SBS 2008 RWA Problem

[Dexter Southerland]

Hi,
I have a SBS 2008 server where the TS Gateway Manager Connection Authorization Policy keeps losing the User Group Membership Setting when it is closed. As long as I leave it in tray it is OK. Any Ideas?

Before

After

Thanks

 

[YeOldeStonecat]

Can you reload those pics? They come through broken.
Does this only affect clients where you setup an RDP profile? Or those coming in through the web portal and having RDP launched/proxied through https?

 

[Dexter Southerland]

Can you reload those pics? They come through broken.
Does this only affect clients where you setup an RDP profile? Or those coming in through the web portal and having RDP launched/proxied through https?

Just reloaded pics. I think RDP through SBS console works. Can not test until after hours. Just through RWA is broke. Will test.

Thanks
Dexter

 

[YeOldeStonecat]

See 'em.
Hmmm...dunno where to look first. Never seen this one before.
*Is this a freshly built domain? Or migrated to SBS03 from a prior server?
*Any other apps hosted on this server? Possibly causing conflicting ports
*Have you ever run the Microsoft Baseline Security Analyzer on the server?

 

[Dexter Southerland]

See 'em.
Hmmm...dunno where to look first. Never seen this one before.
*Is this a freshly built domain? Or migrated to SBS03 from a prior server?
*Any other apps hosted on this server? Possibly causing conflicting ports
*Have you ever run the Microsoft Baseline Security Analyzer on the server?

This was a fresh in stall originally. Been working a long time.
No new apps that I know of. No port conflicts.
Ran the MS BSA no problems.
RDP from sbs console works.
I will attach a new screen shot of RWA Error.
Thanks
Dexter

 

[YeOldeStonecat]

Pretty vague results from Google searches...the most helpful link I could find was this one.
http://blogs.technet.com/b/sbs/arch...connect-to-a-computer-issues-in-sbs-2008.aspx

Trusted Sites on the remote rig?
IE Compat mode on the remote rig?
SSL cert valid on the server?
Was the workstation that the person is remoting to...joined to the server with the Connect wizard? Or is this happening for all computers?
IP 6 still bound to the servers NIC?

 

[Dexter Southerland]

Pretty vague results from Google searches...the most helpful link I could find was this one.
http://blogs.technet.com/b/sbs/arch...connect-to-a-computer-issues-in-sbs-2008.aspx

Trusted Sites on the remote rig?
IE Compat mode on the remote rig?
SSL cert valid on the server?
Was the workstation that the person is remoting to...joined to the server with the Connect wizard? Or is this happening for all computers?
IP 6 still bound to the servers NIC?

Yes to remote rig
Yes to IE Compt.
Yes to CERT
Involves all remote PC's. to any network pc. All were joined with wizard.
Tried IP6 bound and unbound. no change.

It seems the Connection Authorization Policies does not keep domain users as group on close.

Thanks for your Help

Dexter

 

[YeOldeStonecat]

That's a tough one. A quick Google search shows this can happen with multiple forests...but since we have SBS here that's not possible.

What if you experiment....
*Add user accounts individually..instead of just to domain users group.
*or create another group..."RWW Users" or something...add members to that, and add it to the CAP.

Dig into Event Viewer also...wonder if there's an underlying problem deeper in active directory.
Server uses itself for the one and only DNS server in TCP/IP properties, right?

 

[Dexter Southerland]

I finally got up with MS India and got a solution. I suspected it was a permission problem, and it was.


It was problem with files in :
C:\windows\system32\TSGateway
and
C:\windows\system32\ias


Specific files were:

C:\Windows\System32\TSGateway\RAP.xml

C:\Windows\System32\IAS\IAS.xml

C:\Windows\System32\IAS\Dnary.xml


Hope this is of help to someone else.

Thanks

Dexter