Re: Finally finished SBS Install, not a config question...

Hi Roveer,

Thanks for posting in our newsgroup.

Before we go further on this issue, please let me know the following to
make the situation more clearly:

1. Do you have Windows Update problem on all computers?
2. What's the error message can you see when you visit the Windows Update
site?
3. Does the Trend Micro software installation need Active Control and run
in IE Brower? What's the error during the installation?

First since the Micro software installation is third party software and I
am not sure the root cause is related to Active X, a suggestion is to focus
on the Windows Update issue in this thread. If the Windows Update issue is
resolved and the Micro software installation persists, you can also contact
the software manufacture for more help. Thanks for your understanding.

By default the Active X control in IE are as the following:

1. Open IE.
2. Click Tools\Internet Options.
3. On the Security tab, click Internet and Click Custom Level:

Automatic prompting for Active X controls Disable
Download signed ActiveX controls Prompt
Download unsigned Active X controls Disable
Initialize and script ActiveX controls not marked as safe Disable
Run Active X controls and plug-ins Enable
Script Active X controls marked safe for scripting Enable.

4. On the Security tab, click Local intranet and Click Custom Level:

Automatic prompting for Active X controls Enable
Download signed ActiveX controls Prompt
Download unsigned Active X controls Disable
Initialize and script ActiveX controls not marked as safe Disable
Run Active X controls and plug-ins Enable
Script Active X controls marked safe for scripting Enable

5. On the Security tab, click Trusted sites and Click Custom Level:

Automatic prompting for Active X controls Enable
Download signed ActiveX controls Enable
Download unsigned Active X controls Prompt
Initialize and script ActiveX controls not marked as safe Prompt
Run Active X controls and plug-ins Enable
Script Active X controls marked safe for scripting Enable

6. In the Restricted Sites, all the Active X related setting are disable.

You can add the Windows update website to the Trusted Sites and test again.

Please help me collect the following information on problematic workstation
for further research:

1. Please help to collect the %windir%/WindowsUpdate.log and send to me.

2. MPS Report

I attached the MPSRPT_WSUS.ex in my email.

(1) Copy the attached MPSRPT_WSUS.EX_ to your hard drive.
(2) Rename the file from MPSRPT_WSUS.EX_ to MPSRPT_WSUS.EXE
(3) Double click to start the report creation.
(4) Please allow the report creation process to run for a few minutes as
several configuration report files will be generated.
(5) When the data collection is complete, the report files will be
compressed into a .cab file under :
%SystemRoot%\MPSReports\msus\Reports\cab

Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
40994194-inally finished SBS Install, not a config question.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: Roveer <roveer@xxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<Subject: Re: Finally finished SBS Install, not a config question...
<Date: Mon, 19 Nov 2007 06:48:21 -0800 (PST)
<Organization: http://groups.google.com
<Lines: 14
<Message-ID:
<ebbb9b52-03f9-48bb-94ee-8f5090b9f3a2@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<References:
<ed69e7e7-f17e-4ec7-a5c9-4ca56752e930@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
< <D4BABD41-4DC4-4DF8-9813-678A88B953C5@xxxxxxxxxxxxx>
<NNTP-Posting-Host: 68.196.125.185
<Mime-Version: 1.0
<Content-Type: text/plain; charset=ISO-8859-1
<Content-Transfer-Encoding: 7bit
<X-Trace: posting.google.com 1195483701 19764 127.0.0.1 (19 Nov 2007
14:48:21 GMT)
<X-Complaints-To: groups-abuse@xxxxxxxxxx
<NNTP-Posting-Date: Mon, 19 Nov 2007 14:48:21 +0000 (UTC)
<Complaints-To: groups-abuse@xxxxxxxxxx
<Injection-Info: s12g2000prg.googlegroups.com; posting-host=68.196.125.185;
< posting-account=mNMlDgkAAABCgwa2R3Lph7BL7k59NcII
<User-Agent: G2/1.0
<X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET
CLR
< 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30),gzip(gfe),gzip(gfe)
<Content-Disposition: inline
<Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!news.glorb.com!postnews.google.com!s12g2000prg
..googlegroups.com!not-for-mail
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:76797
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<It was late last night when I ran into this problem. I decided to
<kill the user and re-create them and they were added to the
<administrator group. That seems to have cleared up the problem. I
<found that hitting windows update (which wants to run an activex
<control as well as the trend micro stuff worked after that. I'm not
<planning on locking much down on the user workstations. It's just too
<small of an environment and I'll have headache after headache if I
<do. We've run for 5 years without problems with the users being
<"administrator" level on their machines, but I don't really want them
<being "administrators" of the server. I guess I'll eventually have to
<modify the policy templates or take a look at the power user template
<to find a good match.
<
<Roveer
<

.

Relevant Pages

  • Windows Update/Virus?
    ... Microsoft is having trouble with their latest critical ... problem with Windows Update saying that you need the ... it would be sufficient to disable all the ActiveX ... controls only work on I.E., ...
    (microsoft.public.security)
  • Re: Automatic Updates problem
    ... I am not sure that Jack ever installed the Active X Controls. ... >> I did not download Activex Control, ... > Windows Update still fails, ... this time you should be prompted to install the ...
    (microsoft.public.windowsxp.newusers)
  • Re: Deep Throat
    ... this port by default: ... >>Norton Firewall, can you block inbound traffic and allow ... >>Your browser will be checked for installed ActiveX ... >>ActiveX controls are a kind of enhancement plugins for ...
    (microsoft.public.security.virus)
  • Re: Security Settings for XP
    ... Problems When Viewing or Downloading From Windows Update ... > Your security settings prohibit running ActiveX controls on this page. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Deep Throat
    ... Norton Firewall 2004, but are so annoying that they keep ... >Port 1025 will have to be open to out bound traffic, ... >Your browser will be checked for installed ActiveX ... Invocation of secure ActiveX controls ...
    (microsoft.public.security.virus)