Windows Small Business Server (SBS) 2008 Update Rollup 2 is now available on Microsoft Update and WSUS. This rollup package addresses the following issues in Windows Small Business Server 2008.

• Issue 1
• After you configure Windows Small Business Server 2008, you manually change the Favorites and Links setting for Internet Explorer in the default domain group policy by using the Group Policy Management console. When you run the Internet Address Management Wizard, the wizard exits unexpectedly.
• Issue 2
• You may receive the "HTTP ERROR 401.1" error when you visit the following Web site from Windows Small Business Server 2008: http://companyweb
• Issue 3
• In the Add a New User Account Wizard, the order of the Last Name field and the First Name field is reversed. This problem occurs in the following language versions of Windows Small Business Server 2008:
• Chinese (Simplified)
• Chinese (Traditional)
• Japanese
• Korean
• Issue 4
• In the Italian versions of Windows Small Business Server 2008, when you click Connect to a Computer in the Remote Web Workplace, you navigate to an invalid Web page.
• Issue 5
• The Windows SBS Console may stops responding if duplicate entries of Anti-Virus programs were reported in client WMI database.
• Issue 6
• The Windows SBS Console may report "unknown" for some firewall applications that are installed on client computers.

NOTE: This update also includes all updates from Update Rollup #1, and supersedes that update rollup.

[Today's post comes to us courtesy of Damian Leibaschoff, Justin Crosby and Chris Puckett]

You may notice an issue where the Windows Update (WUAUSERV) service will be spiking one of the logical CPUs on servers running Exchange 2007 with automatic anti-spam updates turned on. This will include any SBS 2008 installation where Forefront for Exchange was installed as part of the setup.  Please note that the service displayed will by SVCHOST, since WUASERV runs inside SVCHOST.EXE.

This issue has now been resolved on the Windows Update backend, and should clear itself automatically after your WSUS server’s next sync.  If you are still experiencing the issue you can start a manual WSUS sync by:

1. Open the Windows SBS Console
2. Click the Security tab
3. Click the Updates sub-tab
4. Click the Synchronize now task
5. Click Ok to start synchronization
6. Restart the Windows Update service once synchronization finishes (optional)

If you cannot start ISA on SBS after installing MS09-012 and receive "Event ID 14109: (The ISA Server Standard Edition cannot run. Either the server is using more than 4 processors....)." please see the following post on the ISABlog: http://blogs.technet.com/isablog/archive/2009/04/18/ms09-012-and-isa-server-standard-edition-14109-failures.aspx

[Today's post comes to us courtesy of  Chris Puckett]

When you select the server and click Restart in the IIS Manager console, the Terminal Services Gateway service will be stopped and not restarted, even though the World Wide Web Publishing service is restarted. If you are logged into the server via RWW or a TS Gateway session, your connection will be dropped and you will not be able to get back in via RWW or TS Gateway. In addition, the following event will be logged in the Microsoft-Windows-TerminalServices-Gateway/Operational log.

Log Name: Microsoft-Windows-TerminalServices-Gateway/Operational
Source: Microsoft-Windows-TerminalServices-Gateway
Event ID: 400
Task Category: (3)
Level: Warning
Keywords: (16777216)
User: NETWORK SERVICE
Computer: SBS2008.CONTOSO.LOCAL
Description:

The TS Gateway service is shutting down. To diagnose possible causes for this problem, verify whether the following services are installed and started: (1) World Wide Web Publishing Service (2) Internet Authentication Service (IAS) (3) RPC/HTTP Load Balancing Service. Also, check Event Viewer for Network Policy Server (NPS) and IIS events that might indicate problems with NPS or IIS.

Keep this in my mind when working in IIS Manager on the SBS server remotely. Use iisreset /noforce instead or restart the World Wide Web Publishing service in the Services console.

[Today's post comes to us courtesy of  Ketan Thakkar, Manish Kapoor, Chris Puckett, and Justin Crosby]

You may experience authentication issues browsing http://companyweb on SBS 2003 and SBS 2008 servers after installing the cumulative security update for Internet Explorer (963027 or 969897) or Internet Explorer 8.0 or Windows Server 2008 Service Pack 2.

When you try to browse Companyweb you will be prompted for authentication 3 times and eventually receive a blank page or 401.1.  Your IIS logs will show your request failing with 401.1 Unauthorized.

Resolution

Please use one of the following resolutions depending on the version of SBS you are running.

SBS2003

On an SBS 2003 server this issue can be fixed by applying update KB961143.

Note: You must have .NET Framework 2.0 installed before you apply this update.

SBS2008

On an SBS 2008 server this issue can be fixed by applying SBS 2008 Update Rollup 2 (960911).  This update is now available on Microsoft Update and WSUS (must be approved by administrator).  

Updated 6/26/2009 to include 969897 MS09-019: Cumulative security update for Internet Explorer.  

Updated 5/1/2009 to include Windows 2008 SP 2. 

Updated 4/28/2009 due to release of Update Rollup 2.

[Today's post comes to us courtesy of Ed Walters]

Some of the steps in this post have been taken from the following SBS 2003 blog post written by Wayne McIntyre: (http://blogs.technet.com/sbs/archive/2007/08/07/how-to-backup-and-restore-your-sbs-and-default-group-policies.aspx). They have been modified for use with SBS 2008.

SBS 2008 uses 2 default policies along with 9 “SBS specific” policies that provide the centralized management and configuration for the SBS 2008 environment. In cases where a policy was accidentally deleted or where policies were removed, there will be a need to restore these policies once the issue has been resolved. The following steps walk you through the process of creating a backup for the existing group policies, restoring them and re-linking policies in SBS 2008.

Backup Procedure:

1. Open Group Policy Management Console from Administrative tools or by running gpmc.msc.
2. From within the Group Policy Management Console expand Forest, Domains, SBS Server, Group Policy Objects. 
   
3. Right click on Group Policy Objects and select “Back Up All”.
4. Specify a location and a description for your backup file. Note: The folder location must already exist – Backup will not create the folder for you.  
   
5. Click the “Back Up” button. Once the backup is complete, it will return the number of GPO’s that were included in the backup and if it was successful.
   

Restore Procedure:

1. Please note that in the screenshot below all of the SBS Group Policy Objects are missing. The default GPO’s are still in place. Restoring the Default Policies can be done through this type of backup. Note: If you do not have a backup for the Default Domain Policies, steps on “how-to” manually restore the Default GPO’s to the SBS server are not covered in this blog. This will be covered in a future blog.
2. To restore the SBS Group Policies, open Group Policy Management Console, right click on Group Policy Objects and select Manage Backups.
   
3. Select the Group Policy object you want to restore and select restore. Note: You can only restore one GPO at a time.
4. Restore all of the Group Policies that are missing from the Group policy Objects GPO.

When you select a Group Policy that was restored, you will see that the “Links” window and “Security Filtering” window are blank.

Re-link the restored Group Policies:

Link the Domain Level GPO’s:

1. Under Domains, highlight the SBS domain, right-click and select “Link an Existing GPO”.
   
2. The “Select GPO” window will open.
3. Select the following GPO’s
1. Windows SBS Users Policy
2. Windows SBS CSE Policy
3. Update Services Server Computer Properties
4. Update Services Common Settings Properties
5. Update Services Client Computer Properties
   
4. Then select “OK”.

Link the Windows SBS Client policies:

1. Under Domains, Select your SBS domain, MyBusiness, Computers, SBSComputers, right-click and select “Link an Existing GPO”. The “Select GPO” window will open. Select the following GPO’s.
1. Windows SBS Client – Windows Vista Policy
2. Windows SBS Client – Windows XP Policy
3. Windows SBS Client Policy
2. Then select “OK”.

Link the Folder Redirection Policy:

1. Under Domains, Select your SBS domain, MyBusiness, Users, SBSUsers, right-click and select “Link an Existing GPO”. The “Select GPO” window will open.
2. Select “Small Business Server Folder Redirection Policy” GPO
3. Select “OK”.
4. Once you are finished, the Group Policy Management Console should look like this:
   

WMI Filters

Windows SBS Client – Windows Vista Policy, Windows SBS Client – Windows XP Policy, Windows SBS Client Policy have WMI filters associated with them. These filters will be associated with the group policy during the restore.

Note: These steps cover GPO backup and restore to the same server only. There is a similar but different procedure if you want to restore backups from one SBS Server to another.  This scenario will be covered in an upcoming blog post.