Hey All,

Everything is working on my new SBS2003 Premium Server except VPN. For the
life of me I can't get this simple thing to work. But that is the least of
my problems right now.

The ONLY thing I have uninstalled is WSUS 2.0. I was getting an error every
5 seconds in the event viewer. My question is can I install WSUS 3.1 without
reinstalling WSUS 2.0??? And more importantly do I need it? NOTHING has been
disabled and nothing else has been uninstalled.

My client has had a third party install Xcelerator Software via RDP for
package tracking and that's when I started getting the WSUS errors. I
haven't talked to the Xcelerator people but the server is clean with no data
at all.

Just wondering if WSUS is a needed component on it's own??


D

--






For The Best Web Hosting Money Can Buy Go To:
http://www.serverpoint.com/1028.html

Re: WSUS 2.0 by Dave

Dave
Fri Mar 28 13:45:40 PDT 2008

Whether or not to use WSUS is an individual decision. Personally, I find
WSUS one of the most valuable parts of my server, because I no longer worry
about patching client PCs. As importantly, I have a central console to
monitor that the desktops are up to date. (I'm running SP1 rather than R2 -
with R2, WSUS gains even more functionality due to the monitoring
integration).

You can install WSUS 3 SP1 without first installing WSUS 2. If you don't
already have 2 installed, IMO that would be the way to go. I'm not sure how
an unrelated app would cause WSUS to start reporting errors, but there are a
number of troubleshooting tools available, so if you run into this again, I
recommend fixing rather than uninstalling.

VPN: In the Server Mgmt Console, go to the Internet tab and run the
"Configure remote access" wizard. From there, make sure GRE is enabled on
the firewalls at both the client and server ends (also known as Protocol
(not port) 47, or sometimes PPTP pass-through). Make sure TCP port 1723 is
open to the SBS. FYI, there are several client-side firewalls that can
block VPN, including WLOC in its default configuration, and I'm pretty sure
the Vista one as well. Disabled GRE or other firewall settings seem to be
the primary cause of VPN issues. BTW, have you considered RWW as an
alternative to VPN?


"-Draino-" <guest@unknown.com> wrote in message
news:E65D3982-886C-412D-BA19-67ECCDDB9970@microsoft.com...
> Hey All,
>
> Everything is working on my new SBS2003 Premium Server except VPN. For the
> life of me I can't get this simple thing to work. But that is the least of
> my problems right now.
>
> The ONLY thing I have uninstalled is WSUS 2.0. I was getting an error
> every 5 seconds in the event viewer. My question is can I install WSUS 3.1
> without reinstalling WSUS 2.0??? And more importantly do I need it?
> NOTHING has been disabled and nothing else has been uninstalled.
>
> My client has had a third party install Xcelerator Software via RDP for
> package tracking and that's when I started getting the WSUS errors. I
> haven't talked to the Xcelerator people but the server is clean with no
> data at all.
>
> Just wondering if WSUS is a needed component on it's own??
>
>
> D
>
> --
>
>
>
>
>
>
> For The Best Web Hosting Money Can Buy Go To:
> http://www.serverpoint.com/1028.html


Re: WSUS 2.0 by -Draino-

-Draino-
Fri Mar 28 15:23:50 PDT 2008

Hi Dave,

Thanks for the info on WSUS. I am only talking about 2 client PC's one is
the owner of the company and the other is his helper. Both PC's are XPSP2
machines and they both do their own updates with MS.

The VPN issue is troubling because the Verizon Westell 327a router has a
setting for PPTP pass through and I have enabled it. It shows that port 1723
is forwarded and GRE is enabled. The problem I believe is that I can't
access the SBS Premium firewall because RRAS has ipnat.sys running and is
blocking access to the firewall. Just before the wizard is about to make
changes the window says that it can't configure my firewall but when the
wizard actually runs it shows that the firewall IS being configured.

I have heard that VPN is slow anyway. I am not sure I would ever use it but
I would at least like to get it working.

I don't want to mess around with things that I don't need too. The server is
running great and RWW is working fine. I can access the server and my 2
workstations using RWW with no issues.


D



"Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in message
news:D46B695A-0484-4C15-B6F7-0DF6BD4F99FB@microsoft.com...
> Whether or not to use WSUS is an individual decision. Personally, I find
> WSUS one of the most valuable parts of my server, because I no longer
> worry about patching client PCs. As importantly, I have a central console
> to monitor that the desktops are up to date. (I'm running SP1 rather than
> R2 - with R2, WSUS gains even more functionality due to the monitoring
> integration).
>
> You can install WSUS 3 SP1 without first installing WSUS 2. If you don't
> already have 2 installed, IMO that would be the way to go. I'm not sure
> how an unrelated app would cause WSUS to start reporting errors, but there
> are a number of troubleshooting tools available, so if you run into this
> again, I recommend fixing rather than uninstalling.
>
> VPN: In the Server Mgmt Console, go to the Internet tab and run the
> "Configure remote access" wizard. From there, make sure GRE is enabled on
> the firewalls at both the client and server ends (also known as Protocol
> (not port) 47, or sometimes PPTP pass-through). Make sure TCP port 1723
> is open to the SBS. FYI, there are several client-side firewalls that can
> block VPN, including WLOC in its default configuration, and I'm pretty
> sure the Vista one as well. Disabled GRE or other firewall settings seem
> to be the primary cause of VPN issues. BTW, have you considered RWW as an
> alternative to VPN?
>
>
> "-Draino-" <guest@unknown.com> wrote in message
> news:E65D3982-886C-412D-BA19-67ECCDDB9970@microsoft.com...
>> Hey All,
>>
>> Everything is working on my new SBS2003 Premium Server except VPN. For
>> the life of me I can't get this simple thing to work. But that is the
>> least of my problems right now.
>>
>> The ONLY thing I have uninstalled is WSUS 2.0. I was getting an error
>> every 5 seconds in the event viewer. My question is can I install WSUS
>> 3.1 without reinstalling WSUS 2.0??? And more importantly do I need it?
>> NOTHING has been disabled and nothing else has been uninstalled.
>>
>> My client has had a third party install Xcelerator Software via RDP for
>> package tracking and that's when I started getting the WSUS errors. I
>> haven't talked to the Xcelerator people but the server is clean with no
>> data at all.
>>
>> Just wondering if WSUS is a needed component on it's own??
>>
>>
>> D
>>
>> --
>>
>>
>>
>>
>>
>>
>> For The Best Web Hosting Money Can Buy Go To:
>> http://www.serverpoint.com/1028.html
>

Re: WSUS 2.0 by Dave

Dave
Sat Mar 29 13:34:30 PDT 2008

Are you sure you have ISA installed? It should be ISA that's blocking the
other firewall from starting, not the other way around. I'm OK with
ignoring VPN if you don't need it, but I would want to know that ISA is
installed, and is configured properly with the CEICW.

VPN is generally slower than RWW, but I recommend making sure ISA is
installed, configured, and running properly.

I'm a WSUS lover, but I confess that for two client PCs, I'd probably use
Automatic Updates set to auto-install. For the server, AU set to auto
download and notify. I don't let servers boot unattended if I can avoid it,
and you don't need this thing to automatically reboot in the middle of a
backup or while someone is working.


"-Draino-" <guest@unknown.com> wrote in message
news:C71ADCC5-D4D4-4E8F-B609-810854B25658@microsoft.com...
> Hi Dave,
>
> Thanks for the info on WSUS. I am only talking about 2 client PC's one is
> the owner of the company and the other is his helper. Both PC's are XPSP2
> machines and they both do their own updates with MS.
>
> The VPN issue is troubling because the Verizon Westell 327a router has a
> setting for PPTP pass through and I have enabled it. It shows that port
> 1723 is forwarded and GRE is enabled. The problem I believe is that I
> can't access the SBS Premium firewall because RRAS has ipnat.sys running
> and is blocking access to the firewall. Just before the wizard is about to
> make changes the window says that it can't configure my firewall but when
> the wizard actually runs it shows that the firewall IS being configured.
>
> I have heard that VPN is slow anyway. I am not sure I would ever use it
> but I would at least like to get it working.
>
> I don't want to mess around with things that I don't need too. The server
> is running great and RWW is working fine. I can access the server and my 2
> workstations using RWW with no issues.
>
>
> D
>
>
>
> "Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in
> message news:D46B695A-0484-4C15-B6F7-0DF6BD4F99FB@microsoft.com...
>> Whether or not to use WSUS is an individual decision. Personally, I find
>> WSUS one of the most valuable parts of my server, because I no longer
>> worry about patching client PCs. As importantly, I have a central
>> console to monitor that the desktops are up to date. (I'm running SP1
>> rather than R2 - with R2, WSUS gains even more functionality due to the
>> monitoring integration).
>>
>> You can install WSUS 3 SP1 without first installing WSUS 2. If you don't
>> already have 2 installed, IMO that would be the way to go. I'm not sure
>> how an unrelated app would cause WSUS to start reporting errors, but
>> there are a number of troubleshooting tools available, so if you run into
>> this again, I recommend fixing rather than uninstalling.
>>
>> VPN: In the Server Mgmt Console, go to the Internet tab and run the
>> "Configure remote access" wizard. From there, make sure GRE is enabled
>> on the firewalls at both the client and server ends (also known as
>> Protocol (not port) 47, or sometimes PPTP pass-through). Make sure TCP
>> port 1723 is open to the SBS. FYI, there are several client-side
>> firewalls that can block VPN, including WLOC in its default
>> configuration, and I'm pretty sure the Vista one as well. Disabled GRE
>> or other firewall settings seem to be the primary cause of VPN issues.
>> BTW, have you considered RWW as an alternative to VPN?
>>
>>
>> "-Draino-" <guest@unknown.com> wrote in message
>> news:E65D3982-886C-412D-BA19-67ECCDDB9970@microsoft.com...
>>> Hey All,
>>>
>>> Everything is working on my new SBS2003 Premium Server except VPN. For
>>> the life of me I can't get this simple thing to work. But that is the
>>> least of my problems right now.
>>>
>>> The ONLY thing I have uninstalled is WSUS 2.0. I was getting an error
>>> every 5 seconds in the event viewer. My question is can I install WSUS
>>> 3.1 without reinstalling WSUS 2.0??? And more importantly do I need it?
>>> NOTHING has been disabled and nothing else has been uninstalled.
>>>
>>> My client has had a third party install Xcelerator Software via RDP for
>>> package tracking and that's when I started getting the WSUS errors. I
>>> haven't talked to the Xcelerator people but the server is clean with no
>>> data at all.
>>>
>>> Just wondering if WSUS is a needed component on it's own??
>>>
>>>
>>> D
>>>
>>> --
>>>
>>>
>>>
>>>
>>>
>>>
>>> For The Best Web Hosting Money Can Buy Go To:
>>> http://www.serverpoint.com/1028.html
>>


Re: WSUS 2.0 by Henrik

Henrik
Tue Apr 01 08:07:52 PDT 2008

I agree with Dave in your case, but for users with more clients I would
upgrade to version2 and leave it to default. Then upgrade to version 3 sp1
with the WSUS update that comes downloaded with version 2. Its a straight
forward solution No different than installing ordinary patches for clients
and servers.

--
Henrik Arenblad, MCP SBS,


"Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in message
news:D43D3C86-8717-48D3-95EE-EEF5F44307D0@microsoft.com...
> Are you sure you have ISA installed? It should be ISA that's blocking the
> other firewall from starting, not the other way around. I'm OK with
> ignoring VPN if you don't need it, but I would want to know that ISA is
> installed, and is configured properly with the CEICW.
>
> VPN is generally slower than RWW, but I recommend making sure ISA is
> installed, configured, and running properly.
>
> I'm a WSUS lover, but I confess that for two client PCs, I'd probably use
> Automatic Updates set to auto-install. For the server, AU set to auto
> download and notify. I don't let servers boot unattended if I can avoid
> it, and you don't need this thing to automatically reboot in the middle of
> a backup or while someone is working.
>
>
> "-Draino-" <guest@unknown.com> wrote in message
> news:C71ADCC5-D4D4-4E8F-B609-810854B25658@microsoft.com...
>> Hi Dave,
>>
>> Thanks for the info on WSUS. I am only talking about 2 client PC's one is
>> the owner of the company and the other is his helper. Both PC's are XPSP2
>> machines and they both do their own updates with MS.
>>
>> The VPN issue is troubling because the Verizon Westell 327a router has a
>> setting for PPTP pass through and I have enabled it. It shows that port
>> 1723 is forwarded and GRE is enabled. The problem I believe is that I
>> can't access the SBS Premium firewall because RRAS has ipnat.sys running
>> and is blocking access to the firewall. Just before the wizard is about
>> to make changes the window says that it can't configure my firewall but
>> when the wizard actually runs it shows that the firewall IS being
>> configured.
>>
>> I have heard that VPN is slow anyway. I am not sure I would ever use it
>> but I would at least like to get it working.
>>
>> I don't want to mess around with things that I don't need too. The server
>> is running great and RWW is working fine. I can access the server and my
>> 2 workstations using RWW with no issues.
>>
>>
>> D
>>
>>
>>
>> "Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in
>> message news:D46B695A-0484-4C15-B6F7-0DF6BD4F99FB@microsoft.com...
>>> Whether or not to use WSUS is an individual decision. Personally, I
>>> find WSUS one of the most valuable parts of my server, because I no
>>> longer worry about patching client PCs. As importantly, I have a
>>> central console to monitor that the desktops are up to date. (I'm
>>> running SP1 rather than R2 - with R2, WSUS gains even more functionality
>>> due to the monitoring integration).
>>>
>>> You can install WSUS 3 SP1 without first installing WSUS 2. If you
>>> don't already have 2 installed, IMO that would be the way to go. I'm
>>> not sure how an unrelated app would cause WSUS to start reporting
>>> errors, but there are a number of troubleshooting tools available, so if
>>> you run into this again, I recommend fixing rather than uninstalling.
>>>
>>> VPN: In the Server Mgmt Console, go to the Internet tab and run the
>>> "Configure remote access" wizard. From there, make sure GRE is enabled
>>> on the firewalls at both the client and server ends (also known as
>>> Protocol (not port) 47, or sometimes PPTP pass-through). Make sure TCP
>>> port 1723 is open to the SBS. FYI, there are several client-side
>>> firewalls that can block VPN, including WLOC in its default
>>> configuration, and I'm pretty sure the Vista one as well. Disabled GRE
>>> or other firewall settings seem to be the primary cause of VPN issues.
>>> BTW, have you considered RWW as an alternative to VPN?
>>>
>>>
>>> "-Draino-" <guest@unknown.com> wrote in message
>>> news:E65D3982-886C-412D-BA19-67ECCDDB9970@microsoft.com...
>>>> Hey All,
>>>>
>>>> Everything is working on my new SBS2003 Premium Server except VPN. For
>>>> the life of me I can't get this simple thing to work. But that is the
>>>> least of my problems right now.
>>>>
>>>> The ONLY thing I have uninstalled is WSUS 2.0. I was getting an error
>>>> every 5 seconds in the event viewer. My question is can I install WSUS
>>>> 3.1 without reinstalling WSUS 2.0??? And more importantly do I need it?
>>>> NOTHING has been disabled and nothing else has been uninstalled.
>>>>
>>>> My client has had a third party install Xcelerator Software via RDP for
>>>> package tracking and that's when I started getting the WSUS errors. I
>>>> haven't talked to the Xcelerator people but the server is clean with no
>>>> data at all.
>>>>
>>>> Just wondering if WSUS is a needed component on it's own??
>>>>
>>>>
>>>> D
>>>>
>>>> --
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> For The Best Web Hosting Money Can Buy Go To:
>>>> http://www.serverpoint.com/1028.html
>>>
>