2012 Server Firewall Blocking QuickBooks

We have a Windows 2012 Server Hosting many QuickBooks database files.  People have lost the ability to open the Company files in Multi-User Mode.  They are getting a H202 error within QB.

I have been in contact with QB Pro Advisor Support and they could not resolve this problem?

Verified no one is Hosting any Company Files on their Computers.
Verified All QB Services are running on the Server:
QBCFMonitoringService
QBIDService
QuickBooksDB23. DB24, and DB25

When I run the Scan from the QB25 DataBase Server Manager on the Drive and Folder Hosting the Company files, it ends with an error stating " Windows firewall is blocking QuickBooks"?  

I have input the Exceptions in the Windows Firewall as per QB Support.  I've tried disabling the Firewall.  I have disabled AVG CloudCare on the Server.

The server is a Small Business server that is a "Everything Server-Domain Controller", Active Directory, DNS, DHCP, File Server, Printer Server. It is in the Domain Controller OU in AD.  I tried Blocking GPO Inheritance on that OU.

I found this interesting article on my problem and simular in nature:   http://blog.cypgrp.com/2014/06/12/so-you-cant-get-quickbooks-to-work-in-multi-user-mode-on-windows-2014-r2/ but it did not resolve my issue.  When I did try to Restart the "Base Filtering Engine" Service it locks out Everyone from accessing the server over the Network.  That doesn't seems right.......

I am at my Wits-End, Please Help!
LVL 1
April33Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Go to Intuit and download the Network Diagnostic tool and run that.  That should tell you where the Firewall is blocking.

For Windows Firewall, you need Inbound and Outbound rules enabling QuickBooks database manager, QuickBooks DB Manager.exe, and QuickBooks File Monitor Service. The Network Diagnostic Tool should help you with this. I have QuickBooks Application also in my Firewall settings even though the application is not installed on the server.  Under Outbound rules, I also have QB Launcher allowed.

Go through the firewall settings again and then check the following:

1. ALL workstations use mapped drives / folders to the company file and are not browsing for it.

2. The Server Manager is at least the same version as your QuickBooks application. Sometimes the Server Manager version gets left behind in an upgrade.

3. You can scan for the company file with the Server Manager and it works.

4. I think you said this:  Make sure no workstation install is set for Host Multi User Access. Turn that OFF on all stations. Multi User Mode is different.
0
April33Author Commented:
John, The only tool I found when I search Intuit for the Network Diagnostic Tool is the File Doctor?  Are they the same thing?

I set the Firewall Rules and I believe the File Doctor did too since I see a lot of duplicate entries....

1. All Workstations are Mapped to the QB File directory.

2. I installed the Server Manager from QuickBooks Premier Edition 2015 - The Files I am accessing are 2014.  Does that matter?

3. When I scan the Company File is says the Firewall is Blocking even if I have the Firewall Disabled on the Server and Workstation.

4. Multi User Access is disabled on all 15 Workstation, I checked them all....

When I open one of the 2014 QB files on a Workstation and hot F2, it says the Workstation is the Server?  Tried on 2 PC's.

I set the permissions on the 2 QB services running on the server to Domain Admin level access in AD.

What do you think....?
0
JohnBusiness Consultant (Owner)Commented:
File doctor is here:  http://support.quickbooks.intuit.com/support/articles/HOW12723

and how to use is here:  

http://support.intuit.ca/quickbooks/en-ca/iq/Multi-User-Access/Quickbooks-Connection-Diagnostic-Tool/HOW15631.html

If that is what you are using, good.

File Doctor did too since I see a lot of duplicate entries....  <-- So did I and I do not think there is an issue there.

Server Manager from QB Premier Edition 2015 - The Files I am accessing are 2014.

That should work fine.

When I open one of the 2014 QB files on a Workstation and hot F2, it says the Workstation is the Server?  Tried on 2 PC's.

That is not right and is a problem. F2 in a company file should point to the server.  In a problem workstation, close all company files, close QB and restart. Open QB and you should see the big main navigation window for QB.  Use the Open File button and navigate to the server folder and open the company file (that is, do not use Recent). Now, does F2 point to Server or Workstation.
0
Top Threats of Q1 & How to Defend Against Them

WEBINAR: Join WatchGuard CTO and our Threat Research Team on Aug. 2nd to hear the findings from our Q1 Internet Security Report! Learn more about the top threats detected in the first quarter and how you can defend your business against them!

April33Author Commented:
That is not right and is a problem. F2 in a company file should point to the server.  In a problem workstation, close all company files, close QB and restart. Open QB and you should see the big main navigation window for QB.  Use the Open File button and navigate to the server folder and open the company file (that is, do not use Recent). Now, does F2 point to Server or Workstation.    Did it and No It still points to itself?

My .ND file looks like this:
//This is QuickBooks configuration File. It exists while users are connected
// to a company file. Do not delete this file yourself. QuickBooks may not
// operate correctly IF you manually delete this file.
[NetConnect]
EngineName=QB_data_engine_24
FilePath=\\dc2\Root\Clients\\The E Center of S Maria Inc.QBW
ServerMode=2
FileConnectionGuid=


Is there supposed to be an IP Address in the .ND file?

I did download and use the latest File Doctor.
I have reinstalled the latest QB2015 Accountants Premier QDSM on the server.
I made sure the 2 QuickBooks Services are running.
I triple checked the Server Firewall that all the needed Ports are opened.

I had AVG CloudCare on the Server but have removed it and rebooted the server.

Scanned the QBW folders with QDSM.

I am going on vacation this week and will not be able to reply.  I will check on my return next week.  
Thanks for your help!
0
JohnBusiness Consultant (Owner)Commented:
You can close QuickBooks and delete the .ND file and .DSN file. Both will be remade and that make fix your networking issue. The .ND should NOT be managed.
0
April33Author Commented:
I deleted the .ND file; there was not a .DSN file, and opened the company file.  It did recreate the .ND file and when I F2 it shows the IP address of the Workstation and not the server?
0
JohnBusiness Consultant (Owner)Commented:
Make a local (not Server) folder on your computer. Copy the QBW file and TLG file from the server to the local folder.

Now open QB and navigate with the Open Company File button to the folder above. Go to Single User mode. Then File, Utilities and do a Rebuild of the company file. This is a copy, so if something goes wrong you still have the server file.

If the Rebuild is successful, copy the QBW and TLG files back to the server.  Just before this, delete the ND and DSN files on the Server. Do not copy the local ND or DSN files.

Now test again.
0
April33Author Commented:
John, I followed your directions precisely and when I opened the company file on the Server after the rebuilding (on the local machine) it still shows the WorkStation as the Server.

Should I scan the folder with QDSM?
0
JohnBusiness Consultant (Owner)Commented:
Should I scan the folder with QDSM?

Yes. And before the scan, close QuickBooks and again delete the ND and DSN files in the server folder.

Is the server folder (for the company data file) on the same physical disk partition as the Server Manager?
0
April33Author Commented:
Server Manager is on Vol C: and the Server Folder is on D:
0
JohnBusiness Consultant (Owner)Commented:
Try moving the company data folder to drive C: to see if that helps.
0
April33Author Commented:
I moved the .QBW to the C: Vol on the Server, scanned with Server Manager and then opened company file from the workstation and the results where the same.

The Server IP is the same as the Workstation.  See attached.

The Server IP is 192.168.1.2.
QBW-Snip.PNG
0
JohnBusiness Consultant (Owner)Commented:
There is something wrong (apparently) with the firewall settings. I would go back, run QB Network Diagnostics and review all the settings again. The error points to firewall.
0
April33Author Commented:
Crazy thing is though the Firewall is Disabled on the Server I get the same results.
0
April33Author Commented:
I spoke with Intuit ProAdvisor Support on this issue.  It appears there is a software issue between QuickBooks 2015 running on a Domain Controller Server?  

I have a call scheduled from an Intuit tech tomorrow for further analysis.

I'll keep you posted.
0
JohnBusiness Consultant (Owner)Commented:
It appears there is a software issue between QuickBooks 2015 running on a Domain Controller Server?

I have run QB on a Domain Controller for years at multiple clients. I have it QB 2015 running on a Server 2012 DC right now.

Please let us know what Intuit says. You both should discuss firewall.  If you reference this thread, and if they ask, I am an Intuit Pro Advisor.
0
April33Author Commented:
Will Do John, Thanks.
0
April33Author Commented:
Spoke with Intuit today.  I have 2 problems, one small and the other big.  

The small one was that when my Firewall Exceptions for my Outbound Ports on the Server were created they were inverted (the Specific exceptions should be set under Local Port and Remote Port set to All Ports).  This pertains to the Windows Server Firewall Rules.

The Big problem; There appears to be an issue with versions of QB in a Domain environment running 2015 QDSM, specifically in the case of FQDN's and NetBios names.

The Rep. said there is a change that occurred in 2015 QB where the clients are trying to access the QDSM using the FQDN and the Server is broadcasting itself as the simple NetBios name.  The Rep guessed this happened with R3 or R4 update.  The registry key where this is set for 2015 is found here:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QuickBooksDB25\Parameters
-n QB_DC2_25 -qs -gd ALL -gk all -gp 409........ Where in my case DC2 is the NetBios Server name.

If you edit this key to the FQDN and reboot for it to take effect, QuickBooks resets it back to the NetBios name.

Intuit wants to move away from using FQDN's and only use NetBios names for communication lookups between client and server.  They told me that they are going to address this problem in the next 2014 RX update and possibly in a future patch for 2013.  2012 and older versions are not going to be patched as they are retired by Intuit.

This has been fixed in 2015 with R7.

This issue only pertains to the H202 error.

I hope I was able to convey the Intuit Rep.'s information correctly as I am not an Expert!

Intuit is going to call me next Tuesday to let me know the progress.
0
JohnBusiness Consultant (Owner)Commented:
Let us know what they say.

1. I had asked to verify firewall settings in my first post.
2. I had said to use mapped and not browsed drives in my first post.

I always keep QB up to date (R7 now) but it was working fine on our Server 2012 domain controller before R7. Our servers are set up in a completely standard way with respect to naming conventions.
0
April33Author Commented:
Intuit called this past Tuesday and said they are still developing the customer dll's.  I guess we are going to be their test subject for this update?

I hope to hear some news this coming week.  I'll keep you posted.
0
April33Author Commented:
Sorry for the long Delay, Intuit sent over the Custom DLL and I followed their directions below:

Server side fix:
AFTER HOW12212

1) In the task manager, End Process on anything that says QBCFMonitorService, QBDBMgr, QBDBMgrN, QBPESEVNT08R, QBW32, or QBWebConnector.

2) Rename or delete:
 -  C:\ProgramData\Intuit

          -  C:\ProgramData\COMMON FILES\INTUIT

          -  C:\Users\QBDataServiceUser17

          -  C:\Users\QBDataServiceUser18

          -  C:\Users\QBDataServiceUser19

          -  C:\Users\QBDataServiceUser20

          -  C:\Users\QBDataServiceUser21

          -  C:\Users\QBDataServiceUser22

          -  C:\Users\QBDataServiceUser23

          -  C:\Users\QBDataServiceUser24

          -  C:\Users\QBDataServiceUser25

          -  C:\Program Files\Intuit or C:\Program Files (x86)\Intuit (64bit)

          -  C:\Program Files\Common Files\Intuit or C:\Program Files (x86)\Common Files\Intuit (64bit)

3) Regedit, Look in:
HKEY_LOCAL_MACHINE\Software\
HKEY_LOCAL_MACHINE\Software\WOW6432Node
HKEY_CURRENT_USER\Software\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\

And remove:
QuickBooksDB17, QuickBooksDB18, QuickBooksDB19, QuickBooksDB20, QuickBooksDB21, QuickBooksDB22, QuickBooksDB23, QuickBooksDB24, and QuickBooksDB25

Repeat for:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\
Etc...

Delete all Firewall rules for QB.

reboot server, then reinstall

**********************
Client side fix:
Remote to each workstation and rename DatabaseManager.DLL in Intuit Folder
copy new DatabaseManager.DLL from Intuit on Server
Reboot workstation  - Open QB2014 and F2 and Switch to Multi User Mode

*** Didn't not work on ADGR-10 ****
tried removing QB  2014 - running Cleanup Utility and then Manually cleaning the Registry on ADGR-10*****  then reboot and reinstall.... Added R8 update from Intuit Website
-This failed!

The firewall error I was getting on the Server is fixed.  They said it must have been a problem Registry Entry I had on the Server.

The H202 error on the Client side in 2014 still remains!@!!
0
JohnBusiness Consultant (Owner)Commented:
At this point, what about trying QuickBooks V2015 (which is now the current version).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
April33Author Commented:
We are talking with the Partners about moving all our 2014 clients into QB2015.  

Seems like the only solution at this point.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.