Configure Remote Access

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Julian Cooper - 27 Sep 2005 14:49 GMT

After installing:
Windows Server 2003 SP1
Sharepoint services SP
WinXP SP2 SP
SBS2003 SP1
ISA2004

I am unable to successfuly run Configure Remote Access - The rraslog
contents are listed belw

27/09/2005 14:45
C:\Program Files\Microsoft Windows Small Business
Server\Networking\RRASWiz\wizrras.dll, version 5.2.2893.0
Calling CRRASCommit::CommitEx
Calling CRRASCommit::ValidatePropertyBag
pdispPPPBag->QueryInterface returned OK
PropertyBag 25ff50
Reading property value for enabling Remote Access returned OK
bRemoteAccess = 1
Reading property value for VPN returned OK
bVPN = 0
Reading property value for RAS returned OK
bRAS = 1
Calling CRRASCommit::ValidateRASProperties
Reading the list of modems to be enabled for RAS returned OK
Validating the modems in the list returned OK
Reading the primary phone number returned OK
Primary phone number is 01579351182
Reading the alternate phone number returned OK
Alternate phone number is
Calling CRRASCommit::ValidateDHCPProperties
DHCP server is installed on the box
CRRASCommit::ValidateDHCPProperties returned OK
CRRASCommit::ValidateRASProperties returned OK
CRRASCommit::ValidatePropertyBag returned OK
pdispPPPBag->QueryInterface returned OK
Pointer to the property bag 25ff50
Calling CRRASCommit::CommitRRAS
Arguments:
PropertyBag 25ff50
bRAS 1
bVPN 0
Getting the GUID of the private NIC returned OK
Private NIC Guid is {0F0A087F-B114-4298-8F20-64B785F6B434}
Checking whether RRAS is already running returned OK
RRAS is not running
Installing RRAS returned OK
Configuring ports returned OK
Saving RRAS method returned OK
Method is 1
Where 1 = RAS, 2 = VPN 3 = both
CRRASCommit::CommitRRAS returned OK
Committing RRAS returned OK
Initializing Stingray library returned OK
Enabling VPN Client Access returned OK
Setting maximum number of vpn clients returned OK
Dhcp server is installed and running on this box
Enabling DHCP client addressing returned OK
*** Saving changes and restarting services returned ERROR c0040393
*** CRRASCommit::ConfigureISA2k4() returned ERROR c0040393
*** Configure ISA2k4 returned ERROR c0040393
*** CRRASCommit::CommitEx returned ERROR c0040393

Reply to this Message

"Charles Yang [MSFT]" - 28 Sep 2005 03:30 GMT

HI,

Welcome to SBS newsgroup.

Issue descriptions:
================

I understand that you encountered error c0040393 in rras log when running
remote access wizard.

Analyzing and suggestions:
=================

Based on my research, this issue may occur if the following policy settings
are not assigned to the Network Service account on the domain controller:

- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token

The Network Service account must be added to the policy settings in the
list. This issue may occur if Group Policy settings that were applied at
the domain level have modified the policy settings for the Network Service
account on the domain controller. This issue mostly occurs after you
promote a member server to a domain controller, or on a migration from a
Windows 2000 network where SBS 2003 was joined to the 2000 domain.

To resolve this issue, make sure that the Network Service account is added
to the following policy settings on the domain controller:

- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token

To configure the policy settings for the Network Service account on the
domain controller, follow these steps:

1.    Click "Start", point to "Administrative Tools", and then click "Domain
Controller Security Policy".
2.    Expand "Local Policies", and then click "User Rights Assignment". The
policy settings are displayed in the right pane.
3.    Double-click the policy setting that you want to add the Network Service
account to.
4.    If the Network Service account is not in the list of users and groups
that are assigned to that policy setting, click "Add User or Group".
5.    In the "Select User or Groups" dialog box, type "Network Service"
(without the quotation marks) in the "Enter the object names to select"
box, and then click "OK".
6.    Verify that "NETWORK SERVICE" is displayed in the list of users and
groups that are assigned to that policy setting, and then click "OK".
7.    Close the policy editor.
8.    Run GPUPDATE /FORCE from a command prompt.
9. Reboot the server.

I appreciate your time to cooperate in this issue, please feel free to post
back. I am glad to be of assistance.

Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

Signature

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| Thread-Topic: Configure Remote Access
| thread-index: AcXDaj8MHilhGGZ/RI6b7vsVd6XiMQ==
| X-WBNR-Posting-Host: 213.123.142.110
| From: "=?Utf-8?B?SnVsaWFuIENvb3Blcg==?=" <Julian

Cooper@discussions.microsoft.com>

| Subject: Configure Remote Access
| Date: Tue, 27 Sep 2005 06:49:14 -0700
[quoted text clipped - 77 lines]
| *** Configure ISA2k4 returned ERROR c0040393
| *** CRRASCommit::CommitEx returned ERROR c0040393

Reply to this Message

Julian Cooper - 28 Sep 2005 08:42 GMT

Thanks for that Charles

Only one problem - I dont have a Doman Controller Security Policy under
administrative tools - and if i try to use local secuirty policy, i am unable
to add users or goups to a policy - all options are greyed out.

I would be grateful for any further assistance you could offer.

Thanks for your help so far.

> HI,
>
[quoted text clipped - 182 lines]
> | *** Configure ISA2k4 returned ERROR c0040393
> | *** CRRASCommit::CommitEx returned ERROR c0040393

Reply to this Message

"Charles Yang [MSFT]" - 28 Sep 2005 09:43 GMT

HI,

Thanks for updates.

Generally speaking, the domain controller security policy should be the
default policy of SBS 2003, we recommend you double check to make sure that
you have domain controller policy on the group policy managements. If you
could not find this policy, you may change the default domain policy for
this setting, please do not change local security policy, it will not take
effect on the domain level.

Thanks for your efforts.

Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

Signature

| Thread-Topic: Configure Remote Access
| thread-index: AcXEAB64dBNNgVlMTWqHgkkivFHU2A==
| X-WBNR-Posting-Host: 213.123.142.110
| From: "=?Utf-8?B?SnVsaWFuIENvb3Blcg==?="

<JulianCooper@discussions.microsoft.com>

| References: <CD506453-3C87-4F1B-B944-A2C2C0A05990@microsoft.com>

<8tD7JS9wFHA.780@TK2MSFTNGXA01.phx.gbl>

Reply to this Message