Support" folder.

2. please use the PortQry utility to list the port usage of the server:
a. Download the utility from:http://www.microsoft.com/downloads/details.aspx?familyid=89811747-C74...
A2D5-AC828BDC6983&displaylang=en

b. Open a command prompt. Type the following commands:

cd \portqryv2
portqry -local -v -l c:\ports.txt

c. Send the txt file to me for troubleshooting.

More info:
832919 New features and functionality in PortQry version 2.0http://support.microsoft.com/?id=832919

3. I suggest you download and run the MPS Report tool from the following
link and then send the generated CAB file to my mailbox
v-ter...@xxxxxxxxxxxxx for further investigation so that we can find what
the root cause is:

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-...
15706/MPSRPT_NETWORK.EXE

Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS)http://support.microsoft.com/default.aspx?scid=kb;en-us;818742

If you have any questions please do not hesitate to let me know. I am glad
to be of assistance.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! -www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
checkhttp://support.microsoft.comfor regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: giacc...@xxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: CEICW fails at firewall configuration SBS SP2 - ISA SP3 Please
Help.
| Date: Wed, 11 Jul 2007 13:36:54 -0700
| Organization:http://groups.google.com
| Lines: 21
| Message-ID: <1184186214.297115.26...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 70.91.104.161
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1184186214 26741 127.0.0.1 (11 Jul 2007
20:36:54 GMT)
| X-Complaints-To: groups-ab...@xxxxxxxxxx
| NNTP-Posting-Date: Wed, 11 Jul 2007 20:36:54 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727; .NET CLR
3.0.04506.30),gzip(gfe),gzip(gfe)
| Complaints-To: groups-ab...@xxxxxxxxxx
| Injection-Info: k79g2000hse.googlegroups.com; posting-host=70.91.104.161;
| posting-account=RkFxWw0AAAC0_N9K5x9K6_aSSgpQrE8g
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!newsfeed­0
0.sul.t-online.de!t-online.de!news.glorb.com!postnews.google.com!k79g2000hs­e
.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:49847
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| My website was working until I installed SP2, then it only published
| partially so I ran the wizard and CEICW failed at firewall
| configuration (SBS SP2 - ISA SP3) with the following message."An error
| occurred while configuring a component" The error seems to be
| 0x80005006 (exerpt below) but I can't find any info on how to fix it.
| I uninstalled SP2 but it didn't fix it and broke other things so I
| reinstalled it. Any suggestions?
|
| Call to Removing all sbs web publishing rules () returned ok.
| RUP is published
| Error 0x80005006 returned from call to Fixing the inheritance for
| default web site().
| Error 0x80005006 returned from call to
| CStingrayCommit::CommitWebPublishingRules().
| Error 0x80005006 returned from call to Creating Web publishing
| rules().
| Error 0x80005006 returned from call to CStingrayCommit::CommitEx().
| Calling CCertCommit::CommitEx
| Calling CCertCommit::ValidatePropertyBag
| Require SSL for OWA: 1
|
|

Thanks Terence !!!

Changing the IIS settings did the trick. I still have a problen
though. Now my default web page is published but without pictures or
links etc. If you try to use a link or /remote it comes back "page not
found". The site works fine from inside the network as %domain%.local.
Is this now a permissions issue?

Thanks

.