Hi Artur, That's quite a story! I think for the amount of time you put into this project, it would have been cheaper to buy a secondary server to run ISA Server on, so that you didn't have to deal with the DC on the ISA Server problems :-) That said, I would FDISK the box, and start over, using the instructions in my article. Then you'll be nice and clean and most everyting should work. I can't guarantee Win9x clients will work, because they don't :-) HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Artur Zgadzaj [mailto:Artur.Zgadzaj@xxxxx] Sent: Tuesday, June 25, 2002 10:16 AM To: [ISAserver.org Discussion List] Subject: [isalist] SBS - ISA Host not found (11001) http://www.ISAserver.org I try to resolve this problem by last month. -------------------------------------------- ============================================ I. I send this E-mail to Jeff Middleton ============================================ Small Business 2000 Server with lan-modem to internet, called in Poland by "SDI". One the internet worked and another one the internet not worked and I get "11001 Host not found". When it does not worked - anywhere: on server and workstations. Instalations on SBS is standard with wizard from SBS. I tell him that I have permanent connection to internet. Server have one LAN card with permanent address 192.168.0.1. LAN-Modem SDI started automatic in Scheduled Tasks evryone when server started (with command "RASDIAL ..." ) Addresses from LAN card on SERVER: --------------------------------------------------------- Address IP: 192.168.0.1 Subnet Mask: 255.255.255.0 Gateway: 192.168.0.1 DNS1: 192.168.0.1 DNS2: (blank) WINS: 192.168.0.1 (with LMHOSTS and NETBIOS other TCP/IP) Address on DNS Host change and one is on adress LAN card and another one on adress SDI Internet connection. It may be hapend in evrytime and "Host not found" and only restart server or sometimes help only restart ISA Server with or not SDI connections to internet. When I restart server it can work good with a few days but sometimes the workstations occasionaly not work on internet. On workstation I installed Firewall Client. May be must tell DNS to keep HOST name address on only LAN card? But I don't know how and I don't know - is this a good idea? On ISA Server in LAT I have: 1). from 192.168.0.0 to 192.168.0.255 2). address SDI: 212.160.20.x to 212.160.20.x 3). 212.160.20.255 to 212.160.20.255 Sometimes I have: "10065 Host unreachable" Another problems in network: ------------------------------------------ Workstations (WIN98) sometimes cannot logged to domain name server NAME where full domain name is: NAME.local. I have message: "Bad password or .." and when I try again - then I get access to server and workstation is logged. Sometimes I must run WINIPCFG and release all IP and then restart workstation to get access to server. Configuration DHCP on Server: ====================== server.NAME.local [192.168.0.1] Zakres [192.168.0.0] Addresses: 192.168.0.1 to 192.168.0.254 without 192.168.0.1 to 192.168.0.9 Options: 003 Router 192.168.0.1 006 DNS Servers 192.168.0.1 044 WINS/NBNS Servers 192.168.0.1 046 WINS/NBNS Node Type 0x1 Configuration DNS on Server (now): ========================= + NAME.local Nazwa Typ Dane _msdcs _sites _tcp _udp (identyczny jak folder nadrzêdny) Adres startowy uwierzytelnienia [370], serwer.pluss.lokalna., admin. (identyczny jak folder nadrzêdny) Serwer nazw serwer.pluss.lokalna. (identyczny jak folder nadrzêdny) Host 192.168.0.1 (identyczny jak folder nadrzêdny) Host 192.168.0.26 (identyczny jak folder nadrzêdny) Host 212.160.20.4 serwer Host 212.160.20.4 Installed Service Packs: =================== 1. Windows 2000 Server Polish - SP2 Polish 2. ISA Server - now (restored from image archive) not installed SP1 but early I have installed SP1 with descripted above problems ================================================ II. Than I get answer from Jeff Middleton ================================================ Hello Artur, I think I recognize the problems you have. Try looking at these items below. -------------------------------------- The main problem with the logon on your Win98 client is likely due to this issue: Q292822 Name Resolution and Connectivity Issues on Windows 2000 Domain Controller with Routing and Remote Access and DNS Installed In addition, on your DHCP Server, change the value of Option 46 to 0x8 (node type H), this will help with Windows 98 clients, and doesn't hurt regardless. It give the client more ways to resolve names in the LAN. -------------------------------------- For fixing the name resolution of web addresses, now look at: + You also need to adjust the settings on the Proxy LAT. The LAT should not include the IP subnet for your RAS device. Only the subnet for your LAN should be listed (192.168.0.0 - 192.168.0.255) + Best Practice: Use the IP Address of Your Internal Network Adapter for DNS http://support.microsoft.com/default.aspx?scid=http://support.microsoft. com/highlights/sbstopdns.asp + and this....Q229840 DNS Server's Root Hints and Forwarder Pages Are Unavailable and that last one is explained better by information in this KB. (I don't think you need to change anything else this KB lists, but you may learn what you are doing with Q229840) Frequently Asked Questions About Windows 2000 DNS (Q291382) ------------------------------------ From all the issues and changes above, it may be that your DNS cache contains bad entries. You could use the following KB to clean out the DNS cache, but this may not be necessary at all. Do this only if you still have problems after everything above is done and the server is rebooted. How to Clear Bad Information in Active Directory-Integrated DNS (Q305967) HOW TO: Create a New Zone on a DNS Server in Windows 2000 (Q308201) =================================================== III. Than I use it, and I get this situation =================================================== Of course: ---------- 1. My "Event Logs" is very clear without errors. I don't never get this so clear 2.Workstations is loggin to Domain very easy, without problems 3. Internet it's worked in all network very good, if it's work on server. If ... My problem now: --------------- I don't know what may be happen when server is reboot. In one time is OK, but in another one in browser on server i get known message: "ISA Server: Host not found 11001" I start to analize this, I decide to don't rebooting system, but to try resolve it with ISA process. And then I (in ISA Server) do this steps: 1. Backup configurations to disk (Backup) 2. Restore thist backups (Services of ISA Server must be stoped and start automaticaly) - not recognize it. 3. Disconect from my server (Disconnect action) 4. Connect again to my system (Connect to action) - not recognize problem. 5. Restore from backup again - not recognize problem, but !!!! I have another responce in my web browser - "ISA Server: Host unreachable 10065". And now I feel that's good way. 6. I repeat steps from 3 to 5 and now internet work, that's ISA Server find now this HOST!!! But this is not stable, and when server reboot I still don't know what happen. This is not resolve my problem at all. But I start to quetsion myself about "Found Host" by ISA Server: 1. What is this HOST? Is it a Host record in DNS Server, like my server name? If it, then why ISA is not recognize my SERVER? 2. HOST - Is this a host like www.internet_domain.com in internet address? But earlier ISA Server must good work in system Windows 2000 Server to can find external host. 3. So, ISA can't to find something identifier in my system. 4. But, how ISA is seeking it ???? Why another systems, like DNS Server, DHCP Server, WINS Server, Exchange Server, Active Directory and so on - can find HOSt on my system, but no ISA Server??? I don't understand it! I try to remove ISA Server and install it with new configuration, but it work ok by two restarts, and later I have old problems with Host not found). Reinstall ISA not resolve it. Also instalation of SP1 not resolve it. =================================================== IV. Today I read article by Thomas Shinder =================================================== I read this article "Installing ISA Server on a Domain Controller": http://www.isaserver.org/pages/articles.asp?art=17 =================================================== V. Then I have last question =================================================== Must I: ------- 1. Down Domain Cotroller to simple server and then remove DNS entries and then create DNS and Domain Controler whith DCPROMO util or Can I resolve it, by: 1. Only remove DNS entries and create it again, by thist articles: How to Clear Bad Information in Active Directory-Integrated DNS (Q305967) HOW TO: Create a New Zone on a DNS Server in Windows 2000 (Q308201) or I must to: 1. Remove system partition and reinstall again SBS 2000 Server, but by manualy create DNS, AD, ISA by this article: "Installing ISA Server on a Domain Controller" http://www.isaserver.org/pages/articles.asp?art=17 ======================================================================== = ======================================================================== = P.S. 1. Please, help me, becasue I will be must spend a very long time to resolve it by testing this tree ways. 2. By the way, can I understand why this problem exist in SBS Server and how it working ? Artur Zgadzaj Artur.Zgadzaj@xxxxx ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')