Microsoft KB Archive/926733

= Error message when you try to use the Change Server IP Wizard or the Configure Remote Access Wizard on a Windows Small Business Server 2003, Premium Edition-based computer: &quot;CommitEx returned ERROR c0040393&quot; =

Article ID: 926733

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Small Business Server 2003 Premium Edition

-



SYMPTOMS
When you try to use the Change Server IP Wizard or the Configure Remote Access Wizard on a Microsoft Windows Small Business Server 2003, Premium Edition-based computer, the wizards fail. This symptom occurs if the computer is also running Microsoft Internet Security and Acceleration (ISA) Server 2004.

Additionally, the following error message may be logged in the Changeiplog.txt file and in the RRASlog.txt file.

Saving changes and restarting services returned ERROR c0040393

CRRASCommit::ConfigureISA2k4 returned ERROR c0040393

Configure ISA2k4 returned ERROR c0040393

CRRASCommit::CommitEx returned ERROR c0040393

Note The Changeiplog.txt file and the RRASlog.txt file are located in the Program Files\Microsoft Windows Small Business Server\Support folder.

When you try to use the Configure E-mail and Internet Connection Wizard in Windows Small Business Server 2003, Premium Edition, the wizard may stop responding on one or more of the following pages:
 * Network Configuration
 * Firewall Configuration
 * Web Server Certificate

In this case, the error message that is mentioned in this section is logged in the Icwlog.txt file. This file is located in the Program Files\Microsoft Windows Small Business Server\Support folder.



CAUSE
This issue occurs when one or more of the following conditions are true:
 * You performed an in place upgrade of Windows Small Business Server 2003, Premium Edition, or you repaired Windows Small Business Server 2003, Premium Edition.
 * The installation of ISA Server 2004 was not successful when you installed Windows Small Business Server 2003, Premium Edition.
 * ISA Server 2004 was installed by using a separate ISA Server 2004 CD-ROM and not the Windows Small Business Server 2003 Premium Technologies CD-ROM.
 * You install Active Directory on a member server, or you migrate a Windows 2000 domain that contains a Windows Small Business Server 2003 domain controller. In this case, the Group Policy settings that are applied at the domain level may modify the policy settings that apply to the Network Service account on the domain controller.

The Network Service account on the domain controller must have permission for the following Group Policy settings:
 * Adjust memory quotas for a process
 * Generate security audits
 * Log on as a service
 * Replace a process level token



RESOLUTION
To resolve this issue, you must add the Network Service account to the following Group Policy settings on the domain controller:
 * Adjust memory quotas for a process
 * Generate security audits
 * Log on as a service
 * Replace a process level token

To do this, follow these steps:
 * 1) Click Start, point to Administrative Tools, and then click Domain Controller Security Policy.
 * 2) Expand Local Policies, and then click User Rights Assignment. The policy settings are displayed in the right pane.
 * 3) Double-click the policy setting to which you want to add the Network Service account.
 * 4) If the Network Service account is not in the list of users and groups that are assigned to that policy setting, click Add User or Group.
 * 5) In the Select User or Groups dialog box, type Network Service in the Enter the object names to select box, and then click OK.
 * 6) Make sure that NETWORK SERVICE is displayed in the list of users and groups that are assigned to that policy setting, and then click OK.
 * 7) Repeat steps 3 through 6 for each Group Policy setting.
 * 8) When you have finished, close the Group Policy Object editor.
 * 9) Click Start, click Run, type cmd, and then click OK.
 * 10) At the command prompt, type gpupdate /force, and then press ENTER.
 * 11) Restart the domain controller.

If these steps do not resolve this issue, reinstall ISA Server 2004 by using the Windows Small Business Server 2004 Premium Technologies CD-ROM, and then reinstall the latest ISA Server 2004 software updates and service pack.

To obtain the latest software updates and service pack for ISA Server 2004, visit the following Microsoft Web site:

http://www.microsoft.com/technet/isa/downloads/2004/default.mspx

Keywords: kbtshoot kbprb KB926733

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.