Cannot make firewall changes after implementing SP2

[Guest Brewhaus]

We have never had a need to worry about this issue until now, but after

installing SP2 on our Windows 2003 SBS system, we cannot use the Internet

Connection Wizard to make changes to the firewall settings (we also cannot

add new users, but that can be discussed separately). I have read that ICF

is replaced by Windows Firewall in SP1, and have tried to disable ICF on the

network connection, but the option is not there. When going to the Advance

tab, I show Windows Firewall, with a Settings button, but when clicking the

button I receive an error- "Windows Firewall cannot run because another

program or service is running that might use the network address translation

component (Ipnat.sys)."

 

How can I resolve this issue? Under Network Connections, the internet

connection does not show to be protected (as though ICF was disabled), but we

use HackerSafe which shows only the ports originally opened to be accessible.

Trying to make changes with the Internet Connection Wizard do not work, as

the wizard simply will not fire up.

 

Any help would be greatly appreciated.

 

Rick

[Guest Thee Chicago Wolf]

Re: Cannot make firewall changes after implementing SP2

 

>We have never had a need to worry about this issue until now, but after

>installing SP2 on our Windows 2003 SBS system, we cannot use the Internet

>Connection Wizard to make changes to the firewall settings (we also cannot

>add new users, but that can be discussed separately). I have read that ICF

>is replaced by Windows Firewall in SP1, and have tried to disable ICF on the

>network connection, but the option is not there. When going to the Advance

>tab, I show Windows Firewall, with a Settings button, but when clicking the

>button I receive an error- "Windows Firewall cannot run because another

>program or service is running that might use the network address translation

>component (Ipnat.sys)."

>

>How can I resolve this issue? Under Network Connections, the internet

>connection does not show to be protected (as though ICF was disabled), but we

>use HackerSafe which shows only the ports originally opened to be accessible.

> Trying to make changes with the Internet Connection Wizard do not work, as

>the wizard simply will not fire up.

>

>Any help would be greatly appreciated.

>

>Rick

 

Rick,

 

Not as useful as it could be but look at the following two KBs as

maybe a jumping off point:

 

http://support.microsoft.com/kb/939421

http://support.microsoft.com/kb/945977

 

You'll also likely want to read up on the "Non-Paged Pool (KERNEL)

memory becomes exhausted" issues from kb945977. There are a few

hotfixes for them.

 

Now that you have SP2, update the NIC driver to latest as it seems

most folks fix some minor networking connection issues that way. You

should also get the Update from WU that disables the junk that the SNP

puts in with SP2: http://support.microsoft.com/kb/948496

 

SNP has been causing problems for some folks so you should browse the

KB and read up on them.

 

If you have some app already acting as your firewall, you would be

safe to disable the built-in firewall. Is there any patch or update

for HackerSafe that might be related to SP2?

 

- Thee Chicago Wolf

[Guest Brewhaus]

Re: Cannot make firewall changes after implementing SP2

 

I took a good look at all of the links (and their subsequent links), and none

seemed to relate to our specific issue- that being that we have been unable

to either add users or run the Internet Connection Wizard since implementing

SP2.

 

I checked, and there does not appear to be an updated driver for our NIC. I

also tried disabling TCP Chimney with no improvement, so I re-enabled it.

 

Any other thoughts?

 

"Thee Chicago Wolf" wrote:

> >We have never had a need to worry about this issue until now, but after

> >installing SP2 on our Windows 2003 SBS system, we cannot use the Internet

> >Connection Wizard to make changes to the firewall settings (we also cannot

> >add new users, but that can be discussed separately). I have read that ICF

> >is replaced by Windows Firewall in SP1, and have tried to disable ICF on the

> >network connection, but the option is not there. When going to the Advance

> >tab, I show Windows Firewall, with a Settings button, but when clicking the

> >button I receive an error- "Windows Firewall cannot run because another

> >program or service is running that might use the network address translation

> >component (Ipnat.sys)."

> >

> >How can I resolve this issue? Under Network Connections, the internet

> >connection does not show to be protected (as though ICF was disabled), but we

> >use HackerSafe which shows only the ports originally opened to be accessible.

> > Trying to make changes with the Internet Connection Wizard do not work, as

> >the wizard simply will not fire up.

> >

> >Any help would be greatly appreciated.

> >

> >Rick

>

> Rick,

>

> Not as useful as it could be but look at the following two KBs as

> maybe a jumping off point:

>

> http://support.microsoft.com/kb/939421

> http://support.microsoft.com/kb/945977

>

> You'll also likely want to read up on the "Non-Paged Pool (KERNEL)

> memory becomes exhausted" issues from kb945977. There are a few

> hotfixes for them.

>

> Now that you have SP2, update the NIC driver to latest as it seems

> most folks fix some minor networking connection issues that way. You

> should also get the Update from WU that disables the junk that the SNP

> puts in with SP2: http://support.microsoft.com/kb/948496

>

> SNP has been causing problems for some folks so you should browse the

> KB and read up on them.

>

> If you have some app already acting as your firewall, you would be

> safe to disable the built-in firewall. Is there any patch or update

> for HackerSafe that might be related to SP2?

>

> - Thee Chicago Wolf

>

[Guest Thee Chicago Wolf]

Re: Cannot make firewall changes after implementing SP2

 

>I took a good look at all of the links (and their subsequent links), and none

>seemed to relate to our specific issue- that being that we have been unable

>to either add users or run the Internet Connection Wizard since implementing

>SP2.

>

>I checked, and there does not appear to be an updated driver for our NIC. I

>also tried disabling TCP Chimney with no improvement, so I re-enabled it.

>

>Any other thoughts?

 

Did you try installing the update from KB948496?

http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en

 

One of the problems mentioned in KB936594 is that after SP2 is

installed "You cannot run the Configure E-mail and Internet Connection

Wizard successfully."

 

I'd say try installing the fix from KB948496 and seeing if it at least

helps with the ICW issue. If it does, maybe you could move forward

from there and see about the "Add Users Issue" as it might be a

separate issue altogether. Let me know how it goes.

 

- Thee Chicago Wolf

[Guest Brewhaus]

Re: Cannot make firewall changes after implementing SP2

 

Thank you again. I did not see the error in the original list (KB948496),

but I do show it in KB936594. I will intall the update listed and post my

results. With any luck the cause of the Add User issue will be resolved at

the same time. Both issues give the same basic error, and both began at the

exact same time. We can always hope. :-)

 

"Thee Chicago Wolf" wrote:

> >I took a good look at all of the links (and their subsequent links), and none

> >seemed to relate to our specific issue- that being that we have been unable

> >to either add users or run the Internet Connection Wizard since implementing

> >SP2.

> >

> >I checked, and there does not appear to be an updated driver for our NIC. I

> >also tried disabling TCP Chimney with no improvement, so I re-enabled it.

> >

> >Any other thoughts?

>

> Did you try installing the update from KB948496?

> http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en

>

> One of the problems mentioned in KB936594 is that after SP2 is

> installed "You cannot run the Configure E-mail and Internet Connection

> Wizard successfully."

>

> I'd say try installing the fix from KB948496 and seeing if it at least

> helps with the ICW issue. If it does, maybe you could move forward

> from there and see about the "Add Users Issue" as it might be a

> separate issue altogether. Let me know how it goes.

>

> - Thee Chicago Wolf

>

[Guest Brewhaus]

Re: Cannot make firewall changes after implementing SP2

 

Well, I did get ICW working, and confirmed the the FTP port was open.

However, I still cannot connect through the firewall for some reason. Could

this be because SP2 supposedly has Window Firewall take control instead of

ICW? I cannot open Windows Firewall to make changes because of the conflict

mentioned before. Would disabling ICW resolve this? If so, how do I best do

so?

 

"Thee Chicago Wolf" wrote:

> >I took a good look at all of the links (and their subsequent links), and none

> >seemed to relate to our specific issue- that being that we have been unable

> >to either add users or run the Internet Connection Wizard since implementing

> >SP2.

> >

> >I checked, and there does not appear to be an updated driver for our NIC. I

> >also tried disabling TCP Chimney with no improvement, so I re-enabled it.

> >

> >Any other thoughts?

>

> Did you try installing the update from KB948496?

> http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en

>

> One of the problems mentioned in KB936594 is that after SP2 is

> installed "You cannot run the Configure E-mail and Internet Connection

> Wizard successfully."

>

> I'd say try installing the fix from KB948496 and seeing if it at least

> helps with the ICW issue. If it does, maybe you could move forward

> from there and see about the "Add Users Issue" as it might be a

> separate issue altogether. Let me know how it goes.

>

> - Thee Chicago Wolf

>

[Guest Thee Chicago Wolf]

Re: Cannot make firewall changes after implementing SP2

 

>Well, I did get ICW working, and confirmed the the FTP port was open.

>However, I still cannot connect through the firewall for some reason. Could

>this be because SP2 supposedly has Window Firewall take control instead of

>ICW? I cannot open Windows Firewall to make changes because of the conflict

>mentioned before. Would disabling ICW resolve this? If so, how do I best do

>so?

 

Was that as a result of the update from KB948496? I'm asking because I

plan to use it to kabosh the SNP junk on my own machine that SP2

included.

 

For the Firewall, go into your Administrative Tools > Services >

Windows Firewall / ICS and disable it and see what happens. ICW should

not have taken any control of the Firewall.

 

Mine is disabled and I don't recall ever enabling it even with SP2. Go

to Control Panel >Windows Firewall and run through some of the

Firewall rules on the Exceptions and Advanced > Local Area Connection

> Settings tab to make sure something isn't being blocked (a.k.a.

disallowed to users / unchecked). It's quite possible some entry got

added in there by your Hacker Safe app.

 

- Thee Chicago Wolf

[Guest Brewhaus]

Re: Cannot make firewall changes after implementing SP2

 

Even after the update I could not access the ICW. However, I noticed when

the error presented itself that it was being blocked by DEP (I believe that

is Data Execution Prevention). I was able to check the box to specifically

allow ICW, and then the ICW ran perfectly. I was still unable to disable the

firewall set up with ICW, and without disabling it I cannot enable Windows

Firewall. I will not get too concerned about it, as it does appear that the

firewall in place prior to SP2 is running.

 

I also found that I can gain FTP access from a third computer (the first two

that I tried returned Access Denied errors, but it must have been our IE

settings, because I was successful from the third).

 

So, I cannot say if the update that you suggested was the first step in a

two-part resolution, or if I just overlooked the option to change the DEP

before. Regardless, it did not hurt the system by putting in the update.

 

"Thee Chicago Wolf" wrote:

> >Well, I did get ICW working, and confirmed the the FTP port was open.

> >However, I still cannot connect through the firewall for some reason. Could

> >this be because SP2 supposedly has Window Firewall take control instead of

> >ICW? I cannot open Windows Firewall to make changes because of the conflict

> >mentioned before. Would disabling ICW resolve this? If so, how do I best do

> >so?

>

> Was that as a result of the update from KB948496? I'm asking because I

> plan to use it to kabosh the SNP junk on my own machine that SP2

> included.

>

> For the Firewall, go into your Administrative Tools > Services >

> Windows Firewall / ICS and disable it and see what happens. ICW should

> not have taken any control of the Firewall.

>

> Mine is disabled and I don't recall ever enabling it even with SP2. Go

> to Control Panel >Windows Firewall and run through some of the

> Firewall rules on the Exceptions and Advanced > Local Area Connection

> > Settings tab to make sure something isn't being blocked (a.k.a.

> disallowed to users / unchecked). It's quite possible some entry got

> added in there by your Hacker Safe app.

>

> - Thee Chicago Wolf

>