They are located in his original message. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Egyptian Mind Sent: Wednesday, June 21, 2006 9:21 AM To: isalist@xxxxxxxxxxxxx Cc: pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx Subject: [isalist] Re: ISA on active directory startup errors http://www.ISAserver.org ------------------------------------------------------- Paul, can u just provide me with the event ID # in the event log Best Regards Mohamed Saleh Senior Network Administrator College of Business Administration, CBA Jeddah, Saudi Arabia Tel: +966-02-6563199 ext 2521 Cell: - +966-50-2953591 !~` Yesterday is a History` ~! !~` Tomorrow is a Mystery` ~! !~` Today is a Gift` ~! !~` So we call it ...............` ~! !~` Present .......Simple` ~! ________________________________ From: Paul Noble <pnoble@xxxxxxxxxxxxxxxxxxxxxxxxxx> Reply-To: isalist@xxxxxxxxxxxxx To: "'isalist@xxxxxxxxxxxxx'" <isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: ISA on active directory startup errors Date: Wed, 21 Jun 2006 10:33:39 +0100 >http://www.ISAserver.org >------------------------------------------------------- > >Hi there, > >First off thanks for the replies. > >I tried following the post that Steve put up, however the servers already >got sp2 on it so the update to sp1 didn't work :) >I updated to the http issues for isa server as per the below mail, still no >joy. > >I removed isa2004 >Reboot >Reinstalled 2003 sp1 >Reboot (clean event log at this point) >Reinstalled isa2004 and immediately patched it to the sp1 install as per >steves mail and rebooted >Setup dns forwarder access rule >Reinstalled isa sp2 and MS Update to the latest patch (http issues for isa) >and rebooted > >Still the same set of error messages in the event logs. > >Short of taking a hammer to the OS and rebuilding from scratch does anyone >have any other ideas to try? > > >This install is the factory default dell sc1450 install, the system used to >be part of another active directory before I moved it to the current AD. It >didn't have any role in this other AD nor did it have ISA on it (or any >programs, it was literally joined into the domain, turned off for 3 weeks >then removed from the old AD and added to the new one). > >Any help is appreciated :) > >Paul > >-----Original Message----- >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On >Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA >Sent: Tuesday, June 20, 2006 1:29 PM >To: isalist@xxxxxxxxxxxxx >Subject: [isalist] Re: ISA on active directory startup errors > >http://www.ISAserver.org >------------------------------------------------------- > >There is a post service pack 2 patch for ISA2004, search on Microsoft >for it. Service pack 2 have some HTTP compression issues and I don't >know if something else. > >Regards >Diego R. Pietruszka > >-----Original Message----- >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] >On Behalf Of Paul Noble >Sent: Tuesday, June 20, 2006 8:04 AM >To: 'isalist@xxxxxxxxxxxxx' >Subject: [isalist] Re: ISA on active directory startup errors > >http://www.ISAserver.org >------------------------------------------------------- > >I installed 2003 sp1, then joined to the domain, I then installed >ISA2004 >and installed sp2. I havent patched it beyond that > >-----Original Message----- >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] >On >Behalf Of Steve Moffat >Sent: Tuesday, June 20, 2006 12:56 PM >To: ISA Mailing List >Subject: [isalist] Re: ISA on active directory startup errors > >http://www.ISAserver.org >------------------------------------------------------- > >Is your ISA fully patched and service packed? Did you join the server to >the domain before you installed ISA? > >Steve > >-----Original Message----- >From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] >On Behalf Of Paul Noble >Sent: Tuesday, June 20, 2006 6:36 AM >To: ISA Mailing List >Subject: [isalist] ISA on active directory startup errors > >http://www.ISAserver.org >------------------------------------------------------- > > Hi there, > >Im currently in the process of bringing an Active Directory Server 2003 >environment online (my first) to replace our existing windows NT network >(to which our ISA2004 server is currently attached and working fine, >last ISA install I did was 2 years ago). > >At the moment I've got 1 Domain Controller running AD, DNS and WINS, to >that I have a Server 2003 (sp1) ISA2004 (sp2) as a member of the domain >(not a controller). > >I have a caching only DNS server installed on the ISA server system >using our isp dns servers as forwarders and internal dns points to the >dc. DC dns uses isa system as a forwarder. > >Before I installed the ISA software on the server the server would log >on fine with no error messages appearing in the system and application >logs. > >After installing ISA2004 I get a set of error messages in the >Application log and the System log, which (upon chasing thru kb >articles) look to be dns or rpc communication failure. > >System events: >5783 The session setup to the Windows NT or Windows 2000 Domain >Controller \\DC1-Reflections.reflections.loc for the domain REFLECTIONS >is not responsive. The current RPC call from Netlogon on >\\ISA-REFLECTIONS to \\DC1-Reflections.reflections.loc has been >cancelled > >5719 This computer was not able to set up a secure session with a domain >controller in domain REFLECTIONS due to the following: >The remote procedure call was cancelled. >This may lead to authentication problems. Make sure that this computer >is connected to the network. If the problem persists, please contact >your domain administrator. > >7 The kerberos subsystem encountered a PAC verification failure. This >indicates that the PAC from the client ISA-REFLECTIONS$ in realm >REFLECTIONS.LOC had a PAC which failed to verify or was modified. >Contact your system administrator. > >Application events: > >1097 Windows cannot find the machine account, No authority could be >contacted for authentication. . > >1030. Windows cannot query for the list of Group Policy objects. Check >the event log for possible messages previously logged by the policy >engine that describes the reason for this. > > >Despite the presence of these errors when rebooted, the system does seem >to have joined the domain fine, creating new rules and user groups I can >browse the directory ok. The errors don't appear when I just log off and >on again, it only seems to occur on boot up, no errors on the DC end >either (that I can see anyway, probably looking in the wrong place!). > >I've compared the ISA server to the NT based ISA and I cant see any >differences with the system policies, but being new to AD im not sure if >they should be different or not. > >With this being my first Active Directory enviroment beyond one isolated >server and it being 2 years since I installed ISA2004 last, I'm not sure >I'm looking at this the right way at the moment, so any pointers or >hints people can throw my way so I can figure it out I'd be most >grateful. > >At the moment I'm thinking that the systems trying to log on to the >domain before the ISA server has finished starting up, so its kicking >the initial domain requests, hence relogging on doesn't generate the >events. /me stabs dark repeatedly. > > >Any pointers and tips are more than welcome, any more information >required and I'll try and get it to help clear this up. > >Paul >------------------------------------------------------ >List Archives: //www.freelists.org/archives/isalist/ >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server Articles and Tutorials: >http://www.isaserver.org/articles_tutorials/ >ISA Server Blogs: http://blogs.isaserver.org/ >------------------------------------------------------ >Visit TechGenix.com for more information about our other sites: >http://www.techgenix.com >------------------------------------------------------ >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp >Report abuse to listadmin@xxxxxxxxxxxxx > >------------------------------------------------------ >List Archives: //www.freelists.org/archives/isalist/ >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server Articles and Tutorials: >http://www.isaserver.org/articles_tutorials/ >ISA Server Blogs: http://blogs.isaserver.org/ >------------------------------------------------------ >Visit TechGenix.com for more information about our other sites: >http://www.techgenix.com >------------------------------------------------------ >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp >Report abuse to listadmin@xxxxxxxxxxxxx >------------------------------------------------------ >List Archives: //www.freelists.org/archives/isalist/ >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server Articles and Tutorials: >http://www.isaserver.org/articles_tutorials/ >ISA Server Blogs: http://blogs.isaserver.org/ >------------------------------------------------------ >Visit TechGenix.com for more information about our other sites: >http://www.techgenix.com >------------------------------------------------------ >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp >Report abuse to listadmin@xxxxxxxxxxxxx > >------------------------------------------------------ >List Archives: //www.freelists.org/archives/isalist/ >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server Articles and Tutorials: >http://www.isaserver.org/articles_tutorials/ >ISA Server Blogs: http://blogs.isaserver.org/ >------------------------------------------------------ >Visit TechGenix.com for more information about our other sites: >http://www.techgenix.com >------------------------------------------------------ >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp >Report abuse to listadmin@xxxxxxxxxxxxx >------------------------------------------------------ >List Archives: //www.freelists.org/archives/isalist/ >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ >ISA Server Blogs: http://blogs.isaserver.org/ >------------------------------------------------------ >Visit TechGenix.com for more information about our other sites: >http://www.techgenix.com >------------------------------------------------------ >To unsubscribe visit http://www.isaserver.org/pages/isalist.asp >Report abuse to listadmin@xxxxxxxxxxxxx > ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx