iGoldmine and Log On Local Rights.

After getting iGoldmine configured and allowing access through the firewall, I had a problem with regular users loggin in. I could, as an administrator, but my other users could not.

The first article I saw had me pull up the local Security settings Management console. I can't remember how they had me do that. But, when I clicked on "Allow log on Locally", the option to "Add user or group" is grayed out.

I found another article here. Here are the steps to use the Default Domain Controller Security Settings instead. This gave me the choice to add users or groups.

1. Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
2. Double-click the Security Settings folder, double-click Local Policies, and then click User Rights Assignment.
3. Under the Policy column, click Allow Log on Locally, and then click Add.

I created a group called iGoldmine and added it to this policy. Now any user I add to that group can use iGoldmine.

ISA 2004 and iGoldmine

A few months ago I moved my sales staff to a new server. This put them on a seperate network with it's own internet connection. I have needed to get iGoldmine up and working but I had not done that. Until today. And it was a pain, which I actually started day before yesterday. The first nightmare was that my machine wouldn't reboot after installing iGoldmine. Turns out they have an incompatibility with one of the microsoft updates.
This is always a problem with goldmine. I am not real pleased with igoldmine but I have no other options owing to the fact that we use goldmine and want remote access. Anyway, the solution was to apply the iGoldmine patch in safe mode. Then I had to remove an icompatible windows patch after that. Pain in the but. This is a patch from back in April, 4 months ago. You would think they would get it fixed.
Anyway, after getting it installed, it worked from inside the firewall, but not outside. Goldmine tech support of course was of no assistance and said they dont' support firewall configurations, which is typical of their support, they are extremely unhelpful even though I am sure they have thousands of customers with the same issues. I didn't find much, other than people asking the same questions, in the forums.
So here is how I finally got iGoldmine working through my ISA 2004 firewall(I know you might think it so much more than a firewall and it may well be, whatever).
I am on Small Business Sever 2003, if that makes any difference to you

1. Open "Microsoft Internet Security and Acceleration Server" Management Console.
2. Click on your server
3. Click on "Firewall Policy"
4. Right click and chooose New/Access Rule (or click "Create a New Access Rule" int he task menu.
5. Name it what you want, I chose "iGoldmine". Click Next
6. Choose "Allow". click next.
7. For "This rule applies to" choose "Selected Protocols"
8. Click Add
9. Now you are at the "Add Protocols" Window.
10. You will notice at the top of the protocol "type" list there is 3 menus. New, Edit Delete. Edit and Delete may be grayed out if you haven't selected a protocol
11. Click New, then Choose Protocol
12. Give it a name, I like to confuse myself so I called it "iGoldmine". Same name, but this is a protocol and not an access rule.
13. Choose New in the "New Protocol Definition Wizard"
14. You want the following: Protocol Type:TCP, Direction:Outbound:Port Range from 491 to 491. Probably the only changes you need to make are to the port range values, the rest are probably defaulted correctly.
15. Click Ok
16. Click new again
17. This was the one that got me. You need an inbound filter for port 80.
18. Protocol Type:TCP, Direction:Inbound, Port Range From 80 to 80. If you don't use port 80 you will need to change this in the iGoldmine cluster manager, but you do have that option
19. Click ok
20. Click Next
21. Choose No on Secondary Connection, Click next.
22. Click Finish
23. No to add them you will need to find them in the "Add protocols" window. Probably the easiest is to choose All protocols and find them in alphabetical order. You ned to choose the ones you just added and click add to add them to the protocols section of the New Access Rule Wizard.
24. Click close once you have done that.
25. Click next
26. Access Rule Sources. Choose External. Click next
27. Access Rule Destinations. Choose "Local Host"
28. Click next
29. Leave default "All Users", Click next
30. Click Finish.

That should do the trick. It should work immediately.
The next problem I had was giving users log on local rights. I was able to logon immediately after the above as an admin on the iGoldmine server, but regular users could not until I made some changes. I will talk abou that in my next post.

Goldmine and Gmail

I want to move my main domain to a hosted email service, Google apps for domains. I know this domain generates a lot of email traffic so how nice not have to worry about that.

Our sales department uses goldmine. This means they use the email interface inside goldmine to allow them to attach email communications to the prospects they are associated with. Goldmine does not support SSL in their email client. The work around can be found at this site:

http://www.castellcomputers.com/index.php?p=2. Be sure to read comment #1 as it includes an important change to the stunnel.conf file.

Also, Don't click on the link to the stunnel.eze file. Go to the page and get the latest. I noticed that the newer versions have the ability to install stunnel as a service and I am not sure some of the older versions have all those features.

I tested this on my machine and it worked great. No I am one step closer to being able to host my email.

Several of my users have been complaining that iGoldmine was not working for them. I am not sure when it quit because iGoldmine sometimes doesn't get used for weeks at a time. But I was pretty sure it was working until sometime in November maybe even towards the end of November.

Anyway, I started researching this and came to find out that I could not run the goldmine executable which is on a network share, from the machine running my iGoldmine server. The iGoldmine server is W2K 2003 server and is just a member server of my domain. The error I was getting when trying to run the goldmine executable was:

"windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

I decided to try and run some other .exe files on different network drives and sure enough, same error on all of them.

Goldmine tech support is usually awesome, but this time they just pooped out on me and had me so mad I had to go get a Dr Pepper to settle down. They didn't want to help at all.

Turns out the issue was with the Internet Explorer Enhanced Security Configuration. You can get to this in Control Panel-Add/Remove Programs/Windows Components/. After that you can check or uncheck the two options: "For administrator Groups" and "For all other user groups". Both were checked, so I unchecked them and then I was able to access files over the network.

I didn't have the same problem logged in as myself. I was able to run those files, other users, however could not and hence the problem. There must have been a windows update that changed the IE config and hence caused this problem. I would have thought the Goldmine folks would have encountered this already, cause it has probably been a month or so.