Following reboot, some services may not start or work correctly on SBS 2000 or SBS 2003

Although this was first released several months back in July (2008), it is very much likely to impact an SBS 2003 installation at some future point in time.  The good news is that the fix is fairly simple.  You edit a single registry key and add port exclusions in a fairly small list.  Voila! Reboot and all is well again.

What is at stake?  Several services not working or starting – IAS, Exchange AUTD notification for ActiveSync, LT2P, and IPSEC

**Note the following copied article has been clipped to shorten its length.  Follow the link at the very bottom for the full original text.

SYMPTOMS

You may experience many network-related problems after you install the Domain Name System (DNS) security update 953230 (MS08-037) on a computer that is running Windows Small Business Server (SBS), and then you restart the computer.
For example, you may experience any of the following problems.

CAUSE

This problem occurs because the DNS Server service is listening on the UDP port that is required by another service.

RESOLUTION

To resolve this problem, add the port that is needed by the service to the ReservedPorts registry value. This prevents the DNS Server service from listening on that port. The following ports are known to cause conflicts:

Ports
Program that uses the ports

1645-1646
IAS

1701-1701
L2TP

1718-1719
H.323 Gatekeeper (ISA 2000 only)

1745-1745
ISA Server 2000 or ISA Server 2004

1812-1813
IAS

2883-2883
AUTD

3500-3619
ISA Server 2000 only

4500-4500
IPSEC

To configure the ReservedPorts registry value, follow these steps:

1.
Click Start, click Run, type regedit, and then click OK.

2.
Locate and then click the following subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

3.
Right-click ReservedPorts, and then click Modify.

4.
Type the range of ports that you want to reserve.
Notes


You must type the range of ports in the following format:

xxxx-yyyy


Do not replace the existing values. Instead, add the additional values.


To specify a single port, use the same value for x and for y. For example, to specify port 4000, type 4000-4000.


If you specify the continuous ports separately and if one port is reserved and is not used, the next port is not reserved correctly, and the port is used.


ISA Server settings only apply to Small Business Server 2000 or to Windows Small Business Server 2003 Premium Edition.

5.
Click OK.
Note If you receive the following warning message, click OK

Warning:
Data of type REG_MULTI_SZ cannot contain empty strings.
Registry Editor will remove the empty string found.

6.
Exit Registry Editor, and then restart the computer.

Notes


You must restart the computer after you make these changes for the changes to take effect.


If you are using any third-party applications on the server that might require you to use a static UDP port that is higher than port 1024, you should also add it to the list of reserved ports.

Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 (MS08-037)

Advertisements

One response to “Following reboot, some services may not start or work correctly on SBS 2000 or SBS 2003

  1. Thank you very much for your article. I thinks it ok.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s