Sign in
 
HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs
Resources for IT Professionals >
> 
> 
> 
Windows 7 in SBS2003 Premium network - yellow triangle mark on network icon

Answered Windows 7 in SBS2003 Premium network - yellow triangle mark on network icon

  • Wednesday, November 21, 2012 11:30 PM
     
     
    Sign In to Vote
    0

    This is a SBS2K3 Premium network, fully patched.

    The problem:
    All Windows 7 clients could not check for MS updates, it would fail with an error code. BUT, they can browse the internet without any problem. There is a yellow triangle mark on the network icon on right bottom. I followed "Troubleshoot the problem" but it did not detect any problems.

    What i have done:
    - Trend Micro has a proxy service, I thought it could cause a conflict with ISA client. So I removed Trend Micro on one Win7, but the problem persists
    - I disconnected one Win7 from the SBS2k3 network, and connected it to the router directly, blanked IE Proxy settings, then the problem was fixed - no yellow marks, and Win7 could check for MS updates without any problem.

    BTW, ISA 2004 server is fully patched, and I used its latest client published in 2007.

    What could be the cause of this weird thing?

    Please give me a hand and thanks a lot!!

    Jack

     

All Replies

  • Thursday, November 22, 2012 12:14 AM
     
     
    Sign In to Vote
    0
    Is IPv6 on seems like they are not talking to each other correctly.
     
  • Thursday, November 22, 2012 12:42 AM
     
     
    Sign In to Vote
    0

    YES, IPv6 is on

     
  • Thursday, November 22, 2012 8:46 AM
     
     
    Sign In to Vote
    0
    All Windows 7 clients have exclamation mark on NIC? (All of a sudden , no changes??) . From your description it seems all are Firewall client. XP machines work with same version of Firewall client installed works?
     
  • Thursday, November 22, 2012 7:26 PM
     
     
    Sign In to Vote
    0

    Yes, "all" Windows 7 clients have exclamation mark on NIC. No changes.

    All XP clients have no problems, and have the same version of the firewall client installed

     
  • Thursday, November 22, 2012 8:20 PM
     
     
    Sign In to Vote
    0

    I am also getting the same on SBS 2003 Premium.  Using ISA firewall. Network and sharing centre shows no internet access. 

     

     
  • Friday, November 23, 2012 11:48 AM
     
     
    Sign In to Vote
    0
    What happens if you uninstall ISA client from the client machine assign server ip in the dns settings of client nic and uncheck proxy settings in IE ? Same issue? Any events on server or on client machines?
     
  • Friday, November 23, 2012 5:41 PM
     
     
    Sign In to Vote
    0

    I am going to try this next week, will keep everyone posted

     
  • Monday, November 26, 2012 4:37 AM
     
     
    Sign In to Vote
    0
    Was your test successful?  I have the exact same problem, similar windows 7  / SBS 2003 configuration  that has just recently started showing this problem.
     
  • Monday, November 26, 2012 9:50 AM
     
     
    Sign In to Vote
    0

    ISA blocks the anonymous request to http://www.msftncsi.com (Network Connection Status Indicator)

    You can actually see it using ISA Monitoring.

     
  • Monday, November 26, 2012 11:46 AM
     
     Answered
    Sign In to Vote
    0

    And I finally got around to looking at fixing the problem….

    In ISA create a new ‘Access Rule’ from ‘Protected Networks’ to a URL set.

    Create a new URL set (called NCSI?) and give it the URL http://www.msftncsi.com/*

    Set the rule to ‘Allow’ for ‘All Users’.

     
  • Monday, November 26, 2012 6:51 PM
     
     
    Sign In to Vote
    0
    What is the logic and why. What's the difference when the same users have already been added to SBS Internet rule?
     
  • Monday, November 26, 2012 7:42 PM
     
     
    Sign In to Vote
    0

    The request for NCIS is not made in the user context. The SBS rule is for members of 'internet users' (I think, I've shut down the VM. It is though a specific user group, in order to control internet access).

    'All Users' includes anonymous requests (made by the 'system'), and I see no problems as long as it's limited to the URL set. You would _NOT_, for example, want to open http://* to anonymous.

     
  • Tuesday, November 27, 2012 12:43 AM
     
     
    Sign In to Vote
    0

    Hi SG,

    Thanks a lot for fixing this problem for me!

    I hope the solution helps others too!

    Have a good day!

    Jack

     
  • Tuesday, November 27, 2012 1:23 AM
    Moderator
     
     
    Sign In to Vote
    0

    OpenDNS Community > Forums > "Additional log on information may be required" pop up warning issue:
    http://forums.opendns.com/comments.php?DiscussionID=16465&page=2

    You guys using Opendns by any chance?

     
  • Tuesday, November 27, 2012 1:53 AM
     
     
    Sign In to Vote
    0

    No, I don't

     
  • Wednesday, November 28, 2012 12:52 AM
     
     
    Sign In to Vote
    0
    Nope

    Danny Andonoff

     
  • Wednesday, November 28, 2012 7:47 AM
     
     
    Sign In to Vote
    0
    Danny, did SG's solution fix your problem?
     
  • Wednesday, January 30, 2013 4:34 PM
     
     
    Sign In to Vote
    0

    And I finally got around to looking at fixing the problem….

    In ISA create a new ‘Access Rule’ from ‘Protected Networks’ to a URL set.

    Create a new URL set (called NCSI?) and give it the URL http://www.msftncsi.com/*

    Set the rule to ‘Allow’ for ‘All Users’.


    And make sure you put it above the SBS Internet Access Rule, as it's that rule (and not the Last Default Rule: Deny) which blocks the NCSI HTTP query.