RE: RES: RE: ISA Services failing due to missing trust.

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 10 Mar 2003 19:05:09 -0600

Hi Tiago,
 
So you got the corruption after restoring the System State?
 
Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 

        -----Original Message-----
        From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] 
        Sent: Monday, March 10, 2003 10:10 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RES: RE: ISA Services failing due to missing trust.
        
        
        http://www.ISAserver.org
        
        

        I had this exact problem yesterday, but i solved it differently.

         

        I created a new destination set with the same contents that the other 
set had, changed the destination set inside the Protocol Rules, and then it 
worked. There was a Microsoft article with a similar issue when you had that 
same problem, but with schedules. After thinking very little, I decided do to 
the same, but with the destination sets.

         

        The only difference is that my Firewall service wouldn't go up because 
it generated an error event saying that a registry entry was corrupt.

         

        Stuff that happens when you have to restore a System State =))

         

        Tiago de Aviz

        -----------------------

        tiago@xxxxxxxxxxxxxxx

        www.softsell.com.br

        -----------------------

         

        -----Mensagem original-----
        De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
        Enviada em: segunda-feira, 10 de março de 2003 12:50
        Para: [ISAserver.org Discussion List]
        Assunto: [isalist] RE: ISA Services failing due to missing trust.

         

        http://www.ISAserver.org

        Hi Anthony,

         

        So was the problem a corrupted Destination Set? If so, how did you 
determine that it was corrupt? (other than taking bribes ;-) )

         

        Thanks!

        Tom

         

         

        Thomas W Shinder

        www.isaserver.org/shinder <http://www.isaserver.org/shinder>  

        ISA Server and Beyond: http://tinyurl.com/1jq1 
<http://tinyurl.com/1jq1> 

        Configuring ISA Server: http://tinyurl.com/1llp 
<http://tinyurl.com/1llp> 

         

         

                -----Original Message-----
                From: Anthony Ament [mailto:anthonyament@xxxxxxxxxxxxxxxxxx] 
                Sent: Sunday, March 09, 2003 4:48 PM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] RE: ISA Services failing due to missing 
trust.

                http://www.ISAserver.org

                FYI,

                 

                I was able to get the services started again by removing the 
offending rules in the registry:

                 

                The proxy access rules were located in:

                 

                
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc\Arrays\{8C1A04E2-8663-4179-9288-24F4C10EDD03}\ArrayPolicy\Proxy-Access-Rules

                 

                There was also a corrupted destination set that i had to remove 
in:

                 

                
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc\Arrays\{8C1A04E2-8663-4179-9288-24F4C10EDD03}\PolicyElements\Proxy-Destination-Sets

                 

                Cheers

                Anthony

                 

                -----Original Message-----
                From: Anthony Ament 
                Sent: Friday, 7 March 2003 17:33
                To: [ISAserver.org Discussion List]
                Subject: [isalist] ISA Services failing due to missing trust.

                http://www.ISAserver.org

                Help!

                We had a trust setup between another domain, which has since 
been removed, however there was still reference to the users from the trusted 
domain in some protocol rules.

                Now the web proxy and firewall service will not start and when 
you go into protocol rules in ISA management it crashes with the error: "The 
Operation Failed - The trust relationship with the primary domain and the 
trusted domain failed."

                If bringing back the trusted domain is not an option, can the 
protocol rules be edited somehow to remove the reference to users in the non 
exisitant domain?

                 

                Thanks

                Anthony

                 

                ------------------------------------------------------
                List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter: 
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ: 
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Exchange Server Resource Site: http://www.msexchange.org/
                Windows Security Resource Site: http://www.windowsecurity.com/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org Discussion 
List as: tshinder@xxxxxxxxxxxxxxxxxx
                To unsubscribe send a blank email to $subst('Email.Unsub') 

        ------------------------------------------------------
        List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
tiago@xxxxxxxxxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 

        ------------------------------------------------------
        List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: