Welcome to ISAserver.org

RE: Discussion of 2003 SP1 Final Release w/ISA2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> RE: Discussion of 2003 SP1 Final Release w/ISA2004

Page: << < prev 2 3 [4] 5 6 next > >>

Message

<< Older Topic Newer Topic >>

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 14.Apr.2005 10:19:00 PM

remdotc

Posts: 42
Joined: 18.Feb.2005
From: Detroit, USA
Status: offline

W2K3 SP1 works with ISA04 SP1. However, you need to do the following (least this worked for me)

Uninstall ISA Server
Reboot
Install Windows 2003 SP1
(Forced Reboot)
Install ISA 2004
Reboot
Install ISA 2004 SP1
(Forced Reboot)

I found if you use Alternate Network settings, you will need to edit your registery to reanble this to work

(in reply to WyldWolf)

Post #: 61

Featured Links*

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 6:00:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

I've replicated this on five machines so far:

Install ISA 2004 SP1
reboot
Install Windows 2003 SP1
reboot
log on and reboot again
Start the ISA firewall console and Event Viewer

Everything works, no RPC issues, no intradomain communciations issues, no DCOM issues, no problems at all.

HTH,
Tom

(in reply to WyldWolf)

Post #: 62

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 6:04:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Oh, I still need to check the VPN situation for these devices, will let you know.

Thanks!
Tom

(in reply to WyldWolf)

Post #: 63

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 10:13:00 AM

hopiconjo

Posts: 5
Joined: 28.Jan.2005
From: Amsterdam
Status: offline

I have the same problem WW describes. I had to perform a rollback of SP1 and now it's working again. The upgrade procedure I did was:

W2K3>ISA2004>SP1 ISA2004>SP1 W2K3>SP1 ISA2004.

When there is a good solution I'll try to apply this again otherwise I'll be "skinned"

Greggy

(in reply to WyldWolf)

Post #: 64

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 11:27:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

Did you *also* install Windows 2003 SP1 on your DC? I didn't do that, I just risked the ISA firewall, not the DC yet.

HTH,
Tom

(in reply to WyldWolf)

Post #: 65

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 1:46:00 PM

hopiconjo

Posts: 5
Joined: 28.Jan.2005
From: Amsterdam
Status: offline

Tom,

Did not think of that but our DC is a W2K. I dont't know if this problem is related in combination of ISA 2004 on an W2K3. This weekend I'll try the SP on a W2K3 fileserver and will look of this will have the same problems

(in reply to WyldWolf)

Post #: 66

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 15.Apr.2005 2:25:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Greggy,

Thanks! So to recap my configs:

All DCs are Win2003
NONE of the DCs have Win2003 SP1
ISA SP1 installed *before* Win2003 SP1.

HTH,
Tom

(in reply to WyldWolf)

Post #: 67

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 16.Apr.2005 7:28:00 PM

Guest

This is not an issue with SP1 on the domain controller. I have tested this about ten times. The only way I have been able to reproduce the problems you are having is by running the Security Configuration Tool on ISA server 2004 with ISA SP1 and windows 2003 with SP1.(Seperate Domain controller also running 2003 and SP1) and using it to disable what the tool suggests are un-needed services. I restart and then I get the exact same errors you are talking about. I then go into the Security Configuration Tool and roll-back the configuration and the errors are gone. (We are just talking about the services here now and the Security Configuration Tool's firewall port configuration because it won't even let you configure that part of the tool if ISA is installed.) Check the services you disabled if you ran the Security Configuration Tool and then use the tool to roll back the changes and see if the errors go away.

(in reply to WyldWolf)

Post #: 68

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 17.Apr.2005 3:24:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Joe,

Good points regardling the Security Configuration Tool. I have *not* run that on any of the ISA firewalls that I've upgraded. Wonder if that is an issue?

Thanks!
Tom

(in reply to WyldWolf)

Post #: 69

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 18.Apr.2005 8:57:00 PM

shonky2112

Posts: 1
Joined: 18.Apr.2005
From: Sacramento
Status: offline

Just to add to the data, I am also having the exact same symptom that WW described way back when with System EventID 7, 5719 and 5783 after applying 2003 server SP1 to a box running ISA 2004.

To add data to a post both in this thread and another in the general forum, I too cannot establish my VPN connection that was working fine before applying SP1.

After reading all the posts on this thread, it seems uninstalling SP1 is the only workaround for the time being until a solution is found. I will be doing that tonight and watching this thread to see if there's any solution to the original problem that WW identified.

Thanks already for all the posts [Smile]

(in reply to WyldWolf)

Post #: 70

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 19.Apr.2005 7:58:00 PM

Guest

I've just been on the phone with Microsoft Support for about 4-5 hours on a similar issue. I installed ISA Server 2004 SP1 and then installed Windows 2003 Server SP1 and my VPN wouldn't work any more. When I tried to connect, I got an error 691 authentication failure using the exact same configuration and settings that worked before SP1.

The diagnosis from Microsoft is that there is a file called IPNAT.Sys that is not being correctly installed and they're working on a fix, but its not available yet.

By the way, Windows Server SP1 has broken a number of other things on my network including:

- SQL Server
- Exchange Server
- Sharepoint Server

All of the above require the latest service packs in order to work with Windows 2003 SP1. If you attempt to install Windows 2003 SP1 before you install the latest service packs to all your major applications you could be in deep du-du like I was. I've spent most of the last week working on these issues.

Chuck

(in reply to WyldWolf)

Post #: 71

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 20.Apr.2005 4:26:00 PM

Guest

Just following up and my previous post. Was it the Security Configuration tool causing the issues some of you were having? I am asking because I have installed SP1 on windows 2003 with ISA 2004 SP1 on one Production server and about twenty times now in a test environment.
With no problems at all except after using the seuctiy tool. But next week I will be rolling SP1 out to about eight production ISA 2004 servers with SP1 for a client. For the people that were haing trouble with SP1, like WW, was it the Security Configuration tool causing the issues, or was it just the SP1 update itself that caused the problems. The production ISA server that I updated was my own server for my company and I am hoping my client's install goes as well as mine. So just hoping to see if that was the issue or not. Thanks. Joe

(in reply to WyldWolf)

Post #: 72

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 20.Apr.2005 4:47:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by <Joe>:
Just following up and my previous post. Was it the Security Configuration tool causing the issues some of you were having? I am asking because I have installed SP1 on windows 2003 with ISA 2004 SP1 on one Production server and about twenty times now in a test environment.
With no problems at all except after using the seuctiy tool. But next week I will be rolling SP1 out to about eight production ISA 2004 servers with SP1 for a client. For the people that were haing trouble with SP1, like WW, was it the Security Configuration tool causing the issues, or was it just the SP1 update itself that caused the problems. The production ISA server that I updated was my own server for my company and I am hoping my client's install goes as well as mine. So just hoping to see if that was the issue or not. Thanks. Joe

Hi Joe,

On the ISA firewalls that I've installed Windows 2003 SP1 on, I have not run the security config tool on any of them, and I've had no problems at all. I'll see if I can break things by running it.

HTH,
Tom

(in reply to WyldWolf)

Post #: 73

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 20.Apr.2005 5:08:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by <Chuck Cobb>:
I've just been on the phone with Microsoft Support for about 4-5 hours on a similar issue. I installed ISA Server 2004 SP1 and then installed Windows 2003 Server SP1 and my VPN wouldn't work any more. When I tried to connect, I got an error 691 authentication failure using the exact same configuration and settings that worked before SP1.

The diagnosis from Microsoft is that there is a file called IPNAT.Sys that is not being correctly installed and they're working on a fix, but its not available yet.

By the way, Windows Server SP1 has broken a number of other things on my network including:

- SQL Server
- Exchange Server
- Sharepoint Server

All of the above require the latest service packs in order to work with Windows 2003 SP1. If you attempt to install Windows 2003 SP1 before you install the latest service packs to all your major applications you could be in deep du-du like I was. I've spent most of the last week working on these issues.

Chuck

Hi Chuck,

I'm not seeing the same problem with the ipnat.sys or any other VPN related issues. Any other clues that might have lead up to this problem?

Thanks!
Tom

(in reply to WyldWolf)

Post #: 74

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 20.Apr.2005 6:10:00 PM

ChadAntonio

Posts: 13
Joined: 9.Aug.2003
From: Philippines
Status: offline

guys...

have some question... (as usual)

i have an existing isa 2004 standard edition with sp1 on it running on win2k3 without sp1 on it but as expected we will install win2k3 sp1 on it... anyway, do we have to install the isa 2004 sp1 in a enterprise edition? i just notice that the sp1 of isa 2004 was released before the isa 2004 enterprise edition?

tell me what do you think?

(in reply to WyldWolf)

Post #: 75

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 22.Apr.2005 8:54:00 PM

Andy2Long

Posts: 16
Joined: 7.Oct.2003
From: Torrance, CA
Status: offline

I have been evaluating the April patches and found that Windows 2003 SP1 includes the MS05-019 patch (this part is a bit confusing as MS05-019 states that it is included in SP1, but SP1 notes do not reference MS05-019). Problems have been reported for MS05-019 and are summarized in the following:

There will be an update to the patch in MS05-019, and a Microsoft KB 898060 article is being written. Microsoft PSS reports the they have confirmed that there is a problem with ICMP messages being incorrectly discarded, which is causing: Exchange 2003 connectivity issues over VPN, Terminal Services (Remote Desktop) connectivity issues over VPN, Active Directory replication failures, and other problems related to slow network performance.

I suspect that this may be the cause for some of the issues that have been reported in this thread.

Andy

(in reply to WyldWolf)

Post #: 76

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 22.Apr.2005 9:27:00 PM

dforsman

Posts: 80
Joined: 14.Dec.2002
From: Vancouver, Canada
Status: offline

Site-to-site routing issue

Hello Dennis,

It is possible that MS05-19 is causing it, so far we still do not have official hot fix for it, we do have private builds that we are extensively testing before public release.

File affected is ipnat.sys, final release of the hotfix should be ready within 10 days.

Regards,

[name]
Technical Lead - Enterprise Platforms Support
Windows NT/2000/2003/ISA Server - Networking Specialty

(in reply to WyldWolf)

Post #: 77

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 27.Apr.2005 1:53:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by Nexus:
guys...

have some question... (as usual)

i have an existing isa 2004 standard edition with sp1 on it running on win2k3 without sp1 on it but as expected we will install win2k3 sp1 on it... anyway, do we have to install the isa 2004 sp1 in a enterprise edition? i just notice that the sp1 of isa 2004 was released before the isa 2004 enterprise edition?

tell me what do you think?

Hi Nexus,

No, ISA 2004 SP1 is only for SE. EE was actually designed with Win2003 SP1 in mind.

HTH,
Tom

(in reply to WyldWolf)

Post #: 78

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 27.Apr.2005 1:56:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by interflex:
Site-to-site routing issue

Hello Dennis,

It is possible that MS05-19 is causing it, so far we still do not have official hot fix for it, we do have private builds that we are extensively testing before public release.

File affected is ipnat.sys, final release of the hotfix should be ready within 10 days.

Regards,

[name]
Technical Lead - Enterprise Platforms Support
Windows NT/2000/2003/ISA Server - Networking Specialty

Check the NEWS section on the front page of this site for the hotfix.

HTH,
Tom

(in reply to WyldWolf)

Post #: 79

RE: Discussion of 2003 SP1 Final Release w/ISA2004 - 27.Apr.2005 5:24:00 PM

Guest

Any resolution for the issues at the beginnig of this post. I installed windows 2003 SP1 on the eigth productions for my clients running ISA server 2004 and ISA SP1 with no problems at all. Just wondering if it was the Security Wizard causing the issue and if not have you resolved the issue. I assume the posts above about the hotfix didn't address all of the issues people were listing here. Thanks. Joe

(in reply to WyldWolf)

Post #: 80