Re: Vista Bus to SBS2003R2 connectcomputer problems . . .

Hi Chris,
Thanks for replying. I think what is happening here is that connectcomputer
and the certificate error are not working so recommendations have been
pouring in thick and fast. Many of these are, perhaps, not necessary but
applying belts and braces when checking does not harm. The problem of course
is when actions are taken that actually prevent things working so even when
the correct fix is applied other actions mask it.

I am prepared to accept that I should not have had to conduct many of the
recommendations supplied to me. However, the fact remains that I cannot
connectcomputer or install the certificate with or without the changes
recommended by various individuals.

OK The ipconfig dumps are listed below:

Vista PC
****************************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : XXX-WVIB0006
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : XXXDOMAIN.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : XXXDOMAIN.local
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-16-D4-9F-6E-4C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.3.19(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 15 October 2007 22:07:17
Lease Expires . . . . . . . . . . : 24 October 2007 10:49:04
Default Gateway . . . . . . . . . : 192.168.3.1
DHCP Server . . . . . . . . . . . : 192.168.3.1
DNS Servers . . . . . . . . . . . : 192.168.3.1
Primary WINS Server . . . . . . . : 192.168.3.1
NetBIOS over Tcpip. . . . . . . . : Enabled

SBS Server
****************************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : XXX2003
Primary Dns Suffix . . . . . . . : XXXDOMAIN.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : XXXDOMAIN.local

Ethernet adapter Internal:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 8255x-based PCI Ethernet
Adapter (10/100)
Physical Address. . . . . . . . . : 00-02-B3-D8-88-BD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.3.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.3.1
Primary WINS Server . . . . . . . : 192.168.3.1

Ethernet adapter External:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 8255x-based PCI Ethernet
Adapter (10/100) #2
Physical Address. . . . . . . . . : 00-02-B3-D8-88-60
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.100.251
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.254
DNS Servers . . . . . . . . . . . : 192.168.3.1
NetBIOS over Tcpip. . . . . . . . : Disabled

I will also list here the results of a sysinfo dump on the SBS conducted
this morning:

Host Name: XXX2003
OS Name: Microsoft(R) Windows(R) Server 2003 for Small
Business Server
OS Version: 5.2.3790 Service Pack 2 Build 3790
OS Manufacturer: Microsoft Corporation
OS Configuration: Primary Domain Controller
OS Build Type: Multiprocessor Free
Registered Owner: a user at
Registered Organization: Whytec Limited
Product ID: 74995-067-2942945-42742
Original Install Date: 10/05/2007, 20:31:08
System Up Time: 2 Days, 16 Hours, 0 Minutes, 24 Seconds
System Manufacturer: Intel Corporation
System Model: SE7500CW2
System Type: X86-based PC
Processor(s): 2 Processor(s) Installed.
[01]: x86 Family 15 Model 2 Stepping 7
GenuineIntel ~2392 Mhz
[02]: x86 Family 15 Model 2 Stepping 7
GenuineIntel ~2392 Mhz
BIOS Version: PTLTD - 6040000
Windows Directory: C:\WINDOWS
System Directory: C:\WINDOWS\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-gb;English (United Kingdom)
Input Locale: en-gb;English (United Kingdom)
Time Zone: (GMT) Greenwich Mean Time : Dublin, Edinburgh,
Lisbon, London
Total Physical Memory: 1,023 MB
Available Physical Memory: 251 MB
Page File: Max Size: 2,473 MB
Page File: Available: 1,020 MB
Page File: In Use: 1,453 MB
Page File Location(s): C:\pagefile.sys
Domain: XXXDOMAIN.local
Logon Server: \\XXX2003
Hotfix(s): 79 Hotfix(s) Installed.
[01]: File 1
[02]: File 1
[03]: File 1
[04]: File 1
[05]: File 1
[06]: File 1
[07]: File 1
[08]: File 1
[09]: File 1
[10]: File 1
[11]: File 1
[12]: File 1
[13]: File 1
[14]: File 1
[15]: File 1
[16]: File 1
[17]: File 1
[18]: File 1
[19]: File 1
[20]: File 1
[21]: File 1
[22]: File 1
[23]: File 1
[24]: File 1
[25]: File 1
[26]: File 1
[27]: File 1
[28]: File 1
[29]: File 1
[30]: Q147222
[31]: KB933854 - QFE
[32]: SP1 - SP
[33]: KB907747 - Update
[34]: KB911829 - Update
[35]: KB912442 - Update
[36]: KB916803 - Update
[37]: KB924334 - Update
[38]: KB926666 - Update
[39]: KB931832 - Update
[40]: KB917283 - Update
[41]: KB922770 - Update
[42]: KB928365 - Update
[43]: KB926601 - Update
[44]: Q927978
[45]: Q936181
[46]: IDNMitigationAPIs - Update
[47]: NLSDownlevelMapping - Update
[48]: KB925398_WMP64
[49]: KB929969 - Update
[50]: KB931768-IE7 - Update
[51]: KB933566-IE7 - Update
[52]: KB937143-IE7 - Update
[53]: KB938127-IE7 - Update
[54]: KB939653-IE7 - Update
[55]: KB914961 - Service Pack
[56]: KB921503 - Update
[57]: KB924667-v2 - Update
[58]: KB925876 - Update
[59]: KB925902 - Update
[60]: KB926122 - Update
[61]: KB927891 - Update
[62]: KB929123 - Update
[63]: KB930178 - Update
[64]: KB931768 - Update
[65]: KB931784 - Update
[66]: KB931836 - Update
[67]: KB932168 - Update
[68]: KB933360 - Update
[69]: KB933729 - Update
[70]: KB933854 - Update
[71]: KB935839 - Update
[72]: KB935840 - Update
[73]: KB935966 - Update
[74]: KB936021 - Update
[75]: KB936357 - Update
[76]: KB936594 - Update
[77]: KB936782 - Update
[78]: KB941202 - Update
[79]: XpsEPSC
Network Card(s): 2 NIC(s) Installed.
[01]: Intel 8255x-based PCI Ethernet Adapter
(10/100)
Connection Name: Internal
DHCP Enabled: No
IP address(es)
[01]: 192.168.3.1
[02]: Intel 8255x-based PCI Ethernet Adapter
(10/100)
Connection Name: External
DHCP Enabled: No
IP address(es)
[01]: 192.168.100.251

Please also find below a sysinfo dump for the Vista PC:

Host Name: XXX-WVIB0006
OS Name: Microsoft© Windows VistaT Business
OS Version: 6.0.6000 N/A Build 6000
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
Registered Owner: TrevorW
Registered Organization:
Product ID: 89576-428-6663347-71772
Original Install Date: 09/10/2007, 21:03:57
System Boot Time: 16/10/2007, 07:14:15
System Manufacturer: Hewlett-Packard
System Model: HP Compaq nx9420 (RH457ET#ABD)
System Type: X86-based PC
Processor(s): 1 Processor(s) Installed.
[01]: x64 Family 6 Model 15 Stepping 6
GenuineIntel ~1000 Mhz
BIOS Version: Hewlett-Packard 68YAF Ver. F.17, 25/09/2006
Windows Directory: C:\Windows
System Directory: C:\Windows\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-gb;English (United Kingdom)
Input Locale: en-gb;English (United Kingdom)
Time Zone: (GMT) Greenwich Mean Time : Dublin, Edinburgh,
Lisbon, London
Total Physical Memory: 1,023 MB
Available Physical Memory: 612 MB
Page File: Max Size: 2,300 MB
Page File: Available: 1,695 MB
Page File: In Use: 605 MB
Page File Location(s): C:\pagefile.sys
Domain: WORKGROUP
Logon Server: \\XXX-WVIB0006
Hotfix(s): 37 Hotfix(s) Installed.
[01]: {375F080F-88E9-4EA1-A177-C0F091546AC8}
[02]: {F2071927-C690-498C-BDBC-0C89A0FABC5A}
[03]: KB905866
[04]: KB925902
[05]: KB929399
[06]: KB929550
[07]: KB929577
[08]: KB930178
[09]: KB930568
[10]: KB930857
[11]: KB930955
[12]: KB931099
[13]: KB931573
[14]: KB932471
[15]: KB933579
[16]: KB933729
[17]: KB936021
[18]: KB936357
[19]: KB936782
[20]: KB936825
[21]: KB937077
[22]: KB938127
[23]: KB939159
[24]: KB941202
[25]: KB929123
[26]: KB929916
[27]: KB931213
[28]: KB933360
[29]: KB933928
[30]: KB935280
[31]: KB935807
[32]: KB936824
[33]: KB938123
[34]: KB938194
[35]: KB938979
[36]: KB939653
[37]: KB941651
Network Card(s): 1 NIC(s) Installed.
[01]: Broadcom NetXtreme Gigabit Ethernet
Connection Name: Local Area Connection
DHCP Enabled: Yes
DHCP Server: 192.168.3.1
IP address(es)
[01]: 192.168.3.19



In reply to your 2nd question, the following happens:
1. Right click on IE7 and click Run as Administrator. IE7 launches with my
home page (google) and an information bar stating "Protected mode is
currently turned off for the Local intranet zone. Click here to open settings"

2. Click in the address bar and type http://XXX2003/connectcomputer and
press enter. Get "There is a problem with this websites security certificate"

3. Click Continue to this website (not recommended) and get SBS Network
Configuration window with text "You will need your logon name and password to
the Small Business Server network. If the internet Explorer Information bar
says that intranet settings are niow turned off by default, follow the
prompts to enable Intranet Settings. You may receive a security warning.
Review the warning to ensure that the content is signed by Microsodft and
then click Yes to install the software. Note : If this computer is running
Windows Vista, Click Run when prompted to download nshelp.exe, and then click
accept if you are prompted for User Account Control.

4. Click on link labeled Connect to the network now. Displays File Download
- Security Warning Do you want to run or save this file? (Name : nshelp.exe
Type : Application From : XX2003. Dragging this window to one side reveal a
download progress window labeled "0% of nshelp.exe from XXX2003 completed.

5. Click on Run in the File Download - Security Warning window. Displays
Small Business Server Netork Configuration Wizard window with text: "An error
occured while trying to copy the client setup files. Check the following, and
then try again. If you use a public proxy server to browse the internet,
clear the internet explorer connectionsetting for using a proxy server. To do
this, from the tools menu, click Internet Options, Click the Connections tab,
click teh LAN Settings button, and then clear the check box in the Proxy
server. If you do not have a proxy server configured for Internet Explorer,
then your network administrator must reinstall the client deployment
component on the server. To do this, from Add or Remove programs run Windows
Small Business Server Setup in Maintenance mode, and then run Client Setup
again.

6. Click the OK button (only thing can do) Control returns to the Network
Configuration window described in 3 above.

I have turned off the proxy settings in Internet Explorer and I have also re
installed the client deployment component as described. No further forward.

Sorry this is a long post but I want to communicate unambiguosly. Please
advise if there are any updates that have not been applied to the server or
Vista PC

Regards
Trevor




"Cris Hanna [SBS-MVP]" wrote:

Unfortunately the request cannot be passed on

regarding "Main problem is that with connectcomputer. Over the past few
days we have gone over every nook and cranny including the Intranet
settings which by default are turned off. You have to turn on Intranet
settings and disable protected mode also add the server FQDN or IP to the
list of trusted sites." None of these (except the intranet thing which
pops up in explorer) are required if you have patched the SBS server with
the Vista and Office 2007 compatibility patches

You should not have had to remove all those networking pieces.

I would like to see two things
1. go to a command prompt on your sbsserver and run "ipconfig /all >
c:\serverconfig.txt do the same thing your vista workstation

copy and paste the complete output of both files here and identify which
is which.

2. On the Vista Workstation, right click on the IE icon on the desktop
and choose run as Adminstrator
when IE opens type http://sbsservername/connectcomputer

What happens??





"TrevorWhite" <TrevorWhite@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:585DA4ED-C4C4-4F1E-B307-35E3A60BAA4E@xxxxxxxxxxxxxxxx
Hi Chris,
Thanks for your comment, did not know that about Technet (I don't
subscribe)
I saw a Mr Rob Li of MSFT address this issue to a point but have not seen
the
conclusion. Would be very gratefull if anyone could pass this request on.

My experience with Security Certificates is not as you describe it (even
under XP clients) If a certificate is not present then you get a prompt.
This
is not the main problem but would be good to resolve.

Main problem is that with connectcomputer. Over the past few days we have
gone over every nook and cranny including the Intranet settings which by
default are turned off. You have to turn on Intranet settings and disable
protected mode also add the server FQDN or IP to the list of trusted
sites.

Main problem to get started was removing all the NICs and other protocols
that come with Vista out of the box apart from the one b eing used to
connect
with.

If this can't be resolved is there a white paper that explains all that
has
to be done to replace this important of SBS wizards. I need the VPN and
other
remote stuff to work reliably and in a managable way. I've learnt that not
running the wizards in SBS is ust asking for trouble.

Really hope someone can through some light on this.

Regards
Trevor



"Cris Hanna [SBS-MVP]" wrote:

You will only get responses from Microsoft support in this forum if you
are a Technet Subscriber, the way I understand it

When you connect your Vista machine to the LAN, and it gets an IP from
the
LAN, you should not see the security certificate.

The only other thing I can think of at this point would be to Check
Vista
and make sure that the IntraNet settings

When I connect a new vista machine to the network using
http://servername/connectcomputer I typically get one of those
"information" bars telling me that Intranet sharing (I could be wrong on
the exact wording) is not turned on...would I like to enable it...I say
yes.

I do that...run connect computer again...and I'm off to the races
No security warnings...UAC does require me to let nshelp run, but thats
it.

The patches on your SBS server have taken care the errors about not
being
an Admin or having to run IE& "as Administrator"


"TrevorWhite" <TrevorWhite@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:86124E9C-AD16-4EEC-9C41-A66E0563AFBE@xxxxxxxxxxxxxxxx

Hi Joe,
Unfortunately I have been this route too. Have turned off the User
Account
Control feature since this apparently locks some parts of the system
drive
required by the connectcomputer script.

Also tried all flavours of running the procedure with admin rights. IE
right
clicking IE7 and selcting run as Admin, logging in as the actual local
admin
account, and running as myself with local admin rights. Still no change
to
the situation.

I'd like to know how nshelp.exe attempts to download the files (IE FTP,
or
what) and what permissions need to be apparent for this to succeed. Also
what
ISA2004 SP3 setings need to be in place. (open ports etc.)

Most of all I'd like some input from MS, there seems to be too many
instances of this problem for it to be not significant.

Regards
Trevor
Regards

"Joe" wrote:

TrevorWhite wrote:
Hi Chris,
I have spent 3 days amd the weekend on this to no avail.
Yep I run all of the KBs both on the server and on the Vista PC and
checked
same many times. I have also unbound the IPv6 protocols from all
NICs
and
also those tunnel adaptors. Also uninstalled the Link-Layer
protocols
and
disbled the wireless NIC.

There are two issues:
1. I don't seem to be able to install the Security Certificate by
clicking
on the Cert Error and then installing after viewing the certificate
(this was
and still is possible when connecting an XPpro machine, I tested
after
I got
this problem)

I don't think IE on Vista does that. I haven't used it a great deal,
but
I've always had to click 'go ahead anyway' and have never been able to
install an erroneous one. There's probably something a bit
undocumented
involved.


2. When your start to run http:\\servername\connectcomputer I get
the
dialogue that says do you want to run or save nshelp.exe. I click
RUN
and an
error stating:

Small Business Server Network Configuration Wizard:
"An errior occured while trying to copy the Client setup files.
Check
the
following and try again"
Check that the proxy box is not ticked (it isn't) It also says if I
don'y
have a Proxy setup then I need to rerun the Client Deployment
component on
the server. Since IE7 appears to be setup with a Proxy until I
disable
it I
haven't run the Client Deployment component on the server. Not sure
how to do
this either.

If I click save instead of Run I can save the nshelp.exe to the
desktop. But
as soon as I run that file (as admin) I get the same error.

Hope you guys can help, this is drive me and a number of others to
distraction.

A wildly long shot: I was having trouble today getting connectcomputer
to run at all, it kept telling me I needed to be an admin, even after
making a local admin of the same name and password. The answer there
is
to turn off user account control. There was no ISA involved, and I
wonder if you are seeing the ISA manifestation of the same kind of
thing.



.