Marie’s recent list of new SBS (et al) related KB articles

This was posted by Marie McFadden on March 26, 2004:


SBS 2003
827606 You receive an “Error 403 – Forbidden” error message when you click a
http://support.microsoft.com/?id=827606
827610 Shutdown and restart operations are very slow in Windows Small Business
http://support.microsoft.com/?id=827610
828053 ISA Server prevents connection to a remote desktop when you connect
http://support.microsoft.com/?id=828053
830044 Macintosh users cannot connect to Outlook Web Access when it is hosted
http://support.microsoft.com/?id=830044
830254 How to move the client programs folder to another location in Windows
http://support.microsoft.com/?id=830254
830575 Backup fails on a computer that is running Small Business Server 2003
http://support.microsoft.com/?id=830575
831747 Overview of the Business Contact Manager for Outlook 2003 Update:
http://support.microsoft.com/?id=831747
833779 “Unable to create a shadow copy” error appears in event log after you
http://support.microsoft.com/?id=833779
836412 Internet Explorer opens and displays .log files without prompting you if
http://support.microsoft.com/?id=836412
838304 How to publish http://Companyweb to the Internet by using ISA Server
http://support.microsoft.com/?id=838304
839262 Services may stop abruptly when you shut down or restart a Windows Small
http://support.microsoft.com/?id=839262

EXCHANGE 2000
328879 Using Exchange Server with Storage-Attached Network and Network-Attached
http://support.microsoft.com/?id=328879
833331 Updated scripting files available to migrate from Exchange 2000 Server
http://support.microsoft.com/?id=833331
836549 The SMTP virtual server intermittently crashes after you register a low
http://support.microsoft.com/?id=836549

EXCHANGE 2003
830188 How to grant permission to use Outlook Mobile Access to specific users
http://support.microsoft.com/?id=830188
833340 How to modify the appearance and the functionality of Outlook Web Access
http://support.microsoft.com/?id=833340
836564 How to change the default connection response that you receive after you
http://support.microsoft.com/?id=836564
836993 How to obtain the latest updates for Exchange Server 2003
http://support.microsoft.com/?id=836993
837391 Exchange Server 2003 and Exchange 2000 Server require NetBIOS name
http://support.microsoft.com/?id=837391

INTERNET EXPLORER
828432 Third-party software may not function as expected after you apply the
http://support.microsoft.com/?id=828432
837920 SAP may not function as expected after you apply the Internet Explorer
http://support.microsoft.com/?id=837920

ISA 2000
837833 How to publish a DNS server in Internet Security and Acceleration Server
http://support.microsoft.com/?id=837833

OUTLOOK
278061 Attachments in a RTF Message Are Received As Winmail.dat Attachments
http://support.microsoft.com/?id=278061
318119 The custom layout in an e-mail message do not appear as expected in the
http://support.microsoft.com/?id=318119
830336 The .PST File Has a Different Format and Folder Size Limit in Outlook
http://support.microsoft.com/?id=830336
831400 Search Folders Are Missing in Outlook Web Access
http://support.microsoft.com/?id=831400
832925 How to configure the size limit for both .pst and .ost files in Outlook
http://support.microsoft.com/?id=832925
833799 How to configure static communication ports in Outlook 2003
http://support.microsoft.com/?id=833799
834365 You receive a ?Connection Error: 0x800ccc19 ? The connection to the
http://support.microsoft.com/?id=834365
834364 E-mail messages with a sensitivity of Private cannot be automatically
http://support.microsoft.com/?id=834364
836558 You cannot open a Business Contact record in Outlook 2003
http://support.microsoft.com/?id=836558
836560 Outlook does not respond when you type or edit a phone number, start the
http://support.microsoft.com/?id=836560
836561 You receive ?the add-in “C:\Program
http://support.microsoft.com/?id=836561
836562 ?Mail cannot be sent – cannot locate the SMTP server 0x80042109? error
http://support.microsoft.com/?id=836562
836664 Your password is not retained in Outlook 2002 and Outlook Express
http://support.microsoft.com/?id=836664
836665 Text or buttons are truncated in some dialog boxes in Outlook 2002
http://support.microsoft.com/?id=836665
836755 How to deploy the location of the archive.pst file in Outlook
http://support.microsoft.com/?id=836755
837193 Commands on the Send To submenu are unavailable in Excel 2000
http://support.microsoft.com/?id=837193
837388 How to configure Outlook to block additional attachment file name
http://support.microsoft.com/?id=837388
838440 Vulnerability in Outlook 2002 could allow arbitrary command-line
http://support.microsoft.com/?id=838440
838871 Custom solutions and add-ins that integrate with Outlook 2002 are
http://support.microsoft.com/?id=838871

SHAREPOINT SERVICES
824629 FIX: Temporary Files Are Not Deleted After You Connect to a server
http://support.microsoft.com/?id=824629
825536 How to move a Windows SharePoint Services Web site from one server to
http://support.microsoft.com/?id=825536
826787 New Links Are Not Visible on your Microsoft Windows SharePoint Services
http://support.microsoft.com/?id=826787
831088 You receive various error messages and you cannot recover your
http://support.microsoft.com/?id=831088
831106 SharePoint Portal Server 2003 and Windows SharePoint Services currently
http://support.microsoft.com/?id=831106

WINDOWS 2000
811176 You cannot remove suspicious folders from the FTP file structure
http://support.microsoft.com/?id=811176
827087 You cannot log on to a Windows 2000-based server through an RPC
http://support.microsoft.com/?id=827087
830055 A Windows 2000-based client computer does not use DNS name resolution
http://support.microsoft.com/?id=830055
830056 How to create an offline certificate request for a domain controller
http://support.microsoft.com/?id=830056
830076 Performance counters are missing in Windows 2000
http://support.microsoft.com/?id=830076
831740 Adding free media identifiers to tape using the Removable Storage
http://support.microsoft.com/?id=831740
831895 The Shutdown.exe utility does not shut down or restart your Windows
http://support.microsoft.com/?id=831895
832214 “You may not have appropriate rights” error message when you try to open
http://support.microsoft.com/?id=832214
832279 “Stop 1E” error when you stop and restart Print Server for Macintosh or
http://support.microsoft.com/?id=832279
832615 You receive an access violation error message when you try to open or to
http://support.microsoft.com/?id=832615
832849 DNS domain search ends abruptly on a Windows 2000-based computer
http://support.microsoft.com/?id=832849
833615 The Specify Windows Installation File Location and the Specify Windows
http://support.microsoft.com/?id=833615
833763 You receive a 0x0A Stop error or a 0x1E Stop error on a Windows
http://support.microsoft.com/?id=833763
834541 You receive a “There is a naming violation” error message when you try
http://support.microsoft.com/?id=834541
834656 Dfsutil.exe does not exit correctly when you export DFS roots in Windows
http://support.microsoft.com/?id=834656
834721 “Permissions on <FolderName> are incorrectly ordered, which may cause
http://support.microsoft.com/?id=834721
834728 You receive a “Stop 0x00000051″ error message during registry restoration
http://support.microsoft.com/?id=834728
834745 You receive an “0x0000001E (KMODE_EXCEPTION_NOT_HANDLED)” error message
http://support.microsoft.com/?id=834745
834774 Excessive network traffic after you save a Windows NT diagnostics report
http://support.microsoft.com/?id=834774
835221 Universal Audio Architecture (UAA) High Definition (HD) Audio Class
http://support.microsoft.com/?id=835221
835304 A DHCP client computer occasionally cannot obtain an IP address from a
http://support.microsoft.com/?id=835304
835399 You cannot install the Automatic Update Client
http://support.microsoft.com/?id=835399
835427 Roaming profile users can still install an advertised program after you
http://support.microsoft.com/?id=835427
835596 You do not receive a print notification when you send a print job to
http://support.microsoft.com/?id=835596
836163 The IP address list displays “All Unassigned” when you try to select an
http://support.microsoft.com/?id=836163
836417 No desktop or a blank desktop appears after you log on to Windows 2000
http://support.microsoft.com/?id=836417
836429 “The server is not operational” message in the Migration.log file when
http://support.microsoft.com/?id=836429
837021 The remote access MprAdminUserGetInfo function leaks memory in
http://support.microsoft.com/?id=837021
837115 Troubleshooting profile unload issues
http://support.microsoft.com/?id=837115
837160 The Write Signature command in Disk Management writes a signature to all
http://support.microsoft.com/?id=837160
837191 You are repeatedly prompted to insert your smart card when you log on to
http://support.microsoft.com/?id=837191
837243 Availability and description of the Port Reporter tool
http://support.microsoft.com/?id=837243
837900 No programs appear in Task Manager
http://support.microsoft.com/?id=837900
837928 DNS suppresses responses to EDNS packets in Windows 2000 Server
http://support.microsoft.com/?id=837928
838037 The Settings menu does not open when you use the keyboard shortcut to
http://support.microsoft.com/?id=838037
838150 Intel Physical Address Extensions cause high CPU usage in Windows 2000
http://support.microsoft.com/?id=838150

WINDOWS 2003 SERVER
816793 How to troubleshoot the “NTLDR is missing” error message in Windows
http://support.microsoft.com/?id=816793
829082 You receive a “Stop error C0000244 {Audit Failed}” error message when
http://support.microsoft.com/?id=829082
830031 CreateToolhelp32Snapshot() function may cause memory leak on a Windows
http://support.microsoft.com/?id=830031
830056 How to create an offline certificate request for a domain controller
http://support.microsoft.com/?id=830056
830577 How to set the drive letter for the system drive when you install
http://support.microsoft.com/?id=830577
832214 “You may not have appropriate rights” error message when you try to open
http://support.microsoft.com/?id=832214
832261 Time synchronization does not occur on an NTP provider on a Windows
http://support.microsoft.com/?id=832261
832434 “The directory name is invalid” error message when you start Cmd.exe or
http://support.microsoft.com/?id=832434
832916 “Unable to create the Web Site” error message when you use the Remote
http://support.microsoft.com/?id=832916
833167 A Volume Shadow Copy Service (VSS) update package is available for
http://support.microsoft.com/?id=833167
833174 The local Security Settings Microsoft Management Console snap-in stops
http://support.microsoft.com/?id=833174
833409 The roaming profile is not loaded after the user uses Terminal Services
http://support.microsoft.com/?id=833409
833779 “Unable to create a shadow copy” error appears in event log after you
http://support.microsoft.com/?id=833779
833615 The Specify Windows Installation File Location and the Specify Windows
http://support.microsoft.com/?id=833615
834108 Routing and Remote Access stops responding when you use the Routing and
http://support.microsoft.com/?id=834108
835221 Universal Audio Architecture (UAA) High Definition (HD) Audio Class
http://support.microsoft.com/?id=835221
835304 A DHCP client computer occasionally cannot obtain an IP address from a
http://support.microsoft.com/?id=835304
835427 Roaming profile users can still install an advertised program after you
http://support.microsoft.com/?id=835427
836429 “The server is not operational” message in the Migration.log file when
http://support.microsoft.com/?id=836429
836721 You receive a “0xc0000005 Access violation” error message
http://support.microsoft.com/?id=836721
836788 Event ID 257 is logged when you use the Volume Shadow Copy service and
http://support.microsoft.com/?id=836788
836797 Unidrv.dll print support for JPEG pass-through and PNG pass-through in
http://support.microsoft.com/?id=836797
837115 Troubleshooting profile unload issues
http://support.microsoft.com/?id=837115
837243 Availability and description of the Port Reporter tool
http://support.microsoft.com/?id=837243
837814 Logical Disk Manager stops responding or reports an error when you
http://support.microsoft.com/?id=837814
838164 When you migrate computer accounts, their primary group membership is in
http://support.microsoft.com/?id=838164
838752 File corruption using C-runtime APIs for files larger than 4GB on
http://support.microsoft.com/?id=838752

WINDOWS XP
314828 The Microsoft Policy Concerning Disk Duplication of Windows XP
http://support.microsoft.com/?id=314828
810097 The “ipconfig” command does not return connection-specific DNS suffixes
http://support.microsoft.com/?id=810097
828664 Access violation when you use a Terminal Server administrative utility
http://support.microsoft.com/?id=828664
829576 You receive an “Access denied” error message when you try to connect to
http://support.microsoft.com/?id=829576
830411 ToolTips do not display complete information about files that are
http://support.microsoft.com/?id=830411
830469 Your computer does not enter a C3 state after you plug in and then
http://support.microsoft.com/?id=830469
831805 Cannot verify WebDAV support for some Web sites from a Windows XP-based
http://support.microsoft.com/?id=831805
832434 “The directory name is invalid” error message when you start Cmd.exe or
http://support.microsoft.com/?id=832434
833528 Speech accessibility utilities do not open menu commands in Windows XP
http://support.microsoft.com/?id=833528
833615 The Specify Windows Installation File Location and the Specify Windows
http://support.microsoft.com/?id=833615
833747 Event ID 4311 appears in the system log when you reinstall a network
http://support.microsoft.com/?id=833747
833837 You receive a “Stop 0x0000008E” error message after you resume your
http://support.microsoft.com/?id=833837
834241 A drive is represented by a “?” character in Windows Explorer when you
http://support.microsoft.com/?id=834241
835221 Universal Audio Architecture (UAA) High Definition (HD) Audio Class
http://support.microsoft.com/?id=835221
835261 Long delay before you can connect to a domain-based DFS namespace
http://support.microsoft.com/?id=835261
835304 A DHCP client computer occasionally cannot obtain an IP address from a
http://support.microsoft.com/?id=835304
835399 You cannot install the Automatic Update Client
http://support.microsoft.com/?id=835399
835410 Users of a Windows XP computer can still lock the computer even when the
http://support.microsoft.com/?id=835410
835730 Sound may play slowly or music may not play continuously in Windows XP
http://support.microsoft.com/?id=835730
836790 You cannot connect to IPv6 destinations by using tunnels over PPP devices
http://support.microsoft.com/?id=836790
837115 Troubleshooting profile unload issues
http://support.microsoft.com/?id=837115
837166 Group Policy that you edit in Windows XP does not work in Windows 2000
http://support.microsoft.com/?id=837166
837243 Availability and description of the Port Reporter tool
http://support.microsoft.com/?id=837243
837691 Hardware devices not installed in Sysprep image
http://support.microsoft.com/?id=837691
838754 You cannot use the Windows Server 2003 Administration Tools to add a
http://support.microsoft.com/?id=838754
839042 USB devices may not work after resuming from standby in Windows XP
http://support.microsoft.com/?id=839042

Have a great weekend!
Best Regards,
Marie McFadden, MCSE NT4/2000, MCSA
Microsoft Online Support Engineer

How to exclude specific computers to connect to in RWW

When you run RWW (http://FQDN/remote), you are presented with a list of computers that you can select from to connect to. If you want to hide a computer from the Connect to my computer at work, create (add) the following key to Registry on the server, and add the machine you want to hide.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\ExcludeList (String Value)

It is a comma-delimited list fo computers to exclude from the RWW computer selection page.

VBS script for KB 839262 patch

Services may stop abruptly when you shut down or restart a Windows Small Business Server 2003-based computer
http://support.microsoft.com/?id=839262

This reg key should be checked and corrected – no exceptions!


I am also including a link to a VBS script file (see below) provided by Jeff that automatically makes the appropriate registry change. I’ve tested it on my home server.


Note: be sure to save the VBS script file to your SBS server and run it only from your server. That is, don’t be like me and try to run it on your workstation — it will try to update your workstation’s registry!

http://www.csbsupport.com/KB839262_Fix_R1.vbs

Files to exclude from virus scanning

In addition to all the good advice you’ve received from other responders to your post, please ensure that the real-time and scheduled scans folder exclusions specified by the articles below are implemented on the server:

823166 Overview of Exchange Server 2003 and Antivirus Software
http://support.microsoft.com/?id=823166

822158 Virus Scanning Recommendations on a Windows 2000 or on a Windows Server
http://support.microsoft.com/?id=822158

309422 INF: Consideration for a Virus Scanner on a Computer That Is Running SQL
http://support.microsoft.com/?id=309422

Attach tape backup logs to the daily server status e-mailed report

PROBLEM: I’ve configured two SBS03 servers and one of them is attaching the backup log files with the daily status report e-mail and the other is not. I’ve gone through the backup and monitoring wizards on the server that is not sending the logs and I can’t find or remember where to set that option. I’ve searched the online help (not thoroughly enough, I’m sure) and can’t find the answer there, either. Please point me in the right direction. Thanks.


SOLUTION: To configure ‘Server Status Report’ to include ‘Backup Logs’, please do the following steps:

1. ‘Server Management’ ‘ ‘Standard Management’ ‘ ‘Monitoring and Reporting’, and then click ‘Change Server Status Report Settings’.
2. With ‘Server Usage Report’ highlighted, click ‘Edit’.
3. Switch to the ‘Content’ tab, and then check the mark before ‘SBS Backup Logs’.
4. Click OK to apply the modification and send the report again.

Using RPC over HTTP for laptop both in & out of the office

This comes from smallbizserver2003 private/directaccess newsgroup:


PROBLEM: I have a customer who has a number of notebook users (Win XP Pro) who wants to setup the notebooks so Outlook can be used to their SBS2003 server from both the inside network and also the outside using IPC over HTTP.

The SBS server is on their inside network with single LAN card and connected via a firewall router to an ADSL internet connectionin – a fairly standard sort of setup. The router is doing NAT to 192.168.1.x . They have a FQDN that points to the firewall and port forwards to the SBS server – sbs.dommainname.com. The server is known internally as sbs.dommainname.local.

I have no problems configuring the notebook to use Outlook over HTTP from outside, the problem is from the inside LAN – it just hangs. If I create a new profile while connected to the LAN and try to configure Outlook as per the help file you get from the https://server.domainname/remote page it hangs when I use the external FQDN sbs.dommainname.com for the ‘URL to connect to my proxy server for Exchange’ .

If I ping the FQDN from inside I get the outside IP of the router.

How do I configure the one profile so Outlook can be transparently used on the Internal network and also externally on the Internet?


RESPONSE:


The problem is expected since the public FQDN will be resolved to the external IP address of the firewall device while actually the notebook is on the internal network. If you do not want to create a new profile for the  user we can create an “Alias (CNAME)” record in DNS so that the public FQDN will be resolved to the Internal IP address of the server when on the LAN:

1. On the SBS server, open DNS Management Console by running dnsmgmt.msc.

2. Expand the <ServerName> node, expand the “Forward Lookup Zones” folder and then highlight the domain FQDN zone (domainname.local).

3. Right click on the zone and choose New Alias (CNAME).

4. Name the Alias your public FQDN (for example, sbs.domainname.com).

5. Type your SBS server’s internal FQDN (for example, servername.domainname.local) as the “Fully qualified domain name (FQDN) for target host”. Click OK.

6. Right click on the <ServerName> node and choose All Tasks->Restart.

7. Check if a ping of sbs.domainname.com returns the internal IP address of the server. Then check if Outlook work well internally.

Please do not hesitate to let me know if you have any further concerns.
Sincerely, Cliff Zhang – Microsoft Partner Online Support – MCSE 2000 
 

How to install Trend C/S/M for SMB

Here’s the procedure for Trend CSM for SMB.

1. Decide whether you want to use the Adminstrator account for CSM, or another account. If you don’t want to use the Administrator account, create an account. (I use the Administrator account.)

2. Run setup – install on IIS is generally the only selection available.
3. Enter the FQDN server.domain.local OR the IP of the SBS. I prefer the IP, it seems to work better.
4. Install into IIS Virtual Web Site (NOT the default web site).
5. Use port 8085 for communication.
6. Deselect SSL.
7. Use Administrator account – If ISA enter proxy info, if no ISA enter nothing in proxy.
8. If you don’t have the activation code – register now, the email with the code comes real quick. (note that you can go this far prior to the actual install if you like, and get the activation code so you don’t have to do this while installing).
9. Accept the server/client port.
10. Accept the client installation for the SBS (installs the Officescan client on the server)
11. The install proceeds, then open the admin console.

- This completes Officescan installation, now on to Scanmail.

12. Go to the Scanmail link on the left, and install Scanmail to the IP of your SBS. Scanmail and eManager are installed.

- This completes the installation of CSM SMB. Now you need to make some settings.

1. In the CSM console, click on the Clients view so you can see the Officescan ‘domain’. Your SBS will be listed there.
2. Create a new Officescan ‘domain’, and move your SBS computer to the new domain. The original domain will be used for workstations.
3. Click on your SBS computer icon, and set the client priveliges to your liking.
4. Click on Scan options | Real time Scan settings, and find the Exclusions link.
5. Put <drive> pagefile.sys in the lower ‘file’ exclusion list.
6. Put <these are default locations>


c:\Program files\exchsrvr
\trend,
\trend micro in the directory exclusion area.
Note that if you have moved your exchange data and or logs somewhere, be sure to exclude them. Note also you can be more granular with your exclusions if you want – you don’t have to exclude the entire directory.


Another note – there is a tick box for excluding Trend product directories, but I do it manually anyway.
Yet another note – On all screens make sure you APPLY the settings by scrolling down to the bottom and clicking the button.

What you’ve done with the two Officescan ‘domains’, is enabled different settings for the server versus the clients. Now when you add client
machines, you can set the options on that domain (rather than each workstation) so they apply to all workstations, but not the server. Sometime this is useful.

7. Click on Updates, Server updates, Automatic Update, check the options and set the frequency to hourly.

8. Click on Manual Update, select the options you want, and update now to get the lates files and make sure connectiviy is there.

9. Log off Officescan console.

Scanmail

1. Use the non HTML console from start | all programs.
2. Log on, click on Scheduled Update.
3. Enable scheduled update, and set it to hourly, select pattern file and engine.
4. If you use ISA, click on the Proxy Settings button and enter the proxy info.
5. Click on Update Now, select the options, set proxy info if you use ISA, and click on Update now.

Those are the basics to get protection. You can learn the fine tuning and option stuff (including eManager) as you go.


Les Connor [SBS MVP]
————————————-
SBS Rocks !

Create Multiple Websites with one IP address (Host Headers)

Here are links to several web pages offering detailed information on using Host Headers:


http://www.iisanswers.com/Top10FAQ/t10-hostheaders.htm


http://www.4guysfromrolla.com/webtech/080200-1.shtml


http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/iisbook/c08_hosting_multiple_sites_with_one_ip_address.asp


http://www.experts-exchange.com/Web/Web_Servers/Q_20895583.html