RE: LDAP query for xerox 3545 printer/scanner blocked by SBS 2003?

Hi Michael,

Thanks for your reply. I am glad to know the problem is resolved after you
ran the "Change User Permissions". You did good job.

You can create the user manually from dsa.msc, but is recommended to use
Add User wizard because this will create the following setting:

Mailbox
Creating Home Folder
Adding the user to some security groups and distribution groups. (Internet
Users, Remote Web Workplace Users, Mobile Users, Domain Admins, Domain
Users)
Adding the user to SharePoint role(Administrator)
Setting disk quota( No Limit)

I'd like to give you additional information for your reference:

XADM: How to Use the Windows 2000 LDP Support Tool to View the BaseDN
http://support.microsoft.com/kb/278422

XADM: Browsing and Querying Using the LDP Utility
http:support.microsoft.com/kb/255602

Windows Small Business Server Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/4082d695
-2075-4ca0-8af8-99fd04b78b2d1033.mspx?mfr=true

If you need further assistance, please don't hesitate to post in our
newsgroup.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: LDAP query for xerox 3545 printer/scanner blocked by SBS
2003?
<thread-index: Acf+2yrir9uCRNDnTe+B4FrShW49/Q==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?TWljaGFlbA==?= <Michael@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <258C64D8-CCC6-49F4-8F67-A100E2208541@xxxxxxxxxxxxx>
<6A514669-82E4-49DD-BF62-138E590B09E9@xxxxxxxxxxxxx>
<55FEA20B-4643-4068-BEA0-2E5ABD11C8C4@xxxxxxxxxxxxx>
<77VGgph6HHA.4200@xxxxxxxxxxxxxxxxxxxxxx>
<5D717AA0-FA0E-4B32-AB6A-E3024EA37AC0@xxxxxxxxxxxxx>
<zz#hCV36HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<BA5BA2B7-2271-4544-8563-B09A8C05F595@xxxxxxxxxxxxx>
<Vsh4Mx17HHA.5532@xxxxxxxxxxxxxxxxxxxxxx>
<G2rNgX68HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<70DB1E47-7A2C-440C-8A24-E29F99C9B4CA@xxxxxxxxxxxxx>
<St4c0VR#HHA.5604@xxxxxxxxxxxxxxxxxxxxxx>
<49ZvHHA$HHA.240@xxxxxxxxxxxxxxxxxxxxxx>
<Subject: RE: LDAP query for xerox 3545 printer/scanner blocked by SBS 2003?
<Date: Mon, 24 Sep 2007 11:46:07 -0700
<Lines: 319
<Message-ID: <D5C68931-A78B-4EEF-AFCE-9EE95D08BF9C@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:65253
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Robert,
<I read through your approach more thoroughly and I felt it does not apply
as
<I was not using anonymous access.
<
<As my administrative accounts for the domain were legacy accounts (pre
SBS)
<I tried "change user permissions" on the administrator account which I
used
<to authenticate with. Making this account an SBS administrator through the
<wizard solved the problem with LDAP access. I'm not sure what the specific
<permissions differences between a legacy administrator and an SBS
<administrator are but it worked. If you know what the differences are, I'd
<like to know, both as it concerns LDAP but also for other things.
<--
<Michael
<Network Admin
<Raleigh, NC
<
<
<"Robert Li [MSFT]" wrote:
<
<> Hi,
<>
<> I researched the logs and get error "In order to perform this operation
a
<> successful bind must be completed on the connection", the source is
<> PONYXPRESS and destination is XRX0000AA66A352. Please let me know if
<> PONYXPRESS is SBS server and XRX0000AA66A352 is your printer.
<>
<> Because anonymous Lightweight Directory Access Protocol (LDAP)
operations
<> to Active Directory, other than rootDSE searches and binds, are not
<> permitted in Microsoft Windows Server 2003. You can grant anonymous
access
<> to Active Directory on Windows Server 2003 domain controllers, then test
<> again.
<>
<> 1. Open ADSI Edit with adsiedit.msc.
<>
<> 2. Expand the path CN=Directory Service,CN=Windows
<> NT,CN=Services,CN=Configuration.
<>
<> 3. Right-click "CN=Directory Service" and select Properties on the popup
<> menu.
<>
<> 4. Please ensure "Show optional attributes" box is checked.
<>
<> 5. Then you can modify the dsHeuristics attribute to 2 (0000002),.
<>
<> More info:
<>
<> Anonymous LDAP operations to Active Directory are disabled on Windows
<> Server 2003 domain controllers
<> http://support.microsoft.com/default.aspx/kb/326690
<>
<> Help this helps.
<>
<> I am looking forward to hear from you.
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <X-Tomcat-ID: 134535492
<> <References: <258C64D8-CCC6-49F4-8F67-A100E2208541@xxxxxxxxxxxxx>
<> <6A514669-82E4-49DD-BF62-138E590B09E9@xxxxxxxxxxxxx>
<> <55FEA20B-4643-4068-BEA0-2E5ABD11C8C4@xxxxxxxxxxxxx>
<> <77VGgph6HHA.4200@xxxxxxxxxxxxxxxxxxxxxx>
<> <5D717AA0-FA0E-4B32-AB6A-E3024EA37AC0@xxxxxxxxxxxxx>
<> <zz#hCV36HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<> <BA5BA2B7-2271-4544-8563-B09A8C05F595@xxxxxxxxxxxxx>
<> <Vsh4Mx17HHA.5532@xxxxxxxxxxxxxxxxxxxxxx>
<> <G2rNgX68HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<> <70DB1E47-7A2C-440C-8A24-E29F99C9B4CA@xxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain
<> <Content-Transfer-Encoding: 7bit
<> <From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<> <Organization: Microsoft
<> <Date: Mon, 17 Sep 2007 10:28:03 GMT
<> <Subject: RE: LDAP query for xerox 3545 printer/scanner blocked by SBS
2003?
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <Message-ID: <St4c0VR#HHA.5604@xxxxxxxxxxxxxxxxxxxxxx>
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Lines: 392
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:63451
<> <NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<> <
<> <Hi Michael,
<> <
<> <Thanks for your reply.
<> <
<> <I am sorry for the delay due to the weekend.
<> <
<> <What does "Ip addresses are again NAT .240 svr" mean here, please let
me
<> <know your topology. Without IP addresses of both SBS server and
Printer,
<> we
<> <can't analyze the date your provided.
<> <
<> <I am looking forward to hear from you.
<> <
<> <
<> <Best regards,
<> <
<> <Robert Li(MSFT)
<> <
<> <Microsoft CSS Online Newsgroup Support
<> <
<> <Get Secure! - www.microsoft.com/security
<> <
<> <=====================================================
<> <
<> <This newsgroup only focuses on SBS technical issues. If you have issues
<> <regarding other Microsoft products, you'd better post in the
corresponding
<> <newsgroups so that they can be resolved in an efficient and timely
manner.
<> <You can locate the newsgroup here:
<> <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <
<> <When opening a new thread via the web interface, we recommend you check
<> the
<> <"Notify me of replies" box to receive e-mail notifications when there
are
<> <any updates in your thread. When responding to posts via your
newsreader,
<> <please "Reply to Group" so that others may learn and benefit from your
<> <issue.
<> <
<> <Microsoft engineers can only focus on one issue per thread. Although we
<> <provide other information for your reference, we recommend you post
<> <different incidents in different threads to keep the thread clean. In
<> doing
<> <so, it will ensure your issues are resolved in a timely manner.
<> <
<> <For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> <check http://support.microsoft.com for regional support phone numbers.
<> <
<> <Any input or comments in this thread are highly appreciated.
<> <
<> <=====================================================
<> <
<> <This posting is provided "AS IS" with no warranties, and confers no
rights.
<> <
<> <--------------------
<> <<Thread-Topic: LDAP query for xerox 3545 printer/scanner blocked by SBS
<> <2003?
<> <<thread-index: Acf3FC76uT9mgAZwTVeqiy+U3oK3lQ==
<> <<X-WBNR-Posting-Host: 207.46.192.207
<> <<From: =?Utf-8?B?TWljaGFlbA==?= <Michael@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <<References: <258C64D8-CCC6-49F4-8F67-A100E2208541@xxxxxxxxxxxxx>
<> <<6A514669-82E4-49DD-BF62-138E590B09E9@xxxxxxxxxxxxx>
<> <<55FEA20B-4643-4068-BEA0-2E5ABD11C8C4@xxxxxxxxxxxxx>
<> <<77VGgph6HHA.4200@xxxxxxxxxxxxxxxxxxxxxx>
<> <<5D717AA0-FA0E-4B32-AB6A-E3024EA37AC0@xxxxxxxxxxxxx>
<> <<zz#hCV36HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<> <<BA5BA2B7-2271-4544-8563-B09A8C05F595@xxxxxxxxxxxxx>
<> <<Vsh4Mx17HHA.5532@xxxxxxxxxxxxxxxxxxxxxx>
<> <<G2rNgX68HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<> <<Subject: RE: LDAP query for xerox 3545 printer/scanner blocked by SBS
<> 2003?
<> <<Date: Fri, 14 Sep 2007 14:14:06 -0700
<> <<Lines: 312
<> <<Message-ID: <70DB1E47-7A2C-440C-8A24-E29F99C9B4CA@xxxxxxxxxxxxx>
<> <<MIME-Version: 1.0
<> <<Content-Type: text/plain;
<> << charset="Utf-8"
<> <<Content-Transfer-Encoding: 7bit
<> <<X-Newsreader: Microsoft CDO for Windows 2000
<> <<Content-Class: urn:content-classes:message
<> <<Importance: normal
<> <<Priority: normal
<> <<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<> <<Newsgroups: microsoft.public.windows.server.sbs
<> <<Path: TK2MSFTNGHUB02.phx.gbl
<> <<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:63140
<> <<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<> <<X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <<
<> <<Robert,
<> <<New file is uploaded. I hope it provides better clues. Ip addresses
are
<> <<again NAT .240 svr, .14 workstation and .7 printer. I look forward to
<> <your
<> <<analysis
<> <<--
<> <<Michael
<> <<Network Admin
<> <<Raleigh, NC
<> <<
<> <<
<> <<"Robert Li [MSFT]" wrote:
<> <<
<> <<> Hi Michael,
<> <<>
<> <<> I am sorry for the delay due to the weekend.
<> <<>
<> <<> I researched on your logs, that's not created by network monitor and
I
<> <<> couldn't find any clue to the problem.
<> <<>
<> <<> Please send me network monitor logs from both SBS server and
original
<> <<> workstation. If this workstation can query successufully, based on
my
<> <<> experience, the problem is caused by Xerox printer.
<> <<>
<> <<> Please upload the captured file by click the link below:
<> <<>
<> <<>
<>
<https://sftasia.one.microsoft.com/choosetransfer.aspx?key=64c81f87-0f55-4e9
<> b
<> <<> -abec-eaa1d51e5b31
<> <<>
<> <<> Password: Pa6u7L7TW[!
<> <<>
<> <<> I am looking forward to hear from you.
<> <<>
<> <<> If you need further assistance, please don't hesitate to let me know.
<> <<>
<> <<> Best regards,
<> <<>
<> <<> Robert Li(MSFT)
<> <<>
<> <<> Microsoft CSS Online Newsgroup Support
<> <<>
<> <<> Get Secure! - www.microsoft.com/security
<> <<>
<> <<> =====================================================
<> <<>
<> <<> This newsgroup only focuses on SBS technical issues. If you have
issues
<> <<> regarding other Microsoft products, you'd better post in the
<> <corresponding
<> <<> newsgroups so that they can be resolved in an efficient and timely
<> <manner.
<> <<> You can locate the newsgroup here:
<> <<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <<>
<> <<> When opening a new thread via the web interface, we recommend you
check
<> <the
<> <<> "Notify me of replies" box to receive e-mail notifications when
there
<> <are
<> <<> any updates in your thread. When responding to posts via your
<> <newsreader,
<> <<> please "Reply to Group" so that others may learn and benefit from
your
<> <<> issue.
<> <<>
<> <<> Microsoft engineers can only focus on one issue per thread. Although
we
<> <<> provide other information for your reference, we recommend you post
<> <<> different incidents in different threads to keep the thread clean.
In
<> <doing
<> <<> so, it will ensure your issues are resolved in a timely manner.
<> <<>
<> <<> For urgent issues, you may want to contact Microsoft CSS directly.
<> <Please
<> <<> check http://support.microsoft.com for regional support phone
numbers.
<> <<>
<> <<> Any input or comments in this thread are highly appreciated.
<> <<>
<> <<> =====================================================
<> <<>
<> <<> This posting is provided "AS IS" with no warranties, and confers no
<> <rights.
<> <<>
<> <<> --------------------
<> <<> <X-Tomcat-ID: 18602296
<> <<> <References: <258C64D8-CCC6-49F4-8F67-A100E2208541@xxxxxxxxxxxxx>
<> <<> <6A514669-82E4-49DD-BF62-138E590B09E9@xxxxxxxxxxxxx>
<> <<> <55FEA20B-4643-4068-BEA0-2E5ABD11C8C4@xxxxxxxxxxxxx>
<> <<> <77VGgph6HHA.4200@xxxxxxxxxxxxxxxxxxxxxx>
<> <<> <5D717AA0-FA0E-4B32-AB6A-E3024EA37AC0@xxxxxxxxxxxxx>
<> <<> <zz#hCV36HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<> <<> <BA5BA2B7-2271-4544-8563-B09A8C05F595@xxxxxxxxxxxxx>
<> <<> <MIME-Version: 1.0
<> <<> <Content-Type: text/plain
<> <<> <Content-Transfer-Encoding: 7bit
<> <<> <From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<> <<> <Organization: Microsoft
<> <<> <Date: Wed, 05 Sep 2007 01:30:00 GMT
<> <<> <Subject: RE: LDAP query for xerox 3545 printer/scanner blocked by
SBS
<> <2003?
<> <<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <<> <Message-ID: <Vsh4Mx17HHA.5532@xxxxxxxxxxxxxxxxxxxxxx>
<> <<> <Newsgroups: microsoft.public.windows.server.sbs
<> <<> <Lines: 342
<> <<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <<> <Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:60830
<> <<> <NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<> <<> <
<> <<> <Hi Michael,
<> <<> <
<> <<> <I am sorry that I misunderstood your concern.
<> <<> <
<> <<> <Please upload the captured file by click the link below:
<> <<> <
<> <<>
<>
<<https://sftasia.one.microsoft.com/choosetransfer.aspx?key=64c81f87-0f55-4e
<> 9
<

.

Relevant Pages

  • Re: Problem with connect computer wizard
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please double-check the default application pool in IIS. ...
    (microsoft.public.windows.server.sbs)
  • RE: Fax monitor incoming + outgoing calls?
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... When opening a new thread via the web interface, we recommend you check the ...
    (microsoft.public.windows.server.sbs)
  • Re: pop & smtp
    ... Please change the users apply to the SBS Internet Access rule ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please help me collect ISA info and firewall log for analyze. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS and email problem
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... our remote outgoing mail server as discussed, Comcast ...
    (microsoft.public.windows.server.sbs)
  • RE: fax not sending
    ... Thanks for updates. ... it did not relate to any problem on your fax or SBS side. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)