>

SBS 2008 / 2011 connect computer program wizard doesn’t work

When you try to connect a client computer to your Small Business Server 2008 or 2011 network via the http://connect you get “Internet Explorer cannot display the webpage” or the wizard stops with error: “An error occurred during the download of Connect Computer. Please go to http://connect and try again.”

Both problems had to do with DNS issues. In my case I had configured the client with static TCP/IP settings (IP address and DNS) instead of using the dhcp settings. To solve the problem I had to enter the sbs domain name in my network settings properties on the DNS tab, to append the DNS suffix like below.

After adding this, the connect computer program worked fine.

Posted in Blog, SBS 2008, SBS 2011 at February 22nd, 2011. 28 Comments.

Remove http redirect for exchange virtual directories, public, exchange, exadmin and exchweb error

When accidentally set a http redirect for your OWA on your Exchange 2007 / 2010 and SBS 2008 via IIS7 and inherited to all virtual sub directories and then try to remove it for the virtual directories public, exchange, exadmin and exchweb you get an error like this one:

HTTP Redirect:
There was an error while performing this operation.
Details:
Filename: \\?BackOfficeStorage\yourdomain.extension\Public Folders\web.config
Error: Cannot write configuration file

Solution: This error is generated because these virtual directories don’t have a physical path.
You can solve this issue by opening a command prompt window. Change directory to Windows\system32\Inetsrv. Then run this command: appcmd set config “/” /section:httpredirect /enabled:false -commit:apphost. Change and for your specific environment.

More information about this topic and setting http redirect for owa can be found here: Simplify the Outlook Web App URL

Posted in Blog, Exchange 2007, Exchange 2010, SBS 2008 at December 21st, 2010. No Comments.

SharePoint Services 3 Search event errors and update problems

I have written before here about this and mentioned to change the search account, but as now known this will create problems installing updates like SharePoint 3 Service Pack 2.

So changing the accounts is no solution because it creates new problems. Additional information about this problem is found here.

Browsing above problem I found another possible sollution for solving the Event ID:
2436 Windows SharePoint Services 3 Search

The start address cannot be crawled.
Context: Application ‘Search inde file on the search server’, Catalog ‘Search’
Details:
Access is denied. Verify that either the Default Content Access Account has access to this repository, or add a crawl rule to crawl this repository. If the repository being crawled is a SharePoint repository, verify that the account you are using has “Full Read” permissions on the SharePoint Web Application being crawled. (0×80041205)

1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
3. Right-click MSV1_0, point to New, and then click Multi-String Value.
4. Type BackConnectionHostNames, and then press ENTER.
5. Right-click BackConnectionHostNames, and then click Modify.
6. In the Value data box, type the URL mentioned in the above warning event, and then click OK. (With URL is meant only the remote.domain.com part.)
7. Quit Registry Editor, and then restart the IIS service.

Source: the Official SBS Blog

Posted in Blog, SBS 2008 at December 15th, 2010. 1 Comment.

SharePoint Services 3 Search event errors after applying certificate on a SBS2008 server

Update:
It seems that changing the search accounts, creates a problem with installing SharePoint updates like SP2. So before changing the search accounts read this article!

After installing a ssl certificate on a SBS 2008 server you get 2 different SharePoint Services 3 Search event errors.

Event ID: 2424
The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again

Event ID: 2436
The start address cannot be crawled.
Context: Application ‘Search inde file on the search server’, Catalog ‘Search’
Details:
Access is denied. Verify that either the Default Content Access Account has access to this repository, or add a crawl rule to crawl this repository. If the repository being crawled is a SharePoint repository, verify that the account you are using has “Full Read” permissions on the SharePoint Web Application being crawled. (0x80041205)

Solution: Got this solution from my brother, thanx for that:

First we have to create 2 service accounts: SPSearch and SPContent

  1. On your SBS, open Active Directory Users & Computers (Start –> Administrative Tools –> Active Directory Users & Computers.
  2. Within ADU&C, navigate to the Organizational Unit where you want to create the new user accounts.
  3. Right-click on the OU and select New –> User
  4. On the first page of the new user window, enter the following info:
    o First Name: SPSearch
    o Last Name:
    o Username: spsearch
  5. Click Next.
  6. Enter a strong password for the new account.
  7. Uncheck the option “User must change password at next login”
  8. Check the option “User cannot change password”
  9. Check the option “Password never expires”
  10. Click Next
  11. Click Finish.
  12. Repeat steps 3-11, using “SPContent” instead of “SPSearch” in step 4

We do not have to worry about granting any access or permissions to the two new accounts we created.
After the accounts have been created, close Active Directory Users & Computers, then open SharePoint Central Administration (Start –> Administrative Tools –> SharePoint 3.0 Central Administration).

  1. When SharePoint 3.0 Central Administration opens, go to the Operations tab.
  2. Click on the “Services on Server” link
  3. In the Action column, click the link to Stop the “Windows SharePoint Services Search” service.
    o You will receive a warning that stopping the search service will remove existing indices. Click OK to acknowledge the warning.
  4. When you return to the SharePoint Central Administration Operations tab, the Windows SharePoint Search Service will show as stopped. Click the link to Start the Windows SharePoint Services Search service. This will open the Search service configuration page.
  5. In the Service Account section, select the “Configurable” option
    o. For a username, enter \SPSearch (where is your AD domain).
    o. For a password, enter the strong password you assigned to the SPSearch account.
  1. In the Content Access Account section, select the “Configurable” option
    o. For a username, enter \SPContent (where is your AD domain)
    o. For a password, enter the strong password you assigned to the SPContent account.
  2. In the Search Database section, change the database name by appending and underscore 1 (“_1”) to the database name.
    o By default, the database name should be WSS_Search_[SERVERNAME], so we’re changing it to WSS_Search_[SERVERNAME]_1.
    o Changing the name is necessary because the default database name already exists with search data. If we attempted to use the default database name, SharePoint would throw an error that the database contains user-defined schema and cannot be used. By changing the search database name on this configuration page, SharePoint Central Administration will create a new database using this name and configure search to use this new database. Since the new database is empty, we won’t encounter any errors.
  1. Accept the remaining defaults and click the OK button.

After clicking OK, the settings should be applied and you should return to the “Services on Server” page in SharePoint Central Administration, and the Windows SharePoint Services Search” service should be listed as started.

Close SharePoint Central Administration and open the Services MMC (Start –> Administrative Tools –> Services). Restart the Windows SharePoint Services Search service. Verify that the Windows SharePoint Services Search service is configured to login with the SPSearch account you created.

And as last we have to create the following registry key:
[HKLM\System\CurrentControlSet\Control\Lsa] “DisableLoopbackCheck”=dword:00000001

Posted in Blog, SBS 2008 at October 26th, 2010. 2 Comments.

SBS 2008 or SBS 2011 installation error “The User Role Cannot be found. Select a different User Role” on Hyper-V

When installing SBS 2008 or SBS 2011 in Hyper-V you get the error “The User Role Cannot be found. Select a different User Role” during installation.

Solution: Problem is caused by different time zone settings. If Hyper-V has enabled time synchronization, this is the default settings, the time zone of the host and the guest has to be the same. If not this error will occur and only solution is to start over and reinstall SBS.

Recommendation is to turn off time syncronization for the SBS Hyper-V.
Start Hyper-V manager, select your SBS server and choose settings.
At the management part choose Intergration Services.

Then uncheck Time synchronization.

More information can be found here: KB 2097035

Update: error also occurs with SBS 2011.

Posted in Blog, Hyper-V, SBS 2008, SBS 2011 at October 8th, 2010. 1 Comment.

Event ID 10016, DistributedCOM: The application-specific permission settings do not grant Local Activation permission for the COM Server application

When you see the following evntlog error: Event ID 10016, Source:’DistributedCOM. “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {61738644-F196-11D0-9953-00C04FD919C1} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.”

Solution: If you don’t know witch application is given this error, you can copy the GUID behind CLSID and start the registry editor (regedit.exe) and search for the GUID. You will find witch application is creating this error.
After you know that you start Administrative Tools – Component Services. Expand Component Services, Computers, My Computer, DCOM Config. Then find the found application, in this case IIS WAMREG, choose properties and go to the security tab.

Then at Launch and Activation Permissions, choose customize (if not already chjoosen) and Edit.
Add the user account given in the event error, in this case Network Service account and give the account allow Local Launch and Local Activation rights. After that close all windows and restart IIS service.

Update: There is a similar error about another CLSID but the options to change permissions are greyed out. Read here how to solve this issue.

Posted in Blog, SBS 2008, Windows 2008, Windows 2008R2 at September 29th, 2010. No Comments.

Enable the use of saved credentials with remote desktop connection

When using remote desktop connection to connect to windows server 2008, 2008 R2, sbs 2008, vista or windows 7 and would use saved credentials. This doesn’t work when you start the connection you get the following error:

“Your system administrator does not allow the use of saved credentials to logon to the remote computer computername/ipadress because its identity is not fully verified. Please enter new credentials.” “The logon attempt failed”

Solution: This happens when trying to connect to a computer / server in another domain and no trust relationships exists. Windows then steps back to use NTLM and the default domain machine policy prohibits use of saved credentials. You can change this domain based or for a individual machine:

Start local group policy editor, start – run – gpedit.msc
Go to Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation
Edit “Allow Delegating Saved Credentials with NTLM-only Server Authentication”
Enable the policy, click Show and enter the value “TERMSRV/*” into the list.

Do the same thing for the following policies:
“Allow Delegating Saved Credentials”, “Allow Delegating Default Credentials with NTLM-only Server Authentication” en “Allow Delegating Default Credentials”

Close the policy editor,
open a command prompt and use “gpupdate /force” to apply the policy directly

Posted in Blog, SBS 2008, Windows 2008, Windows 2008R2 at September 21st, 2010. 34 Comments.

Exchange 2007 or 2010 migration fails with: Access control list (ACL) inheritance is blocked

The setup of Exchange 2007, Exchange 2010 or even SBS 2008 stops with the error “Access control list (ACL) inheritance is blocked”

Solution: Exchange setup requires that permission inheritance is enabled for the following objects:
Exchange Organization object, Exchange Administrative Group object, Exchange Servers container object, Exchange Address List object, Exchange Public Folder object and Exchange Public Folder tree object.

For Exchange 2003 start Exchange system manager and goto the objects and right click and choose properties, then on the security tab choose advanced and make sure “Allow inheritable permissions from the parent to propagate to this object and all child objects” is enabled. After that restart the Exchange server.

If security tab isn’t available you have to create the following registry value:
Value Name: ShowSecurityPage, Data Type: REG_DWORD, Radix: Binary, Value: 1 At the HKEY_CURRENT_USER\Software\Microsoft\Exchange\EXAdmin key.

For Exchange 2007 and 2010 use adsiedit, and browse to the object you want to change. Right click and choose properties, then on the security tab choose advanced and make sure “Allow inheritable permissions from the parent to propagate to this object and all child objects” is enabled. Wait till Active Directory replication has replicated the changes.

Posted in Blog, Exchange 2007, Exchange 2010, SBS 2008 at September 17th, 2010. No Comments.

Logon Failure on database while accessing or moving mailboxes

We were migrating a SBS 2003 server to a new SBS 2008 server via the swing migration method. After turning on the SBS 2008 server and temporary dc / exchange 2003 server we were not able to access or move the exchange 2003 mailboxes.

The mailbox move gives a: “The move-mailbox task for mailbox ‘mailboxname’ failed. Error: Failed to open mailbox with error: The operation failed.” error on the SBS 2008 (Exchange 2007) server.

On the Exchange 2003 server we get a: Event id 1022: “Logon Failure on database “First Storage Group\Mailbox Store” – Windows account domain\accountname; mailbox /o=domain/ou=first administrative group/cn=Recipients/cn=accountname.Error: 1144″ error.

Solution: It looks like that after forklift and update a exchange 2003 database it could take some time to connect because AD has to replicate the information between the 2 domain controllers. When this is done everything works fine. This can also occur after moving the exchange mailboxes to a the new sbs 2008 / exchange 2007 server.

Posted in Blog, Exchange 2007, SBS 2008 at August 17th, 2010. No Comments.

Default gateway disappears after restarting SBS 2008 server

Everytime you restart a Small Business Server 2008 the default gateway disappears.

Solution: When you take a look at the following registry key: HKLM/System/CurrentControlSet/Services/Tcpip/Parameters/Interfaces/ CLSID of the network card this is happening for, you’ll probably notice it by viewing the ipaddress value. Then open the “DefaultGateway” value. In our case you see the default gateway but above it there is an empty line. After removing the empty line, restarting works fine and the problem didn’t occur anymore.

Additonal information can be found on the official SBS blog

Posted in Blog, SBS 2008 at August 8th, 2010. 2 Comments.
Sharing Buttons by Linksku