Vista Bus to SBS2003R2 connectcomputer problems . . .

Hi Guys,
I have been running an SBS2003R2 premium network for some time now with
XPpro workstations and with ISA2004SP3. All server and workstation updates
are current through WSUSSP3.

I am now adding my fist Vista laptop and had no luck in attaching to the SBS
domain using the prefered ..\connectcomputer despite running the many KB
articles for the server and vista workstation. I have also been through a
diagnostics session with Jeff@TechSoEasy who is an emminent SBS guru. I can
connect manually and have detached using the recommended proceedure before
attempting the rejoin (still with the same problem)

I see that others here have also had the same problem as myself and wondered
what the Microsoft official position is regarding its fix. IE try to
connectcomputer and get an error after nshelp.exe runs and starts to download
files.

I am happy to provide as much information as is required to get to the
bottom of this problem, as I'm frustrated by the lack of conclusions evident
in other Q's relating to this matter.

Given that a fix is discovered I will post in the currently open
Experts-Exchange.com session that has been running for some days now.

Hi Chris,
I have spent 3 days amd the weekend on this to no avail.
Yep I run all of the KBs both on the server and on the Vista PC and checked
same many times. I have also unbound the IPv6 protocols from all NICs and
also those tunnel adaptors. Also uninstalled the Link-Layer protocols and
disbled the wireless NIC.

There are two issues:
1. I don't seem to be able to install the Security Certificate by clicking
on the Cert Error and then installing after viewing the certificate (this was
and still is possible when connecting an XPpro machine, I tested after I got
this problem)

2. When your start to run http:\\servername\connectcomputer I get the
dialogue that says do you want to run or save nshelp.exe. I click RUN and an
error stating:

Small Business Server Network Configuration Wizard:
"An errior occured while trying to copy the Client setup files. Check the
following and try again"
Check that the proxy box is not ticked (it isn't) It also says if I don'y
have a Proxy setup then I need to rerun the Client Deployment component on
the server. Since IE7 appears to be setup with a Proxy until I disable it I
haven't run the Client Deployment component on the server. Not sure how to do
this either.

If I click save instead of Run I can save the nshelp.exe to the desktop. But
as soon as I run that file (as admin) I get the same error.

Hope you guys can help, this is drive me and a number of others to
distraction.

REgards
Trevor




"Cris Hanna [SBS-MVP]" wrote:

> Trevor
> Have you installed the patches outlined in this KB?
> http://support.microsoft.com/kb/926505/en-us
>
> There are patches for the both the SBS server and the workstation.
>
> Have you disabled/unchecked IPv6 networking pieces on the laptop. SBS
> doesn't use IPv6 (for now anyway)
>
> You don't say what the error is that you're getting after starting the
> nshelp.exe
>
> "TrevorWhite" <> wrote in message
> news:62346BBF-9DA8-4B68-B984-...
> Hi Guys,
> I have been running an SBS2003R2 premium network for some time now with
> XPpro workstations and with ISA2004SP3. All server and workstation updates
> are current through WSUSSP3.
>
> I am now adding my fist Vista laptop and had no luck in attaching to the
> SBS
> domain using the prefered ..\connectcomputer despite running the many KB
> articles for the server and vista workstation. I have also been through a
> diagnostics session with Jeff@TechSoEasy who is an emminent SBS guru. I
> can
> connect manually and have detached using the recommended proceedure before
> attempting the rejoin (still with the same problem)
>
> I see that others here have also had the same problem as myself and
> wondered
> what the Microsoft official position is regarding its fix. IE try to
> connectcomputer and get an error after nshelp.exe runs and starts to
> download
> files.
>
> I am happy to provide as much information as is required to get to the
> bottom of this problem, as I'm frustrated by the lack of conclusions
> evident
> in other Q's relating to this matter.
>
> Given that a fix is discovered I will post in the currently open
> Experts-Exchange.com session that has been running for some days now.
>

TrevorWhite wrote:
> Hi Chris,
> I have spent 3 days amd the weekend on this to no avail.
> Yep I run all of the KBs both on the server and on the Vista PC and checked
> same many times. I have also unbound the IPv6 protocols from all NICs and
> also those tunnel adaptors. Also uninstalled the Link-Layer protocols and
> disbled the wireless NIC.
>
> There are two issues:
> 1. I don't seem to be able to install the Security Certificate by clicking
> on the Cert Error and then installing after viewing the certificate (this was
> and still is possible when connecting an XPpro machine, I tested after I got
> this problem)

I don't think IE on Vista does that. I haven't used it a great deal, but
I've always had to click 'go ahead anyway' and have never been able to
install an erroneous one. There's probably something a bit undocumented
involved.

>
> 2. When your start to run http:\\servername\connectcomputer I get the
> dialogue that says do you want to run or save nshelp.exe. I click RUN and an
> error stating:
>
> Small Business Server Network Configuration Wizard:
> "An errior occured while trying to copy the Client setup files. Check the
> following and try again"
> Check that the proxy box is not ticked (it isn't) It also says if I don'y
> have a Proxy setup then I need to rerun the Client Deployment component on
> the server. Since IE7 appears to be setup with a Proxy until I disable it I
> haven't run the Client Deployment component on the server. Not sure how to do
> this either.
>
> If I click save instead of Run I can save the nshelp.exe to the desktop. But
> as soon as I run that file (as admin) I get the same error.
>
> Hope you guys can help, this is drive me and a number of others to
> distraction.
>
A wildly long shot: I was having trouble today getting connectcomputer
to run at all, it kept telling me I needed to be an admin, even after
making a local admin of the same name and password. The answer there is
to turn off user account control. There was no ISA involved, and I
wonder if you are seeing the ISA manifestation of the same kind of thing.

Hi Joe,
Unfortunately I have been this route too. Have turned off the User Account
Control feature since this apparently locks some parts of the system drive
required by the connectcomputer script.

Also tried all flavours of running the procedure with admin rights. IE right
clicking IE7 and selcting run as Admin, logging in as the actual local admin
account, and running as myself with local admin rights. Still no change to
the situation.

I'd like to know how nshelp.exe attempts to download the files (IE FTP, or
what) and what permissions need to be apparent for this to succeed. Also what
ISA2004 SP3 setings need to be in place. (open ports etc.)

Most of all I'd like some input from MS, there seems to be too many
instances of this problem for it to be not significant.

Regards
Trevor
Regards

"Joe" wrote:

> TrevorWhite wrote:
> > Hi Chris,
> > I have spent 3 days amd the weekend on this to no avail.
> > Yep I run all of the KBs both on the server and on the Vista PC and checked
> > same many times. I have also unbound the IPv6 protocols from all NICs and
> > also those tunnel adaptors. Also uninstalled the Link-Layer protocols and
> > disbled the wireless NIC.
> >
> > There are two issues:
> > 1. I don't seem to be able to install the Security Certificate by clicking
> > on the Cert Error and then installing after viewing the certificate (this was
> > and still is possible when connecting an XPpro machine, I tested after I got
> > this problem)
>
> I don't think IE on Vista does that. I haven't used it a great deal, but
> I've always had to click 'go ahead anyway' and have never been able to
> install an erroneous one. There's probably something a bit undocumented
> involved.
>
> >
> > 2. When your start to run http:\\servername\connectcomputer I get the
> > dialogue that says do you want to run or save nshelp.exe. I click RUN and an
> > error stating:
> >
> > Small Business Server Network Configuration Wizard:
> > "An errior occured while trying to copy the Client setup files. Check the
> > following and try again"
> > Check that the proxy box is not ticked (it isn't) It also says if I don'y
> > have a Proxy setup then I need to rerun the Client Deployment component on
> > the server. Since IE7 appears to be setup with a Proxy until I disable it I
> > haven't run the Client Deployment component on the server. Not sure how to do
> > this either.
> >
> > If I click save instead of Run I can save the nshelp.exe to the desktop. But
> > as soon as I run that file (as admin) I get the same error.
> >
> > Hope you guys can help, this is drive me and a number of others to
> > distraction.
> >
> A wildly long shot: I was having trouble today getting connectcomputer
> to run at all, it kept telling me I needed to be an admin, even after
> making a local admin of the same name and password. The answer there is
> to turn off user account control. There was no ISA involved, and I
> wonder if you are seeing the ISA manifestation of the same kind of thing.
>

Hi Chris,
Thanks for your comment, did not know that about Technet (I don't subscribe)
I saw a Mr Rob Li of MSFT address this issue to a point but have not seen the
conclusion. Would be very gratefull if anyone could pass this request on.

My experience with Security Certificates is not as you describe it (even
under XP clients) If a certificate is not present then you get a prompt. This
is not the main problem but would be good to resolve.

Main problem is that with connectcomputer. Over the past few days we have
gone over every nook and cranny including the Intranet settings which by
default are turned off. You have to turn on Intranet settings and disable
protected mode also add the server FQDN or IP to the list of trusted sites.

Main problem to get started was removing all the NICs and other protocols
that come with Vista out of the box apart from the one b eing used to connect
with.

If this can't be resolved is there a white paper that explains all that has
to be done to replace this important of SBS wizards. I need the VPN and other
remote stuff to work reliably and in a managable way. I've learnt that not
running the wizards in SBS is ust asking for trouble.

Really hope someone can through some light on this.

Regards
Trevor



"Cris Hanna [SBS-MVP]" wrote:

> You will only get responses from Microsoft support in this forum if you
> are a Technet Subscriber, the way I understand it
>
> When you connect your Vista machine to the LAN, and it gets an IP from the
> LAN, you should not see the security certificate.
>
> The only other thing I can think of at this point would be to Check Vista
> and make sure that the IntraNet settings
>
> When I connect a new vista machine to the network using
> http://servername/connectcomputer I typically get one of those
> "information" bars telling me that Intranet sharing (I could be wrong on
> the exact wording) is not turned on...would I like to enable it...I say
> yes.
>
> I do that...run connect computer again...and I'm off to the races
> No security warnings...UAC does require me to let nshelp run, but thats
> it.
>
> The patches on your SBS server have taken care the errors about not being
> an Admin or having to run IE& "as Administrator"
>
>
> "TrevorWhite" <> wrote in message
> news:86124E9C-AD16-4EEC-9C41-...
>
> Hi Joe,
> Unfortunately I have been this route too. Have turned off the User Account
> Control feature since this apparently locks some parts of the system drive
> required by the connectcomputer script.
>
> Also tried all flavours of running the procedure with admin rights. IE
> right
> clicking IE7 and selcting run as Admin, logging in as the actual local
> admin
> account, and running as myself with local admin rights. Still no change to
> the situation.
>
> I'd like to know how nshelp.exe attempts to download the files (IE FTP, or
> what) and what permissions need to be apparent for this to succeed. Also
> what
> ISA2004 SP3 setings need to be in place. (open ports etc.)
>
> Most of all I'd like some input from MS, there seems to be too many
> instances of this problem for it to be not significant.
>
> Regards
> Trevor
> Regards
>
> "Joe" wrote:
>
> > TrevorWhite wrote:
> > > Hi Chris,
> > > I have spent 3 days amd the weekend on this to no avail.
> > > Yep I run all of the KBs both on the server and on the Vista PC and
> checked
> > > same many times. I have also unbound the IPv6 protocols from all NICs
> and
> > > also those tunnel adaptors. Also uninstalled the Link-Layer protocols
> and
> > > disbled the wireless NIC.
> > >
> > > There are two issues:
> > > 1. I don't seem to be able to install the Security Certificate by
> clicking
> > > on the Cert Error and then installing after viewing the certificate
> (this was
> > > and still is possible when connecting an XPpro machine, I tested after
> I got
> > > this problem)
> >
> > I don't think IE on Vista does that. I haven't used it a great deal, but
> > I've always had to click 'go ahead anyway' and have never been able to
> > install an erroneous one. There's probably something a bit undocumented
> > involved.
> >
> > >
> > > 2. When your start to run http:\\servername\connectcomputer I get the
> > > dialogue that says do you want to run or save nshelp.exe. I click RUN
> and an
> > > error stating:
> > >
> > > Small Business Server Network Configuration Wizard:
> > > "An errior occured while trying to copy the Client setup files. Check
> the
> > > following and try again"
> > > Check that the proxy box is not ticked (it isn't) It also says if I
> don'y
> > > have a Proxy setup then I need to rerun the Client Deployment
> component on
> > > the server. Since IE7 appears to be setup with a Proxy until I disable
> it I
> > > haven't run the Client Deployment component on the server. Not sure
> how to do
> > > this either.
> > >
> > > If I click save instead of Run I can save the nshelp.exe to the
> desktop. But
> > > as soon as I run that file (as admin) I get the same error.
> > >
> > > Hope you guys can help, this is drive me and a number of others to
> > > distraction.
> > >
> > A wildly long shot: I was having trouble today getting connectcomputer
> > to run at all, it kept telling me I needed to be an admin, even after
> > making a local admin of the same name and password. The answer there is
> > to turn off user account control. There was no ISA involved, and I
> > wonder if you are seeing the ISA manifestation of the same kind of
> thing.
> >
>

Hi Trevor,

I ran into this problem with a few Vista Bus laptops - Whenever I tried
to connect over a wireless connection.

1) Make sure you are on a wired connection, not wireless. There is no
need to disable the UAC.

2) Make sure you have installed the vista patches on your SBS machine.

3) In Control Panel -> Network Connections, disable all network adapters
except your wired NIC. There is no need to worry about your IP6 bindings.

4) Open internet explorer (no need to run as admin) and go to
http://server/connectcomputer, enable intranet settings when prompted.

5) Follow the bouncing ball.





To install the certificate on Vista...

1) right click your IE icon and choose "run as administrator"

2) When prompted that there is a problem with the website certificate,
click "Continue to this website (not recommended)."

3) Click on the certificate error, near your URL bar, and then View
Certificate.

4) Click Install Certificate -> Place all certificates in the following
store -> Trusted Root Certification Authorities.

5) Reboot if necessary






TrevorWhite wrote:
> Hi Chris,
> Thanks for your comment, did not know that about Technet (I don't subscribe)
> I saw a Mr Rob Li of MSFT address this issue to a point but have not seen the
> conclusion. Would be very gratefull if anyone could pass this request on.
>
> My experience with Security Certificates is not as you describe it (even
> under XP clients) If a certificate is not present then you get a prompt. This
> is not the main problem but would be good to resolve.
>
> Main problem is that with connectcomputer. Over the past few days we have
> gone over every nook and cranny including the Intranet settings which by
> default are turned off. You have to turn on Intranet settings and disable
> protected mode also add the server FQDN or IP to the list of trusted sites.
>
> Main problem to get started was removing all the NICs and other protocols
> that come with Vista out of the box apart from the one b eing used to connect
> with.
>
> If this can't be resolved is there a white paper that explains all that has
> to be done to replace this important of SBS wizards. I need the VPN and other
> remote stuff to work reliably and in a managable way. I've learnt that not
> running the wizards in SBS is ust asking for trouble.
>
> Really hope someone can through some light on this.
>
> Regards
> Trevor
>
>
>
> "Cris Hanna [SBS-MVP]" wrote:
>
>> You will only get responses from Microsoft support in this forum if you
>> are a Technet Subscriber, the way I understand it
>>
>> When you connect your Vista machine to the LAN, and it gets an IP from the
>> LAN, you should not see the security certificate.
>>
>> The only other thing I can think of at this point would be to Check Vista
>> and make sure that the IntraNet settings
>>
>> When I connect a new vista machine to the network using
>> http://servername/connectcomputer I typically get one of those
>> "information" bars telling me that Intranet sharing (I could be wrong on
>> the exact wording) is not turned on...would I like to enable it...I say
>> yes.
>>
>> I do that...run connect computer again...and I'm off to the races
>> No security warnings...UAC does require me to let nshelp run, but thats
>> it.
>>
>> The patches on your SBS server have taken care the errors about not being
>> an Admin or having to run IE& "as Administrator"
>>
>>
>> "TrevorWhite" <> wrote in message
>> news:86124E9C-AD16-4EEC-9C41-...
>>
>> Hi Joe,
>> Unfortunately I have been this route too. Have turned off the User Account
>> Control feature since this apparently locks some parts of the system drive
>> required by the connectcomputer script.
>>
>> Also tried all flavours of running the procedure with admin rights. IE
>> right
>> clicking IE7 and selcting run as Admin, logging in as the actual local
>> admin
>> account, and running as myself with local admin rights. Still no change to
>> the situation.
>>
>> I'd like to know how nshelp.exe attempts to download the files (IE FTP, or
>> what) and what permissions need to be apparent for this to succeed. Also
>> what
>> ISA2004 SP3 setings need to be in place. (open ports etc.)
>>
>> Most of all I'd like some input from MS, there seems to be too many
>> instances of this problem for it to be not significant.
>>
>> Regards
>> Trevor
>> Regards
>>
>> "Joe" wrote:
>>
>>> TrevorWhite wrote:
>>>> Hi Chris,
>>>> I have spent 3 days amd the weekend on this to no avail.
>>>> Yep I run all of the KBs both on the server and on the Vista PC and
>> checked
>>>> same many times. I have also unbound the IPv6 protocols from all NICs
>> and
>>>> also those tunnel adaptors. Also uninstalled the Link-Layer protocols
>> and
>>>> disbled the wireless NIC.
>>>>
>>>> There are two issues:
>>>> 1. I don't seem to be able to install the Security Certificate by
>> clicking
>>>> on the Cert Error and then installing after viewing the certificate
>> (this was
>>>> and still is possible when connecting an XPpro machine, I tested after
>> I got
>>>> this problem)
>>> I don't think IE on Vista does that. I haven't used it a great deal, but
>>> I've always had to click 'go ahead anyway' and have never been able to
>>> install an erroneous one. There's probably something a bit undocumented
>>> involved.
>>>
>>>> 2. When your start to run http:\\servername\connectcomputer I get the
>>>> dialogue that says do you want to run or save nshelp.exe. I click RUN
>> and an
>>>> error stating:
>>>>
>>>> Small Business Server Network Configuration Wizard:
>>>> "An errior occured while trying to copy the Client setup files. Check
>> the
>>>> following and try again"
>>>> Check that the proxy box is not ticked (it isn't) It also says if I
>> don'y
>>>> have a Proxy setup then I need to rerun the Client Deployment
>> component on
>>>> the server. Since IE7 appears to be setup with a Proxy until I disable
>> it I
>>>> haven't run the Client Deployment component on the server. Not sure
>> how to do
>>>> this either.
>>>>
>>>> If I click save instead of Run I can save the nshelp.exe to the
>> desktop. But
>>>> as soon as I run that file (as admin) I get the same error.
>>>>
>>>> Hope you guys can help, this is drive me and a number of others to
>>>> distraction.
>>>>
>>> A wildly long shot: I was having trouble today getting connectcomputer
>>> to run at all, it kept telling me I needed to be an admin, even after
>>> making a local admin of the same name and password. The answer there is
>>> to turn off user account control. There was no ISA involved, and I
>>> wonder if you are seeing the ISA manifestation of the same kind of
>> thing.

Brad wrote:
> Hi Trevor,
>
> I ran into this problem with a few Vista Bus laptops - Whenever I tried
> to connect over a wireless connection.
>
> 1) Make sure you are on a wired connection, not wireless. There is no
> need to disable the UAC.

I did three yesterday, new HP towers, not a wireless NIC between them.
>
> 2) Make sure you have installed the vista patches on your SBS machine.
>
> 3) In Control Panel -> Network Connections, disable all network adapters
> except your wired NIC. There is no need to worry about your IP6 bindings.

Just the one NIC, with wires.
>
> 4) Open internet explorer (no need to run as admin) and go to
> http://server/connectcomputer, enable intranet settings when prompted.

With a brand new machine, you're a local admin by default.
>
> 5) Follow the bouncing ball.

Which led to a message telling me that only an admin could do this.
Disable UAC and it all worked.

So how many of these patches are there? The only possible explanation is
that there is at least one more than I was aware of, and I went through
the MS documents and a couple of forum articles. I'm not currently where
the documents and my notes are, so I don't recall the numbers exactly,
especially as I'd just installed Exchange SP2 in the same session. I did
find a reference to a hotfix that appeared not to exist any longer, but
was part of SP2, but that was relevant only to Exchange.
>
>
>
>
>
> To install the certificate on Vista...
>
> 1) right click your IE icon and choose "run as administrator"
>
> 2) When prompted that there is a problem with the website certificate,
> click "Continue to this website (not recommended)."
>
> 3) Click on the certificate error, near your URL bar, and then View
> Certificate.
>
> 4) Click Install Certificate -> Place all certificates in the following
> store -> Trusted Root Certification Authorities.
>
> 5) Reboot if necessary
>
Oh joy. So only people with admin passwords can install certificates in
IE7. And a possible *reboot*? *And* you have to surf with IE as an
admin? One step forwards...

Hi Chris,
Thanks for replying. I think what is happening here is that connectcomputer
and the certificate error are not working so recommendations have been
pouring in thick and fast. Many of these are, perhaps, not necessary but
applying belts and braces when checking does not harm. The problem of course
is when actions are taken that actually prevent things working so even when
the correct fix is applied other actions mask it.

I am prepared to accept that I should not have had to conduct many of the
recommendations supplied to me. However, the fact remains that I cannot
connectcomputer or install the certificate with or without the changes
recommended by various individuals.

OK The ipconfig dumps are listed below:

Vista PC
****************************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : XXX-WVIB0006
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : XXXDOMAIN.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : XXXDOMAIN.local
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-16-D4-9F-6E-4C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.3.19(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 15 October 2007 22:07:17
Lease Expires . . . . . . . . . . : 24 October 2007 10:49:04
Default Gateway . . . . . . . . . : 192.168.3.1
DHCP Server . . . . . . . . . . . : 192.168.3.1
DNS Servers . . . . . . . . . . . : 192.168.3.1
Primary WINS Server . . . . . . . : 192.168.3.1
NetBIOS over Tcpip. . . . . . . . : Enabled

SBS Server
****************************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : XXX2003
Primary Dns Suffix . . . . . . . : XXXDOMAIN.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : XXXDOMAIN.local

Ethernet adapter Internal:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 8255x-based PCI Ethernet
Adapter (10/100)
Physical Address. . . . . . . . . : 00-02-B3-D8-88-BD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.3.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.3.1
Primary WINS Server . . . . . . . : 192.168.3.1

Ethernet adapter External:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 8255x-based PCI Ethernet
Adapter (10/100) #2
Physical Address. . . . . . . . . : 00-02-B3-D8-88-60
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.100.251
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.254
DNS Servers . . . . . . . . . . . : 192.168.3.1
NetBIOS over Tcpip. . . . . . . . : Disabled

I will also list here the results of a sysinfo dump on the SBS conducted
this morning:

Host Name: XXX2003
OS Name: Microsoft(R) Windows(R) Server 2003 for Small
Business Server
OS Version: 5.2.3790 Service Pack 2 Build 3790
OS Manufacturer: Microsoft Corporation
OS Configuration: Primary Domain Controller
OS Build Type: Multiprocessor Free
Registered Owner: a user at
Registered Organization: Whytec Limited
Product ID: 74995-067-2942945-42742
Original Install Date: 10/05/2007, 20:31:08
System Up Time: 2 Days, 16 Hours, 0 Minutes, 24 Seconds
System Manufacturer: Intel Corporation
System Model: SE7500CW2
System Type: X86-based PC
Processor(s): 2 Processor(s) Installed.
[01]: x86 Family 15 Model 2 Stepping 7
GenuineIntel ~2392 Mhz
[02]: x86 Family 15 Model 2 Stepping 7
GenuineIntel ~2392 Mhz
BIOS Version: PTLTD - 6040000
Windows Directory: C:\WINDOWS
System Directory: C:\WINDOWS\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-gb;English (United Kingdom)
Input Locale: en-gb;English (United Kingdom)
Time Zone: (GMT) Greenwich Mean Time : Dublin, Edinburgh,
Lisbon, London
Total Physical Memory: 1,023 MB
Available Physical Memory: 251 MB
Page File: Max Size: 2,473 MB
Page File: Available: 1,020 MB
Page File: In Use: 1,453 MB
Page File Location(s): C:\pagefile.sys
Domain: XXXDOMAIN.local
Logon Server: \\XXX2003
Hotfix(s): 79 Hotfix(s) Installed.
[01]: File 1
[02]: File 1
[03]: File 1
[04]: File 1
[05]: File 1
[06]: File 1
[07]: File 1
[08]: File 1
[09]: File 1
[10]: File 1
[11]: File 1
[12]: File 1
[13]: File 1
[14]: File 1
[15]: File 1
[16]: File 1
[17]: File 1
[18]: File 1
[19]: File 1
[20]: File 1
[21]: File 1
[22]: File 1
[23]: File 1
[24]: File 1
[25]: File 1
[26]: File 1
[27]: File 1
[28]: File 1
[29]: File 1
[30]: Q147222
[31]: KB933854 - QFE
[32]: SP1 - SP
[33]: KB907747 - Update
[34]: KB911829 - Update
[35]: KB912442 - Update
[36]: KB916803 - Update
[37]: KB924334 - Update
[38]: KB926666 - Update
[39]: KB931832 - Update
[40]: KB917283 - Update
[41]: KB922770 - Update
[42]: KB928365 - Update
[43]: KB926601 - Update
[44]: Q927978
[45]: Q936181
[46]: IDNMitigationAPIs - Update
[47]: NLSDownlevelMapping - Update
[48]: KB925398_WMP64
[49]: KB929969 - Update
[50]: KB931768-IE7 - Update
[51]: KB933566-IE7 - Update
[52]: KB937143-IE7 - Update
[53]: KB938127-IE7 - Update
[54]: KB939653-IE7 - Update
[55]: KB914961 - Service Pack
[56]: KB921503 - Update
[57]: KB924667-v2 - Update
[58]: KB925876 - Update
[59]: KB925902 - Update
[60]: KB926122 - Update
[61]: KB927891 - Update
[62]: KB929123 - Update
[63]: KB930178 - Update
[64]: KB931768 - Update
[65]: KB931784 - Update
[66]: KB931836 - Update
[67]: KB932168 - Update
[68]: KB933360 - Update
[69]: KB933729 - Update
[70]: KB933854 - Update
[71]: KB935839 - Update
[72]: KB935840 - Update
[73]: KB935966 - Update
[74]: KB936021 - Update
[75]: KB936357 - Update
[76]: KB936594 - Update
[77]: KB936782 - Update
[78]: KB941202 - Update
[79]: XpsEPSC
Network Card(s): 2 NIC(s) Installed.
[01]: Intel 8255x-based PCI Ethernet Adapter
(10/100)
Connection Name: Internal
DHCP Enabled: No
IP address(es)
[01]: 192.168.3.1
[02]: Intel 8255x-based PCI Ethernet Adapter
(10/100)
Connection Name: External
DHCP Enabled: No
IP address(es)
[01]: 192.168.100.251

Please also find below a sysinfo dump for the Vista PC:

Host Name: XXX-WVIB0006
OS Name: Microsoft© Windows VistaT Business
OS Version: 6.0.6000 N/A Build 6000
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
Registered Owner: TrevorW
Registered Organization:
Product ID: 89576-428-6663347-71772
Original Install Date: 09/10/2007, 21:03:57
System Boot Time: 16/10/2007, 07:14:15
System Manufacturer: Hewlett-Packard
System Model: HP Compaq nx9420 (RH457ET#ABD)
System Type: X86-based PC
Processor(s): 1 Processor(s) Installed.
[01]: x64 Family 6 Model 15 Stepping 6
GenuineIntel ~1000 Mhz
BIOS Version: Hewlett-Packard 68YAF Ver. F.17, 25/09/2006
Windows Directory: C:\Windows
System Directory: C:\Windows\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-gb;English (United Kingdom)
Input Locale: en-gb;English (United Kingdom)
Time Zone: (GMT) Greenwich Mean Time : Dublin, Edinburgh,
Lisbon, London
Total Physical Memory: 1,023 MB
Available Physical Memory: 612 MB
Page File: Max Size: 2,300 MB
Page File: Available: 1,695 MB
Page File: In Use: 605 MB
Page File Location(s): C:\pagefile.sys
Domain: WORKGROUP
Logon Server: \\XXX-WVIB0006
Hotfix(s): 37 Hotfix(s) Installed.
[01]: {375F080F-88E9-4EA1-A177-C0F091546AC8}
[02]: {F2071927-C690-498C-BDBC-0C89A0FABC5A}
[03]: KB905866
[04]: KB925902
[05]: KB929399
[06]: KB929550
[07]: KB929577
[08]: KB930178
[09]: KB930568
[10]: KB930857
[11]: KB930955
[12]: KB931099
[13]: KB931573
[14]: KB932471
[15]: KB933579
[16]: KB933729
[17]: KB936021
[18]: KB936357
[19]: KB936782
[20]: KB936825
[21]: KB937077
[22]: KB938127
[23]: KB939159
[24]: KB941202
[25]: KB929123
[26]: KB929916
[27]: KB931213
[28]: KB933360
[29]: KB933928
[30]: KB935280
[31]: KB935807
[32]: KB936824
[33]: KB938123
[34]: KB938194
[35]: KB938979
[36]: KB939653
[37]: KB941651
Network Card(s): 1 NIC(s) Installed.
[01]: Broadcom NetXtreme Gigabit Ethernet
Connection Name: Local Area Connection
DHCP Enabled: Yes
DHCP Server: 192.168.3.1
IP address(es)
[01]: 192.168.3.19



In reply to your 2nd question, the following happens:
1. Right click on IE7 and click Run as Administrator. IE7 launches with my
home page (google) and an information bar stating "Protected mode is
currently turned off for the Local intranet zone. Click here to open settings"

2. Click in the address bar and type http://XXX2003/connectcomputer and
press enter. Get "There is a problem with this websites security certificate"

3. Click Continue to this website (not recommended) and get SBS Network
Configuration window with text "You will need your logon name and password to
the Small Business Server network. If the internet Explorer Information bar
says that intranet settings are niow turned off by default, follow the
prompts to enable Intranet Settings. You may receive a security warning.
Review the warning to ensure that the content is signed by Microsodft and
then click Yes to install the software. Note : If this computer is running
Windows Vista, Click Run when prompted to download nshelp.exe, and then click
accept if you are prompted for User Account Control.

4. Click on link labeled Connect to the network now. Displays File Download
- Security Warning Do you want to run or save this file? (Name : nshelp.exe
Type : Application From : XX2003. Dragging this window to one side reveal a
download progress window labeled "0% of nshelp.exe from XXX2003 completed.

5. Click on Run in the File Download - Security Warning window. Displays
Small Business Server Netork Configuration Wizard window with text: "An error
occured while trying to copy the client setup files. Check the following, and
then try again. If you use a public proxy server to browse the internet,
clear the internet explorer connectionsetting for using a proxy server. To do
this, from the tools menu, click Internet Options, Click the Connections tab,
click teh LAN Settings button, and then clear the check box in the Proxy
server. If you do not have a proxy server configured for Internet Explorer,
then your network administrator must reinstall the client deployment
component on the server. To do this, from Add or Remove programs run Windows
Small Business Server Setup in Maintenance mode, and then run Client Setup
again.

6. Click the OK button (only thing can do) Control returns to the Network
Configuration window described in 3 above.

I have turned off the proxy settings in Internet Explorer and I have also re
installed the client deployment component as described. No further forward.

Sorry this is a long post but I want to communicate unambiguosly. Please
advise if there are any updates that have not been applied to the server or
Vista PC

Regards
Trevor




"Cris Hanna [SBS-MVP]" wrote:

> Unfortunately the request cannot be passed on
>
> regarding "Main problem is that with connectcomputer. Over the past few
> days we have gone over every nook and cranny including the Intranet
> settings which by default are turned off. You have to turn on Intranet
> settings and disable protected mode also add the server FQDN or IP to the
> list of trusted sites." None of these (except the intranet thing which
> pops up in explorer) are required if you have patched the SBS server with
> the Vista and Office 2007 compatibility patches
>
> You should not have had to remove all those networking pieces.
>
> I would like to see two things
> 1. go to a command prompt on your sbsserver and run "ipconfig /all >
> c:\serverconfig.txt do the same thing your vista workstation
>
> copy and paste the complete output of both files here and identify which
> is which.
>
> 2. On the Vista Workstation, right click on the IE icon on the desktop
> and choose run as Adminstrator
> when IE opens type http://sbsservername/connectcomputer
>
> What happens??
>
>
>
>
>
> "TrevorWhite" <> wrote in message
> news:585DA4ED-C4C4-4F1E-B307-...
> Hi Chris,
> Thanks for your comment, did not know that about Technet (I don't
> subscribe)
> I saw a Mr Rob Li of MSFT address this issue to a point but have not seen
> the
> conclusion. Would be very gratefull if anyone could pass this request on.
>
> My experience with Security Certificates is not as you describe it (even
> under XP clients) If a certificate is not present then you get a prompt.
> This
> is not the main problem but would be good to resolve.
>
> Main problem is that with connectcomputer. Over the past few days we have
> gone over every nook and cranny including the Intranet settings which by
> default are turned off. You have to turn on Intranet settings and disable
> protected mode also add the server FQDN or IP to the list of trusted
> sites.
>
> Main problem to get started was removing all the NICs and other protocols
> that come with Vista out of the box apart from the one b eing used to
> connect
> with.
>
> If this can't be resolved is there a white paper that explains all that
> has
> to be done to replace this important of SBS wizards. I need the VPN and
> other
> remote stuff to work reliably and in a managable way. I've learnt that not
> running the wizards in SBS is ust asking for trouble.
>
> Really hope someone can through some light on this.
>
> Regards
> Trevor
>
>
>
> "Cris Hanna [SBS-MVP]" wrote:
>
> > You will only get responses from Microsoft support in this forum if you
> > are a Technet Subscriber, the way I understand it
> >
> > When you connect your Vista machine to the LAN, and it gets an IP from
> the
> > LAN, you should not see the security certificate.
> >
> > The only other thing I can think of at this point would be to Check
> Vista
> > and make sure that the IntraNet settings
> >
> > When I connect a new vista machine to the network using
> > http://servername/connectcomputer I typically get one of those
> > "information" bars telling me that Intranet sharing (I could be wrong on
> > the exact wording) is not turned on...would I like to enable it...I say
> > yes.
> >
> > I do that...run connect computer again...and I'm off to the races
> > No security warnings...UAC does require me to let nshelp run, but thats
> > it.
> >
> > The patches on your SBS server have taken care the errors about not
> being
> > an Admin or having to run IE& "as Administrator"
> >
> >
> > "TrevorWhite" <> wrote in message
> > news:86124E9C-AD16-4EEC-9C41-...
> >
> > Hi Joe,
> > Unfortunately I have been this route too. Have turned off the User
> Account
> > Control feature since this apparently locks some parts of the system
> drive
> > required by the connectcomputer script.
> >
> > Also tried all flavours of running the procedure with admin rights. IE
> > right
> > clicking IE7 and selcting run as Admin, logging in as the actual local
> > admin
> > account, and running as myself with local admin rights. Still no change
> to
> > the situation.
> >
> > I'd like to know how nshelp.exe attempts to download the files (IE FTP,
> or
> > what) and what permissions need to be apparent for this to succeed. Also
> > what
> > ISA2004 SP3 setings need to be in place. (open ports etc.)
> >
> > Most of all I'd like some input from MS, there seems to be too many
> > instances of this problem for it to be not significant.
> >
> > Regards
> > Trevor
> > Regards
> >
> > "Joe" wrote:
> >
> > > TrevorWhite wrote:
> > > > Hi Chris,
> > > > I have spent 3 days amd the weekend on this to no avail.
> > > > Yep I run all of the KBs both on the server and on the Vista PC and
> > checked
> > > > same many times. I have also unbound the IPv6 protocols from all
> NICs
> > and
> > > > also those tunnel adaptors. Also uninstalled the Link-Layer
> protocols
> > and
> > > > disbled the wireless NIC.
> > > >
> > > > There are two issues:
> > > > 1. I don't seem to be able to install the Security Certificate by
> > clicking
> > > > on the Cert Error and then installing after viewing the certificate
> > (this was
> > > > and still is possible when connecting an XPpro machine, I tested
> after
> > I got
> > > > this problem)
> > >
> > > I don't think IE on Vista does that. I haven't used it a great deal,
> but
> > > I've always had to click 'go ahead anyway' and have never been able to
> > > install an erroneous one. There's probably something a bit
> undocumented
> > > involved.
> > >
> > > >
> > > > 2. When your start to run http:\\servername\connectcomputer I get
> the
> > > > dialogue that says do you want to run or save nshelp.exe. I click
> RUN
> > and an
> > > > error stating:
> > > >
> > > > Small Business Server Network Configuration Wizard:
> > > > "An errior occured while trying to copy the Client setup files.
> Check
> > the
> > > > following and try again"
> > > > Check that the proxy box is not ticked (it isn't) It also says if I
> > don'y
> > > > have a Proxy setup then I need to rerun the Client Deployment
> > component on
> > > > the server. Since IE7 appears to be setup with a Proxy until I
> disable
> > it I
> > > > haven't run the Client Deployment component on the server. Not sure
> > how to do
> > > > this either.
> > > >
> > > > If I click save instead of Run I can save the nshelp.exe to the
> > desktop. But
> > > > as soon as I run that file (as admin) I get the same error.
> > > >
> > > > Hope you guys can help, this is drive me and a number of others to
> > > > distraction.
> > > >
> > > A wildly long shot: I was having trouble today getting connectcomputer
> > > to run at all, it kept telling me I needed to be an admin, even after
> > > making a local admin of the same name and password. The answer there
> is
> > > to turn off user account control. There was no ISA involved, and I
> > > wonder if you are seeing the ISA manifestation of the same kind of
> > thing.
> > >
> >
>

Yep thats what I (and a number of others) are doing and not getting the
expected results. I have posted a full account and sysinfo dumps for the SBS
and Vista box in my last reply to Chris Hanna. Let me know if there are any
pointers you can give me.

If I fix this I promise to post the complete solution . . .thats waht been
frustrating me . . . recommendations have been given then the thread just
goes quiet.

The 'extra' operations that I have described have been as the result of 3
days activity last week on an Experts-Exchange.com thread. This is still open
with myself and Jeff@Techsoeasy mainly participating . . . nothing doing yet
!!!

Thanks for your comment so far.

Regards
Trevor

"Brad" wrote:

> Hi Trevor,
>
> I ran into this problem with a few Vista Bus laptops - Whenever I tried
> to connect over a wireless connection.
>
> 1) Make sure you are on a wired connection, not wireless. There is no
> need to disable the UAC.
>
> 2) Make sure you have installed the vista patches on your SBS machine.
>
> 3) In Control Panel -> Network Connections, disable all network adapters
> except your wired NIC. There is no need to worry about your IP6 bindings.
>
> 4) Open internet explorer (no need to run as admin) and go to
> http://server/connectcomputer, enable intranet settings when prompted.
>
> 5) Follow the bouncing ball.
>
>
>
>
>
> To install the certificate on Vista...
>
> 1) right click your IE icon and choose "run as administrator"
>
> 2) When prompted that there is a problem with the website certificate,
> click "Continue to this website (not recommended)."
>
> 3) Click on the certificate error, near your URL bar, and then View
> Certificate.
>
> 4) Click Install Certificate -> Place all certificates in the following
> store -> Trusted Root Certification Authorities.
>
> 5) Reboot if necessary
>
>
>
>
>
>
> TrevorWhite wrote:
> > Hi Chris,
> > Thanks for your comment, did not know that about Technet (I don't subscribe)
> > I saw a Mr Rob Li of MSFT address this issue to a point but have not seen the
> > conclusion. Would be very gratefull if anyone could pass this request on.
> >
> > My experience with Security Certificates is not as you describe it (even
> > under XP clients) If a certificate is not present then you get a prompt. This
> > is not the main problem but would be good to resolve.
> >
> > Main problem is that with connectcomputer. Over the past few days we have
> > gone over every nook and cranny including the Intranet settings which by
> > default are turned off. You have to turn on Intranet settings and disable
> > protected mode also add the server FQDN or IP to the list of trusted sites.
> >
> > Main problem to get started was removing all the NICs and other protocols
> > that come with Vista out of the box apart from the one b eing used to connect
> > with.
> >
> > If this can't be resolved is there a white paper that explains all that has
> > to be done to replace this important of SBS wizards. I need the VPN and other
> > remote stuff to work reliably and in a managable way. I've learnt that not
> > running the wizards in SBS is ust asking for trouble.
> >
> > Really hope someone can through some light on this.
> >
> > Regards
> > Trevor
> >
> >
> >
> > "Cris Hanna [SBS-MVP]" wrote:
> >
> >> You will only get responses from Microsoft support in this forum if you
> >> are a Technet Subscriber, the way I understand it
> >>
> >> When you connect your Vista machine to the LAN, and it gets an IP from the
> >> LAN, you should not see the security certificate.
> >>
> >> The only other thing I can think of at this point would be to Check Vista
> >> and make sure that the IntraNet settings
> >>
> >> When I connect a new vista machine to the network using
> >> http://servername/connectcomputer I typically get one of those
> >> "information" bars telling me that Intranet sharing (I could be wrong on
> >> the exact wording) is not turned on...would I like to enable it...I say
> >> yes.
> >>
> >> I do that...run connect computer again...and I'm off to the races
> >> No security warnings...UAC does require me to let nshelp run, but thats
> >> it.
> >>
> >> The patches on your SBS server have taken care the errors about not being
> >> an Admin or having to run IE& "as Administrator"
> >>
> >>
> >> "TrevorWhite" <> wrote in message
> >> news:86124E9C-AD16-4EEC-9C41-...
> >>
> >> Hi Joe,
> >> Unfortunately I have been this route too. Have turned off the User Account
> >> Control feature since this apparently locks some parts of the system drive
> >> required by the connectcomputer script.
> >>
> >> Also tried all flavours of running the procedure with admin rights. IE
> >> right
> >> clicking IE7 and selcting run as Admin, logging in as the actual local
> >> admin
> >> account, and running as myself with local admin rights. Still no change to
> >> the situation.
> >>
> >> I'd like to know how nshelp.exe attempts to download the files (IE FTP, or
> >> what) and what permissions need to be apparent for this to succeed. Also
> >> what
> >> ISA2004 SP3 setings need to be in place. (open ports etc.)
> >>
> >> Most of all I'd like some input from MS, there seems to be too many
> >> instances of this problem for it to be not significant.
> >>
> >> Regards
> >> Trevor
> >> Regards
> >>
> >> "Joe" wrote:
> >>
> >>> TrevorWhite wrote:
> >>>> Hi Chris,
> >>>> I have spent 3 days amd the weekend on this to no avail.
> >>>> Yep I run all of the KBs both on the server and on the Vista PC and
> >> checked
> >>>> same many times. I have also unbound the IPv6 protocols from all NICs
> >> and
> >>>> also those tunnel adaptors. Also uninstalled the Link-Layer protocols
> >> and
> >>>> disbled the wireless NIC.
> >>>>
> >>>> There are two issues:
> >>>> 1. I don't seem to be able to install the Security Certificate by
> >> clicking
> >>>> on the Cert Error and then installing after viewing the certificate
> >> (this was
> >>>> and still is possible when connecting an XPpro machine, I tested after
> >> I got
> >>>> this problem)
> >>> I don't think IE on Vista does that. I haven't used it a great deal, but
> >>> I've always had to click 'go ahead anyway' and have never been able to
> >>> install an erroneous one. There's probably something a bit undocumented
> >>> involved.
> >>>
> >>>> 2. When your start to run http:\\servername\connectcomputer I get the
> >>>> dialogue that says do you want to run or save nshelp.exe. I click RUN
> >> and an
> >>>> error stating:
> >>>>
> >>>> Small Business Server Network Configuration Wizard:
> >>>> "An errior occured while trying to copy the Client setup files. Check
> >> the
> >>>> following and try again"
> >>>> Check that the proxy box is not ticked (it isn't) It also says if I
> >> don'y
> >>>> have a Proxy setup then I need to rerun the Client Deployment
> >> component on
> >>>> the server. Since IE7 appears to be setup with a Proxy until I disable
> >> it I
> >>>> haven't run the Client Deployment component on the server. Not sure
> >> how to do
> >>>> this either.
> >>>>
> >>>> If I click save instead of Run I can save the nshelp.exe to the
> >> desktop. But
> >>>> as soon as I run that file (as admin) I get the same error.
> >>>>
> >>>> Hope you guys can help, this is drive me and a number of others to
> >>>> distraction.
> >>>>
> >>> A wildly long shot: I was having trouble today getting connectcomputer
> >>> to run at all, it kept telling me I needed to be an admin, even after
> >>> making a local admin of the same name and password. The answer there is
> >>> to turn off user account control. There was no ISA involved, and I
> >>> wonder if you are seeing the ISA manifestation of the same kind of
> >> thing.
>

Hi Joe,
Thanks for your reply.
Good point about how many of these patches are there??
There are two documents which seem to assume that ISA2004 is at SP2. The
latest is SP3 and contain many of the KBs/Patches required for Vista
integration. I have listed the sysinfo dumps for both my Vista PC and SBS box
in my last reply to Chris Hanna. I have also listed my Config /All dumps
(sanitised for mr public)

If you can spot any ommisions I'll investigate. Vista is clearly not ready
for simple integration with SBS but with MS pushing SP1 out to 2008 I don't
think there is any option but to get stuck in as many of my clients will not
appreciate issues such as this and will just go elsewhere for Vista
deployments . . . and I can't have that.

Regards
Trevor

"Joe" wrote:

> Brad wrote:
> > Hi Trevor,
> >
> > I ran into this problem with a few Vista Bus laptops - Whenever I tried
> > to connect over a wireless connection.
> >
> > 1) Make sure you are on a wired connection, not wireless. There is no
> > need to disable the UAC.
>
> I did three yesterday, new HP towers, not a wireless NIC between them.
> >
> > 2) Make sure you have installed the vista patches on your SBS machine.
> >
> > 3) In Control Panel -> Network Connections, disable all network adapters
> > except your wired NIC. There is no need to worry about your IP6 bindings.
>
> Just the one NIC, with wires.
> >
> > 4) Open internet explorer (no need to run as admin) and go to
> > http://server/connectcomputer, enable intranet settings when prompted.
>
> With a brand new machine, you're a local admin by default.
> >
> > 5) Follow the bouncing ball.
>
> Which led to a message telling me that only an admin could do this.
> Disable UAC and it all worked.
>
> So how many of these patches are there? The only possible explanation is
> that there is at least one more than I was aware of, and I went through
> the MS documents and a couple of forum articles. I'm not currently where
> the documents and my notes are, so I don't recall the numbers exactly,
> especially as I'd just installed Exchange SP2 in the same session. I did
> find a reference to a hotfix that appeared not to exist any longer, but
> was part of SP2, but that was relevant only to Exchange.
> >
> >
> >
> >
> >
> > To install the certificate on Vista...
> >
> > 1) right click your IE icon and choose "run as administrator"
> >
> > 2) When prompted that there is a problem with the website certificate,
> > click "Continue to this website (not recommended)."
> >
> > 3) Click on the certificate error, near your URL bar, and then View
> > Certificate.
> >
> > 4) Click Install Certificate -> Place all certificates in the following
> > store -> Trusted Root Certification Authorities.
> >
> > 5) Reboot if necessary
> >
> Oh joy. So only people with admin passwords can install certificates in
> IE7. And a possible *reboot*? *And* you have to surf with IE as an
> admin? One step forwards...
>