ISA 2004 and

[Bucklebery]

I just installed on SBS 2003 Premium - including ISA 2004. Can see clients but each client has The RPC server is unavailable 0x800706BA. So I checked ISA and the following sometime it lets lansweeper through and other times it doesnt. Any ideas what I should do? Many thanks

This entry seems to pass through my credential but the next one doesnt.


Allowed Connection DUNAMIS 31/10/2009 10:16:33 p.m.
Log type: Web Proxy (Forward)
Status: 0 The operation completed successfully.
Rule: SBS Internet Access Rule
Source: Internal ( 192.168.0.11:0)
Destination: External ( 192.168.0.1:80)
Request: GET http://www.lansweeper.com/forum/themes/Lansweeper/topic_sticky.png
Filter information: Req ID: 0f6e3d91
Protocol: http
User: NEWHOPE\Ian
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; MS-RTC EA 2; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.4506.2152;
Object source: Not Modified Processing time: 1
Cache info: 0x1002 MIME type:



Denied Connection DUNAMIS 31/10/2009 10:16:33 p.m.
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.
Rule: SBS Internet Access Rule
Source: Internal ( 192.168.0.11:0)
Destination: External ( 192.168.0.1:8080)
Request: GET http://www.lansweeper.com/forum/themes/Lansweeper/topic.png
Filter information: Req ID: 0f6e3d94
Protocol: http
User: anonymous
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; MS-RTC EA 2; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.4506.2152;
Object source: Processing time: 1
Cache info: 0x1002 MIME type:

Many tshnks

[Bucklebery]

Thanks you for your patience and guidance - I will seek advice as to how to enforce the policy which I thought I had applied - previous attachment.

Cheers
ian

[Hemoco]

Yes, this means that your firewall is on and blocking wmi access.

[Bucklebery]

Is this the issue - Remote admin Disabled?

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Ian>netsh firewall show state

Firewall status:
-------------------------------------------------------------------
Profile = Domain
Operational mode = Enable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable
Group policy version = Windows Firewall
Remote admin mode = Disable

Ports currently open on all network interfaces:
Port Protocol Version Program
-------------------------------------------------------------------
1037 UDP IPv4 C:\Program Files\Bonjour\mDNSResponder.exe
26675 TCP IPv4 (null)
135 TCP IPv4 C:\WINDOWS\system32\inetsrv\inetinfo.exe
137 UDP IPv4 (null)
139 TCP IPv4 (null)
138 UDP IPv4 (null)
1211 UDP IPv4 C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
1232 UDP IPv4 C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
1234 UDP IPv4 C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
5353 UDP IPv4 C:\Program Files\Bonjour\mDNSResponder.exe
4347 TCP IPv4 (null)
4347 UDP IPv4 (null)
9524 UDP IPv4 (null)
9524 TCP IPv4 (null)
3389 TCP IPv4 (null)
52555 UDP IPv4 C:\Program Files\Bonjour\mDNSResponder.exe
445 TCP IPv4 (null)
2492 TCP IPv4 C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
3689 TCP IPv4 C:\Program Files\iTunes\iTunes.exe
3703 TCP IPv4 (null)
3704 TCP IPv4 (null)
50901 TCP IPv4 (null)
50900 TCP IPv4 (null)
2869 TCP IPv4 (null)
1900 UDP IPv4 C:\WINDOWS\system32\svchost.exe
6004 UDP IPv4 C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

2967 TCP IPv4 (null)
990 TCP IPv4 C:\Program Files\Microsoft ActiveSync\rapimgr.exe
33761 TCP IPv4 C:\Program Files\Skype\Phone\Skype.exe
33761 UDP IPv4 C:\Program Files\Skype\Phone\Skype.exe


C:\Documents and Settings\Ian>

[Hemoco]

Are you able to telnet to port 135 to the clients?
Are you sure that the policy is enforced?
On the client you can get the firewall state : "netsh firewall show state"

[Bucklebery]

Here's the error Remote WMI test
-----------------------------------------------
\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote Registry test using WMI
-----------------------------------------------
\root\default Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

[Hemoco]

You can try the connection tester from the server to the client.
You can also enable logging in your isaserver.

[Bucklebery]

I have already disabled "Enforce strict RPC Compliance" and have followed the instruction on the link b4 coming to this forum.
Question:
Isis there a log to see what is going on ?

[Hemoco]

Installing the server on isa server is not recommended.

But I remember some ISA server option that you should disable "Enforce strict RPC Compliance"

Also this might help : http://www.lansweeper.com/kb/notfound.aspx

[Bucklebery]

Is there a best practice for tracking down PRC unavailable? Interestingly all the XP clients on the domain are not being scanned. But 2 the servers are. Is there an error log I can look at to help me track this down? Many thanks - Ian

[Hemoco]

The url's in the errorlog refer to the lansweeper forum, not to the scanning process.