Technology Blog

Widgets

Archive for the ‘Windows 2003’ Category

Firewall Greyed out in SBS Environment

Yet again a case where SBS trys to think for you. Like me, you probably checked the default domain policy and found nothing under firewall and started to scratch your head.

Go here:

Server Mgmet > Advance Mgmt > Group Policy > right click SBS Firewall > Edit > then browse to the Group Policy under Network Connections

You can edit the policy and get your firewall settings for your users back..or simply delete the GPO and work in the default policy as normal.

8004010F - Exchange Offline Address List

This error usually means that your “Default Global Address List” somehow got disconnected from your “Offline Address Lists” object in Exchange System Manager.

To Resolve:

Method 1
Use this method to resolve this problem when you view Properties in the Address lists setting in Exchange System Manager.

Exchange 2003
In Exchange System Manager, expand the Recipients container.
Click the Offline Address Lists container.
In the right pane, right-click the offline address list object, and then click Properties.
On the General tab, verify that a valid address list is populated under Address lists. If a valid address list is not populated under Address lists, you must add one.

Note The default address is the global address list.
Click OK.
Right-click the offline address list object again, and then click Set as New Default if the offline address list object is not set.
If you made any changes, right-click the offline address list object again, and then click Rebuild.

Exchange 2007
In the Exchange Management Console, expand Server Configuration, and then click Mailbox.
In the Database Management window, right-click Properties on the mailbox store.
Click the Client Settings tab, click Browse, and then click the appropriate offline address book.
Click OK two times.

Method 2
Use this method to resolve this problem when you view Properties in the Offline address list setting in Exchange System Manager.

Exchange 2003
In Exchange System Manager, click Properties for the mailbox store, and then verify that the offline address list is populated with a valid offline address list object in Offline address list on the General tab.

Note If the offline address list is not populated with a valid offline address list object, click Browse to select a valid offline address list object.
Send an e-mail message from Outlook 2003.

Note In Outlook 2003, you may have to log off and log on again for a valid test.

This was taken directly from MS Support:
http://support.microsoft.com/kb/905813

RAS Registers DHCP Address in DNS

This caused some serious havoc on a client’s network for half a day. I setup RAS as normal, and it worked great for about 5 days. All of a sudden, clients couldn’t access the mail server.

I check DNS and found an extra record of the mail server in there. I checked the NIC to make sure there were no extra IP’s bound to it. At first, I thought someone else might have named their machine the same asa the server..and thought..no way.

I went into RAS and saw a DHCP address for the mail server! I figured it had to be DNS. Sure enough, the “interface” tab in the DNS properties was accepting all IP’s. Here’s the fix:

1. Start DNS Manager.
2. Right-click the computer name, and then click Properties.
3. Click the Interfaces tab, and then click Only the following IP addresses.
4. Remove any Routing and Remote Access IP addresses that are listed.

Hope this helps!

FTP Windows 2003 AD Isolation

I had setup this FTP mode a while back and had to do it again recently. I didn’t take good notes the first time, so I thought I would help out anyone trying to get this setup.

1.Setup a new user called ftpuser

This account will be used to read AD for all other FTP accounts. You DO NOT want to use administrator as your AD lookup account. Then, under active directory users and computers click view -> advanced. This will give you the security tab for the user properties. Open up the properties for ftpuser and click the security tab. Make sure read is checked for authenticated users. (make sure you select the read permissions or you will get “home directory not accessible” and event id 13 errors.)

If the “security” tab is not visible, click view -> advanced features on the mmc window

2. Delete the Default FTP Site in IIS Manager as you will be creating one from scratch.

Now in IIS Manager, expand FTP Sites and create a new FTP site. You can call it whatever you like. Make sure you choose the AD Isolation mode. Also check both read and write permission as you will be defining the true permission on the folder. When prompted for a user to authenticate to AD, put in the user from above in the form: domain\ftpuser. It is very important you put the domain in front of the user.

3. Now you need to define the FTPRoot and FTPDir properties

In this example, we will use the username john

First, you need to create a folder for your users or just use the default c:\inetpub\ftproot
Create a folder called john at c:\inetput\ftproot. The full path would be c:\inetpub\ftproot\john

Then you can take the easy road and use this nifty tool to define the root and directory:
http://blog.crowe.co.nz/archive/2006/02/15/556.aspx

Or, you can do it manually using iisftp from a command prompt. Open up a cmd window and use the following syntax:

iisftp /setadprop ftproot c:\inetpup\ftproot
iisftp /setadprop ftpdir john

Make sure the ftp directory has the correct permissions for john.

That’s all. If you have any question, please ask.

© ZADRO Solutions, Inc. All Rights Reserved. Disclaimer | Privacy Policy
RSS Facebook Digg Delicious Stumble Upon Twitter