RE: ISA2000 Destination Sets disappearing
- From: "David Farinic" <davidf@xxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 2 Dec 2004 16:37:13 +0100
>Was this DS being created via script?
Yes. Probably process running Destination Update script was killed which
caused corrupted command file for ISA. Problem was also that corruption
error in set update file was not detected/visible/discarded by ISA and
it produced instead clear Destination Sets View + it accepted new
commands for destination sets even it could not execute them at that
time.
Actually when ISA Dest.Sets queue was stuck and there were no
Destination Sets showing in ISA MMC I entered new test Dest.Set which
after deleting of stuck command file executed and added that test Dest.
Set.
Anyway deleting of corrupted update file and registry entry freed queue
and all dest.set changes applied correctly ....problem solved...
Now I am more concern how to run safely script updating destination set
so this will not happen again.
>Unless you were monitoring registry and file access when this happened,
>there's no way to know what caused it.
Yeh we did run regmon
Regards DavidF
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Thursday, December 02, 2004 4:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA2000 Destination Sets disappearing
http://www.ISAserver.org
That was a good bit of sleuthing!
This happens when changes are taking place and the process is
interrupted for some reason.
Unless you were monitoring registry and file access when this happened,
there's no way to know what caused it.
Was this DS being created via script?
Since it wasn't "finished" creating / updating the DS, the data in there
is now suspect.
You're best action now is to destroy and recreate it.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-----Original Message-----
From: David Farinic [mailto:davidf@xxxxxxx]
Sent: Thursday, December 02, 2004 3:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA2000 Destination Sets disappearing
http://www.ISAserver.org
Hi,
Yesterday all destination set disappeared on one of our ISA2000 boxes.
We could restart ISA but we couldn't add
New Destination set ( we could add it in MMC but after closing ISA
configuration console changes disappeared)
Later we found out that one queued change for Destination set got stuck
in ISA 2000(restart of ISA didn't help).
We looked into program files\microsoft isa server\data folder and found
lot of files like this:
{8AA9B5A5-C702-4AC2-9908-18E8130690E9}-msFPCDestSetData
Then in registry we found:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc\Arrays\{7152D053-C261-4693-BE
EC-74EF0DDA966C}\PolicyElements\Proxy-Destination-Sets\{8AA9B5A5-C702-4A
C2-9908-18E8130690E9}]
With 1 key like this:
"msFpcValid"="changing"
This indicated that changes queued in file and registry above made
somehow ISA2k queue stuck with Destination Sets changes.
We deleted mentioned file and reg. entry and restarted ISA ... All lost
Dest Sets appeared again!
Is there any size limit for Dest Set changes per 1 set?
With Regards David Farinic.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
This mail was checked for viruses by GFI MailSecurity. GFI also develops
anti-spam software (GFI MailEssentials), a fax server (GFI FAXmaker),
and network security and management software (GFI LANguard) -
www.gfi.com
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
davidf@xxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
