Unable to view COMPANYWEB website on SBS 2008 (SBS2008) from a subnet other than the local subnet of the SBS server

Posted on 2009-04-23
Last Modified: 2015-01-05

I am having an issue where I am unable to view the COMPANYWEB website on SBS2008 (SBS 2008) from a second subnet.  This is not complicated or tricky...a second subnet is used in the office due to an IP phone system, and the server is on one subnet, with clients on another.  The router routing traffic is a Cisco 1800.

If I put the clients on the same subnet as the SBS server, everything works fine.

There are NO access-lists preventing anything from accessing the 2nd subnet.

SBS2003 (SBS 2003) used to have the same issue because, during installation, the IIS websites and virtual folders were PRE-POPULATED with security limitations allowing ONLY the local subnet of the server to access the IIS websites.  You needed to manually change each virtual folder from (local subnet only) to (ANY).

In SBS 2008 (and IIS7) I cannot find the setting that will allow an alternate subnet to the IIS websites / virtual folders.  If I pick the website or virtual folder from IIS manager and select "ipv4 address and domain restrictions", there are no entries for any of the websites (by default, SBS 2008 has about 6 websites).  The default action APPEARS to be set to allow all subnets unless otherwise specified.

If I specifically allow the other subnet  in the IIS manager (, then the websites stop working on the server subnet ( and I am unable to access the "ipv4 address and domain restrictions" icon anymore.  In order for this to start working again, I needed to MANUALLY go into the webconfig file in "c:\windows\system32\inetsrv" and remove the subnet entries.

Does anyone know how to enable remote subnets to access the default websites in SBS2008 (SBS 2008) the way that they did in SBS 2003?  Or, if that's not how you do it, what are the steps to enable?

Question by:jkeegan123
    LVL 15

    Expert Comment

    Have you tried simply using http://companyweb ?
    and not httpS.
    LVL 5

    Author Comment

    Yes, that also was unsuccessful.
    LVL 15

    Expert Comment

    You can resolve companyweb on the workstations?

    ping companyweb and check what the reply is.

    Im currently on a different subnet to our server, got a router to router VPN set up and have a hosts file with 'companyweb' resolving to our servers IP address.

    This works while I connect to http://companyweb to the office server.
    Fresh install of SBS 2008 last week too, no issues.
    LVL 5

    Author Comment

    Definitely resolving correctly...companyweb resolved to the server's IP address.

    Installed another webserver on the same subnet in order to verify that the router / VPN was definitely not inadvertantly blocking traffic.

    Even Microsoft is stumped on this one, PS is working the issue with me right now to no avail.
    LVL 5

    Accepted Solution

    Resolved by adding secondary IP addresses to NICs.  Possible corruption in local firewall tables / IP FIltering.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
    If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now