Re: Http 403.6 error when accessing the Remote Web Workplace

Hello Mark,

Thank you for posting here. Let's also thank Merv for the input.

According to your description, I understand that this issue is: RWW is not
working with error: HTTP Error 403.6 - Forbidden. If I'm off base please
feel free to let me know.

First, the Merv is correct, the 160.100.1.150 is public IP address. It is
not suit for you to use it on your internal NIC of SBS. Please run the
Change Server IP Address to change it to private IP (like: 192.168.16.2):

Please open Server Management console -> Internet and E-mail node -> Change
Server IP Address link.

Before we go to any future, please let me know the following info, so I can
get a precise understanding on this issue:

1. Does this issue occur on the internal clients or external clients?
2. If you logon SBS Server and try to access RWW, can you reproduce this
issue.
3. Do you have ISA Server installed? If yes, please let me the version.

Per my knowledge, By default, IIS is configured to only allow access
attempt from the server itself. We have to run the CEICW, then the network
and IIS settings will be properly configured.

To do so:

1. Click Start on your SBS server, click Server Management.

2. Click To Do List and then click "Connect to the Internet".

3. Click Next, select connection type and click Next.

4. Select Enable firewall and click Next.

5. Click Next, go through the steps until the Web Services Configuration
page shows, make sure that "Remote Web Workplace" is selected.

6. Click Next, and follow the instructions to finish.

References:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

If this issue persists, please check following settings to ensure the
configuration is correct.

1. Check Default Web Site setting under IIS

a Open Server Management console, go to Advanced
Management\Internet Information Services.
b Under Website, right click Default Website, select Properties.
c In Virtual Directory tab, make sure it is using DefaultAppPool,
go to Directory Security tab, click Edit button, make sure that Anonymous
and Integrated access is enabled, make use any IP address is allow to
access.


2. Check Virtual Server Remote setting
a Open Server Management console, go to Advanced
Management\Internet Information Services.
b Under Web Sites\Default Web Sites\Remote, right click the Remote
directory, select Properties.
c In Virtual Directory tab, make sure it is using DefaultAppPool,
go to Directory Security tab, click Edit button, make sure that Anonymous
and Integrated access is enabled. Check Directory Security,make use any IP
address is allow to access.

3. Check ISAPI Filter of Default Web Site setting.
a Open Server Management console, go to Advanced
Management\Internet Information Services.
b Under Website, right click Default Website, select Properties.
c In Virtual Directory tab, click ISAPI Filter, check if sbssft.dll
exist.
If sbssft.dll doesn't exist, you need to add it. You can found it under
%systemdrive%\inetpub\sbsflt\sbsflt.dll.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

1. Gather IIS log:

a. Open IIS snap-in.

b. Right click Default Web Site and click Properties.

c. Uncheck the "Enable Logging" box and click Apply.

d. Go to C:\WINDOWS\system32\LogFiles\W3SVC1 folder and move all files to a
backup location.

e. Check "Enable Logging" box and click OK.

f. Run IISReset command.

g. Reproduce the problem and send the log file in
C:\WINDOWS\system32\LogFiles\W3SVC1 folder to me for research.

2. Gather IIS Metabase:

1) Download the IIS Resource Kit tools from the following page:
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
B628-ADE629C89499&displaylang=en

2) Install it, run MBExplorer (Metabase Explorer)

3) Right click the "LM" node and choose "Export to file".

4) Specify a file name, specify the password and finish the export.

5) Send the file and the password to v-terliu@xxxxxxxxxxxxx

3. Gather MPS network report on SBS:

a. Download MPSrepot_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

b. Run MPSRPT_NETWORK.exe on the server box.

c. The tool will automatically collect the information. This procedure will
take 10~15 minutes.

d. Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\

e. Send the .cab file directly to me at v-terliu@xxxxxxxxxxxxx

Hope this helps, please let me the results at your earliest convenience. I
look forward to your update.

Have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: mark@xxxxxxxxxxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Http 403.6 error when accessing the Remote Web Workplace
| Date: Mon, 05 Nov 2007 10:08:07 -0800
| Organization: http://groups.google.com
| Lines: 132
| Message-ID: <1194286087.232614.34860@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1194235836.991827.64820@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <uznosq7HIHA.6068@xxxxxxxxxxxxxxxxxxxx>
| <1194277557.014608.4220@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <#IoFfP8HIHA.4296@xxxxxxxxxxxxxxxxxxxx>
| <1194284254.402263.53430@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <#R7h6P9HIHA.4880@xxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 75.24.0.247
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| X-Trace: posting.google.com 1194286087 17709 127.0.0.1 (5 Nov 2007
18:08:07 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Mon, 5 Nov 2007 18:08:07 +0000 (UTC)
| In-Reply-To: <#R7h6P9HIHA.4880@xxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: z9g2000hsf.googlegroups.com; posting-host=75.24.0.247;
| posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| Bytes: 6309
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
m!out03a.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
senetserver.com!postnews.google.com!z9g2000hsf.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:73847
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| On Nov 5, 12:47 pm, "Merv Porter [SBS-MVP]"
| <mwport@xxxxxxxxxxxxxxxxxxx> wrote:
| > Hi Mark,
| >
| > It appears you're using a public (not private) IP address for your SBS
| > internal LAN:
| >
| > 160.100.1.150
| >
| > Is this correct?
| >
| > And you also have:
| >
| > PPP adapter Small Business Broadband Connection
| >
| > This is not a configuration I'm familiar with. Can you explain your
network
| > setup a little more.
| >
| > --
| > Merv Porter [SBS-MVP]
| > ============================
| >
| > <m...@xxxxxxxxxxxxxxxxx> wrote in message
| >
| > news:1194284254.402263.53430@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
| >
| > > On Nov 5, 10:52 am, "Merv Porter [SBS-MVP]"
| > > <mwport@xxxxxxxxxxxxxxxxxxx> wrote:
| > >> Please post the results of an ipconfig /all for your SBS server.
| >
| > >> --
| > >> Merv Porter [SBS-MVP]
| > >> ============================
| >
| > >> <m...@xxxxxxxxxxxxxxxxx> wrote in message
| >
| > >>news:1194277557.014608.4220@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
| >
| > >> > On Nov 5, 9:46 am, "Merv Porter [SBS-MVP]"
| > >> > <mwport@xxxxxxxxxxxxxxxxxxx> wrote:
| > >> >> Maybe some things to check...
| >
| > >> >> Remote web workplace +403.6
| > >> >>
errorhttp://groups.google.com/group/microsoft.public.windows.server.sbs/br..
.