Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Connection with DC & Exchange 2007

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> Connection with DC & Exchange 2007 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Connection with DC & Exchange 2007 - 6.Sep.2008 3:04:19 PM   
create_share

 

Posts: 257
Joined: 4.May2005
Status: offline
I am getting the following errors and then my domain users cannot connect to ISA Server 2006 and Exchange Server 2007 published on isa. I can login to isa server using only local administrator account but not domain administrator account.

I have to restart my isa server to make it work with domain.

1.

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5783
Date:  9/6/2008
Time:  2:24:07 PM
User:  N/A
Computer: ISASERVER01
Description:
The session setup to the Windows NT or Windows 2000 Domain Controller \\isaserver01 the domain domain.com is not responsive.  The current RPC call from Netlogon on \\isaserver01 to \\isaserver01.domain.com has been cancelled.


2.

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date:  9/6/2008
Time:  1:47:50 PM
User:  N/A
Computer: isaserver01
Description:
This computer was not able to set up a secure session with a domain controller in domain DOMAIN due to the following:
There are currently no logon servers available to service the logon request. 
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. 
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.


3.

Event Type: Error
Event Source: Microsoft ISA Server Web Proxy
Event Category: None
Event ID: 14200
Date:  9/6/2008
Time:  1:46:17 PM
User:  N/A
Computer: EXCHANGESERVER01
Description:
ISA Server was unable to establish an SSL connection with 192.168.1.4. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

Thanks!
Post #: 1
RE: Connection with DC & Exchange 2007 - 8.Sep.2008 2:28:44 AM   
bati

 

Posts: 17
Joined: 13.Feb.2008
Status: offline
Found this and good luck:

We had a strange problem with our Windows 2003 SP2 servers not accepting network credentials or throwing RPC errors. These errors seemed to come out of nowhere. The only way to temporarily fix the problem was to login with a local account and reboot the servers. After the reboot everything was fine. The problem only affected about 10 to 15 of our servers and there seemed to be no commonality as to which ones were affected and which ones were not. But the problem was steadily getting worse.
I opened a call with Microsoft and they had two suggestions:
1 - Make sure that your NICs do not have any power settings that might be causing them to go to sleep. Check for a Power option in Device Manager and turn it off or change it to don’t go to sleep.
2 - 
Network related problems after installing Windows 2003 SP2.

Our servers didn't have power settings for the NICs. Microsoft told us to use these settings to eliminate the problem. So we are pushing out the following registry entries to all 200+ servers to fix the problem.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"EnableRSS"=dword:00000000
"EnableTCPA"=dword:00000000
"EnableTCPChimney"=dword:00000000
"DisableTaskOffload"=dword:00000001

So far it has been about a week and the problem has not reoccurred on any server that has been patched. We have over 100 servers patched so far.


There's an article from Microsoft - http://support.microsoft.com/kb/938449

(in reply to create_share)
Post #: 2
RE: Connection with DC & Exchange 2007 - 8.Sep.2008 8:16:07 AM   
tshinder

 

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline
Ah yes, the dreaded SP2 RSS bug.

Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bati)
Post #: 3
RE: Connection with DC & Exchange 2007 - 9.Sep.2008 7:52:46 PM   
create_share

 

Posts: 257
Joined: 4.May2005
Status: offline
I did RSS settings when i installed Windows 2003 SP2 and that was more than 1 year ago. I don't think this is because of RSS now. Should i disjoin and rejoin ISA Server to domain?

Thanks!

(in reply to tshinder)
Post #: 4
RE: Connection with DC & Exchange 2007 - 9.Sep.2008 10:12:04 PM   
bati

 

Posts: 17
Joined: 13.Feb.2008
Status: offline
Worth trying, back up the ISA config and stop ISA services, eg the Microsoft Firewall etc, let us know how you go.

(in reply to create_share)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> Connection with DC & Exchange 2007 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts