RE: NAV Live update

  • From: "Sushil Bhalla" <sushilb@xxxxxxxxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Sun, 10 Mar 2002 22:33:02 -0700

Hey Guys,

I started the issue and I am the only one left with the problem unsolved.

I tried running the NAV Service As myaccount (which is a member of
administrator group) but no luck.

Just to clear my situation again:

- W2K, ISA and NAV all installed on one server.
- LiveUpdate doesn't work
- ISA logs show 'anonymous' requests for LiveUpdate and sc-auth status is
N
- I have 'Ask authentication for unauthenticated requests..' on OUTGOING
Web requests on ISA checked. (I want to keep it that way, if possible).

Any more suggestions..?

Thanks.

Sushil Bhalla


> Thanks.  Glad I could help.
> 
> Dale Merrick
> theuone@xxxxxxxxxxx (home)
> dmerrick@xxxxxxx (work)
>  
>  
> 
> -----Original Message-----
> From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
> Sent: Friday, March 08, 2002 2:47 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: NAV Live update
> 
> http://www.ISAserver.org
> 
> 
> Hi Dale,
> 
> You are THE MAN! :-)
> 
> Thanks! I had been using my local admin accounts. I should have been
> able to figure it out myself :-)
> 
> Good job! I'll do a tip on the Web site and give you credit!
> 
> Thanks!
> 
> Tom
> 
> -----Original Message-----
> From: Dale Merrick [mailto:theuone@xxxxxxxxxxx]
> Sent: Friday, March 08, 2002 6:26 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: NAV Live update
> 
> 
> http://www.ISAserver.org
> 
> 
> As a follow up to my post yesterday I was successful in getting a
> schedule LiveUpdate to run.
> 
> I noticed in my event logs that when I did a manual LiveUpdate it was as
> the domain administrator (I was logged in as that).  ISA has been told
> to allow domain administrators access to the Internet.
> 
> When doing a scheduled LiveUpdate I noticed it ran in the System user
> context, which doesn't have any permission to access the Internet at
> all.  Hence the reason for the failure of a scheduled LiveUpdate.
> 
> I had intended to give LocalSystem permission to access the Internet but
> couldn't find it anywhere when I was specifying which users and groups
> had permission to go to the outside world.  Then I got to thinking that
> perhaps it was a good thing that I couldn't find LocalSystem.  Afterall,
> lots of services run as System and open lots of ports.  Giving
> LocalSystem permission to access the Internet might bypass ISA.  Now
> perhaps I just missed it and/or I'm wrong about LocalSystem bypassing
> ISA if it has access permission to the Internet.  If I am someone please
> let me know.
> 
> So what I did was change who Norton AntiVirus ran as.  Instead of
> LocalSystem it now runs as the domain administrator (change this in the
> Services applet for the Norton AntiVirus Server service).
> 
> My scheduled LiveUpdate took place at 12:00:40 AM this morning and was
> successful!!!!!
> 
> Perhaps there is a better way and if there is I'd love to hear it.  If
> anyone needs any help or has questions about what I did you can reach me
> at either e-mail address.
> 
> Dale Merrick
> theuone@xxxxxxxxxxx (home)
> dmerrick@xxxxxxx (work)
>  
>  
> 
> -----Original Message-----
> From: Dale Merrick [mailto:theuone@xxxxxxxxxxx] 
> Sent: Thursday, March 07, 2002 5:44 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: NAV Live update
> 
> http://www.ISAserver.org
> 
> 
> I also had problems with LiveUpdate on Norton AntiVirus Corp Edition
> however upgrading to the latest version of LiveUpdate fixed the problem
> partially.  I can now do manual live updates, but automatic ones still
> fail.  If I get it working completely I'll post what I did.
> 
> Dale Merrick
> theuone@xxxxxxxxxxx (home)
> dmerrick@xxxxxxx (work)
>  
>  
> 
> -----Original Message-----
> From: Sushil Bhalla [mailto:sushilb@xxxxxxxxxxxxxxxxx] 
> Sent: Thursday, March 07, 2002 1:40 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: NAV Live update
> 
> http://www.ISAserver.org
> 
> 
> Izak,
> 
> Already tried that but no luck.
> Any other suggestions?
> 
> Thanks
> Sushil Bhalla
> 
> > try to use de settings of your explorer when config your liveupdate
> options
> > Izak
> > ----- Original Message -----
> > From: "Sushil Bhalla" <sushilb@xxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Wednesday, March 06, 2002 2:31 PM
> > Subject: [isalist] RE: NAV Live update
> > 
> > 
> > > http://www.ISAserver.org
> > >
> > >
> > > Done that.
> > >
> > > Still no luck. Same error as below mentioned:
> > >
> > > LiveUpdate was unable to establish a connection to the LiveUpdate
> server.
> > > .......
> > >
> > > In ISA Server's Properties, Outgoing Web Requests, Connections, I am
> > > asking 'Unauthenticated users for identification' and in PROXY LOGS
> my
> > > request is going as anonymous and sc-auth status as N.
> > >
> > > Could that be the problem? If it is, then how can I solve it? I want
> to
> > > keep the 'ask unauthenticated users....' option.
> > >
> > > Thanks.
> > >
> > > Sushil Bhalla
> > >
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> > ctstas@xxxxxxxxx
> > > To unsubscribe send a blank email to
> $subst('Email.Unsub')
> > >
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> theuone@xxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> theuone@xxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> ecarter@xxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> theuone@xxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: