There is an issue with Windows 2003 Service Pack 1
and above. The Service Packs 'harden' the COM security settings blocking or reducing usage of LDAP and other protocols which WebFilter uses for communicating with Active Directory'.
Installation Order:
When installing multiple Burstek software applications, the installation process must be done in a specific order:
- bt-WebFilter
- bt-LogAnalyzer
- bt-MailFilter
- Apply the DCOM fix as outlined below.
If you do not own one of the software applications in the list, skip over that step.
Solution: Grant the 'Network Service' account permission to use COM
- Run DcomCnfg utility using Run menu
- Browse for the Component Services \ Computers \ My Computer \ DCOM Config folder
- Right Click the FStorageSrv item and select the Properties tab.
- Click the Security tab
- Click Edit Default button in the Access Permissions section
- Click Add to open Select Users and Groups dialog
- Click Location button and select local machine name
- Click Advanced and Find Now buttons.
- From the Search Results select 'NETWORK SERVICE' account
- Click OK
Please be sure both the Local Access and Remote Access checkboxes are selected for 'NETWORK SERVICE' account.
Repeat the same sequence with the Launch and Activation Permission section.
All four checkboxes must be selected for 'NETWORK SERVICE' account.
Please re-boot the machine or re-start all ISA Server's services running under the 'NETWORK SERVICE' account'
NOTE: This does not require saving ISA Server settings prior to applying SP1 and then restoring them after SP1 is applied.
This alert does not effect WebFilter Standalone. |