Sorry to hear about your problems, however, the "best practices" recommendation is to NEVER run anything else on a domain controller.
Sure, it can be done, officially Windows SBS has a lot of special tweaks built-in and you can also do these on your own, but running a DC on an app server is really heading down the wrong direction. You would be better off buying a cheap PC (Celeron) for $500 and making it one of your DC's (you do hopefully have at least two DC's right?). When you promote a DC, dcpromo removes the local SAM accounts from the machine. This makes a DC different from a member server in fundamental ways that reach throughout the security system and registry. I do not know all the technical details (others here are more expert I'm sure), but the lack of local SAM and the other special settings on a DC are what create the basis for having difficulties with running other apps on the machine unless you really fiddle heavily with everything. It can be done, but it shouldn't be done.. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stefan Paege Sent: Tuesday, April 04, 2006 2:40 AM To: [email protected] Subject: [IMail Forum] 2006.03 - A story about success and problems Hi, we (small company, 40 users in one domain) have used IMail 8.22 (Part of ICS2 Standard) until about two weeks ago. As our service agreement ran out we decided to install ICS2006.03. We did not install over the old installation but decided to install on a brand new server. So we got us a nice Dell Poweredge 830, installed Windows Server 2003 and joined our existing domain. We did then install ICS2006, copied our user data from the old (still running) ICS2 and after some additional setup work we had a running test system. Tests looked good for POP3/SMTP access, so we went live with the system. We did not configure web mail at this point because time was scarce and web mail is rarely used by very few users. So far so good. The next weekend we promoted the server to be a domain controller in our domain. Problem: The web admin interface now had all sorts of weird problems. After some reading and some manual adjustments web admin was running again (Access rights to the ICS registry branch and to the ICS install directory had to be modified). What I have learned the hard way is that it is not a good idea to make a server a domain controller AFTER ICS was installed. Last weekend I tried to configure and activate web mail - and I failed! There seem to be problems with access rights, too. I read all (??) related knowledge base articles and tried to adjust the security rules. Did not work. I did a repair install of ICS - no solution. Trying to access http://my-domain/IClient I get a web page telling me about a server error (configuration error) in application '/IClient'. Here is the complete message (Partly german, I added some translations and comments inline marked with //StP): -------------------------------------------------------- Serverfehler in der Anwendung '/IClient'. Konfigurationsfehler Beschreibung: Beim Verarbeiten einer Konfigurationsdatei, die für diese Anforderung erforderlich ist, ist ein Fehler aufgetreten. Überprüfen Sie die unten angegebenen Fehlerinformationen und ändern Sie die Konfigurationsdatei entsprechend. Parser-Fehlermeldung: Zugriff verweigert: 'Ipswitch.Web.Resources'. //StP Parser error: Access denied: 'Ipswitch.Web.Resources'. Quellfehler: //StP Zeile=Line Zeile 20: Zeile 21: <httpModules> Zeile 22: <add name="Ipswitch.Web.Resources" type="Ipswitch.Web.Resources.GlobalizationMod,Ipswitch.Web.Resources" /> Zeile 23: </httpModules> Zeile 24: Quelldatei: d:\ICS2006\WebDir\WebClient\web.config Zeile: 22 //StP Source file: d:\ICS2006\WebDir\WebClient\web.config Line: 22 Überwachung beim Laden der Assembly: Mit folgenden Informationen kann bestimmt werden, warum die Assembly 'Ipswitch.Web.Resources' nicht geladen werden konnte. === Pre-bind state information === LOG: DisplayName = Ipswitch.Web.Resources (Partial) LOG: Appbase = file:///d:/ICS2006/WebDir/WebClient LOG: Initial PrivatePath = bin Calling assembly : (Unknown). === LOG: Policy not being applied to reference at this time (private, custom, partial, or location-based assembly bind). LOG: Post-policy reference: Ipswitch.Web.Resources LOG: Attempting download of new URL file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET Files/iclient/c85b468a/3f15bf8b/Ipswitch.Web.Resources.DLL. LOG: Attempting download of new URL file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET Files/iclient/c85b468a/3f15bf8b/Ipswitch.Web.Resources/Ipswitch.Web.Resource s.DLL. LOG: Attempting download of new URL file:///d:/ICS2006/WebDir/WebClient/bin/Ipswitch.Web.Resources.DLL. LOG: Policy not being applied to reference at this time (private, custom, partial, or location-based assembly bind). LOG: Post-policy reference: Ipswitch.Web.Resources, Version=1.0.2149.25834, Culture=neutral, PublicKeyToken=null Versionsinformationen: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET-Version:1.1.4322.2300 -------------------------------------------------------- Can someone please help me with this? Best regards -- Elektronik-Labor Carls GmbH & Co. KG Stefan Paege Fon: +49 5973 9497-23 Fax: +49 5973 9497-19 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
