[isalist] Re: ISA on active directory startup errors
- From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
- To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 21 Jun 2006 07:41:29 -0700
Read the email. It¹s all there.
On 6/21/06 7:20 AM, "Egyptian Mind" <innocent_angel_eng@xxxxxxxxxxx> spoketh
to all:
> http://www.ISAserver.org
> -------------------------------------------------------
> Paul,
>
> can u just provide me with the event ID # in the event log
>
>
>
>
> Best Regards
> Mohamed Saleh
>
> Senior Network Administrator
> College of Business Administration, CBA
> Jeddah, Saudi Arabia
> Tel: +966-02-6563199 ext 2521
> Cell: - +966-50-2953591
>
>
> !~` Yesterday is a History` ~!
> !~` Tomorrow is a Mystery` ~!
> !~` Today is a Gift` ~!
> !~` So we call it ...............` ~!
> !~` Present .......Simple` ~!
>
>
>>
>> From: Paul Noble <pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx>
>> Reply-To: isalist@xxxxxxxxxxxxx
>> To: "'isalist@xxxxxxxxxxxxx'" <isalist@xxxxxxxxxxxxx>
>> Subject: [isalist] Re: ISA on active directory startup errors
>> Date: Wed, 21 Jun 2006 10:33:39 +0100
>>> >http://www.ISAserver.org
>>> >-------------------------------------------------------
>>> >
>>> >Hi there,
>>> >
>>> >First off thanks for the replies.
>>> >
>>> >I tried following the post that Steve put up, however the servers already
>>> >got sp2 on it so the update to sp1 didn't work :)
>>> >I updated to the http issues for isa server as per the below mail, still no
>>> >joy.
>>> >
>>> >I removed isa2004
>>> >Reboot
>>> >Reinstalled 2003 sp1
>>> >Reboot (clean event log at this point)
>>> >Reinstalled isa2004 and immediately patched it to the sp1 install as per
>>> >steves mail and rebooted
>>> >Setup dns forwarder access rule
>>> >Reinstalled isa sp2 and MS Update to the latest patch (http issues for isa)
>>> >and rebooted
>>> >
>>> >Still the same set of error messages in the event logs.
>>> >
>>> >Short of taking a hammer to the OS and rebuilding from scratch does anyone
>>> >have any other ideas to try?
>>> >
>>> >
>>> >This install is the factory default dell sc1450 install, the system used to
>>> >be part of another active directory before I moved it to the current AD. It
>>> >didn't have any role in this other AD nor did it have ISA on it (or any
>>> >programs, it was literally joined into the domain, turned off for 3 weeks
>>> >then removed from the old AD and added to the new one).
>>> >
>>> >Any help is appreciated :)
>>> >
>>> >Paul
>>> >
>>> >-----Original Message-----
>>> >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
>>> >Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA
>>> >Sent: Tuesday, June 20, 2006 1:29 PM
>>> >To: isalist@xxxxxxxxxxxxx
>>> >Subject: [isalist] Re: ISA on active directory startup errors
>>> >
>>> >http://www.ISAserver.org
>>> >-------------------------------------------------------
>>> >
>>> >There is a post service pack 2 patch for ISA2004, search on Microsoft
>>> >for it. Service pack 2 have some HTTP compression issues and I don't
>>> >know if something else.
>>> >
>>> >Regards
>>> >Diego R. Pietruszka
>>> >
>>> >-----Original Message-----
>>> >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> >On Behalf Of Paul Noble
>>> >Sent: Tuesday, June 20, 2006 8:04 AM
>>> >To: 'isalist@xxxxxxxxxxxxx'
>>> >Subject: [isalist] Re: ISA on active directory startup errors
>>> >
>>> >http://www.ISAserver.org
>>> >-------------------------------------------------------
>>> >
>>> >I installed 2003 sp1, then joined to the domain, I then installed
>>> >ISA2004
>>> >and installed sp2. I havent patched it beyond that
>>> >
>>> >-----Original Message-----
>>> >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> >On
>>> >Behalf Of Steve Moffat
>>> >Sent: Tuesday, June 20, 2006 12:56 PM
>>> >To: ISA Mailing List
>>> >Subject: [isalist] Re: ISA on active directory startup errors
>>> >
>>> >http://www.ISAserver.org
>>> >-------------------------------------------------------
>>> >
>>> >Is your ISA fully patched and service packed? Did you join the server to
>>> >the domain before you installed ISA?
>>> >
>>> >Steve
>>> >
>>> >-----Original Message-----
>>> >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> >On Behalf Of Paul Noble
>>> >Sent: Tuesday, June 20, 2006 6:36 AM
>>> >To: ISA Mailing List
>>> >Subject: [isalist] ISA on active directory startup errors
>>> >
>>> >http://www.ISAserver.org
>>> >-------------------------------------------------------
>>> >
>>> > Hi there,
>>> >
>>> >Im currently in the process of bringing an Active Directory Server 2003
>>> >environment online (my first) to replace our existing windows NT network
>>> >(to which our ISA2004 server is currently attached and working fine,
>>> >last ISA install I did was 2 years ago).
>>> >
>>> >At the moment I've got 1 Domain Controller running AD, DNS and WINS, to
>>> >that I have a Server 2003 (sp1) ISA2004 (sp2) as a member of the domain
>>> >(not a controller).
>>> >
>>> >I have a caching only DNS server installed on the ISA server system
>>> >using our isp dns servers as forwarders and internal dns points to the
>>> >dc. DC dns uses isa system as a forwarder.
>>> >
>>> >Before I installed the ISA software on the server the server would log
>>> >on fine with no error messages appearing in the system and application
>>> >logs.
>>> >
>>> >After installing ISA2004 I get a set of error messages in the
>>> >Application log and the System log, which (upon chasing thru kb
>>> >articles) look to be dns or rpc communication failure.
>>> >
>>> >System events:
>>> >5783 The session setup to the Windows NT or Windows 2000 Domain
>>> >Controller \\DC1-Reflections.reflections.loc for the domain REFLECTIONS
>>> >is not responsive. The current RPC call from Netlogon on
>>> >\\ISA-REFLECTIONS to \\DC1-Reflections.reflections.loc has been
>>> >cancelled
>>> >
>>> >5719 This computer was not able to set up a secure session with a domain
>>> >controller in domain REFLECTIONS due to the following:
>>> >The remote procedure call was cancelled.
>>> >This may lead to authentication problems. Make sure that this computer
>>> >is connected to the network. If the problem persists, please contact
>>> >your domain administrator.
>>> >
>>> >7 The kerberos subsystem encountered a PAC verification failure. This
>>> >indicates that the PAC from the client ISA-REFLECTIONS$ in realm
>>> >REFLECTIONS.LOC had a PAC which failed to verify or was modified.
>>> >Contact your system administrator.
>>> >
>>> >Application events:
>>> >
>>> >1097 Windows cannot find the machine account, No authority could be
>>> >contacted for authentication. .
>>> >
>>> >1030. Windows cannot query for the list of Group Policy objects. Check
>>> >the event log for possible messages previously logged by the policy
>>> >engine that describes the reason for this.
>>> >
>>> >
>>> >Despite the presence of these errors when rebooted, the system does seem
>>> >to have joined the domain fine, creating new rules and user groups I can
>>> >browse the directory ok. The errors don't appear when I just log off and
>>> >on again, it only seems to occur on boot up, no errors on the DC end
>>> >either (that I can see anyway, probably looking in the wrong place!).
>>> >
>>> >I've compared the ISA server to the NT based ISA and I cant see any
>>> >differences with the system policies, but being new to AD im not sure if
>>> >they should be different or not.
>>> >
>>> >With this being my first Active Directory enviroment beyond one isolated
>>> >server and it being 2 years since I installed ISA2004 last, I'm not sure
>>> >I'm looking at this the right way at the moment, so any pointers or
>>> >hints people can throw my way so I can figure it out I'd be most
>>> >grateful.
>>> >
>>> >At the moment I'm thinking that the systems trying to log on to the
>>> >domain before the ISA server has finished starting up, so its kicking
>>> >the initial domain requests, hence relogging on doesn't generate the
>>> >events. /me stabs dark repeatedly.
>>> >
>>> >
>>> >Any pointers and tips are more than welcome, any more information
>>> >required and I'll try and get it to help clear this up.
>>> >
>>> >Paul
>>> >------------------------------------------------------
>>> >List Archives: //www.freelists.org/archives/isalist/
>>> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> >ISA Server Articles and Tutorials:
>>> >http://www.isaserver.org/articles_tutorials/
>>> >ISA Server Blogs: http://blogs.isaserver.org/
>>> >------------------------------------------------------
>>> >Visit TechGenix.com for more information about our other sites:
>>> >http://www.techgenix.com
>>> >------------------------------------------------------
>>> >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> >Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >------------------------------------------------------
>>> >List Archives: //www.freelists.org/archives/isalist/
>>> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> >ISA Server Articles and Tutorials:
>>> >http://www.isaserver.org/articles_tutorials/
>>> >ISA Server Blogs: http://blogs.isaserver.org/
>>> >------------------------------------------------------
>>> >Visit TechGenix.com for more information about our other sites:
>>> >http://www.techgenix.com
>>> >------------------------------------------------------
>>> >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> >Report abuse to listadmin@xxxxxxxxxxxxx
>>> >------------------------------------------------------
>>> >List Archives: //www.freelists.org/archives/isalist/
>>> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> >ISA Server Articles and Tutorials:
>>> >http://www.isaserver.org/articles_tutorials/
>>> >ISA Server Blogs: http://blogs.isaserver.org/
>>> >------------------------------------------------------
>>> >Visit TechGenix.com for more information about our other sites:
>>> >http://www.techgenix.com
>>> >------------------------------------------------------
>>> >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> >Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >------------------------------------------------------
>>> >List Archives: //www.freelists.org/archives/isalist/
>>> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> >ISA Server Articles and Tutorials:
>>> >http://www.isaserver.org/articles_tutorials/
>>> >ISA Server Blogs: http://blogs.isaserver.org/
>>> >------------------------------------------------------
>>> >Visit TechGenix.com for more information about our other sites:
>>> >http://www.techgenix.com
>>> >------------------------------------------------------
>>> >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> >Report abuse to listadmin@xxxxxxxxxxxxx
>>> >------------------------------------------------------
>>> >List Archives: //www.freelists.org/archives/isalist/
>>> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> >ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> >ISA Server Blogs: http://blogs.isaserver.org/
>>> >------------------------------------------------------
>>> >Visit TechGenix.com for more information about our other sites:
>>> >http://www.techgenix.com
>>> >------------------------------------------------------
>>> >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> >Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>> ------------------------------------------------------ List Archives:
>> //www.freelists.org/archives/isalist/ ISA Server Newsletter:
>> http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and
>> Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs:
>> http://blogs.isaserver.org/
>> ------------------------------------------------------ Visit TechGenix.com
>> for more information about our other sites: http://www.techgenix.com
>> ------------------------------------------------------ To unsubscribe visit
>> http://www.isaserver.org/pages/isalist.asp Report abuse to
>> listadmin@xxxxxxxxxxxxx
Other related posts:
