Guest Brewhaus Posted April 9, 2008 Posted April 9, 2008 We have never had a need to worry about this issue until now, but after installing SP2 on our Windows 2003 SBS system, we cannot use the Internet Connection Wizard to make changes to the firewall settings (we also cannot add new users, but that can be discussed separately). I have read that ICF is replaced by Windows Firewall in SP1, and have tried to disable ICF on the network connection, but the option is not there. When going to the Advance tab, I show Windows Firewall, with a Settings button, but when clicking the button I receive an error- "Windows Firewall cannot run because another program or service is running that might use the network address translation component (Ipnat.sys)." How can I resolve this issue? Under Network Connections, the internet connection does not show to be protected (as though ICF was disabled), but we use HackerSafe which shows only the ports originally opened to be accessible. Trying to make changes with the Internet Connection Wizard do not work, as the wizard simply will not fire up. Any help would be greatly appreciated. Rick
Guest Thee Chicago Wolf Posted April 9, 2008 Posted April 9, 2008 Re: Cannot make firewall changes after implementing SP2 >We have never had a need to worry about this issue until now, but after >installing SP2 on our Windows 2003 SBS system, we cannot use the Internet >Connection Wizard to make changes to the firewall settings (we also cannot >add new users, but that can be discussed separately). I have read that ICF >is replaced by Windows Firewall in SP1, and have tried to disable ICF on the >network connection, but the option is not there. When going to the Advance >tab, I show Windows Firewall, with a Settings button, but when clicking the >button I receive an error- "Windows Firewall cannot run because another >program or service is running that might use the network address translation >component (Ipnat.sys)." > >How can I resolve this issue? Under Network Connections, the internet >connection does not show to be protected (as though ICF was disabled), but we >use HackerSafe which shows only the ports originally opened to be accessible. > Trying to make changes with the Internet Connection Wizard do not work, as >the wizard simply will not fire up. > >Any help would be greatly appreciated. > >Rick Rick, Not as useful as it could be but look at the following two KBs as maybe a jumping off point: http://support.microsoft.com/kb/939421 http://support.microsoft.com/kb/945977 You'll also likely want to read up on the "Non-Paged Pool (KERNEL) memory becomes exhausted" issues from kb945977. There are a few hotfixes for them. Now that you have SP2, update the NIC driver to latest as it seems most folks fix some minor networking connection issues that way. You should also get the Update from WU that disables the junk that the SNP puts in with SP2: http://support.microsoft.com/kb/948496 SNP has been causing problems for some folks so you should browse the KB and read up on them. If you have some app already acting as your firewall, you would be safe to disable the built-in firewall. Is there any patch or update for HackerSafe that might be related to SP2? - Thee Chicago Wolf
Guest Brewhaus Posted April 9, 2008 Posted April 9, 2008 Re: Cannot make firewall changes after implementing SP2 I took a good look at all of the links (and their subsequent links), and none seemed to relate to our specific issue- that being that we have been unable to either add users or run the Internet Connection Wizard since implementing SP2. I checked, and there does not appear to be an updated driver for our NIC. I also tried disabling TCP Chimney with no improvement, so I re-enabled it. Any other thoughts? "Thee Chicago Wolf" wrote: > >We have never had a need to worry about this issue until now, but after > >installing SP2 on our Windows 2003 SBS system, we cannot use the Internet > >Connection Wizard to make changes to the firewall settings (we also cannot > >add new users, but that can be discussed separately). I have read that ICF > >is replaced by Windows Firewall in SP1, and have tried to disable ICF on the > >network connection, but the option is not there. When going to the Advance > >tab, I show Windows Firewall, with a Settings button, but when clicking the > >button I receive an error- "Windows Firewall cannot run because another > >program or service is running that might use the network address translation > >component (Ipnat.sys)." > > > >How can I resolve this issue? Under Network Connections, the internet > >connection does not show to be protected (as though ICF was disabled), but we > >use HackerSafe which shows only the ports originally opened to be accessible. > > Trying to make changes with the Internet Connection Wizard do not work, as > >the wizard simply will not fire up. > > > >Any help would be greatly appreciated. > > > >Rick > > Rick, > > Not as useful as it could be but look at the following two KBs as > maybe a jumping off point: > > http://support.microsoft.com/kb/939421 > http://support.microsoft.com/kb/945977 > > You'll also likely want to read up on the "Non-Paged Pool (KERNEL) > memory becomes exhausted" issues from kb945977. There are a few > hotfixes for them. > > Now that you have SP2, update the NIC driver to latest as it seems > most folks fix some minor networking connection issues that way. You > should also get the Update from WU that disables the junk that the SNP > puts in with SP2: http://support.microsoft.com/kb/948496 > > SNP has been causing problems for some folks so you should browse the > KB and read up on them. > > If you have some app already acting as your firewall, you would be > safe to disable the built-in firewall. Is there any patch or update > for HackerSafe that might be related to SP2? > > - Thee Chicago Wolf >
Guest Thee Chicago Wolf Posted April 9, 2008 Posted April 9, 2008 Re: Cannot make firewall changes after implementing SP2 >I took a good look at all of the links (and their subsequent links), and none >seemed to relate to our specific issue- that being that we have been unable >to either add users or run the Internet Connection Wizard since implementing >SP2. > >I checked, and there does not appear to be an updated driver for our NIC. I >also tried disabling TCP Chimney with no improvement, so I re-enabled it. > >Any other thoughts? Did you try installing the update from KB948496? http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en One of the problems mentioned in KB936594 is that after SP2 is installed "You cannot run the Configure E-mail and Internet Connection Wizard successfully." I'd say try installing the fix from KB948496 and seeing if it at least helps with the ICW issue. If it does, maybe you could move forward from there and see about the "Add Users Issue" as it might be a separate issue altogether. Let me know how it goes. - Thee Chicago Wolf
Guest Brewhaus Posted April 9, 2008 Posted April 9, 2008 Re: Cannot make firewall changes after implementing SP2 Thank you again. I did not see the error in the original list (KB948496), but I do show it in KB936594. I will intall the update listed and post my results. With any luck the cause of the Add User issue will be resolved at the same time. Both issues give the same basic error, and both began at the exact same time. We can always hope. :-) "Thee Chicago Wolf" wrote: > >I took a good look at all of the links (and their subsequent links), and none > >seemed to relate to our specific issue- that being that we have been unable > >to either add users or run the Internet Connection Wizard since implementing > >SP2. > > > >I checked, and there does not appear to be an updated driver for our NIC. I > >also tried disabling TCP Chimney with no improvement, so I re-enabled it. > > > >Any other thoughts? > > Did you try installing the update from KB948496? > http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en > > One of the problems mentioned in KB936594 is that after SP2 is > installed "You cannot run the Configure E-mail and Internet Connection > Wizard successfully." > > I'd say try installing the fix from KB948496 and seeing if it at least > helps with the ICW issue. If it does, maybe you could move forward > from there and see about the "Add Users Issue" as it might be a > separate issue altogether. Let me know how it goes. > > - Thee Chicago Wolf >
Guest Brewhaus Posted April 10, 2008 Posted April 10, 2008 Re: Cannot make firewall changes after implementing SP2 Well, I did get ICW working, and confirmed the the FTP port was open. However, I still cannot connect through the firewall for some reason. Could this be because SP2 supposedly has Window Firewall take control instead of ICW? I cannot open Windows Firewall to make changes because of the conflict mentioned before. Would disabling ICW resolve this? If so, how do I best do so? "Thee Chicago Wolf" wrote: > >I took a good look at all of the links (and their subsequent links), and none > >seemed to relate to our specific issue- that being that we have been unable > >to either add users or run the Internet Connection Wizard since implementing > >SP2. > > > >I checked, and there does not appear to be an updated driver for our NIC. I > >also tried disabling TCP Chimney with no improvement, so I re-enabled it. > > > >Any other thoughts? > > Did you try installing the update from KB948496? > http://www.microsoft.com/downloads/details.aspx?FamilyId=062E954C-FDEC-45AF-A09C-5A05B8F010A5&displaylang=en > > One of the problems mentioned in KB936594 is that after SP2 is > installed "You cannot run the Configure E-mail and Internet Connection > Wizard successfully." > > I'd say try installing the fix from KB948496 and seeing if it at least > helps with the ICW issue. If it does, maybe you could move forward > from there and see about the "Add Users Issue" as it might be a > separate issue altogether. Let me know how it goes. > > - Thee Chicago Wolf >
Guest Thee Chicago Wolf Posted April 10, 2008 Posted April 10, 2008 Re: Cannot make firewall changes after implementing SP2 >Well, I did get ICW working, and confirmed the the FTP port was open. >However, I still cannot connect through the firewall for some reason. Could >this be because SP2 supposedly has Window Firewall take control instead of >ICW? I cannot open Windows Firewall to make changes because of the conflict >mentioned before. Would disabling ICW resolve this? If so, how do I best do >so? Was that as a result of the update from KB948496? I'm asking because I plan to use it to kabosh the SNP junk on my own machine that SP2 included. For the Firewall, go into your Administrative Tools > Services > Windows Firewall / ICS and disable it and see what happens. ICW should not have taken any control of the Firewall. Mine is disabled and I don't recall ever enabling it even with SP2. Go to Control Panel >Windows Firewall and run through some of the Firewall rules on the Exceptions and Advanced > Local Area Connection > Settings tab to make sure something isn't being blocked (a.k.a. disallowed to users / unchecked). It's quite possible some entry got added in there by your Hacker Safe app. - Thee Chicago Wolf
Guest Brewhaus Posted April 10, 2008 Posted April 10, 2008 Re: Cannot make firewall changes after implementing SP2 Even after the update I could not access the ICW. However, I noticed when the error presented itself that it was being blocked by DEP (I believe that is Data Execution Prevention). I was able to check the box to specifically allow ICW, and then the ICW ran perfectly. I was still unable to disable the firewall set up with ICW, and without disabling it I cannot enable Windows Firewall. I will not get too concerned about it, as it does appear that the firewall in place prior to SP2 is running. I also found that I can gain FTP access from a third computer (the first two that I tried returned Access Denied errors, but it must have been our IE settings, because I was successful from the third). So, I cannot say if the update that you suggested was the first step in a two-part resolution, or if I just overlooked the option to change the DEP before. Regardless, it did not hurt the system by putting in the update. "Thee Chicago Wolf" wrote: > >Well, I did get ICW working, and confirmed the the FTP port was open. > >However, I still cannot connect through the firewall for some reason. Could > >this be because SP2 supposedly has Window Firewall take control instead of > >ICW? I cannot open Windows Firewall to make changes because of the conflict > >mentioned before. Would disabling ICW resolve this? If so, how do I best do > >so? > > Was that as a result of the update from KB948496? I'm asking because I > plan to use it to kabosh the SNP junk on my own machine that SP2 > included. > > For the Firewall, go into your Administrative Tools > Services > > Windows Firewall / ICS and disable it and see what happens. ICW should > not have taken any control of the Firewall. > > Mine is disabled and I don't recall ever enabling it even with SP2. Go > to Control Panel >Windows Firewall and run through some of the > Firewall rules on the Exceptions and Advanced > Local Area Connection > > Settings tab to make sure something isn't being blocked (a.k.a. > disallowed to users / unchecked). It's quite possible some entry got > added in there by your Hacker Safe app. > > - Thee Chicago Wolf >
Recommended Posts