Welcome to ISAserver.org

Fail to install ISA?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Fail to install ISA?

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

Fail to install ISA? - 22.Jan.2006 11:54:22 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi All,

I installed ISA2k4 on hp DL360 server which is used before as Additional DC but the installation fail to install the additional components and then a message appeared state that the installation failed so any idea about this?

Thanks,

Post #: 1

Featured Links*

RE: Fail to install ISA? - 22.Jan.2006 2:06:11 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

is it Win 2003 with SP1 installed ?

this happened with me , later i formatted , installed Win2003 then ISA Then SP1

(in reply to iraq it)

Post #: 2

RE: Fail to install ISA? - 22.Jan.2006 2:19:25 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi,

Do you think this is the cause because i installed it on other Win. 2k3 server without a problem.

I have Win. 2k3 server SP1 with application such Veritas & SQL but why it fails thats the questions?

Thanks,

(in reply to elmajdal)

Post #: 3

RE: Fail to install ISA? - 22.Jan.2006 2:33:29 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

well , iam not certain if SP1 in the first place is the problem !!

but i suspect it 90 % , cuz i tried installing ISA 2004 on 2 servers with win 2003 SP1 and it keeps failing, i then tried on a Win2003 with no SP1 and it went with no problems.

thats why i suspect its an issue with SP1 of 2003. hope this is fixed with win 2003 SP2 if this is really a true issue about it.

(in reply to iraq it)

Post #: 4

RE: Fail to install ISA? - 22.Jan.2006 2:40:33 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Again,

So you suggest to re-install Win. 2k3 server then ISA2k4 then Win. 2k3 SP1 then ISA2k4 SP1

Do you have an idea or you ask about this issues?

Thanks,

(in reply to elmajdal)

Post #: 5

RE: Fail to install ISA? - 22.Jan.2006 2:50:20 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hey again,

check this :
http://forums.isaserver.org/Installed_Windows_2003_SP1_BEFORE_ISA_2004_SP1/m_2002002445/tm.htm

(in reply to iraq it)

Post #: 6

RE: Fail to install ISA? - 22.Jan.2006 3:01:45 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

quote:

ORIGINAL: elmajdal

hey again,

check this :
http://forums.isaserver.org/Installed_Windows_2003_SP1_BEFORE_ISA_2004_SP1/m_2002002445/tm.htm

Thanks elmajdal,

Is there a way to uninstall Win. 2k3 SP1 or i have to format the server?

Are you sure from ISA 2007 to be the next version?

Al

(in reply to elmajdal)

Post #: 7

RE: Fail to install ISA? - 22.Jan.2006 3:08:07 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hey Iraq IT,

u can remove sp1 from Add/Remove applet in control panel , but before doing that i prefer to take a ghost image of ur server just to be in the safe side if anything happened after removing the SP1 , and u need to go back.

about ISA 2006 or 2007 , its said that the beta will be available in march , and that it will be ready on July . so it might be called 2007.
for more info check this:
http://forums.isaserver.org/ISA_2004_SP2_and_Wolverine_(ISA_2006)/m_2002004260/tm.htm

regards.

(in reply to iraq it)

Post #: 8

RE: Fail to install ISA? - 22.Jan.2006 3:29:05 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi,

I will uninstall it as you said but i will not image the server because iam testing some configuration, i just want the server to work after uninstalling SP1.

I hope this is right.

quote:

Hi El,

Get used to it. I expect to see a new version about ever two years in the future

Tom

Thanks,

(in reply to elmajdal)

Post #: 9

RE: Fail to install ISA? - 22.Jan.2006 3:55:05 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

welcome.

tell me later what happen with u after the SP1 removal , try to install ISA and check if i was right.

Regards.

(in reply to iraq it)

Post #: 10

RE: Fail to install ISA? - 23.Jan.2006 11:24:03 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi,

After uninstalling SP1 and try to install ISA, many errors appeared in windows and the installation continue to fail so i have to format the server, what do you think?

Thanks,

(in reply to elmajdal)

Post #: 11

RE: Fail to install ISA? - 23.Jan.2006 12:35:24 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

yah , thats why i told u to take a ghost backup for ur server. cuz as i remember when i uninstalled SP1, errors for isa and for window itself started appearing.

i dont know why microsoft put the SP1 in the add/remove , and once we remove it , the server start poping up errors.

in mycase i ended to format yes.

ur server is for testing configuration, so no harm in formating.

Format > Win 2003 > ISA 2004 > then isa 2004 sp1> then win 2003 sp1

i wish in Win2003 SP2 this is fixed !!!

(in reply to iraq it)

Post #: 12

RE: Fail to install ISA? - 23.Jan.2006 4:07:23 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi,

Agree with all what you said.

Do you have article for installing DC on ISA2k4 server? I know its not recommended but i need it in one of my configuration.

Thanks,

(in reply to elmajdal)

Post #: 13

RE: Fail to install ISA? - 23.Jan.2006 4:34:14 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi again,
nope i dont have an article, but i started with ISA using this article :
http://www.isaserver.org/articles/isa2004beta2.html

another thing, when installing on DC, most of the System Policy rules , will not meet ur network .

in my case , i usually disable all system policy rules except 2 rules , the DNS rule ( # 7) and VPN rule ( rule # 12)

then , i create a rule and put it the first one , for communication between the isa and the LAN

like opening RDP protocol, DHCP reply and request, LDAP and so on ...

(in reply to iraq it)

Post #: 14

RE: Fail to install ISA? - 23.Jan.2006 5:24:04 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Thanks elmajdal,

I just read the article and iam going with DHCP & DNS at the ISA firewall.

But iam still confusing with my configuration with the main office, i already have DNS server (me.gov.iq) at the main office and i still dont know what to implement at the remote office, shall i put new domain (with trust) or Additional DC or ...? Do you have recommendation?

Al

(in reply to elmajdal)

Post #: 15

RE: Fail to install ISA? - 23.Jan.2006 5:53:16 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

From my network side, i always like to have each remote office its own DC and schedule the replication to take place after midnight with the HQ office.

i dont like domain trusts and go into the authentication issue to how to authenticate this group form that domain into this domain , global group or security group and stuff like that.

i like one simple domain with multiple ADC and replicate after working hours to preserve BW.

This is from my point of view, maybe ur network doesnt need multiple ADC and go on with Trust relations.
Regards.

(in reply to iraq it)

Post #: 16

RE: Fail to install ISA? - 23.Jan.2006 7:15:58 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

quote:

ORIGINAL: elmajdal

From my network side, i always like to have each remote office its own DC and schedule the replication to take place after midnight with the HQ office.

i dont like domain trusts and go into the authentication issue to how to authenticate this group form that domain into this domain , global group or security group and stuff like that.

i like one simple domain with multiple ADC and replicate after working hours to preserve BW.

This is from my point of view, maybe ur network doesnt need multiple ADC and go on with Trust relations.
Regards.

Hi,

I cant replicate after mid-night because my working hours are limited to 8 hours during the day but i dont care that much to replication because the users at the remote office and let say the AD objects will not change for long time and those users will be just to access the PC for SQL application and enter a data into the server.

I know this is long subject but i am with ADC but want to know the disadvantage of ADC.

When you say Trust, is that mean new child and new domain? i mean the options in the DC wizard except ADC?

Many thanks,

(in reply to elmajdal)

Post #: 17

RE: Fail to install ISA? - 23.Jan.2006 11:42:35 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

well, disadvantages of having an ADC !! its always better to have a backup of ur domain controller in case of it crashes or u had a system failer or even a hardware failure.

one of the Advantages of having ADC on remotes office, is that if ur WAN connection was broken , ur users in that office at least can still communicate with the ADC and can login to their computers.
imagine the situation if u have only one DC in ur HQ office, and the WAN connection was broken . then no user will be able to log in to his/her machine.

from the disadvantages , as i said , its preffered to have the replica after working hours.cuz sometimes it consume ur WAN BW. u can schedule it and leave it. u dont have to be there at the time of the replica.

Install a second Domain Controller :
http://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htm

Active Directory Site Replication Tips:
http://www.phptr.com/articles/article.asp?p=21472&rl=1

Change the schedule for replication between two domain controllers :
http://www.windowsitpro.com/Article/ArticleID/13397/13397.html1

for the last question about the domains trust, i was meaning 2 different domain and to establish a t rust between them.

Regards.

(in reply to iraq it)

Post #: 18

RE: Fail to install ISA? - 24.Jan.2006 1:52:38 PM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi,

quote:

well, disadvantages of having an ADC !! its always better to have a backup of ur domain controller in case of it crashes or u had a system failer or even a hardware failure.

But it always better even if i have 10 or 20 sites! Is it security risk to have many ADC?

quote:

one of the Advantages of having ADC on remotes office, is that if ur WAN connection was broken , ur users in that office at least can still communicate with the ADC and can login to their computers.

You know i want the ADC at the remote site be with the least privillages or AD objects and with DHCP.

quote:

for the last question about the domains trust, i was meaning 2 different domain and to establish a t rust between them.

Are (me.gov.iq) and (isa.me.gov.iq) considered as 2 different domain and need trust?

Thanks,

(in reply to elmajdal)

Post #: 19

RE: Fail to install ISA? - 24.Jan.2006 10:39:57 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

when i said : " well, disadvantages of having an ADC !! its " i ment in it : " is there any !! "

in this i mean that i dont think there is disadvantages of having an ADC, on the contrary its a plus in ur network.

now , when u said :
"remote site be with the least privillages or AD objects and with DHCP"

here i believe u dont even need an ADC or any trust relation.
ADC is a complete copy of ur original DC. if u dont want ur DC to be copied in ur remote sites , then just create another new domain , and establish a site-to-site vpn connection between the two lan.

u dont even need a trust relation between the two lans.

when i recommended ADC, i thought u need the exact domain and users to exist in both network .
it seems that the remote site doesnot require all that.

so imagine its a seperated network. create a new domain on it.create site-to-site vpn between the two lans.

(in reply to iraq it)

Post #: 20