Microsoft Forefront Security Forums - ForefrontSecurity.ORG Knowledge Center Forums and Community
  Go back to ForefrontSecurity.ORG
Welcome Guest Active Topics | Log In | Register

Cannot open UAG 2010 RTM management console "The configuration cannot be loaded from Forefront
Options View
Previous Topic Next Topic
TS40
#1 Posted : Saturday, January 23, 2010 3:01:00 PM(UTC)
Rank: Member
Groups: Registered

Joined: 10/25/2008(UTC)
Posts: 10
Points: 30
Location: US
I was wondering if someone had this problem because I cannot find anything out there

When I'm trying to open the UAG management console I see the following error:

"The configuration cannot be loaded from Forefront TMG storage. An unrecoverable error has occurred. The application will close."

But when I open the TMG console everything is working, I checked and all the services are up and running

I also see in the event viewer the event 21211

"A new configuration cannot be loaded, and configuration settings have been successfully reverted to last known good values. Check previous error events for possible reasons for the failure. The error description is: Some configuration changes were not applied. See the Windows event viewer for more detailed"

Any idea ?

Thank you

TS40
Back to top
Jason Jones
#2 Posted : Saturday, January 23, 2010 5:12:42 PM(UTC)
Rank: Advanced Member
Groups: Registered, DA Moderator, IAG UAG TMG Moderator, Stirling Moderator

Joined: 11/30/2008(UTC)
Posts: 151
Points: 462
Location: United Kingdom
Does the server has a proper conenction to Active Directory?
Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk/

Back to top
WWW BLOG
IP
#3 Posted : Sunday, January 24, 2010 4:35:36 PM(UTC)
Rank: Administration

Groups: Registered

Joined: 10/22/2008(UTC)
Posts: 374
Points: 1,128
Location: Israel
Are you sure you are running RTM ? can you please share the UAG version from the UI ?
Idan Plotnik
Security Engineer
Back to top
WWW
DMW
#4 Posted : Monday, February 08, 2010 1:52:30 PM(UTC)
Rank: Advanced Member
Groups: Registered

Joined: 1/27/2009(UTC)
Posts: 36
Points: 108
Location: USA
I'm having the same issue on attempting to access the UAG Management application after an install. Did you ever find a resolution?
Back to top
Jason Jones
#5 Posted : Monday, February 08, 2010 2:31:22 PM(UTC)
Rank: Advanced Member
Groups: Registered, DA Moderator, IAG UAG TMG Moderator, Stirling Moderator

Joined: 11/30/2008(UTC)
Posts: 151
Points: 462
Location: United Kingdom
Check you interface IP addressing and make sure you have public addresses on your external internal interface if you are using UAG DA...

Cheers

JJ
Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk/

Back to top
WWW BLOG
EddyR
#6 Posted : Friday, March 12, 2010 6:55:54 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 3/12/2010(UTC)
Posts: 2
Points: 6
Location: Netherlands
I am also having the same problem. Having reinstalled de system 3 times i am getting desperate.
The UAG box has a correct connection to to domain controller. Tried restarting the storage serviceseveral times. Nothing seems to help. Any suggestions om how to troubleshout this.
Back to top
Rboersma
#7 Posted : Friday, March 12, 2010 10:00:15 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 3/12/2010(UTC)
Posts: 2
Points: 6
Location: Netherlands
Hi,

I'm also having this issue. Tried 2 installs on two different clean 2008r2 enterprise systems.
The 2008 installs have to nic's. 1 "secure" nic with static ip (10.5.0.16/8) dns and no gateway. Second nic "dmz" (172.16.1.1/16) no dns and gw 172.16.1.254.

restarted all services multiple times. I really cannot find what's going on here.

Systems run virtually on xenserver.

Ruud Boersma

Running final release UAG.

Edit: Got a little bit further. If I disjoin the machine from the domain i can acces the console (you probably have to install uag on a workgroup, and join the domain after install). But i cannot rejoin the domain, cause the firewall seems to block everyting by default. Any ideas?
Back to top
WWW
 |  Edit by user
EddyR
#8 Posted : Friday, March 12, 2010 1:52:23 PM(UTC)
Rank: Newbie
Groups: Registered

Joined: 3/12/2010(UTC)
Posts: 2
Points: 6
Location: Netherlands
I did the same removed the UG server from the domain and now i am able to open the console no TMG storage problems. Beats me what UAG doing when deployed wihtinn a domain.
I am trying to get the uag server back in the domain. Tip: check your TMG logging. You have to configure to authentication server settings and you have to allow ds services (port 445)

edit: managed to get the uag server back in the domain. Be sure to allow LDAP fom localhost to your dc, edit the policy rule for tcp 445 to allow to dc, also allow kerberos from local host to dc otherwise you cannot logon to the uag server, with domain creds.
This cannot be the way to do this but , for the moment it worked.

edit: Product still working without problems.
Back to top
 |  Edit by user
Rboersma
#9 Posted : Monday, March 15, 2010 6:48:22 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 3/12/2010(UTC)
Posts: 2
Points: 6
Location: Netherlands
Hi,

Maybe it only behaves this way when your in the Netherlands:)

I'll setup the firewall rules, and try to join the domain again.

Thanks for sharing.

Ruud Boersma.

Could you provide me your rule to acces the DC? I keep getting erros when connecting to the domain.
Back to top
WWW
 |  Edit by user
Jarkkolainen
#10 Posted : Wednesday, March 24, 2010 9:04:38 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 3/24/2010(UTC)
Posts: 1
Points: 3
Location: FI
Hello

If connection to domain is down or misconfigured, console does not open
Back to top
WWW
kahliala
#11 Posted : Thursday, June 03, 2010 8:18:32 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 6/3/2010(UTC)
Posts: 1
Points: 3
Location: Aberdeen
If you haven't found a solution to this yet I had the same issue and it was caused by me changing the network NIC configurations I remove the IPv6 protocol from the external facing nic and the domain servers were not contactable. Annoying thing is that we are not using IPv6 on our site.

I replaced the IPv6 protocol and all is working fine. (reticked the box and accepted defaults)
Back to top
 |  Edit by user
Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

ForefrontSecurity.ORG Design Team
Powered by YAF | YAF © 2003-2010, Yet Another Forum.NET
This page was generated in 0.100 seconds.