| Problems As an email server As a web server As a FAX server |
Questions:
--------------------------------------- An exception of type 'Type: System.Data.SqlClient.SqlException, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' has occurred. Timestamp: 06/20/2009 09:42:47 Message: Timeout expired.
See: http://blogs.technet.com/b/sbs/archive/2009/07/14/sbs-2008-console-may-take-too-long-to-display-alerts-and-security-statuses-display-not-available-or-crash.aspx +
Event: 12289, Source: VSS, VSS_E_WRITER_STATUS_NOT_AVAILABLE hr = 0x80042409. "VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit, Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: {957a7c94-f156-4e4e-8411-22dff9590a85} Old snapshot set: {8eac8839-b361-455d-95fa-123052d76c55} Old operation: 1014 Old state: 1 Old failure: 0 Execution Context: Writer Writer Class Id: <multiple values> Writer Name: <multiple values> Writer Instance ID: <multiple values>" 15 at 5:01pm and 15 at 11:01pm which is when the main Windows backup is set to go.
Event ID 3013 Windows Search Service "a device attached to the system is not funcitoning", exclude those files from the search index, or increase the timeout: ^kb148426 SESSTIMEOUT can be 10 - 65535 seconds 45 by default in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters, but i'm not sure that applies to 2k8 as SESSTIMOUT doesn't exist unless created. created 2011/09/12 and set to 90. Had excluded the folder (\WSUS) prior to that. As of 9/13, neither change made any difference. M$ says it is (yet another) ignorable error ^
Event ID 36874 Schannel - "An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed." This is an attempt by a browser to connect using the older SSL3.0 protocol rather than the more secure TLS. It should be ignored unless you have some very serious need to support that browser... SSL is NOT as secure as TLS so allowing those connections could compromise the server. ^ ^ ^ 2011/09/19 Disabled the error by setting the event logging value to 0 under: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL
TaskScheduler Event ID: 706 "Task Compatibility module failed to update task "" to the required status [3|4]." Can be fixed by simply editing the scheduled task without changing anything. Not sure why that works, but it does.
Share Point Services 3 Event ID 3355 with timeout as the reason;
^
2011/11/15: start / "cmd" / right click run as Administrator, approve
cd "\Program Files\Common Files\Microsoft Shared\Web Server
Extensions\12\BIN"
stsadm -o setproperty -pn database-connection-timeout -pv 45
ToDo: Upgrading from Exchange Server 2007, SP1 to SP3 on Small Business Server 2008 (SBS2k8)
http://support.microsoft.com/kb/982423 must disable Forefront first.
http://technet.microsoft.com/en-us/library/ff607226(EXCHG.80).aspx can't upgrade? At all or does this mean one must un-install Exch2k7sp1 and then install SP3 and restore data?
http://social.technet.microsoft.com/Forums/en-US/exchangesoftwareupdate/thread/0f045327-7d0b-4454-883f-95b93bb86ec7/ This appears to indicate that it can be an update, but you must remember to run it as admin.After Start, All Programs, Microsoft Echange Server 2007, Continue:
get-ExchangeServer, Failed, Error: Active Directory server name.xxx.com is not available. Error message: A local error occurred.
get-UMServer, Failed, Error: Active Directory server name.xxx.com is not available. Error message: A local error occurred.Solve this by: Start, Run, (type in: control keymgr.dll), OK, Back up..., (type in a name) Next, (press Ctrl+Alt+Del if local, or Ctrl+Alt+End if remote)
Select each entry in the list and click Remove. Close.
In IIS 7 Manager, clicking on any of the Exchange paths under SBS Web Applications results in error: Could not find a part of the path "\\.\BackOfficeStorage\name.local\MBX". This behavior is normal and does not prevent normal operation of the system.
Under Exchange Management, Organization..., Hub Transport, on the Anti-Spam tab, the IP Allow and Block lists are not accessible. This is normal, go to Server Configuration, Hub Transport, Anti-Spam (bottom half), and access them there. +
The ForeFront for Exchange program can timeout when doing updates. There is a KB939411 that specifies a regedit fix that increases the timeout limit and allows it to finish. You will see security warnings in the summary network report and the detail will show "At least one of the engines enabled for updates has not been updated in the last week." In the event log, you will see "Error: The <EngineName> scan engine update timed out" or like that from source GetEngineFiles, event ID: 6014 error code 0x80004005. Already set to 3300.
The ForeFront for Exchange program can timeout when doing real time scans of incomming messages. ^ The setting can be modified in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Exchange Server. Because this is a hidden registry value, you must create a new DWORD registry value called RealtimeTimeout, set the Base to Decimal, and type the time in milliseconds in the Value data box. default is 5 minutes or 300,000 milliseconds. Recycle the Exchange and Forefront Security for Exchange Server services for the change to take effect. 20110921 changed to 600000. Wait for next server restart.
- http://www.kreslavsky.com/2008/06/outlook-status-shows-disconnected.html Tried adding "Maximum Allowed Sessions Per User" to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem and set value to 40 (decimal).
James Newton of MassMind replies: The kreslavsky fix did not help. As per http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/thread/037d02f2-dbf3-4a43-b161-eade299b05ff Trying KB830836 +
Kaspersky downloads but does not install. GetEngineFiles Event ID: 6014 0x80004005 \Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\ProgramLog.txt shows: GetFileCommand "Error: 13. File exists" NOT a timeout. +http://social.technet.microsoft.com/Forums/en-US/FSENext/thread/320a0c78-ed6d-42e2-9345-cd54d1b5fc03 Under \Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\Engines\x86\ I renamed Kaspersky5 to Kaspersky5OLD (had to wait for one of the scheduled update attempts to finish before it would let me) and then manually updated. Appears to be ok now.
FSEAgent Event ID: 8048 "# messages have been archived and purged due to an error while scanning. Please ensure that mail is not queuing." Correct by removing "stuck" emails in the Forefront for Exchange "Undeliverable" folder. That is C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\Archive\Undeliverable\in by default.
http://blogs.technet.com/b/msfss_stuff/archive/2009/09/24/issue-of-the-week-9-24.aspxThe BPA for Exch says HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\TcpTimedWaitDelay should be 60^ and it is currently -1 which some say is the same as 120^ and should be 30. Leaving alone for now. We aren't under heavy load.
404 when requesting a file that does exist from a working site: Running IIS7, you put a file in a folder from which other files are clearly available to remote browsers, and the browsers return a 404 error when requesting that file: KB396265 {broken link} describes why this happens in IIS6 and explains how to correct it. In IIS7, the mime mapping is per directory, in the features view for that folder. Just add a mime mapping and ensure it has a valid type. E.g. if you want to download .exe files from a folder add application/octet-stream as the mapping for .exeIf you get a 404.2 on a cgi-bin .exe, open the IIS manager, click on the main icon for the server on the left, then on "Edit ISAPI or CGI Restriction", add a new entry (far right action list) and enter the full path and filename of the .exe, and click on "Allow extension path of execute".
If you are trying to figure out which log file directory belongs to which web site, go to the IIS control panel, select the web site, double click "logging" then click on "show log files" in the upper right corner.
Multiple sites with seperate self issued SSL certs on one IP address: (done 2011/07/20 and it hasn't exploded yet)
- In IIS Manager, Connections, select your server, then go to "Features View" (lower left corner of center screen), and double click "Server Certificates". In the Actions panel, click "Create Self-Signed Certificate..." and enter a Friendly name starting with a "*" such as *site1 then click Ok. The new cert shoudl appear in the list of certificates. If you get an Access Denied error, allows Administrators full access to C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
- In your web site setup, Actions panel, Bindings, Add, and change type to https: then select the certificate (again, the friendly name /must/ start with a *) and the Host name: field will re-appear. Enter the host name for your site. e.g. site1.com. Because the IIS Manager GUI will change all the sites bound to that IP address and port, temporarily change the port to 444 instead of 443, then click Ok and confirm. You should NOT get a message about another domain sharing that binding.
- Now open %windir%\System32\inetsrv\config and edit applicationHost.config. Search for bindingInformation="*:444 and change the 444 to 443. File / Save.
M$ lists NO fax modems for 2k8. On the list of approved modems, 2k8 isn't an option:
http://www.windowsservercatalog.com/results.aspx?bCatID=1459&cpID=0&avc=10&OR=1
(see the lower left corner under "processor architecture" and note that there are no entries for Windows Server 2008.)USR says they support 2k8. The USR3453 "Courier V. Everything External" has the "best track record" with SBS 2k8.Note that this is not meant to imply that it will actually work reliably
http://www.usr.com/support/s-windows-2008.asp?loc=Incomming FAXes not being routed to email? See "KB973640"+
After running just fine for a few days, email notification of faxes becomes intermittant. Some faxes appear, others don't. In the event viewer, applications log, you find a repeating sequence of events. 32083, 32089, 32078. Restarting the fax service, or the server, causes the problem to go away for a few days.
http://blogs.technet.com/b/sbs/archive/2009/05/28/sbs-2008-fax-routing-to-email-fails-with-the-following-error-occurred-0x80040211.aspxThere are many cases of FAXes being recieved, reciept acknologed to the sender, but then not actually routed via email or saved in the folder. M$ is ignoring these problems.
GFI says they support a fax server solution for 2k8:
http://www.gfi.com/faxmaker
netsh int tcp set global congestion=none+
netsh int tcp set global autotuning=disabled
netsh int tcp set global rss=disabled
netsh int ip set global taskoffload=disabled
dnscmd /Config /EnableEdnsProbes 0
in accordance with SBS2k8 Best Practices Analyzer.
Comments:
See also:
| file: /Techref/os/win/2008sbs.htm, 22KB, , updated: 2012/1/31 11:57, local time: 2012/2/8 03:08,
38.107.179.232:LOG IN |
| ©2012 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions? <A HREF="http://www.ecomorder.com/techref/os/win/2008sbs.htm"> Windows Server 2008 Small Business Server (x64)</A> |
| Did you find what you needed? |
|
.