THE OFFICIAL BLOG OF THE SBS "DIVA" : SBS 2k3 SP1

Getting a "This computer cannot be upgraded to the OEM version of Small Business Server"?

bradley — Sat, 15 Jul 2006 01:12:00 GMT

So if you are seeing this...try the following...

If you are installing SBS sp1 on an OEM machine and you get a message that says "

This computer cannot be upgraded to OEM version of small business server

First try this:

HKLM\software\microsoft\smallbusinessserver\IsRunFromWeb and set the value to Decimal 1 i.e. 0x1.

This can happen on an OEM install of SBS if the following file is the retail version.
C:\program files\Microsoft integration\windows small business server 2003\suiteinfo.dll

To see if you have the retail version of the file: When you view the properties of this file, sometimes you get a resource tab. On the resource tab, expand string If it is OEM version, it will have an entry that says 74995-OEM. If it is the retail version, it will say just 74995

(I also opened it up in notepad and saw in my version of it...this so I could tell my SBS OEM thought it was an OEM and had the right dll file)

Usually this will happen if it has OEM PID in the registry and the file version of sutieinfo.dll is retail. In this case replace the retail version with the OEM one and rerun the service pack.

THE be-all-end-all how to install SBS 2003 sp1

bradley — Tue, 06 Dec 2005 18:40:00 GMT

So in the mailbag today comes the request that someone is “looking for “THE” this is how you install sbs 2003 sp1...any ideas? All I see is bits and bobs here and there”

Haven't seen this, have you?

How to install Service Pack 1 for SBS 2003:
http://www.smallbizserver.net/Default.aspx?tabid=236

That's THE how to install SP1 on a SBS box be all and end all documents.

Now these days we have been installing Exchange 2003 sp2 instead of SP1 with success as you get the 75 gig mail storage [18 gig default, bump up the rest via reg key]

Oooh we got updates in our release notes

bradley — Tue, 13 Sep 2005 00:42:00 GMT

Readme for Premium got updated for these:

After you have installed Windows SBS SP1 and you try to reinstall a Windows SBS component, you receive the message, "The drive contains a disc for Windows Small Business Server 2003 with no service packs…"

After you have installed Windows SBS SP1 and you try to install ISA Server 2004, you receive the error message, "The wizard cannot install ISA Server 2004 because the server is not running the ........

Release notes got updated for the first message....

Readme for Standard got updated

SP1 for Windows SBS 2003 cannot be applied to evaluation versions of Windows SBS 2003 ......

Top issues with SBS 2003 sp1

bradley — Mon, 08 Aug 2005 05:05:00 GMT

Now if you were a Microsoft partner.... you'd be able to visit the Partner newsgroups and find these answers to top issues:

...now then...if you install SBS servers...why aren't you a partner? Better yet...why not a Small Business Specialist?

1. Store.exe memory consumption alerts

SYMPTOMS
After installing SBS 2003 SP1, a performance monitoring program that you run
may generate an alert or a report to indicate that the Store.exe process
uses much more memory than it did before you installed SP1. Typically, the
monitoring program reports that the Store.exe process uses more "private
bytes" memory than it used before you installed SP1.

CAUSE
This is actually the same issue described here:

867628 Monitoring programs report that the Store.exe process consumes
http://support.microsoft.com/?id=867628

The problem is that the SBS SP1 package is not disabling the alert as
expected. So, when a customer goes through the process of installing
Exchange SP1 as a requirement for SBS SP1, it will start triggering these
errors that are not taken care by the SBS SP1.

RESOLUTION
If you re-run the Monitoring Configuration Wizard, the alert is going to be
disabled. Or disable the alert manually from the Monitoring page.

2. CEICW fails with error 0x800725ec in the CEICW log (ICWLOG.TXT)

SYMPTOMS
When running the CEICW after installing SBS SP1 and ISA 2004, the wizard may
fail with the following errors in the ICWLOG.TXT:

Error 0x800725ec returned from call to Creating A record for publishing().
Error 0x800725ec returned from call to
CStingrayCommit::CreateWebPublishingRules().
Error 0x800725ec returned from call to Creating ISA2k4 Web publishing
rules().
Error 0x800725ec returned from call to
CStingrayCommit::CommitWebPublishingRules().
Error 0x800725ec returned from call to Creating Web publishing rules().
Error 0x800725ec returned from call to CStingrayCommit::CommitEx().
[..]
*** Enabling SSL with ISA returned ERROR 8000ffff
*** CCertCommit::EnableSSL returned ERROR 8000ffff
*** CCertCommit::CommitEx returned ERROR 8000ffff
The Firewall Configuration and the Secure Web Configuration will fail in the
wizard.

CAUSE
The error 0x800725ec means:

DNS_ERROR_NODE_IS_CNAME

The problem here is that the PUBLISHING record in DNS is a CNAME instead of
the expected A record.

RESOLUTION
Remove the CNAME Publishing record in DNS and create a new A record for
Publishing pointing to the proper internal IP.

3. CEICW may fail with error c0040393 in the CEICW log (ICWLOG.TXT)

SYMPTOMS
When running the CEICW after installing SBS SP1 and ISA 2004, the wizard may
fail with the following errors in the ICWLOG.TXT:

Saving changes and restarting services returned ERROR c0040393
Publishing CompanyWeb through ISA2k4 returned ERROR c0040393
CCertCommit::EnableSSL returned ERROR c0040393
CCertCommit::CommitEx returned ERROR c0040393

The Firewall Configuration and the Secure Web Configuration will fail in the
wizard.

CAUSE
This issue may occur if the following policy settings are not assigned to
the Network Service account on the domain controller:

- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token

The Network Service account must be added to the policy settings in the
list. This issue may occur if Group Policy settings that were applied at the
domain level have modified the policy settings for the Network Service
account on the domain controller. This issue may occur after you promote a
member server to a domain controller, or on a migration from a Windows 2000
network where SBS 2003 was joined to the 2000 domain.

RESOLUTION
To resolve this issue, make sure that the Network Service account is added
to the following policy settings on the domain controller:

- Adjust memory quotas for a process
- Generate security audits
- Log on as a service
- Replace a process level token

4. SP1 reports error when Outlook 2003 files are missing from clientapps

SYMPTOMS
When trying to setup SBS 2003 SP1, we may see the following symptoms:

1. You will see the following service pack install error - "Windows Small
Business Server Service Pack 1 Setup has encountered an error. For more
information, review the most recent entry in the setup error log in
C:\Program Files\Microsoft Inetgration\Windows Small Business Server
2003\logs\setup.log. Then correct the error and run the Service pack 1 setup
again."

2. Setup.log will show all successes / no failures

3. Errorlog.txt will show "Microsoft Office outlook 2003 (ServicePack1):
[2] : Error applying outlook sp1 MSP file to AIP
(C:\CLientApps\Office2003_sp1\office2003_sp1.msp/c:\Client~1\outlook2003\OUTLS11.msi),
(3)

4. Could be a slight variant of the errorlog.txt message depending on the
initial cause (not installed, removed, etc)

5. You will also see the following in the KB885918.log

109.468: ---- Old Information In The Registry ------
109.531: Source:C:\ClntApps\ClientApps5\Office2003_SP1\SETC.tmp
109.609:
Destination:C:\ClntApps\ClientApps5\Office2003_SP1\OFFICE2003_SP1.MSP
109.609: ---- New Information In The Registry ------
109.609: Source:C:\ClntApps\ClientApps5\Office2003_SP1\SETC.tmp
109.609:
Destination:C:\ClntApps\ClientApps5\Office2003_SP1\OFFICE2003_SP1.MSP
109.609: DoInstallation: A reboot is required because RebootRequired=1 was
specified in the inf.
109.609: DoInstallation: A reboot is required because the
ProcessesToRunAfterReboot inf section was non-empty.
109.609: In Function SetVolatileFlag, line 11576, RegOpenKeyEx failed with
error 0x2
109.609: In Function SetVolatileFlag, line 11593, RegOpenKeyEx failed with
error 0x2
109.609: UpdateSpUpdSvcInf: Source
[ProcessesToRunAfterReboot.RebootNotRequired] section is empty; nothing to
do.
751.656: RebootNecessary = 1,WizardInput = 0 , DontReboot = 1, ForceRestart
= 0

CAUSE
Outlook deployment files were not installed, uninstalled, moved, or just
deleted.

RESOLUTION
1. Install the client apps Outlook deployment.

2. Correct the reg path to point to the proper location.

3. Safely ignore the error and verify SP1 did install properly by:

a) All successes in the setup.log
b) The registry value states
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer]\
ServicePackNumber=dword:00000001

5. Be prompted to insert CD with SBS 2003 SP1 when trying to reinstall a SBS
component

SYMPTOMS
When trying to reinstall a SBS component, you are prompted to insert CD with
SBS 2003 SP1 and the original SBS 2003 CDs do not work.

CAUSE
SBS 2003 SP1 setup was downloaded from the web.

RESOLUTION
Check to see if the HKLM\Software\Microsoft\SmallBusinessServer\IsRunFromWeb
= 0x2 and if so, extract the SBS 2003 SP1 package and point it to the
folder.

6. Clients unable to get DHCP address after installing ISA 2004

SYMPTOMS
Clients may no longer be able to get DHCP addresses assigned by SBS's DHCP
server after ISA 2004 is installed.

CAUSE
The broadcast address for the subnet is not included in the Internal network
range.

RESOLUTION
Check in the ISA MMC/ServerName/Configuration/Networks then on the Networks
tab, look at the Name Internal Address Ranges. If it's not there, for
example range is up to .254 instead of .255, right click and select
Properties/click on the Addresses tab to change/correct the entries.

SBS 2003 sp1 revisited - OEM story

bradley — Mon, 25 Jul 2005 22:29:00 GMT

A email from the mailbag today reminded me that we need to revisit a few things about SBS 2003 sp1

On Dell boxes, as long as you either (a) have Dell Open Manage 4.4 [located here] or (b) remove Dell Open Manage we no longer are waiting on that piece that was holding us up from installing SP1 on Dell's.
Charlie Anthe [SBS release manager] notes in a blog posting that there is a possible Blue Screen issue on Dell OEM boxes but honestly I haven't seen a lot of dead bodies out here BSODing and for another... remember that any issue during the application of a service pack is a free call to either client machines if you are a partner or your own machine if you are a DIYer.
READ
You heard me READ. We find that many of the issues are due to the fact that people don't realize this isn't a 'one patch' that installs on the system, but a collection of 5 patches. After all we ARE a collection of software pieces right? So naturally our service pack is made up of parts. Then we put together a document of all the wacky things that might go wrong that we found along the way. Personally I found that if you pretty much stuck to the way to install SBS you'll do just fine. In our MVP ranks we had some pretty beat up beta boxes so what you see there is a result of putting it on some messy boxes.
We totally blew it on the 'don't install Windows 2003 sp1' messenging. You see because we HAVE to install Windows 2003 sp1 first before the rest of the parts you DO install that service pack. So for that we in the community screwed up.
Don't panic. I'll say it again. DON'T PANIC. No matter if the worst happens [Sharepoint won't load, monitoring is a bit mixed up], I haven't seen a box yet that hasn't been able to be fixed up. That said, don't go into this service pack thinking it's a trivial matter. Ensure you have backed up your system. If you are a DIYer unsure of this process, this is the time to call in someone who is versed in this. Oh...how about ... a Small Business Specialist. Yup we now have a special credential for those crazed enough to be doing small businesses. Seriously, as a person who I would call in the advanced stages of insanity of a DIYer, if you don't feel confortable picking up a phone and calling Microsoft for help, maybe you should consider calling in an IT Pro that handles SBSers all the time.

So folks... those that are on OEMs or support OEMs? Always remember, no matter what happens, we'll leave the lights on in the newsgroup and listserves and be there for you.

V6 Windows/Microsoft Update and SBS

bradley — Wed, 29 Jun 2005 17:55:00 GMT

Just a heads up to everyone.... the Windows Update/Microsoft Update that may be offering up to your servers right now that will have the v6 in it's address, it is offering up to you the Windows 2003 sp1...that is NOT SBS 2003 sp1. It is merely the first part of what you need for a fully complete service pack.

Remember that SBS 2003 sp1 is

Windows 2003 sp1
Sharepoint sp1
Exchange sp1
XP sp2
and finally..the SBS specific parts of the patches

You can't get ISA server or SQL server sp4 any other way than ordering the cdrom.

So if you've downloaded and installed it...just go to the SBS page and finish the SP installation

Blocking Windows 2003 sp1 from your systems

bradley — Tue, 21 Jun 2005 23:02:00 GMT

Got a lot of servers [or a lot of SBS servers] that you want to block Windows 2003 sp 1 from [so your clients/customers won't automatically click and install it until YOU are ready?]

Click here for tools to block the deployment of Windows 2003 sp1 on automatic update on July 26, 2005 until March 30, 2006.

“While recognizing the security benefits of Windows Server 2003 Service Pack 1 (SP1), some organizations have requested the ability to temporarily disable the automatic delivery of this update through Automatic Updates (AU) and Windows Update (WU).”

Before anyone asks... I 'think' us SBSers will be blocked from AU offering up Windows 2003 sp1....but I think I'll go check...I'll let you know....

Backup and Monitoring not working after SBS sp1?

bradley — Tue, 21 Jun 2005 12:22:00 GMT

I've seen this a couple of times so I thought I'd repost it again

After SBS 2003 sp1 you can't get to the backup and monitoring snap in.... you can fix it here:

842693 You receive a "HTTP 400 - Bad Request" error message when you try to
use the Monitoring and Reporting snap-in or the Backup snap-in on a Windows
Small Business Server 2003-based computer
http://support.microsoft.com/?id=842693

When the download button 'isn't' the download button

bradley — Tue, 31 May 2005 06:11:00 GMT

One of the very confusing things about this service pack is when you go to download it and you blondely click the download button it blondely only downloads the last patch of the series and does not direct you to install the five parts. And of course if you don't read..which of course none of us geeks do, when you go to install this ... it says you need Windows 2003 sp1 first.

No wonder everyone is getting confused about this....

Order the cdroms...trust me.. you life will be a lot easier. Then follow the how to on the Smallbizserver.net site.

That thingy that is now in the corner of the server after you apply SP1

bradley — Tue, 31 May 2005 04:14:00 GMT

Someone in the newsgroup asked about that 'thingy' in the corner that is now in the system tray after the application of the Service pack. Well for one, if you are just NOW noticing it because you never had it before...you kinda missed a critical patch along the way as this is caused by an update that came down on Windows Update ages ago. KB 829358 is the one that brings down that \\ thingy. But not to worry you can either just get used to it down there or delete it off.

I guess I'm a lazy bone because I've just ignored it. It's only a cosmetic issue and you easily remove it from the start tray...but Windows did that one to us a long time ago... so if you've never had that before now... you might want to remember that second Tuesday of the month is Patch Tuesday and put in place a Patch Management process to ensure that you are getting patches on that Second Tuesday of each month.

Struck up a conversation in the plane back from Texas as a matter of fact with the lady who sat next to me who was in charge of application updates for her firm and she didn't know that second Tuesday was patch Tuesday. Guess I should warn people when they sit next to me on airplanes that you might get geek speak for the plane ride.

So if we told you NOT to install Windows 2003 sp1.... how come we now need it on the box to install the SBS sp1?

bradley — Fri, 27 May 2005 01:39:00 GMT

The impression that some are getting is that the only patch they need is the last download called SBS 2003 sp1. That's an incorrect view.

You remember back in school geometry classes when you had sets and subsets? Okay SBS 2003 sp1 is a glob of patches which are Windows 2003 sp1, Sharepoint sp1, Exchange 2003 sp1, XP sp2 client updates, and then some specific SBS patches that includes the MSDE updates. For premium you also get another disk that has SQL Server 2000 sp4 and ISA Server 2004. But all of those together make up the Service pack that SBS needs.

So when we went screaming to the newsgroup “don't install Windows 2003 sp1” what we really should have been screaming is “Don't install it just yet” We had to have you wait because Windows 2003 SP1 all by itself would break a few things here and there and the full SBS patch bundle fixes everything back up.

You have to lay that down as a foundation 'BEFORE' you do the rest of the patches. So for those of you reading in the Dell information that Windows 2003 sp1 isn't supported on SBS 2003, Dell too should be saying “we support it IF you apply the rest of the SBS patch bundle”.

Get it now? Just like we are made up of parts, so too is our patch. We have normal server under the hood and need the normal server patch FIRST before we get the rest of the parts.

Now if you already patched for Sharepoint, you can skip that....and Exchange...skip that...but I'd install the XP sp2 client folder update.

Any questions? I see that the cdroms are starting to get delivered... fun for the Memorial Day weekend!

SBS 2003 with ISA 2004 and running a Member server that does Terminal Services?

bradley — Thu, 26 May 2005 23:58:00 GMT

Then you'll need a patch for that main server to fix and issue where Outlook 2003 running on Windows Server 2003 sp1 [a terminal server box] cannot connect back through that SBS 2003 SP1 box running ISA 2004 and pick up new messages.

RPC data may be blocked, and Outlook may not start in Windows Server 2003 with SP1:
http://support.microsoft.com/default.aspx?scid=kb;en-us;897716

You can find the download you'll need for the ISA 2004 server on the SBS 2003 box here: Apply it on the main SBS box, but it's purpose is to fix the issue with the member Terminal Server box.

ISA 2004 Enterprise edition patch:

Outlook 2003 running on Windows Server 2003 Service Pack 1 cannot connect to an Exchange 2003 server through ISA Server 2004 Enterprise Edition. Earlier versions of Outlook may also be affected.

ISA 2004 Standard edition patch:

Outlook 2003 running on Windows Server 2003 Service Pack 1 cannot connect to an Exchange 2003 server through ISA Server 2004 Standard Edition. Earlier versions of Outlook may also be affected.

ISA 2000 edition patch

Outlook 2003 running on Windows Server 2003 Service Pack 1 cannot connect to an Exchange 2003 server through ISA Server 2000. This problem may also affect earlier versions of Outlook.

If I need Premium/ISA 2004 should I install the rest of the service pack now?

bradley — Thu, 26 May 2005 17:55:00 GMT

A question from the blog comments that I want to bring up front... If you have SBS 2003 premium edition, you will GET ISA 2004 merely by ordering the service pack on CDrom and choosing the “Premium” drop down. You don't need to “buy” it, just need to pay for shipping and handling.

I would not install the rest of the service pack without ISA for the very important reason that once you install Windows 2003 sp1 you will need a patch for ISA 2000 to fix Outlook over http...this is not an issue in ISA 2004, but is with ISA 2000.

So for Premium folks... order the cdrom.

So why wait for SBS 2003 premium cdroms?

bradley — Tue, 24 May 2005 18:03:00 GMT

So why are we saying to order the premium CDroms and wait for them before installing SBS 2003 sp1?

First off, you can't just use any old ISA lying around, you need the SBS-wrapped version. This patch will ensure your ISA 2000 rules are retained during the installation as it exports them out and pulls them back into ISA 2004. [Make sure you disable antivirus and shut it down during this part as my Trend didn't play nice-nice with this part of the install].

Next, you can't put the other parts on first and then wait for ISA 2004 without messing up your ISA 2000 and Outlook over http. You do this now and you'll need this hotfix to fix that issue for ISA 2000. Which you could do.... but I'm lazy and would rather do it in one sitting is all.

So that's one of the reasons that we're saying for Premium to order the cdroms. And yes, you'll need to order one per client, unfortunately.

Chad ran into an issue with his self signed certificates in ISA and Outlook over http so you proabably will want to export out that and re-import back in [or something along those lines] if you rely on Outlook over http and your end users have already set up the certificates and what not. Not a biggie but just a inconvience that needs a heads up so you are forewarned before you install ISA.

Any good installs of SBS 2003 sp1, the newsgrouper asked?

bradley — Tue, 24 May 2005 04:30:00 GMT

In the newsgroup today came the post “SP1 - any good installs?” and I had to laugh a bit. First off, I'd say most sane folks are ordering the cdroms and waiting for the media, but keep in mind, the newsgroup is after all..for tech support you know. When's the last time you ran to the newsgroup and yelled out “Hey Windows update worked perfectly!” or how about “I rebooted just fine!“. See what I mean? We don't see the good results, just the problem ones. So a few days after the SP was released and what's the biggest things we've seen so far?

In general, I think I can sum up the preliminary report as follows: When you haven't been an SBSer, you've gotten into issues with this service pack.

What am I talking about? You didn't let the install put everything in the system and you customized your install. We see when Outlook isn't installed, the service pack will actually complete properly but will indicate a failure. We see when Sharepoint or Monitoring in moved in an unusual way, the service pack doesn't know where to go to find it. In my own personal case, I totally blew it when I forgot and left on antivirus and didn't manually disable it for the entire install process. Unplug the RJ45, disable the antivirus, reboot the system so the a/v is not in memory and THEN install the service pack. My ISA server installation got a smidge stuck on IISadmin being held 'on' by Trend antivirus.

Just remember, in the folder under Program Files\Microsoft Integration\Windows Small Business Server\ you will find the files: Eventlog.txt, Errorlog.txt and Setup.log. Review the last few entries in each looking for error messages.

Again the main things to keep in mind for a standard vanilla install is watch the harddrive space and disable the antivirus. Other than that, ask yourself... how good of an SBSer have you been with this box? If you've been a good SBSer... we probably won't hear from you. If you haven't been a good SBSer, well then, we'll keep the light on for ya.