Re: ISA and IIS services getting confused

Hi Terence. I started looking at this today.

For #1, the ServicePackNumber is set to 1 in the registry. Does this
mean that I do not need to install the five package? Would it hurt to
reinstall any or all of them even if they are already installed?

That's as far as I got before being called into a meeting. I'll work
on the rest of the steps either tomorrow or Saturday.

Brian Bygland

"Terence Liu [MSFT]" <v-terliu@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:fa2HL0NMIHA.6908@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello Another,

Thank you for posting here. Let's also thank Dave for the good
input.

According to your description, I understand that all traffic through
SBS
2003 with ISA server 2004 are blocked after 1 or 2 weeks running.
Restart
ISA services resolved the issue temporary. If I have misunderstood
the
problem, please don't hesitate to let me know.

Based on my research, I suggest we try the following steps to see if
we can
resolve this issue:

1. As Dave said, you need to verify that you had applied SBS 2003
sp1 on
server:

On the SBS server, click Start, click Run, type "regedit" (without
the
quotation marks) and click OK. Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer, and check
the
data of the registry value ServicePackNumber. Is it set to "1"? If
not,
then this problem will occur because SBS 2003 SP1 has not been
completely
installed. To successfully install SBS 2003 SP1, we must install all
five
updates listed below. Additionally, the updates must be installed in
the
sequence listed.

Downloading and Installing Windows Small Business Server 2003
Service Pack 1
http://download.microsoft.com/download/e/0/f/e0fee8ce-768d-41c0-8871-9bc48e0
b3fc3/ToDownLoadFilesandReadInstructions.htm

A. Service Pack 1 for the Windows Server 2003 operating system
B. Windows SharePoint Services 2.0 Service Pack 1
C. Exchange Server 2003 Service Pack 1
E. Windows XP SP2 for Client Deployment
F. Windows Small Business Server 2003 Service Pack 1

Note: Since you had applied Windows Server 2003 sp2, please skip the
step A.

After you applied the whole SBS 2003 SP1, please apply Windows
server 2003
sp2. Then, please run CEICW to reconfigure the SBS:

How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/kb/825763/en-us

2. Do you install ISA server 2004 sp3 on SBS? If no, please try to
install
it and see if it help:

Microsoft? Internet Security and Acceleration (ISA) Server 2004
Standard
Edition Service Pack 3
http://www.microsoft.com/downloads/details.aspx?FamilyId=A05A074A-5033-4792-
AF8B-58B90D841436&displaylang=en

3. Since you had installed Windows server 2003 sp2 on SBS, please
perform
the following steps:

1) Update the network adapter drivers
Contact the network adapter manufacturer or contact the original
equipment
manager (OEM) for the computer to determine whether an updated
network
adapter driver is available. You must have drivers that are
compatible with
NDIS 5.2 or with a later version.
2) Modify the registry to disable Receive Side Scaling
a. Click Start, click Run, type regedit , and then click OK.
b. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
c. If the EnableRSS registry entry does not exist, create it. To do
this,
follow these steps:
a) On the Edit menu, point to New, and then click DWORD Value.
b) In the New Value #1 box, type EnableRSS , and then press ENTER.

d. Right-click EnableRSS, and then click Modify.
e. In the Value data box, type 0 (zero), and then click OK.
f. Exit Registry Editor.

3) Disable offloading support
a. Click Start, click Run, type regedit , and then click OK.
b. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
c. In the details pane, right-click EnableTCPA, and then click
Modify.

Note: If the EnableTCPA registry entry does not exist, create it. To
do
this, follow these steps:
a) On the Edit menu, point to New, and then click DWORD Value.
b) In the New Value #1 box, type EnableTCPA , and then press ENTER.

d. In the Value data box, type 0 (zero), and then click OK.
e. Exit Registry Editor.
f. Restart the computer.

4. The antivirus real time scan may cause the ISA services crash. Do
you
install any antivirus software on SBS? If yes, please uninstall it
and
monitor the issue.

5. Do clean boot on SBS and monitor this issue:

To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.

b. In the System Configuration Utility (MSConfig) window, click to
select
the Selective Startup button.

c. Click to clear the check mark from the "Load startup items" below
Selective Startup.

d. Click the Services tab, click to check the "Hide All Microsoft
Services"
box, and remove all the check marks from the remained Non-Microsoft
Services. Please note that the Exchange services could be marked as
non-Microsoft. Please do not disable those services.

e. Click OK to close the MSConfig window. Click Yes when you are
asked to
restart your computer in order to enable the changes.

f. After restarting, please check whether this issue will reoccur.

g. If there are no more problems, please use the above steps to
enable
services and startup items one by one in order to figure out the
root cause
of this issue.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have
issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you
check the
"Notify me of replies" box to receive e-mail notifications when
there are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from
your
issue.

Microsoft engineers can only focus on one issue per thread. Although
we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean.
In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone
numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
| From: "Another Brian" <notbrian@xxxxxxxxxxxxxxx>
| Subject: ISA and IIS services getting confused
| Date: Mon, 26 Nov 2007 08:34:20 -0800
| Lines: 43
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#Pg9coEMIHA.1204@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: c-76-22-10-176.hsd1.wa.comcast.net 76.22.10.176
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:78050
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| We're running Win 2003 SBS SP2 (not R2) with ISA 2004 and are
having
| an annoying connectivity issue. Once or twice a week users are
| experiencing these connectivity problems:
| - Cannot connect to any shares on the server
| - Outlook cannot connect to Exchange
| - Internet Explorer cannot connect through the server proxy to the
| Internet
| - External users cannot connect to the server through Remote Web
| Workplace
|
| After consultation with MS we determined that the ISA and IIS
services
| are misbehaving. The fix is to run the following commands or to
reboot
| the server:
|
| net stop fweng
| net start fweng
| net start fwsrv
| net start isasched
| iisreset /restart
|
| We haven't been able to find anything in the event logs that
indicates
| what is causing these services to misbehave. The only change that
we
| can remember making when this first started was the application of
MS
| updates. Unfortunately it was long enough ago that we've been
unable
| to figure out which update might have caused this.
|
| Has anyone seen this type of (mis)behavior? What might I look for
in
| the logs? Or in other words ... Help!!
|
| I'm thinking of putting the above commands in a bat file and just
| schedule them to run every morning after the backup is complete so
I
| don't have to stop on the way to work every morning to verify that
the
| server is working.
|
| One request for your reply, please realize that I'm a volunteer
| administering my church SBS server and have no training in SBS.
I'm
| learning, but it's a long hill to climb.
|
| Brian Bygland
| Kent UMC
| Volunteer IT Dept.
|
|
|



.