A customer has a WSE2012 box that is quickly becoming the bane of our existence.
Regular shared services that do not rely on SSL certs work fine. The "dashboard" however, is a dogs breakfast. Originally all of the workstations showed as "online" and the workstations were backed up. Now most of the workstations show as offline, and they are not backing up to the server. We can join a computer to the domain if it is connected to the server via VPN, but not if it is on the LAN (WTF!).
After beating our heads on this for a couple weeks, we are still looking for a solution. Last week we called Microsoft for support. After examining the server and a connected workstation for 3 hours the engineer said that she couldn't see anything specific, but the CA service was "corrupted". The solution she proposes to rip and reinstall the CA role, then break the workstations from the domain and rejoin them. This wasn't the surgical solution I was hoping for.
Today while browsing a SBS support group with my morning coffee I saw a reference to Robert Pearlman's WSE Configuration tester script (thanks Grey).
http://gallery.technet.microsoft.com/Windows-Server-Essentials-556159c3/view/Discussions#content
I downloaded and ran this script on the server just now, and it calls out 4 specific problems.
Firstly:
Testing CA Name..
Certificate Authority Online : OK
Certificate Authority Name : OK
Certificate Authority Cert : Errors Detected - Local Machine Store
And the 2nd through 4th bindings are flagged in red indicating an error condition
Checking IIS Bindings..
Website Name : Default Web Site
Binding : http*:80:0
Website Name : Default Web Site
Binding : https[fd4d:7d2b:6058:3333::1]:62000:0
Website Name : Default Web Site
Binding : https192.168.1.250:62000:0
Website Name : Default Web Site
Binding : https[fd4d:7d2b:6058:1:0:5efe:192.168.1.250]:62000:0
Website Name : Default Web Site
Binding : HTTPS*:443:0
Website Name : Default Web Site
Binding : HTTPS*:443:SRV11
Website Name : Mac Web Service
Binding : HTTPS*:65520:0
Website Name : WSS Certificate Web Service
Binding : https*:65500:0
Should I re-open my case with Microsoft and pass this info on to the engineer? Can anyone point me at info I can use to troubleshoot these issues myself?
Thanks for your time!
David Moen
David Moen Small Business Specialist Salmon Arm, B.C. Canada Eh!