1

Re: Workstation Set Up Problem - Can't see SQL Server

I found that if I disable the firewall on the SQL Server machine I could finally get Recorder to run. However even if I create myself as a user and give myself appropriate access in SQL/Security/Logins and also as a user in Database/Security/User but with the firewall on; no joy

When these problems first arose I was advised to remove NBNUser and recreate it. I could only delete it if I first deleted the NBN Schema. So now I'm wondering what that did and what consequences of not having it are. Also how can I get it back if I do indeed need it.

So how can I make use of Recorder like my other SQL Server databases without disabling the firewall? Also do I need the schema and if so how do I put it back in, the other schemas seem to be just a name or container that passes a flag to R6.

Any ideas please?

Data Manger
Somerset Environmental Records Centre

2

Re: Workstation Set Up Problem - Can't see SQL Server

Well I have to give a big thank you to Mike Weideli & Sally Rankin for their efforts.

Mike sent me the information below and it does seemed to have worked. Now I have the firewall on and I can log a workstation into R6.

Possible Remedies:
•    Enabled Named Pipes and TCP/IP protocols on the database server.
i.    Start → All Programs → Microsoft SQL Server 2005 → SQL Server Configuration Manager
ii.    In the left hand pane, expand "SQL Server Configuration Manager (Local) → SQL Server 2005 Network Configuration"
iii.    In the left hand pane, highlight "Protocols for SQLEXPRESS"
iv.    In the right hand pane, right click "Named Pipes" and select "Enable"
v.    In the right hand pane, right click "TCP/IP", select "Enable" and then select "Properties"
vi.    On the "IP Addresses" tab ensure that "Enabled" is set to "Yes" for each network adapter listed.
vii.    Click [OK] to close the TCP/IP Properties dialog.
viii.    In the left hand pane select "SQL Server 2005 Services"
ix.    Right click "SQL Server (SQL EXPRESS)" and select "Restart"
Whilst it is not required for this process, it can make the task of configuring remote access to SQL Server Express easier if you also start the process "SQL Server Browser". You may need to open the properties and on the "Service" tab change the Start Mode from Disabled to Automatic, before you can start the process.

•    Add SQL Server 2005 Express as an exception to the windows firewall.
You will need to add SQL Server 2005 Express as an exception to any firewall software that is running locally. The following sequence assumes the Windows XP Firewall:
i.    Start → Control Panel (classic view) → Windows Firewall
ii.    On the Exceptions tab, click "Add Program..."
iii.    Browse to "sqlserver.exe" and click [OK]. This is normally located in the folder "Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn"
iv.    Repeat for "sqlbrowser.exe" if you have set the "SQL Server Browser" service to run. This is normally located in the folder "Program Files\Microsoft SQL Server\90\Shared"
v.    Click [OK] to close the Windows Firewall dialog.
If you still find that you cannot connect, then try opening TCP Port 1666 in the Windows Firewall:
vi.    Start → Control Panel (classic view) → Windows Firewall
vii.    On the Exceptions tab, click "Add Port..."
viii.    The "Name" can be anything, but I suggest something like "TCP Port 1666 for SQL Server". For the "Port number" enter 1666, and ensure that TCP is selected. Click [OK]
ix.    Click [OK] to close the Windows Firewall dialog.
For those that are interested, the port number 1666 comes from the "TCP Dynamic Ports" displayed on the "IP Addresses" tab of the "TCP/IP Properties" of the TCP/IP Protocol listed by SQLServer Configuration Manager.
If you get this error when trying to connect using Microsoft SQL Server Management Studio then try opening UDP port 1434.

•    Ensure that the SQL Server 2005 Express server process is running.
Check this by:
i.    Start → Control Panel (classic view) → Administrative Tools → Services
ii.    Scroll down and check that "SQL Server (SQLEXPRESS)" has the status of "Started". Start it if it is not already started.
________________________________________
These notes have been tested against SQL Server Express 2005 running under Vista and Windows XP

Of note perhaps is that although I had Named Pipes and TCP/IP both enabled the IP address setting is not enabled by default. Setting the exception was obvious but not knowing which .exe to set the exception for was my problem.

Thanks

Data Manger
Somerset Environmental Records Centre

3

Re: Workstation Set Up Problem - Can't see SQL Server

We have a SQLServer Express-based network installation, hosted on an XP machine, with two other XP machines connecting to it. It has all been working fine over the last year, thanks to Sally's efforts installing it.

We are now trying to add a Windows 7 workstation. This connects to the server okay and runs Recorder okay, but only when the firewall on the server machine is taken down. If the firewall is enabled whilst the workstation is running it keeps on working okay, but when the workstation is closed, and an open re-attempted, we again get the error message "EoleException:[DBNETLIB][ConnectionOpen(Connect()).] SQL Server does not exist or access denied".

So nearly there, but not quite. Can anyone suggest how we can connect without having to lower the firewall first please?

Regards, Keith

4

Re: Workstation Set Up Problem - Can't see SQL Server

Hi Keith,
Odd that it should work once, but not the second time. There is some information on the message, including pertaining to firewall setup here: http://support.microsoft.com/kb/328306.
Regards

John van Breda
Biodiverse IT

5

Re: Workstation Set Up Problem - Can't see SQL Server

Thanks for the lead John, but that link lead to stuff that just made my head spin all morning.

I then tried a different tack which was to look at the firewall log in C:WINDOWS\pfirewall.log on the XP server and compared successful connections from XP machines with failing Windows 7 attempts.

This showed the Windows 7 machine was initially trying to connect using UDP on port 1434, whereas successful XP connections only use TCP on port 1433.

I therefore added a firewall exception for UDP on port 1434 and the Windows 7 machine then connected successfully to SQLExpress and Recorder ran okay with the firewall turned on. It switched to using TCP on port 1433 as for the XP machines for the main task of talking to SQLExpress.

I then deleted the firewall exception and found that the Windows 7 machine could still reconnect okay to Recorder, but only until it was rebooted. It then could not reconnect until I added the firewall exception back in.

So, I am now running with a firewall exception for UDP on port 1434 to allow the Windows 7 machine to connect.

Does this make sense to the developers? Is this a valid, safe and required thing to do? I'm a bit worried that I now have a leaky firewall...

Regards, Keith

6

Re: Workstation Set Up Problem - Can't see SQL Server

Sorry about that, though I suspect that you analysis of the firewall log would make my head spin! Anyway, if you search for port 1434 you will see that it is required by the SQL Browser service (see http://www.sql-server-performance.com/a … ns_p1.aspx). It sounds like it is quite a common thing to need to do, but for maximum security it should be left closed and the client configured to avoid the need to use the SQL Browser service. I must admit I am not 100% sure about how to do that!

John van Breda
Biodiverse IT

7

Re: Workstation Set Up Problem - Can't see SQL Server

I found another problem with a workstation installation that gave an eOleException that I could not figure out. If I tried the Access database and display the contents of a table I get a pretty standard connection error and the SQL Connection dialog appears.

The drop down list does not however show the SQL Server I wanted. If you turn off the firewall you can see it. The way round this is to turn on file and printer sharing in the firewall. This automatically opens tcp/ip port 445 required for SQL.

Finally make sure your security groups or users if you are not using groups are listed in the Security\Logins section of the NBN Database

I'm placing this here as other posts have referred to this thread for similar issues.

Tony

Data Manger
Somerset Environmental Records Centre