CEICW fails on firewall configuration every time. Please help.

I was trying to install CRM addons for outlook when I realized my websites
couldn't be accessed on any machine other than the SBS server, even though I
could ping the sites just fine. I've installed SBS several times before and
haven't run into this issue before. I installed the rest of SBS as I usually
have done via the Swing It! guide. I followed the microsoft guides to
install CRM and all points where it asks me to verify installation checked
out fine.

I believe this all has to do with my ISA 2004 setup. The only way I can
complete the CEICW wizard is if I disable the firewall. Every other time it
gives me the usual "An error occurred while configuring a component" during
the firewall configuration portion.

But there's more... This new SBS server is almost identical to the
production server with the exception of different hardware and the new server
has CRM added to it. I backed up ISA from the current production server into
an xml file. I then restored my new server using this XML file. It says
everything imported fine, but it doesn't want to start the firewall service
after that. By running the CEICW wizard and letting the firewall portion of
it fail I am able to then start the firewall service, but still not able to
run the CEICW successfully.

I've already looked at http://support.microsoft.com/?id=875421 and my DNS
settings are correctIy.

I saw another post saying to change the Internet Users group pre-2000 name,
but mine is already as it was suggested so i'm basically stuck with fixes my
server already has.

I have even removed all the firewall policy rules and CEICW still fails.
Btw, all SBS components match the same version number/service pack as the
original server.

I also took a peek at
http://www.smallbizserver.net/Defaul...D=57&tabid=185 but my
errors

Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Error 0x800700b7 returned from call to Recreating the SBS web listener().
Error 0x800700b7 returned from call to
CStingrayCommit::CreateWebPublishingRules().
Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing rules().
Error 0x800700b7 returned from call to
CStingrayCommit::CommitWebPublishingRules().
Error 0x800700b7 returned from call to Creating Web publishing rules().
Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().

don't seem to follow those listed. My ISA console was also closed whenever
I ran the wizard.



Here's the whole icwlog.txt for you hardcore MVPs.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizinet.dll, version 5.2.2893.0
calling CNetCommit::ValidatePropertyBag ().
Call to Querying for the property bag () returned ok.
Call to Reading hardware selection () returned ok.
Hardware selection: 2
Call to Validating hardware selection () returned ok.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizproxy.dll, version 5.2.2893.0
CStingrayCommit::ValidatePropertyBag
Call to Querying for IPropertyPagePropertyBag () returned ok.
Call to Initializing the StringrayUtil () returned ok.
Call to Reading the firewall selection () returned ok.
Firewall selection: 1
CStingrayCommit::ValidateUpnpProperties
Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
Call to Validating Upnp properties () returned ok.
CStingrayCommit::ValidatePortMappings
Call to Reading the port mappings () returned ok.
Call to Loading port mappings XML () returned ok.
Call to Validating the predefined port mappings XML () returned ok.
Call to Reading the custom port mappings () returned ok.
Loading port mapping XML
Call to Validating the custom port mappings XML () returned ok.
Call to CStingrayCommit::ValidatePortMappings () returned ok.
Call to Validating port mappings () returned ok.
CStingrayCommit::ValidateWebPublishingRules
Call to Reading web publishing selection () returned ok.
Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
Call to Validating web publishing rules () returned ok.
Call to CStingrayCommit::ValidatePropertyBag () returned ok.

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizcert.dll, version 5.2.2893.0
Calling CCertCommit::ValidatePropertyBag
Require SSL for OWA: 1
Require SSL for Remote Portal: 1
Require SSL for Monitoring: 0
Require SSL for OMA: 0
Require SSL for CompanyWeb: 0
Require 128 Bit Encryption: 1
Cert selection: -1
CCertCommit::ValidatePropertyBag returned OK

8/9/2005 4:33 PM
C:\Program Files\Microsoft Windows Small Business
Server\Networking\ICW\wizemail.dll, version 5.2.2893.0
calling CEmailCommit::ValidatePropertyBag ().
calling pdispPPPBag->QueryInterface (IPropertyPagePropertyBag, 0x6e50c).
Call to pdispPPPBag->QueryInterface () returned ok.
calling ReadInt4 (0x2591d8, DB5E5E45-3598-4F1D-8FF7-0ED35B9EB6A4).
Call to ReadInt4 () returned ok.
The out param of ReadInt4() is -1.
calling CValidatePropertyUtil.ValidatePropertyInteger ().
Call to CValidatePropertyUtil.ValidatePropertyInteger () returned ok.
Call to CEMailCommit::ValidatePropertyBag () returned ok.
calling CNetCommit::Commit (2462168).
calling CNetCommit::ValidatePropertyBag ().
Call to Querying for the property bag () returned ok.
Property bag is not dirty, skipping validation
calling CNetCommit::Common ().
Call to Initializing the Stingray util () returned ok.
Call to Configuring the time service () returned ok.
Call to Notifying RWW for ISA () returned ok.
Call to CNetCommit::Common () returned ok.
Call to CNetCommit::Commit () returned ok.
CStingrayCommit::CommitEx
CStingrayCommit::ValidatePropertyBag
Call to Querying for IPropertyPagePropertyBag () returned ok.
Call to Initializing the StringrayUtil () returned ok.
Call to Reading the firewall selection () returned ok.
Firewall selection: 1
CStingrayCommit::ValidateUpnpProperties
Error 0x80070057 returned from call to Reading the UPNP selection().
Skipping upnp validation
Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
Call to Validating Upnp properties () returned ok.
CStingrayCommit::ValidatePortMappings
Call to Reading the port mappings () returned ok.
Call to Loading port mappings XML () returned ok.
Call to Validating the predefined port mappings XML () returned ok.
Call to Reading the custom port mappings () returned ok.
Loading port mapping XML
Call to Validating the custom port mappings XML () returned ok.
Call to CStingrayCommit::ValidatePortMappings () returned ok.
Call to Validating port mappings () returned ok.
CStingrayCommit::ValidateWebPublishingRules
Call to Reading web publishing selection () returned ok.
Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
Call to Validating web publishing rules () returned ok.
Call to CStingrayCommit::ValidatePropertyBag () returned ok.
Call to Validating the property bag () returned ok.
Call to Reading the guid for the LAN NIC () returned ok.
Call to Getting the IP address for the LAN NIC () returned ok.
Call to Getting the SM for the LAN NIC () returned ok.
LAN NIC Info:
Guid: {A193DDA6-057A-443B-B4DE-9958D1ABD018}
IP: 192.168.16.3
SM: 255.255.255.0
Call to Removing RRAS NAT () returned ok.
CStingrayCommit:oGeneralConfiguration
Call to Removing SBS access rules () returned ok.
Call to SBS MS Update Access Rule () returned ok.
Call to Creating SBS Internet Access Rule () returned ok.
Call to Setting default logon domain for OMA () returned ok.
Call to Configuring anonymous access for SBS dirs () returned ok.
Call to Disabling auto discovery () returned ok.
Call to Configuring IIS to listen only on the LAN () returned ok.
Call to Setting local domain name () returned ok.
Call to Disabling H323 application filter () returned ok.
Call to Setting up web proxy listeners () returned ok.
Call to CStingrayCommit:oGeneralConfiguration () returned ok.
Call to Doing general configuration () returned ok.

8/9/2005 4:33 PM
Firewall Rule: SBS DHCP Client
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS HTTP 80 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS POP3 110 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS DnsLookupPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IcmpPingQueryPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IdentdPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpReceivePredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpCallPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SMTP 25 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SmtpPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NNTP 119 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS Remote Web Workplace CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RPC over HTTP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Business Card Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business CompanyWeb Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business TSWEB Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RUP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Monitoring Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OMA Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OWA Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Site and Content Rule
Cannot find the firewall rule, ignoring the error
Call to Removing ISA2k related firewall rules () returned ok.
Custom protocol name: SBS FTP 20 In CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS FTP 20 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS NTP 123 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS Remote Web Workplace CustomFilter
Cannot find the custom protocol, ignoring the error
Call to Removing ISA2k related custom protocols () returned ok.
Call to Removing inbound access rule allowing anybody in () returned ok.
Call to Removing inbound access rule allowing anybody out () returned ok.
CStingrayCommit::CommitPortMappings
CStringray::RemoveAllSpecialRules
Call to Resetting the rule enumeration () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule ISA6: SSL 443
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule ISA38: MSN Packet Filter (Outbound)
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS FTP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS RDP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Smtp Server Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS POP3 Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Localhost Dhcp Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to CStringray::RemoveAllSpecialRules () returned ok.
Call to Removing all special firewall rules () returned ok.
CStingrayCommit::CreateStandardPortMappings
Call to Enabling the DHCP system policy () returned ok.
Call to Enabling the CRL download system policy () returned ok.
Call to Creating the DHCP access rule () returned ok.
Call to Disabling ICMP () returned ok.
Call to CStingrayCommit::CreateStandardPortMappings () returned ok.
Call to Creating the standard filters () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 5
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound SMTP access rule () returned ok.
Call to Creating the outbound POP3 access rule () returned ok.
Call to Creating the outbound NNTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS Smtp Server Access Rule TCP 25 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 1723
Call to Creating the outbound PPTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Call to Creating outbound PPTP access rule () returned ok.
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound RDP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS RDP Server Access Rule TCP 3389 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound FTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS FTP Server Access Rule TCP 21 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 80
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating predefined port mappings () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 3
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Reading Name () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule ISA6: SSL 443 TCP 443 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping for RWW () returned
ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule SBS RWW Inbound Access Rule TCP 4125 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Reading Name () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule ISA38: MSN Packet Filter (Outbound) TCP 1863 returned 0
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating custom port mappings () returned ok.
Call to CStingrayCommit::CommitPortMappings () returned ok.
Call to Creating port mappings () returned ok.
CStingrayCommit::CommitWebPublishingRules
Call to Removing all sbs web publishing rules () returned ok.
RUP is not published
Call to Fixing the inheritance for default web site () returned ok.
Call to Unpublishing the default web site () returned ok.
Call to Fixing the inheritance for companyweb dir () returned ok.
Call to Unpublishing companyweb () returned ok.
Call to Publishing the default web site () returned ok.
Call to Publishing companyweb () returned ok.
CStingrayCommit::CreateWebPublishingRules
Call to Reading publishing server name () returned ok.
Call to Creating A record for publishing () returned ok.
Call to Checking the existence of the SBS listener () returned ok.
CStringrayCommit::GetSBSCertHash
Call to Getting the web listener SSL port () returned ok.
SSL Port: 443
Call to Getting the listener cert hash () returned ok.
Call to CStringrayCommit::GetSBSCertHash () returned ok.
Call to Reading the cert hash out of the listener () returned ok.
Call to Reading the Internet Server Name () returned ok.
Internet Server Name: www.lloydresearch.com
Error 0x800700b7 returned from call to Recreating the SBS web listener().
Error 0x800700b7 returned from call to
CStingrayCommit::CreateWebPublishingRules().
Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing rules().
Error 0x800700b7 returned from call to
CStingrayCommit::CommitWebPublishingRules().
Error 0x800700b7 returned from call to Creating Web publishing rules().
Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().
calling GetBOConnector ().
Call to GetBOConnector () returned ok.
calling spADs->PutEx (ADS_PROPERTY_CLEAR, msExchSmtpOutboundSecurityPassword).
Call to spADs->PutEx () returned ok.
calling spADs->SetInfo ().
Call to spADs->SetInfo () returned ok.

Hello Ryan,

Thank you for posting to the SBS Newsgroup.

I understand that after you installed ISA 2K4, you failed to continue
running the CEICW when you proceeding to the Firewall page. If I have
misunderstood your concern, please do let me know.

Based on my research, this issue can be caused by varies of factors, please
see:

If the following policy settings are not assigned to the Network Service
account on the domain controller:

Adjust memory quotas for a process, Generate security audits, Log on as a
service and Replace a process level token.

The Network Service account must be added to the policy settings in the
list. This issue may occur if Group Policy settings that were applied at
the domain level have modified the policy settings for the Network Service
account on the domain controller. This issue may occur after you promote a
member server to a domain controller, or on a migration from a Windows 2000
network where SBS 2003 was joined to the 2000 domain.

To troubleshoot this issue, please see:

1. Make sure that the Network Service account is added to the following
policy settings on the domain controller:

Adjust memory quotas for a process, Generate security audits, Log on as a
service and Replace a process level token.

To configure the policy settings for the Network Service account on the
domain controller, follow these steps:

a. Click "Start", point to "Administrative Tools", and then click "Domain
Controller Security Policy".

b. Expand "Local Policies", and then click "User Rights Assignment". The
policy settings are displayed in the right pane.

c. Double-click the policy setting that you want to add the Network Service
account to.

d. If the Network Service account is not in the list of users and groups
that are assigned to that policy setting, click "Add User or Group".

e. In the "Select User or Groups" dialog box, type "Network Service"
(without the quotation marks) in the "Enter the object names to select"
box, and then click "OK".

f. Verify that "NETWORK SERVICE" is displayed in the list of users and
groups that are assigned to that policy setting, and then click "OK".

g. Close the policy editor

h. Run GPUPDATE /FORCE from a command prompt.

i. Reboot the server.

j. Test the issue again.

2. If the issue persists, please remove Web listeners and see whether it
works. To do so, please see:

a. Open the ISA Server 2004 Management, expand to Yourserver\Firewall
Policy.

b. On the right pane, click Toolbox tab.

c. You will find the Web Listeners listed at the bottom.

d. Right click each of the Web Listeners, and select Delete.

e. Test the issue again.

3. Error 0x800700b7 indicates that STIERR_HANDLEEXISTS, which means that
the ISA MMC open when running CEICW. So just a double check, please make
sure that you close the ISA MMC when running CEICW.

4. If the issue persists, please help to gather more detailed information
for research:

a. ISA info:

1) Download the file from the following URL:

http://www.isatools.org/isainfo/ISAInfo.zip

2) Extract all files to a folder on ISA server

3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
current folder.

4) Please send these files to my mailbox.
===========
b. Remove the existing icwlog.txt, reproduce the issue, and collect all the
files in %sbsprogramdir%\Support.
===========
c. Collect all files in %system drive%\program files\Microsoft
Integration\windows small business server 2003\logs.
===========
d. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
please go to C:\Windows\KB885918.log, and send the file to me.

If the files size is too large to attach to the Newsgroup, please compress
these files and send to my mailbox.

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: CEICW fails on firewall configuration every time. Please
help.
>thread-index: AcWdJ2l50/VudomVRrCOlRxRn37GWA==
>X-WBNR-Posting-Host: 216.223.91.74
>From: "=?Utf-8?B?Unlhbg==?=" <>
>Subject: CEICW fails on firewall configuration every time. Please help.
>Date: Tue, 9 Aug 2005 14:15:04 -0700
>Lines: 428
>Message-ID: <36D60FF0-1E7A-4F15-82F2->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:142856
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I was trying to install CRM addons for outlook when I realized my websites
>couldn't be accessed on any machine other than the SBS server, even though
I
>could ping the sites just fine. I've installed SBS several times before
and
>haven't run into this issue before. I installed the rest of SBS as I
usually
>have done via the Swing It! guide. I followed the microsoft guides to
>install CRM and all points where it asks me to verify installation checked
>out fine.
>
>I believe this all has to do with my ISA 2004 setup. The only way I can
>complete the CEICW wizard is if I disable the firewall. Every other time
it
>gives me the usual "An error occurred while configuring a component"
during
>the firewall configuration portion.
>
>But there's more... This new SBS server is almost identical to the
>production server with the exception of different hardware and the new
server
>has CRM added to it. I backed up ISA from the current production server
into
>an xml file. I then restored my new server using this XML file. It says
>everything imported fine, but it doesn't want to start the firewall
service
>after that. By running the CEICW wizard and letting the firewall portion
of
>it fail I am able to then start the firewall service, but still not able
to
>run the CEICW successfully.
>
>I've already looked at http://support.microsoft.com/?id=875421 and my DNS
>settings are correctIy.
>
>I saw another post saying to change the Internet Users group pre-2000
name,
>but mine is already as it was suggested so i'm basically stuck with fixes
my
>server already has.
>
>I have even removed all the firewall policy rules and CEICW still fails.
>Btw, all SBS components match the same version number/service pack as the
>original server.
>
>I also took a peek at
>http://www.smallbizserver.net/Defaul...D=57&tabid=185 but
my
>errors
>
>Error 0x80070057 returned from call to Reading the UPNP selection().
>Skipping upnp validation
>Error 0x800700b7 returned from call to Recreating the SBS web listener().
>Error 0x800700b7 returned from call to
>CStingrayCommit::CreateWebPublishingRules().
>Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing
rules().
>Error 0x800700b7 returned from call to
>CStingrayCommit::CommitWebPublishingRules().
>Error 0x800700b7 returned from call to Creating Web publishing rules().
>Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().
>
>don't seem to follow those listed. My ISA console was also closed
whenever
>I ran the wizard.
>
>
>
>Here's the whole icwlog.txt for you hardcore MVPs.
>
>8/9/2005 4:33 PM
>C:\Program Files\Microsoft Windows Small Business
>Server\Networking\ICW\wizinet.dll, version 5.2.2893.0
>calling CNetCommit::ValidatePropertyBag ().
>Call to Querying for the property bag () returned ok.
>Call to Reading hardware selection () returned ok.
>Hardware selection: 2
>Call to Validating hardware selection () returned ok.
>
>8/9/2005 4:33 PM
>C:\Program Files\Microsoft Windows Small Business
>Server\Networking\ICW\wizproxy.dll, version 5.2.2893.0
>CStingrayCommit::ValidatePropertyBag
>Call to Querying for IPropertyPagePropertyBag () returned ok.
>Call to Initializing the StringrayUtil () returned ok.
>Call to Reading the firewall selection () returned ok.
>Firewall selection: 1
>CStingrayCommit::ValidateUpnpProperties
>Error 0x80070057 returned from call to Reading the UPNP selection().
>Skipping upnp validation
>Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
>Call to Validating Upnp properties () returned ok.
>CStingrayCommit::ValidatePortMappings
>Call to Reading the port mappings () returned ok.
>Call to Loading port mappings XML () returned ok.
>Call to Validating the predefined port mappings XML () returned ok.
>Call to Reading the custom port mappings () returned ok.
>Loading port mapping XML
>Call to Validating the custom port mappings XML () returned ok.
>Call to CStingrayCommit::ValidatePortMappings () returned ok.
>Call to Validating port mappings () returned ok.
>CStingrayCommit::ValidateWebPublishingRules
>Call to Reading web publishing selection () returned ok.
>Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
>Call to Validating web publishing rules () returned ok.
>Call to CStingrayCommit::ValidatePropertyBag () returned ok.
>
>8/9/2005 4:33 PM
>C:\Program Files\Microsoft Windows Small Business
>Server\Networking\ICW\wizcert.dll, version 5.2.2893.0
>Calling CCertCommit::ValidatePropertyBag
>Require SSL for OWA: 1
>Require SSL for Remote Portal: 1
>Require SSL for Monitoring: 0
>Require SSL for OMA: 0
>Require SSL for CompanyWeb: 0
>Require 128 Bit Encryption: 1
>Cert selection: -1
>CCertCommit::ValidatePropertyBag returned OK
>
>8/9/2005 4:33 PM
>C:\Program Files\Microsoft Windows Small Business
>Server\Networking\ICW\wizemail.dll, version 5.2.2893.0
>calling CEmailCommit::ValidatePropertyBag ().
>calling pdispPPPBag->QueryInterface (IPropertyPagePropertyBag, 0x6e50c).
>Call to pdispPPPBag->QueryInterface () returned ok.
>calling ReadInt4 (0x2591d8, DB5E5E45-3598-4F1D-8FF7-0ED35B9EB6A4).
>Call to ReadInt4 () returned ok.
>The out param of ReadInt4() is -1.
>calling CValidatePropertyUtil.ValidatePropertyInteger ().
>Call to CValidatePropertyUtil.ValidatePropertyInteger () returned ok.
>Call to CEMailCommit::ValidatePropertyBag () returned ok.
>calling CNetCommit::Commit (2462168).
>calling CNetCommit::ValidatePropertyBag ().
>Call to Querying for the property bag () returned ok.
>Property bag is not dirty, skipping validation
>calling CNetCommit::Common ().
>Call to Initializing the Stingray util () returned ok.
>Call to Configuring the time service () returned ok.
>Call to Notifying RWW for ISA () returned ok.
>Call to CNetCommit::Common () returned ok.
>Call to CNetCommit::Commit () returned ok.
>CStingrayCommit::CommitEx
>CStingrayCommit::ValidatePropertyBag
>Call to Querying for IPropertyPagePropertyBag () returned ok.
>Call to Initializing the StringrayUtil () returned ok.
>Call to Reading the firewall selection () returned ok.
>Firewall selection: 1
>CStingrayCommit::ValidateUpnpProperties
>Error 0x80070057 returned from call to Reading the UPNP selection().
>Skipping upnp validation
>Call to CStingrayCommit::ValidateUpnpProperties () returned ok.
>Call to Validating Upnp properties () returned ok.
>CStingrayCommit::ValidatePortMappings
>Call to Reading the port mappings () returned ok.
>Call to Loading port mappings XML () returned ok.
>Call to Validating the predefined port mappings XML () returned ok.
>Call to Reading the custom port mappings () returned ok.
>Loading port mapping XML
>Call to Validating the custom port mappings XML () returned ok.
>Call to CStingrayCommit::ValidatePortMappings () returned ok.
>Call to Validating port mappings () returned ok.
>CStingrayCommit::ValidateWebPublishingRules
>Call to Reading web publishing selection () returned ok.
>Call to CStingrayCommit::ValidateWebPublishingRules () returned ok.
>Call to Validating web publishing rules () returned ok.
>Call to CStingrayCommit::ValidatePropertyBag () returned ok.
>Call to Validating the property bag () returned ok.
>Call to Reading the guid for the LAN NIC () returned ok.
>Call to Getting the IP address for the LAN NIC () returned ok.
>Call to Getting the SM for the LAN NIC () returned ok.
>LAN NIC Info:
>Guid: {A193DDA6-057A-443B-B4DE-9958D1ABD018}
>IP: 192.168.16.3
>SM: 255.255.255.0
>Call to Removing RRAS NAT () returned ok.
>CStingrayCommit:oGeneralConfiguration
>Call to Removing SBS access rules () returned ok.
>Call to SBS MS Update Access Rule () returned ok.
>Call to Creating SBS Internet Access Rule () returned ok.
>Call to Setting default logon domain for OMA () returned ok.
>Call to Configuring anonymous access for SBS dirs () returned ok.
>Call to Disabling auto discovery () returned ok.
>Call to Configuring IIS to listen only on the LAN () returned ok.
>Call to Setting local domain name () returned ok.
>Call to Disabling H323 application filter () returned ok.
>Call to Setting up web proxy listeners () returned ok.
>Call to CStingrayCommit:oGeneralConfiguration () returned ok.
>Call to Doing general configuration () returned ok.
>
>8/9/2005 4:33 PM
>Firewall Rule: SBS DHCP Client
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS HTTP 80 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS FTP 20 In CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS FTP 20 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS POP3 110 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS NTP 123 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS DnsLookupPredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS IcmpPingQueryPredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS IdentdPredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS TS 3389 In CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS TS 3389 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS PptpReceivePredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS PptpCallPredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS FTP 21 In CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS FTP 21 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS SMTP 25 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS SmtpPredefinedType
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS NNTP 119 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS Remote Web Workplace CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: SBS NTP 123 Out CustomFilter
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business RPC over HTTP Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Business Card Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business CompanyWeb Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business TSWEB Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business RUP Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Monitoring Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business OMA Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business OWA Web Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Web Publishing Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Server All Users Protocol Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Internet Access Protocol Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Internet Access Protocol Rule 2
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Server Internet Access Site and Content Rule
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Server Internet Access Site and Content Rule
2
>Cannot find the firewall rule, ignoring the error
>Firewall Rule: Small Business Server All Users Site and Content Rule
>Cannot find the firewall rule, ignoring the error
>Call to Removing ISA2k related firewall rules () returned ok.
>Custom protocol name: SBS FTP 20 In CustomFilter
>Cannot find the custom protocol, ignoring the error
>Custom protocol name: SBS FTP 20 Out CustomFilter
>Cannot find the custom protocol, ignoring the error
>Custom protocol name: SBS NTP 123 Out CustomFilter
>Cannot find the custom protocol, ignoring the error
>Custom protocol name: SBS Remote Web Workplace CustomFilter
>Cannot find the custom protocol, ignoring the error
>Call to Removing ISA2k related custom protocols () returned ok.
>Call to Removing inbound access rule allowing anybody in () returned ok.
>Call to Removing inbound access rule allowing anybody out () returned ok.
>CStingrayCommit::CommitPortMappings
>CStringray::RemoveAllSpecialRules
>Call to Resetting the rule enumeration () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule ISA6: SSL 443
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule ISA38: MSN Packet Filter (Outbound)
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule SBS FTP Outbound Access Rule
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule SBS RDP Outbound Access Rule
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule SBS Smtp Server Access Rule
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule SBS POP3 Outbound Access Rule
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to Getting the special rule info () returned ok.
>Removing the access rule SBS Localhost Dhcp Access Rule
>Call to Removing the access rule () returned ok.
>Call to MoveToNextSpecialRule () returned ok.
>Call to CStringray::RemoveAllSpecialRules () returned ok.
>Call to Removing all special firewall rules () returned ok.
>CStingrayCommit::CreateStandardPortMappings
>Call to Enabling the DHCP system policy () returned ok.
>Call to Enabling the CRL download system policy () returned ok.
>Call to Creating the DHCP access rule () returned ok.
>Call to Disabling ICMP () returned ok.
>Call to CStingrayCommit::CreateStandardPortMappings () returned ok.
>Call to Creating the standard filters () returned ok.
>CStingrayCommit::CreatePortMappingsFromXML
>Call to Resetting the port mapping list () returned ok.
>Call to Getting the number of port mappings () returned ok.
>Number of port mappings 5
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Getting the name for the predefined port mapping () returned ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Call to Creating the outbound SMTP access rule () returned ok.
>Call to Creating the outbound POP3 access rule () returned ok.
>Call to Creating the outbound NNTP access rule () returned ok.
>Call to Handling predefined port mapping () returned ok.
>Creating access rule SBS Smtp Server Access Rule TCP 25 returned 0
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Skipping the port mapping for Port 1723
>Call to Creating the outbound PPTP access rule () returned ok.
>Call to Handling predefined port mapping () returned ok.
>Call to Creating outbound PPTP access rule () returned ok.
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Getting the name for the predefined port mapping () returned ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Call to Creating the outbound RDP access rule () returned ok.
>Call to Handling predefined port mapping () returned ok.
>Creating access rule SBS RDP Server Access Rule TCP 3389 returned 0
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Getting the name for the predefined port mapping () returned ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Call to Creating the outbound FTP access rule () returned ok.
>Call to Handling predefined port mapping () returned ok.
>Creating access rule SBS FTP Server Access Rule TCP 21 returned 0
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Skipping the port mapping for Port 80
>Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
>Call to Creating predefined port mappings () returned ok.
>CStingrayCommit::CreatePortMappingsFromXML
>Call to Resetting the port mapping list () returned ok.
>Call to Getting the number of port mappings () returned ok.
>Number of port mappings 3
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Reading Name () returned ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Creating access rule ISA6: SSL 443 TCP 443 returned 0
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Getting the name for the predefined port mapping for RWW ()
returned
>ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Creating access rule SBS RWW Inbound Access Rule TCP 4125 returned 0
>Call to Getting the next port mapping () returned ok.
>Call to Reading Port () returned ok.
>Call to Reading Protocol () returned ok.
>Call to Reading Direction () returned ok.
>Call to Validating TCP direction () returned ok.
>Call to Reading Enable () returned ok.
>Call to Reading Name () returned ok.
>Call to Creating tcp port mapping protocol () returned ok.
>Creating access rule ISA38: MSN Packet Filter (Outbound) TCP 1863 returned
0
>Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
>Call to Creating custom port mappings () returned ok.
>Call to CStingrayCommit::CommitPortMappings () returned ok.
>Call to Creating port mappings () returned ok.
>CStingrayCommit::CommitWebPublishingRules
>Call to Removing all sbs web publishing rules () returned ok.
>RUP is not published
>Call to Fixing the inheritance for default web site () returned ok.
>Call to Unpublishing the default web site () returned ok.
>Call to Fixing the inheritance for companyweb dir () returned ok.
>Call to Unpublishing companyweb () returned ok.
>Call to Publishing the default web site () returned ok.
>Call to Publishing companyweb () returned ok.
>CStingrayCommit::CreateWebPublishingRules
>Call to Reading publishing server name () returned ok.
>Call to Creating A record for publishing () returned ok.
>Call to Checking the existence of the SBS listener () returned ok.
>CStringrayCommit::GetSBSCertHash
>Call to Getting the web listener SSL port () returned ok.
>SSL Port: 443
>Call to Getting the listener cert hash () returned ok.
>Call to CStringrayCommit::GetSBSCertHash () returned ok.
>Call to Reading the cert hash out of the listener () returned ok.
>Call to Reading the Internet Server Name () returned ok.
>Internet Server Name: www.lloydresearch.com
>Error 0x800700b7 returned from call to Recreating the SBS web listener().
>Error 0x800700b7 returned from call to
>CStingrayCommit::CreateWebPublishingRules().
>Error 0x800700b7 returned from call to Creating ISA2k4 Web publishing
rules().
>Error 0x800700b7 returned from call to
>CStingrayCommit::CommitWebPublishingRules().
>Error 0x800700b7 returned from call to Creating Web publishing rules().
>Error 0x800700b7 returned from call to CStingrayCommit::CommitEx().
>calling GetBOConnector ().
>Call to GetBOConnector () returned ok.
>calling spADs->PutEx (ADS_PROPERTY_CLEAR,
msExchSmtpOutboundSecurityPassword).
>Call to spADs->PutEx () returned ok.
>calling spADs->SetInfo ().
>Call to spADs->SetInfo () returned ok.
>

Thanks a lot....

Step #2 seemed to do the trick for me:

If the issue persists, please remove Web listeners and see whether it
works. To do so, please see:

a. Open the ISA Server 2004 Management, expand to Yourserver\Firewall
Policy.

b. On the right pane, click Toolbox tab.

c. You will find the Web Listeners listed at the bottom.

d. Right click each of the Web Listeners, and select Delete.

e. Test the issue again.

CEICW ran fine after that and now my crm and other websites are fully
functional again. I guess I'll manually add the ISA entires this time,
instead of restoring from the XML file I backed up from the current
production server.

I'm a bit curious how you came across these solutions as I didn't see them
when I was poiking aorund in google, yahoo or these newsgroups. Is there
some holy microsoft support site I should know about or did you just know
this from personal experience?

Hello Ryan,

Thank you for posting back!

I am glad to hear that the information helps and thing is working correctly
on your side now. The thought to troubleshoot your issue is:

I notice that there is following error informaiton in icwlog.txt:

Error 0x800700b7 returned from call to Recreating the SBS web listener().
Error 0x800700b7 returned from call to
CStingrayCommit::CreateWebPublishingRules().

I researched the error 0x800700b7, it means Cannot create a file when that
file already exists. That is why I ask to remove the Web Listeners and see
whether it works.

If you need any assistance in the future, please feel free to post back to
this Newsgroup. We are glad to be working with you again!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: CEICW fails on firewall configuration every time. Please
help.
>thread-index: AcWdxdQmiZj5EUSzSculLYsASxVkcw==
>X-WBNR-Posting-Host: 216.223.91.74
>From: "=?Utf-8?B?Unlhbg==?=" <>
>References: <36D60FF0-1E7A-4F15-82F2->
<>
>Subject: RE: CEICW fails on firewall configuration every time. Please help.
>Date: Wed, 10 Aug 2005 09:09:04 -0700
>Lines: 27
>Message-ID: <90B443E2-4257-4DC2-B4C4->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143095
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks a lot....
>
>Step #2 seemed to do the trick for me:
>
>If the issue persists, please remove Web listeners and see whether it
>works. To do so, please see:
>
>a. Open the ISA Server 2004 Management, expand to Yourserver\Firewall
>Policy.
>
>b. On the right pane, click Toolbox tab.
>
>c. You will find the Web Listeners listed at the bottom.
>
>d. Right click each of the Web Listeners, and select Delete.
>
>e. Test the issue again.
>
>CEICW ran fine after that and now my crm and other websites are fully
>functional again. I guess I'll manually add the ISA entires this time,
>instead of restoring from the XML file I backed up from the current
>production server.
>
>I'm a bit curious how you came across these solutions as I didn't see them
>when I was poiking aorund in google, yahoo or these newsgroups. Is there
>some holy microsoft support site I should know about or did you just know
>this from personal experience?
>

Hello Ryan,

I got some additional information for you. Please see:

Exchange Server Error Code Look-up
http://www.microsoft.com/downloads/d...899-7BB8-4208-
B7FC-09E02A13696C&displaylang=en

You can use the Error Code Lookup tool to determine error values from
decimal and hexadecimal error codes in Microsoft Windows? operating
systems. The tool can look up one or more values at a time. All values on
the command line will be looked up in Exchange's internal tables and
presented to you. If available, informational data associated with the
value or values will also be shown.

Hope this information helps. If you need any assistance in the future,
please feel free to let us know. We are glad to be of assistance!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: CEICW fails on firewall configuration every time. Please
help.
>thread-index: AcWdxdQmiZj5EUSzSculLYsASxVkcw==
>X-WBNR-Posting-Host: 216.223.91.74
>From: "=?Utf-8?B?Unlhbg==?=" <>
>References: <36D60FF0-1E7A-4F15-82F2->
<>
>Subject: RE: CEICW fails on firewall configuration every time. Please help.
>Date: Wed, 10 Aug 2005 09:09:04 -0700
>Lines: 27
>Message-ID: <90B443E2-4257-4DC2-B4C4->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143095
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks a lot....
>
>Step #2 seemed to do the trick for me:
>
>If the issue persists, please remove Web listeners and see whether it
>works. To do so, please see:
>
>a. Open the ISA Server 2004 Management, expand to Yourserver\Firewall
>Policy.
>
>b. On the right pane, click Toolbox tab.
>
>c. You will find the Web Listeners listed at the bottom.
>
>d. Right click each of the Web Listeners, and select Delete.
>
>e. Test the issue again.
>
>CEICW ran fine after that and now my crm and other websites are fully
>functional again. I guess I'll manually add the ISA entires this time,
>instead of restoring from the XML file I backed up from the current
>production server.
>
>I'm a bit curious how you came across these solutions as I didn't see them
>when I was poiking aorund in google, yahoo or these newsgroups. Is there
>some holy microsoft support site I should know about or did you just know
>this from personal experience?
>

Hello Eugene,

Thank you for posting to the SBS Newsgroup.

From the information you applied, I cannot find any error information in
the icwlog.txt, and get a clear idea what exact issue you have got. Due to
complex of the issue, please help to gather the following information:

1. Remove the existing icwlog.txt, reproduce the issue, and collect all the
files in %sbsprogramdir%\Support.

2. Collect all files in %system drive%\program files\Microsoft
Integration\windows small business server 2003\logs.

3. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
please go to C:\Windows\KB885918.log.

4. Please fully describe what exact issue you have got. When the issue
occurs, is there any error message shown to you? I strongly suggest you
that capture a screen shot to the Newsgroup for us to better understand
your issue.

Please zip these files and attach them to the Newsgroup.

Thanks for your time and cooperation, and am looking forward to hearing
from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Eugene Tsou" <>
>References: <36D60FF0-1E7A-4F15-82F2->
<>
<90B443E2-4257-4DC2-B4C4->
<>
>Subject: Re: CEICW fails on firewall configuration every time. Please help.
>Date: Thu, 11 Aug 2005 12:01:33 +0800
>Lines: 328
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Message-ID: <>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 61-62-131-213-adsl-tpe.static.so-net.net.tw
61.62.131.213
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP15.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143277
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hello Brandy,
>
>I've upgraded my SBS 2003 to SBS 2003 SP1. And then, I got the same error
>message as below; however, I got this message when upgrading ISA 2000 to
>2004. Attached is log file for your reference.
>
> thanks!
>
>Best Regards,
>
>Eugene Tsou
>
>
>
>
>
>
>
>
>
>""Brandy Nee [MSFT]"" <v->
¼¶¼g©ó¶l¥ó·s»D:. gbl...
>> Hello Ryan,
>>
>> Thank you for posting back!
>>
>> I am glad to hear that the information helps and thing is working
>> correctly
>> on your side now. The thought to troubleshoot your issue is:
>>
>> I notice that there is following error informaiton in icwlog.txt:
>>
>> Error 0x800700b7 returned from call to Recreating the SBS web listener().
>> Error 0x800700b7 returned from call to
>> CStingrayCommit::CreateWebPublishingRules().
>>
>> I researched the error 0x800700b7, it means Cannot create a file when
that
>> file already exists. That is why I ask to remove the Web Listeners and
see
>> whether it works.
>>
>> If you need any assistance in the future, please feel free to post back
to
>> this Newsgroup. We are glad to be working with you again!
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>>
>> --------------------
>>>Thread-Topic: CEICW fails on firewall configuration every time. Please
>> help.
>>>thread-index: AcWdxdQmiZj5EUSzSculLYsASxVkcw==
>>>X-WBNR-Posting-Host: 216.223.91.74
>>>From: "=?Utf-8?B?Unlhbg==?=" <>
>>>References: <36D60FF0-1E7A-4F15-82F2->
>> <>
>>>Subject: RE: CEICW fails on firewall configuration every time. Please
>>>help.
>>>Date: Wed, 10 Aug 2005 09:09:04 -0700
>>>Lines: 27
>>>Message-ID: <90B443E2-4257-4DC2-B4C4->
>>>MIME-Version: 1.0
>>>Content-Type: text/plain;
>>> charset="Utf-8"
>>>Content-Transfer-Encoding: 7bit
>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>Content-Class: urn:content-classes:message
>>>Importance: normal
>>>Priority: normal
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143095
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Thanks a lot....
>>>
>>>Step #2 seemed to do the trick for me:
>>>
>>>If the issue persists, please remove Web listeners and see whether it
>>>works. To do so, please see:
>>>
>>>a. Open the ISA Server 2004 Management, expand to Yourserver\Firewall
>>>Policy.
>>>
>>>b. On the right pane, click Toolbox tab.
>>>
>>>c. You will find the Web Listeners listed at the bottom.
>>>
>>>d. Right click each of the Web Listeners, and select Delete.
>>>
>>>e. Test the issue again.
>>>
>>>CEICW ran fine after that and now my crm and other websites are fully
>>>functional again. I guess I'll manually add the ISA entires this time,
>>>instead of restoring from the XML file I backed up from the current
>>>production server.
>>>
>>>I'm a bit curious how you came across these solutions as I didn't see
them
>>>when I was poiking aorund in google, yahoo or these newsgroups. Is there
>>>some holy microsoft support site I should know about or did you just
know
>>>this from personal experience?
>>>
>>
>
>
>