RE: ConnectComputer after SP1

[Brandy Nee [MSFT]]

Hello Hamid,

Thank you for posting to the SBS Newsgroup.

From your problem description, I understand this issue to be: the client
workstation cannot connect to the domain via
http://servername/connectcomputer site.

To troubleshoot this issue, please check the following settings.

1. Open Server Management and navigate to IIS console\Server\Web
Site\Default web Site.

2. Right click the ConnectComputer Virtual directory and click properties.

3. On the Directory Security tab, please click Edit under Authentication
and access control.

4. Make sure only the "Enable Anonymous access" is checked.

5. Back to the Directory Security tab, Click Edit under "IP address and
Domain Name Restriction".

6. Make sure grant access is selected and there is no exception list.

7. If any change, please open a command window and type "iisreset" (without
quotation marks) to restart the IIS service.

Furthermore, please make sure that the client workstation which is ready to
join the domain has got the valid IP address in the SBS network subnet
scope.

After above steps, please test your issue again. If the issue persists,
please collect following information for further troubleshooting.

a. The Run "IPconfig /all" on one of the problematic client workstations
and the SBS 2K3 Server and paste the full result to your reply to me.

b. Capture a screen shot for the error message and send it to the Newsgroup.

c. What is the exact SP1 you installed on the server?

i. Windows Server 2003 SP1. OR

ii. Small Business Server 2003 SP1.

d. Did this issue happen before you installed SP1? Have you successfully
installed SP1 on your server?

e. Please help to gather the IIS log for us to analysis:

i. Open IIS MMC, right click Default Web Site and then click Properties.

ii. Click Website tab and then check Enable logging.

iii. With ''W3C Extended Log File Format'', click ''Properties''.

iv. Switch to the ''Extended Properties'', and then select to enable All
the logging Options.

v. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.

vi. Restart the Default Website and try to access Exchange via Activesync
to reproduce the problem.

vii. Go to the following folder: C:\WINDOWS\system32\LogFiles, and send the
whole file to the Newsgroup.

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: ConnectComputer after SP1
>thread-index: AcW/1RoOFda4xWvUT+WQwmblFC2q2w==
>X-WBNR-Posting-Host: 68.167.200.211
>From: "=?Utf-8?B?SGFtaWQ=?=" <Ha...@discussions.microsoft.com>
>Subject: ConnectComputer after SP1
>Date: Thu, 22 Sep 2005 17:24:03 -0700
>Lines: 10
>Message-ID: <D5EBA4F2-341F-460C...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:155718
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I have connected many client computers to SBS 2003 by using the browser an
>access to “http://SBSservername/ConnectComputer”. But after installing
SP1, I
>now get "You are not authorized to view this page … HTTP Error 403 –
>Forbidden".
>
>I follow the same procedure as before, and the account on the client
>computer has local administrator right.
>
>Your help is much appreciated.
>
>

[Hamid]

Brandy,

On #4 (IIS console\Server\WebSite\DefaultWebSite,ConnectComputer
Properties\Directory Security tab\Authentication and access control\Edit),
Yes only the "Enable Anonymous access" is checked.

On #6 (IIS console\Server\WebSite\DefaultWebSite,ConnectComputer
Properties\Directory Security tab\IP address and
Domain Name Restriction\Edit), I have "Denied Access" selected with the
exception of my server's subnet "192.168.16.2 (255.255.255.0)" and 127.0.0.1.
I have done it this way to protect it from the outside world. Given that the
new PC, which has the static IP 192.168.16.29, is within the scope of subnet,
that should not be the problem.

However, you pointing me to "IIS console\Server\WebSite\DefaultWebSite", I
checked the content of C:\Inetpub\ConnectComputer folder and found only 1
file (usermap.txt) in it. I checked a before SP1 backup and found this file
plus 15 more. I copied these 15 files to C:\Inetpub\ConnectComputer and
problem solved.

I have to say that more than a month ago, when I installed SP1 (SBS2K3 SP1
CDs), it did report a successful installation. But immediately afterward, I
experienced problems such as not being able to access the Intranet
(Companyweb) or accessing Performance reports. I found out that under
C:\Inetpub, two folders that existed before (Monitoring, SBSFLT) are now
missing. I restored them from backup, and those issues got resolved. But
since the ConnectComputer folder was not missing, I did not check the content
until now. It turned out that SP1 deleted most of its content.

I am very grateful to you and many other experts that are helping us on this
forum. However I am very disappointed with Microsoft that by introducing a
new fix (SP1), it brakes many parts that were working perfectly before, and
even does not report that it has broken them, Successful Installation!

""Brandy Nee [MSFT]"" wrote:

> >access to “http://SBSservername/ConnectComputer†. But after installing
> SP1, I
> >now get "You are not authorized to view this page … HTTP Error 403 –

[Brandy Nee [MSFT]]

Hello Hamid,

Thank you for posting back!

I am glad to hear the problem is resolved.

We do receive a lot of issues regarding SharePoint after installing SBS 2K3
SP1. I have already reported your issue to our Develop Department. We also
welcome you that send your feedback about the SharePoint to
msw...@microsoft.com. In doing so, the feedback will be sent to our product
team and this will help us to improve our future product.

Again, It is my pleasure to work with you in this post and thank you for
using Microsoft newsgroup. If you need any assistance in the future, please
feel free to post back to this Great Newsgroup. We are glad to be working
with you again!

Best regards,

Brandy Nee

>thread-index: AcXAeYZ9NxWEnKGUSlmp8c8ch2kUfg==

>X-WBNR-Posting-Host: 68.167.200.211
>From: "=?Utf-8?B?SGFtaWQ=?=" <Ha...@discussions.microsoft.com>

>References: <D5EBA4F2-341F-460C...@microsoft.com>
<VC6XlM$vFHA...@TK2MSFTNGXA01.phx.gbl>
>Subject: RE: ConnectComputer after SP1
>Date: Fri, 23 Sep 2005 13:01:03 -0700
>Lines: 182
>Message-ID: <A618E96E-5799-480E...@microsoft.com>

>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl

>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156013
>X-Tomcat-NG: microsoft.public.windows.server.sbs