Users experience delayed logins when you enable Password Management features in ISA Server 2006

Author: Shijaz Abdulla MVP

Community Solutions Content Disclaimer

View products that this article applies to.

Expand all | Collapse all

SUMMARY

This article describes certain issues that you may face when you enable Password Management features in ISA Server 2006 running on a Windows Server 2003-based computer that has Service Pack 2 or the Scalable Networking Pack installed. This article also discusses possible workarounds.

Back to the top

SYMPTOMS

When you enable the "Allow users to change their passwords" option on the Web listener used for publishing Exchange Server, your users experience delays while logging in to Outlook Web Access (OWA). The delay occurs after the user enters his credentials and clicks on the Log On button in the OWA logon form. You are using ISA Server Forms-Based Authentication. ISA Server 2006 is running on a Windows Server 2003-based computer with Service Pack 2 or the Scalable Networking Pack installed.

Back to the top

CAUSE

This problem occurs because of a problem that exists in NAT in Windows Server 2003. This problem is exposed when you enable one of the following features on a network adapter that meets the NDIS 5.2 specification or a later version of this specification:

Receive Side Scaling (RSS)
TCP/IP offloading

Windows Server 2003 SP2 and the Windows Server 2003 Scalable Networking Pack include features to implement stateful and stateless offloading. The offloading feature accelerates the Windows networking stack. The networking update that is included in Windows Server 2003 SP2 and in the Windows Server 2003 Scalable Networking Pack includes the following features:

TCP Chimney Offload
Receive Side Scaling
Network Direct Memory Access (NetDMA)

A problem exists that affects NAT when you have Receive Side Scaling enabled. Therefore, after you install Windows Server 2003 SP2 or the Windows Server 2003 Scalable Networking Pack on a computer running ISA Server, you experience the symptoms that are mentioned in the "Symptoms" section.

Back to the top

RESOLUTION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. We cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, certain registry changes need to be made on the ISA Server computer(s) publishing the Outlook Web Access service. If you are using ISA Server 2006 Enterprise Edition and you have enabled Network Load Balancing (NLB), you should perform these steps on each node in the array.

On the Start menu, click Run.
Type regedit.exe and click OK.
Modify the following registry keys:

▪ Set the value of the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableRSS to 0 (zero).
▪ Set the value of the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableTCPA to 0 (zero).
From a computer on the external network, try to login to Outlook Web Access. If the delayed logins still persist, continue with steps 5 and 6.
Modify the following registry keys:

▪ Set the value of the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableTCPChimney to 0 (zero).
▪ Set the value of the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnableSecurityFilters to 0 (zero).
Close Registry Editor.

Back to the top

MORE INFORMATION

For more information about how to troubleshoot networking issues that you may experience with Windows SBS 2003, click the following article number to view the article in the Microsoft Knowledge Base:
904946You experience intermittent communication failure between computers that are running Windows XP or Windows Server 2003

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:
912222 The Microsoft Windows Server 2003 Scalable Networking Pack release
927695 You cannot host TCP connections when Receive Side Scaling is enabled in Windows Server 2003 with Service Pack 2

Back to the top

APPLIES TO

Microsoft Internet Security and Acceleration Server 2000 Standard Edition

Back to the top

kbpubmvp kbpubtypecca kbhowto KB555958

Back to the top

COMMUNITY SOLUTIONS CONTENT DISCLAIMER

MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

Back to the top