Welcome to ISAserver.org

"vista+outlook 2003" behind isa server 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> "vista+outlook 2003" behind isa server 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

"vista+outlook 2003" behind isa server 2004 - 12.Nov.2007 4:14:09 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi

We have new Vista Business PC's joined to our domain. They have problem with Outlook 2003 as : "Receiving reported error (0x800408FC) : The server name you entered can not be found on the network."

Our PC's with Windows XP and Vista are all behind ISA server 2004 and they are in the same domain. Outlook 2003 on Windows XP PCs are working properly.

1* Outlook 2003 on Vista PC's are working only if ip address of Pop3 server is entered instead of it's name.
2* Outlook 2003 is working without any problem if they are not behind ISA server 2004 and connected directly to internet.
3* We tried with new firewall client (date 10/4/2007) but it did not work.

What can be the problem?

Thanks in Advance!

Post #: 1

Featured Links*

RE: "vista+outlook 2003" behind isa server 2004 - 12.Nov.2007 5:58:34 AM

elmajdal

Posts: 5098
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

i have multiple Vista Clients Business/Ultimate and i never faced problem with any.

I alway make sure to fully update Vista with Windows Update before connecting to the LAN, so that such problems wont be faced later.

Maybe this also can be solved with an update, try to fully update it first.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to feyzi)

Post #: 2

RE: "vista+outlook 2003" behind isa server 2004 - 29.Nov.2007 8:02:45 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

hi elmajdal

We installed all updates for vista business and unfortunatelly the result is same. Any other suggestions?

(in reply to elmajdal)

Post #: 3

RE: "vista+outlook 2003" behind isa server 2004 - 3.Dec.2007 2:15:14 PM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi,

Could be a DNS problem. Could you check how is configurated Dns servers in Windows vista and in Isa server ?, Isa server could resolve name of pop3 server ? Windows vista could resolve name of pop3 server ?

Hector

(in reply to feyzi)

Post #: 4

RE: "vista+outlook 2003" behind isa server 2004 - 6.Dec.2007 12:44:30 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

hi hector

Isa server can resolve name of pop3 server. But vista could not resolve name of pop3 server.

Feyzi

(in reply to hrsanchez)

Post #: 5

RE: "vista+outlook 2003" behind isa server 2004 - 6.Dec.2007 1:50:34 AM

elmajdal

Posts: 5098
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

By the way, i always disable the User Account Control on Vista Machines

Give it a try !!!

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to feyzi)

Post #: 6

RE: "vista+outlook 2003" behind isa server 2004 - 6.Dec.2007 2:18:50 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Elmajdal

I turned off UAC. Unfortunately the result is same. Vista can not resolve name of pop3 server.

(in reply to elmajdal)

Post #: 7

RE: "vista+outlook 2003" behind isa server 2004 - 6.Dec.2007 8:42:12 AM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi Feyzi,

ok, you have to configure Windows vista with Dns servers that can resolve name of pop3 server; if your Dns servers are internal , you have to configure public forwarders and make in Isa server an acces rule to Dns servers in order to open consulting to port 53.

Hector

(in reply to hrsanchez)

Post #: 8

RE: "vista+outlook 2003" behind isa server 2004 - 7.Dec.2007 1:10:52 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Hector

To avoid missunderstanding, could you make your suggestion clear?

To figure out our structure: Our DNS is internal and our connection to outside is only ISA server.

If i did not understand you wrong, we added port 53 to acces rules in ISA as you said. But still vista can not resolve name of pop3 server.

Feyzi

(in reply to hrsanchez)

Post #: 9

RE: "vista+outlook 2003" behind isa server 2004 - 7.Dec.2007 3:38:40 AM

elmajdal

Posts: 5098
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

This is the illustration about the DNS : http://elmajdal.net/isaserver/Internal_DNS_Forwarding.aspx

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to feyzi)

Post #: 10

RE: "vista+outlook 2003" behind isa server 2004 - 7.Dec.2007 10:41:43 AM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi, Feyzi,

Follow the ilustration sent by elmajdal.
1.- Window vista Pc must have configurated Dns internals in its tcp ip protocol properties.
2.- Dns internals ( problably Domain controllers ) must have configurated public forwarders.
3.- Isa server must have an access rule to DNS protocol ( port 53 ) for the Dns internals from Internal ( Lan ) to External ( Internet ).

While Windows Vista cant resolve Pop3 server name, Outlook 2003 will not find Pop3 server.

You can check it , if you write in Windows Vista Pc file hosts ( Probably in c:\windows\system32\drivers\etc ) the name and the ip of Pop3 server )

For example:
#
101.54.92.96 pop3.acme.com # Pop3 server

When your Dns internals can resolve Pop3 server name you can delete the line above in the hosts file.

Hector

(in reply to feyzi)

Post #: 11

RE: "vista+outlook 2003" behind isa server 2004 - 10.Dec.2007 3:12:31 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Hector

Vista can not resolve name of pop3 server although i added its name and ip number in the hosts file (C:\windows\system32\drivers\etc). Where am i doing wrong?

Is your suggestion about public forwarders and access to DNS protocol (port 53) only for Vista or is it a general configuration that we should do before? Because ISA server is working with its current firewall configuration with XP PCs. I did not configured public forwarders on DNS before.

Or is this problem a bug of Vista?

Feyzi

(in reply to hrsanchez)

Post #: 12

RE: "vista+outlook 2003" behind isa server 2004 - 10.Dec.2007 9:39:23 AM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi Feyzi,

Be sure you have not an "#" in the line of the hosts file ( all characters after "#" is a comment ).
It is not a bug of Vista.
I am trying to suggest the better way to configure the server name resolution. Its a general configuration for all network.
The access rule to DNS protocol is for your internal DNS servers.
All host in your LAN ask for the ip of a host to your internal DNS servers, then your internal DNS servers ( if they dont know it ) ask for ip of the host to the forwarders ( any public DNS servers, for example the DNS of your ISP ).To do that they need the access rule in Isa server.
In order to better understand your problem, tell me how is your DNS configuration in your LAN ? How XP pcs are doing its name resolution ?.

Hector

(in reply to feyzi)

Post #: 13

RE: "vista+outlook 2003" behind isa server 2004 - 12.Dec.2007 1:40:16 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Hector

There is no any "#" in front of the ip number and name of Pop3 server in the line.

Here is our current firewall configuration which works well for XP clients:

1 DNS Access Rule  Allow   (protocols)DNS-port 53 (from)Internal (to)Local Host
2 Limited Access Rule Allow   (protocols)FTP-HTTP-HTTPS-POP3-SMTP  (from)Internal (to)External
Last Default Rule Deny   (protocols)All Trafic (from)All Networks (to)All Networks

DNS has no isa firewall client installed on it. XP PCs have IP config as you can see below

i

Feyzi

(in reply to hrsanchez)

Post #: 14

RE: "vista+outlook 2003" behind isa server 2004 - 12.Dec.2007 1:45:29 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Hector

Sorry for the picture. Seems I could not paste it in the message.
It looks like this:

ip address : 192.168.0.110
subnet mask : 255.255.255.0
preferred DNS server : 192.168.0.106

Feyzi

(in reply to feyzi)

Post #: 15

RE: "vista+outlook 2003" behind isa server 2004 - 12.Dec.2007 1:34:48 PM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi Feyzi,

Ok , the configuration that I am telling you :

1 DNS Access Rule  Allow   (protocols)DNS-port 53 (from) Internal DNS servers   (to) External     ( dont forget configure Forwarders in your Internal DNS servers )
2 Limited Access Rule Allow   (protocols)FTP-HTTP-HTTPS-POP3-SMTP  (from)Internal (to)External
Last Default Rule Deny   (protocols)All Trafic (from)All Networks (to)All Networks

How is your TCP IP configuration in Isa server ?, DNS serves in your Isa, are Internal DNS servers or has external DNS servers ?, Are you define DNS servers in only one adapter ?, If yes, is it in External adapter or in the Internal adapter ?

Your Isa server should have only Dns servers in Internal adapter , and shoul be the internal DNS servers.

Which server is 192.168.0.106 , your internal DNS and  probably your DC ?
You have to configure on it forwarders ( Public DNS servers ).

Hector

(in reply to feyzi)

Post #: 16

RE: "vista+outlook 2003" behind isa server 2004 - 13.Dec.2007 1:17:02 AM

feyzi

Posts: 10
Joined: 12.Nov.2007
Status: offline

Hi Hector

192.168.0.106 is our internal DNS and DC. Internal adapter of ISA server is configured as a member of this internal domain. External adapter of ISA server is configured for DNS ip numbers assigned by our internet service provider.

So if i did not understand wrong, while I am configuring DNS access rule, it is enough to give the way from internal to local, am i wrong? This rule works for XP PCs. And it did not work for Vista PCs althuogh I have done the same TCP/IP configuration on them.

Feyzi

(in reply to hrsanchez)

Post #: 17

RE: "vista+outlook 2003" behind isa server 2004 - 13.Dec.2007 2:35:47 PM

hrsanchez

Posts: 77
Joined: 30.Nov.2007
From: Argentina
Status: offline

Hi Feyzi,

Ok, you have an incorrect configuration in your Isa. If your Isa server is member of your W2003 domain, it must have configurated your internal DNS ( and Domain controller ) in its Internal adapter , and must NOT have configurated DNS servers in its external adapter. Then Isa server must use DNS internal to resolve names.
Only one adapter of your Isa server must have configurated DNS servers in its tcp ip properties.
So, you have to configure the access rule to permit DNS protocol from DNS internal server ( DC ) to External network, and configure on it forwarders. All of the machines have to have DNS internal configurated on tcpip properties on its internal adapter.
You have to permit Dns protocol from Isa server to Internal too.

Hector

(in reply to feyzi)

Post #: 18