You cannot join a new array member to an existing ISA Server 2004-based array (921173)

SYMPTOMS

Consider the following scenario:

You disable the remote procedure call (RPC) filter on an existing Microsoft Internet Security and Acceleration (ISA) Server 2004-based array.
You perform an array mode installation of ISA Server 2004 and try to join the computer to the existing ISA Server-based array.

In this scenario, you cannot join a new array member to an existing ISA Server 2004-based array. Additionally, you may receive an error message that resembles the following:

An attempt to use Windows authentication to authenticate the request sent to the Configuration Storage server computer failed. Refer to Getting Started Guide for help on setting up Windows authentication.

The ISA Server installation log may contain the following error message:

Time ISA setup CA INFO : GetAccountInfo failed with 0x800706fd trying to create a connection to the configuration server
Time ISA setup CA WARNING: AccountToSid(ADAM) failed. hr=0x800706fd

Note The "0x800706fd" error code translates to the following error message text:

ERROR_TRUSTED_RELATIONSHIP_FAILURE The trust relationship between this workstation and the primary domain failed.

CAUSE

This behavior occurs if the RPC filter is disabled on the existing ISA Server-based array.

The LookupAccountName function uses RPC. If you disable the RPC filter, ISA Server cannot create dynamic rules to enable traffic through the random RPC ports. Therefore, RPC traffic may be blocked.

RESOLUTION

To resolve this behavior, follow these steps:

Enable the RPC filter on the Configuration Storage server and on the array that the new member will join. To do this, follow these steps:
1. Start the ISA Server Management tool.
2. Expand Enterprise, and then click Enterprise Add-ins.
3. Click the Application Filters tab, right-click RPC Filter, and then click Enable.
4. Expand Arrays, and then expand the array that the ISA Server computer will join.
5. Expand Configuration, click Add-ins, and then click the Application Filters tab.
6. Right-click RPC Filter, and then click Enable.
Perform one of the following steps:
- Install the ISA Server 2004 update on the Configuration Storage server and on all array members. To download and install this update, visit the following Microsoft Web site:
  http://www.microsoft.com/downloads/details.aspx?familyid=d8d433fb-3e2f-4223-8935-a76b18ef84cd&displaylang=en
- Install the latest ISA Server 2004, Enterprise Edition service pack on the Configuration Storage server and on all array members. For more information about how to obtain and install the latest ISA Server 2004, Enterprise Edition service pack , click the following article number to view the article in the Microsoft Knowledge Base:
  891024 How to obtain the latest ISA Server 2004 service pack