Hi all,

 

I have re-subscribed again, great site!

 

I have just come accross a new customers sbs server 2003, that was inherited when they bought another business out.  The problem that I have found is that when I try to veiw the backup in the Server Management Console it tells me that I cannot view this as I don't have enough permissions and that I need to be a member of Domain Admins.

 

Well I am logged in as Administrator and I am also a member of Domain Admins; I even created a new user using the Administrator Template from the wizard, I checked the groups that the new account belongs too and it too says Domain Admins, but still get the same message using this account too.

 

Any one got any ideas????

 

Regards,

 

Richard.

Hi Richard,

 

Can you list the groups in the Member off tab of the Administrator's properties please?

Marina Roos,

 

Administrators

Domain Admins

Domain Users

Emterprise Admins

Group Policy Creator Owners

Internet Users

Mobile Users

ReportingGroup {ea8e4519-93e7-4e56-a30a-985f027ab0d0}

Schema Admins

 

I am not sure what the ReportingGroup one is?

 

Thanks for the help.

 

Richard

 

Hi Richard,

 

You probably have SQL 2005 installed, hence the ReportingGroup. Can you now list the memberships of the group administrators please?

Marina,

 

Thanks for the heads up on the BPA, have run it and there are some issues but none I think to do with this issue.

 

The Administrators group has the following members:

Administrator

Domain Admins

Enterprise Admins

 

The Administrators group is not a member of any other groups as it tells me that "Built in groups cannot be a added to another groups".

 

Regards,

 

Richard.

Hi Richard,

 

That membership is looking good. What other issues does BPA give you? Can you get the Monitoring page without a problem? Does owa work from the server?

Marina,

 

Here are the  BPA results for you to look at.  As you can see there are alot of issues, this server has been inherited by my customer when he bought another business.

 

All Issues

Error Three or more network adapter cards detected :
Three or more network adapter cards are detected on this server. This is not a supported configuration and will cause Configure E-mail and Internet Connection Wizard to fail. Windows SBS 2003 supports only one or two network adapters.

Error Windows SBS 2003 Service Pack 1 not installed :
Windows SBS 2003 SP1 is available. For download information, see http://go.microsoft.com/fwlink/?linkid=50694. To order the Windows SBS 2003 cd set (required for Windows SBS 2003 Premium Edition customers), go to http://go.microsoft.com/fwlink/?linkid=50685.

Error Help and Support Service missing :
You need to reinstall the Help and Support Service. For more information, see "Help and Support feature is missing after you install Microsoft Windows Server 2003 SP2 on a computer that is running Windows Small Business Server 2003" at http://go.microsoft.com/fwlink/?LinkId=95292.

Error POP3 Connector has not been updated :
POP3 Connector does not appear to be at least the Windows SBS 2003 SP1 version.

Error Task Offloading is enabled :
Task Offloading is enabled and should be disabled on Windows Small Business Server 2003. Change the value of the DisableTaskOffload registry key to 1. For detailed instructions, see the Knowledge Base article "You experience intermittent communication failure between computers that are running Windows XP or Windows Server 2003" at http://go.microsoft.com/fwlink/?LinkId=95149. If the DisableTaskOffload registry key does not exist, then manually create this registry key and set its value to 1.

Error The /3GB switch is not supported on Windows SBS 2003 :
Windows SBS 2003 does not support the use of the /3GB boot.ini option. For more information, see "The Windows Server 2003 /3GB switch is not supported in Windows SharePoint Services 2.0 or in later versions or in SharePoint Portal Server 2003 SP2 or in later versions" at http://go.microsoft.com/fwlink/?LinkId=95155.

Warning Free disk space is very low :
G: has 18% free space remaining (less than 20% of free space available). You should consider adding more storage or removing unnecessary files. For information on moving data folders, see "Moving Data Folders for Windows SBS 2003" at http://go.microsoft.com/fwlink/?linkid=49931.

Warning Network interface driver file is more than one year old :
Network Card Driver: E1000 Last Modifed Date: 20031028145104.000000+600

Warning /Exchange-oma local path does not match /Exchange :
/Exchange-oma virtual directory local path does not match the /Exchange virtual directory local path.

Warning CEICW not completed succesfully :
The Configure E-mail and Internet Connection Wizard was not completed successfully in the last run.

Warning DNS TimeOut registry key values should be different :
The DNS ForwardingTimeOut registry key value should not be the same as the RecursionTimeOut registry key value. To resolve this issue, install Windows SBS 2003 Service Pack 1 and run the Configure E-mail and Internet Connection Wizard (CEICW). If you have already installed Windows SBS 2003 SP1, run the CEICW.

Warning EDNS is enabled :
EDNS is enabled on this server. Some of the routers or firewalls may not support EDNS. You should disable EDNS on this server. To do so, click Start, and then click Command Prompt. In the Command Prompt window, type dnscmd /Config /EnableEdnsProbes 0 and then restart the DNS Server service.

Warning ISA Server 2000 is installed :
You should use the Windows SBS 2003 SP1 media to upgrade Internet Security and Acceleration (ISA) Server 2000 to ISA Server 2004.

Warning LANNIC registry value may be incorrect :
The value for registry key HKLM\Software\Microsoft\SmallBusinessServer\LANNIC may not contain the GUID for the internal interface. For more information, see Method 3 in the Knowledge Base article "The wizard cannot set the DHCP scope options error message when you run the Configure E-mail and Internet Connection Wizard in Windows Small Business Server 2003" at http://support.microsoft.com/kb/875422.

Warning Microsoft Outlook 2003 missing :
Outlook 2003 should exist in the ClientApps folder. To do so, from the server, click Start, click Control Panel, click Change or Remove Programs, then click Windows Small Business Server 2003. On the component selection page, select Microsoft Outlook 2003.

Warning POP3 Connector snap-in has not been updated :
POP3 Connector snap-in does not appear to be the version from knowledge base article "Error message when you use the POP3 Connector Manager with MMC 3.0: "'MMC has detected an error in a snap-in" " at http://go.microsoft.com/fwlink/?LinkId=95161.

Warning RDP Port not at default value :
The PortNumber registry key for the Terminal Server port has been changed. You will not be able to use Connect to Server using Remote Web Workplace with this configuration. To change back the PortNumber registry key to its default value (3389), see the Knowledge Base article "How to change Terminal Server's listening port" at http://go.microsoft.com/fwlink/?linkid=95478.

Warning Reverse DNS Zone does not allow Secure updates :
You should configure Reverse Lookup Zone: 0.168.192.in-addr.arpa to allow only secure dynamic updates. To configure the Reverse Lookup Zone, click Start, point to Administrative Tools, and then click DNS. Right-click the Reverse Lookup Zone: 0.168.192.in-addr.arpa, and then click Properties. Select Secure only from the Dynamic Updates dropdown list.

Warning SBSMONITORING instance does not use SQL Server 2000 SP4 :
The SBSMONITORING instance should use the latest available service pack for Microsoft SQL Server 2000.

Warning Windows SBS 2003 is not compatible with Vista/Outlook 2007 :
You should install the "Update for Windows Small Business Server 2003: Windows Vista and Outlook 2007 compatibility" at the Microsoft Web site (http://go.microsoft.com/fwlink/?linkid=78010).

Warning Windows SBS Backup wizard has not run :
Windows SBS Backup has not been configured. To configure Windows SBS Backup, on the server click Start, and then click Server Management. On the Windows SBS Administration Console, click To Do List, and then in the details pane click Configure Backup.

Warning Windows SBS Monitoring wizard not run :
To configure Windows SBS Monitoring go to Start/Server Management/To Do List/Configure Monitoring.
 

Yes the OWA does work from the server.  I can get to the monitoring page with out any hickups but the wizard has not been run yet!

I have also noticed the following:-

Installed components:-

SUS
ISA 2000

SQL 2000

Windows 2003 Server SBS edition Standard (I belive).

 

I am thinking that the route to take would be to do the following:-

 

Upgrade:-

SUS to WSUS
ISA 2000 to 2004

SQL 2000 to SQL 2005

 

Syncronise the WSUS and implement any updates.

 

What are your thoughts on the above, including what order you would do them in?

I have found that the backups seem to be run from the Schedule Tasks using .cmd files, I am guessing that this may be because of the denied access to the Backup Wizard in Server Management.

 

I would like to thank you for your help and support, I have only just recommended your site to an old work collegue in the UK.

 

Regards,

 

Richard.  

Hi Richard,

 

The most important issue is that SBS 2003 SP1 isn't installed. That is the thing you will need to do first before anything else. Only then you can upgrade ISA 2000 to ISA 2004, but only if you have the SBS 2003 SP1 upgrade cd's which has the ISA 2004. All the other issues are need to be resolved too.

Marina,

 

Thanks for the guidance on the order of things to do.

 

Do you have any other thoughts on the permission issue with veiwing the backup in Server Management?

 

Regards,

 

Richard.

Just a thought, have you tried making yourself a member of the backup operators group.

 

Can you not just re create the backup?

Hi David,

 

That is not a good idea. Richard should really first make sure that SBS 2003 SP1 is applied.

Yeah fair do's.

 

I did mean after sp1 install or better still sp2 and all other updates.

Hi David,

 

Even after all the updates and other issues Richard is having, it still isn't a good idea to do it. It should not be necessary, it is not necessary.

Marina,

 

Here is the latest update......

 

I have been suspicious about whether any of the wizards had been run as the To Do List had no ticks against them, So I ran the Connect to the internet wizard which seemed to fail at the Firewall, E-mail and Secure Web Site Configuration;  I thought well I will come back to this!

 

Anyway I added the Administrator to the Backup Operators group; logged the Administrator off then on again.  When I then clicked on Backup in Server Management I got a cannot display the webpage error, I found that the Defauld Web Site had been stopped in IIS so I started it and went back to the Backup link and this time it told me that the Backup Wizard had not been run.

 

I also went back and removed the Administrator from the Backup Operators group; Logged off and on again and clicked on Backup in the Server Management, I still got the same message that the Backup Wizard had not been run.....so progress.  So thanks for the help on that one.

 

Going back to the Configure Email and Internet Connection Wizard problem......

 

When I run the Wizard again I see that all the options are checked and the radio button for this option is not checked, which I find strange... when I run the wizard with these checked it again it fails on Secure Web Site Configuration and Email Configuration.

Hi Marina,

 

I was just giving, what I thought could be a possible workaround. OK I agree it should not be necessary but as Richard said it was a setup he had taken over so, who knows what had been done in the past.

 

I was only trying to help

David,

 

Thanks for the input, not sure if that is what fixed it or if it was running the CIECW?

 

Regards,

 

Richard.

Hi Richard,

 

If you still have a failure with the CEICW, pull up the icwlog.txt file, scroll down, then copy and paste the lines that start with 0x800...

Marina,

 

These are the entries and are duplicated throughout the icwlog.txt file. 

 

Error 0x8007041d returned from call to IISConfig Set().

Error 0x80070420 returned from call to CEMailCommit::Commit().

 

Thanks for your help.

 

Still promoting this dam fine site.

 

Regards,

 

Richard.

Hi Richard,

 

Are you setting up CEICW to use a smarthost? If yes, are you using the FQDN for that?

Marina,

 

Don't forget this is a server that has been inherited when a business was bought!  I have never set up a smarthost on Exchange or SBS, how can I check to see if it is set up as such, what is the best practice on this issue; is it advisable not to do this etc?

 

Regards,

 

Richard.

 

Update..........

 

Sorry for the time scale on the update here......

 

I have established that it has not been configured as a smarthost.

 

Regards

 

Richard