Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

[EE] SP2 on Array Members in a Workgroup (CSS Authentication Information)

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Installation >> [EE] SP2 on Array Members in a Workgroup (CSS Authentication Information) Page: [1]
Login
Message << Older Topic   Newer Topic >>
[EE] SP2 on Array Members in a Workgroup (CSS Authentic... - 3.Feb.2006 7:22:07 PM   
Counter-Strike

 

Posts: 13
Joined: 20.Jun.2003
Status: offline 		Hello!

Today I tried installing the new SP2 for Microsoft ISA Server 2004 Enterprise Edition.

I've setup a back-to-back configuration. My Configuration Storage Server is located in the domain, and so is the second ISA Server. Both systems were succesfully updated to SP2.

The first ISA Server is located in a workgroup environment and has a root certificate installed. I created a mirrored account on this machine and afterwards added this acount as a mirrored account to the array the first ISA Server resides. When I open up the ISA Server Management I specify a domain account for the Configuration Storage Server and the mirrored account for array level administration. This all works fine.

Now, when I try to install SP2 on the first firewall it pops up an error telling me the following:

quote:

Setup failed while registering new events and alerts. Refer to the KB article of this update for support.


The setup logfile contains:
quote:


MSI (s) (20:F8) [17:39:38:112]: Executing op: ActionStart(Name=RegisterAlertsAndEvents,,)
Action 17:39:38: RegisterAlertsAndEvents.
MSI (s) (20:F8) [17:39:38:122]: Executing op: CustomActionSchedule(Action=RegisterAlertsAndEvents,ActionType=25601,Source=BinaryData,Target=**********,CustomActionData=**********)
MSI (s) (20:F8) [17:39:38:172]: Creating MSIHANDLE (3117) of type 790536 for thread 3320
MSI (s) (20:F4) [17:39:38:172]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI122.tmp, Entrypoint: RegisterAlertsAndEvents
MSI (s) (20!EC) [17:39:38:422]: Creating MSIHANDLE (3118) of type 790531 for thread 3820
17:39:38 ISA setup CA INFO   : ENTRY: RegisterAlertsAndEvents, Current user is BMW\Administrator
MSI (s) (20!EC) [17:39:38:422]: Closing MSIHANDLE (3118) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:39:444]: Creating MSIHANDLE (3119) of type 790531 for thread 3820
17:39:39 ISA setup CA ERROR  : CRegisterEvents::GetEventDefinitions: GetContainingArray failed, hr=0xc00403a6
MSI (s) (20!EC) [17:39:39:444]: Closing MSIHANDLE (3119) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:39:474]: Creating MSIHANDLE (3120) of type 790531 for thread 3820
17:39:39 ISA setup CA ERROR  : CRegisterEvents::RegisterEvents: GetEventDefinitions failed, hr=0xc00403a6
MSI (s) (20!EC) [17:39:39:484]: Closing MSIHANDLE (3120) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:39:484]: Creating MSIHANDLE (3121) of type 790531 for thread 3820
17:39:39 ISA setup CA ERROR  : RegisterAlertsAndEvents: RegisterEvents() failed, hr=0xc00403a6
MSI (s) (20!EC) [17:39:39:504]: Closing MSIHANDLE (3121) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:40:155]: Creating MSIHANDLE (3122) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:40:165]: Closing MSIHANDLE (3122) of type 790531 for thread 3820
MSI (s) (20!EC) [17:39:40:165]: Creating MSIHANDLE (3123) of type 790531 for thread 3820
MSI (c) (5C:68) [17:39:40:185]: Transforming table Binary.
MSI (c) (5C:68) [17:39:40:185]: Transforming table Binary.
MSI (c) (5C:68) [17:39:40:185]: Note: 1: 2262 2: Binary 3: -2147287038
MSI (c) (5C:68) [17:39:40:195]: Transforming table Binary.
MSI (c) (5C:68) [17:39:40:195]: Transforming table Binary.
MSI (c) (5C:68) [17:39:40:195]: Note: 1: 2262 2: Binary 3: -2147287038  


BMW is the name of the first ISA Server. The 0xc00403a6 is documented on MSDN:

quote:






E_FPC_NOT_CONNECTED_TO_ENTERPRISE
FPC_ERR(0x3A6)
0xC00403A6
The property or method <Name> is not supported when the ISA Server computer is not connected to a Configuration Storage server.


In the firewall logs I do see packets traveling from the first ISA Server to my Configuration Storage Server. Looking at the audits on the last machine it shows me the following:

quote:


Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Administrator
Source Workstation: BMW
Error Code: 0x0


Ai, SP2 setup uses the wrong credentials for logging on to the Configuration Storage Server. As the setup itself doesn't give me the opportunity to specify this credentials I read through the setup log and found the following usefull information:

quote:


ISA setup CA INFO   : VerifyPropertyLength: Property STORAGESERVER_CONNECT_ACCOUNT length < 300
ISA setup CA INFO   : VerifyPropertyLength: Property STORAGESERVER_CONNECT_PWD length < 300


But when I use these properties with an domain user account able to connect to the CSS in the following manner:

quote:

isa2004sp2.msp STORAGESERVER_CONNECT_ACCOUNT=DOMAIN\Administrator STORAGESERVER_CONNECT_PWD=password


the setup still authenticates to the CSS with BMW\Administrator :( and thus the setup fails with the reported error above.

I hope someone can help me out.


Thanks!

< Message edited by Counter-Strike -- 3.Feb.2006 7:24:36 PM >
Post #: 1
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 3.Feb.2006 8:04:08 PM   
ClintD

 

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline 		Shouldn't this be the mirrored account?
STORAGESERVER_CONNECT_ACCOUNT=DOMAIN\Administrator

Also, can you clarify if the command you entered above was right? It looks like you specified the domain 'Administrator' account in the command, yet you say 'the setup still authenticates to the CSS with BMW\Administrator :( and thus the setup fails with the reported error above'




< Message edited by ClintD -- 3.Feb.2006 8:08:13 PM >

(in reply to Counter-Strike)
Post #: 2
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 3.Feb.2006 8:48:38 PM   
Counter-Strike

 

Posts: 13
Joined: 20.Jun.2003
Status: offline 		Hello, no it should not be the mirrored account. (At least, i think so) See "Assigning Roles" on this website: http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/workgroup_ee.mspx

What I mean with the last sentence of my post is that the first ISA Server still sends the credentials of the logged on user (BMW\Administrator) who runs the SP2 installation instead of the specified domain user DOMAIN\Administrator specified in the STORAGESERVER_CONNECT_ACCOUNT property to the Configuration Storage Server

Many thanks for your reply

(in reply to ClintD)
Post #: 3
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 6.Feb.2006 2:09:12 PM   
leni

 

Posts: 1
Joined: 6.Feb.2006
Status: offline 		hello,
This is my fisrt time is that forum.i hope i've done it correctly.
i am new in isa server and i would like to ask about creating a certificate in a workgroup.How can i do this?
thanks in advance.

(in reply to Counter-Strike)
Post #: 4
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 14.Feb.2006 8:40:16 AM   
zimme

 

Posts: 1
Joined: 14.Feb.2006
Status: offline 		Hi,

You should use the same administrator account as used during install of ISA.
Does your administrator account have a password? (both the one you used during install and the standard Administrator if it are not the same accounts)


(in reply to Counter-Strike)
Post #: 5
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 6.Mar.2006 10:16:28 AM   
VladL

 

Posts: 3
Joined: 6.Mar.2006
Status: offline 		I have the same problem. While the solution has not found. On web-server Microsoft still the solution of a problem is not published.

(in reply to Counter-Strike)
Post #: 6
RE: [EE] SP2 on Array Members in a Workgroup (CSS Authe... - 26.Jul.2006 1:03:19 PM   
VladL

 

Posts: 3
Joined: 6.Mar.2006
Status: offline 		Rah! Solution this problem: http://support.microsoft.com/kb/915419/en-us

(in reply to VladL)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Installation >> [EE] SP2 on Array Members in a Workgroup (CSS Authentication Information) Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts