SP2 Firewall

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
 
Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.
 
Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




KM said:
Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM

Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
 
Renee,

Any chance for you to post here:
- FBALog.txt
- SetupAPI.log
- FileMon log (captured while you do the 'net start sharedaccess' command)
- RegMon log (the same here)

You should use OE (Outlook Express) to post the files as attachments. Then we all here will have more data to be able to help you
out with the issue.

--
Regards,
KM

Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




KM said:
Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM

Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
Click to expand...
 
Hi KM,

I am having some trouble posting the files on here as my company controls
the permissions to the folders necessary to attach a file to a post. ITS cut
off our ability to access usenet groups with Outlook Express.

Anyhow, I appreciate any other input you may have...

Thanks again.

Renee

KM said:
Renee,

Any chance for you to post here:
- FBALog.txt
- SetupAPI.log
- FileMon log (captured while you do the 'net start sharedaccess' command)
- RegMon log (the same here)

You should use OE (Outlook Express) to post the files as attachments. Then we all here will have more data to be able to help you
out with the issue.

--
Regards,
KM

Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




KM said:
Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM


Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
Click to expand...
 
I FINALLY figured it out!!!!

What I changed:
Go to the Service Control Manager Component
->Registry Data
->HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs
(REG_MULTI_SZ format)
->add 'Sharedaccess' to the list of values

This worked for me! I hope it helps you as well!!!

Thanks to everyone for your help!
Renee said:
Hi KM,

I am having some trouble posting the files on here as my company controls
the permissions to the folders necessary to attach a file to a post. ITS cut
off our ability to access usenet groups with Outlook Express.

Anyhow, I appreciate any other input you may have...

Thanks again.

Renee

KM said:
Renee,

Any chance for you to post here:
- FBALog.txt
- SetupAPI.log
- FileMon log (captured while you do the 'net start sharedaccess' command)
- RegMon log (the same here)

You should use OE (Outlook Express) to post the files as attachments. Then we all here will have more data to be able to help you
out with the issue.

--
Regards,
KM

Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




:

Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM


Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
Click to expand...
 
Renee,

Wired. Are you saying you were missing the Sharedaccess value from that key?
I wonder why. My builds have it (the SP2 version of the "Service Control Manager (SCM)" component will set the value properly).

Can you check if that value is getting lost on your run time during FBA or not?
Just open the software reg.hive of pre-FBA image with regedit and see if the Sharedaccess value is there.

--
Regards,
KM

I FINALLY figured it out!!!!

What I changed:
Go to the Service Control Manager Component
->Registry Data
->HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs
(REG_MULTI_SZ format)
->add 'Sharedaccess' to the list of values

This worked for me! I hope it helps you as well!!!

Thanks to everyone for your help!
Renee said:
Hi KM,

I am having some trouble posting the files on here as my company controls
the permissions to the folders necessary to attach a file to a post. ITS cut
off our ability to access usenet groups with Outlook Express.

Anyhow, I appreciate any other input you may have...

Thanks again.

Renee

KM said:
Renee,

Any chance for you to post here:
- FBALog.txt
- SetupAPI.log
- FileMon log (captured while you do the 'net start sharedaccess' command)
- RegMon log (the same here)

You should use OE (Outlook Express) to post the files as attachments. Then we all here will have more data to be able to help
you
out with the issue.

--
Regards,
KM


Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




:

Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM


Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
Click to expand...
 
Actually... it was a rather silly mistake.

As part of previous protocol, SharedAccess was removed. Since I was editing
an existing configuration, I did not go through these steps. I completely
forgot about it when I began to configure the firewall.

Thanks again, KM!!

KM said:
Renee,

Wired. Are you saying you were missing the Sharedaccess value from that key?
I wonder why. My builds have it (the SP2 version of the "Service Control Manager (SCM)" component will set the value properly).

Can you check if that value is getting lost on your run time during FBA or not?
Just open the software reg.hive of pre-FBA image with regedit and see if the Sharedaccess value is there.

--
Regards,
KM

I FINALLY figured it out!!!!

What I changed:
Go to the Service Control Manager Component
->Registry Data
->HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs
(REG_MULTI_SZ format)
->add 'Sharedaccess' to the list of values

This worked for me! I hope it helps you as well!!!

Thanks to everyone for your help!
Renee said:
Hi KM,

I am having some trouble posting the files on here as my company controls
the permissions to the folders necessary to attach a file to a post. ITS cut
off our ability to access usenet groups with Outlook Express.

Anyhow, I appreciate any other input you may have...

Thanks again.

Renee

:

Renee,

Any chance for you to post here:
- FBALog.txt
- SetupAPI.log
- FileMon log (captured while you do the 'net start sharedaccess' command)
- RegMon log (the same here)

You should use OE (Outlook Express) to post the files as attachments. Then we all here will have more data to be able to help
you
out with the issue.

--
Regards,
KM


Hi KM,

Yes, the 'Windows Firewall/Internet Connection Sharing' component is
included in my image, and the Firewall is turned on.

The start value of the SharedAccess service already was 2.

Further, I'm not quite sure what to look at/for in the in setupapi.log.

I've looked at your other posts regarding filemon and regmon. I started both
before running 'net start sharedaccess' only to get the same error - ' The
executable program that this service is configured to run in does not
implement the service.'

Thank you again! Please please reply with ANY other ideas!




:

Renee,

Is the "Windows Firewall/Internet Connection Sharing (ICS)" component in your image?

Also, go to [HKLM\System\CurrentControlSet-\Services\SharedAccess] and change the Start value there to 2.

Check out Event Logs and SetupApi.log to see why the SharedAccess service is not started.

--
Regards,
KM


Hello all,

I have posted a few posts regarding the configuartion of the SP2 firewall....
Previously, I tried to directly configure the ports through net shell
commands and changing the netfw.inf file.

With all that failed, in the meantime, I have decided to only configure 15
ports, which TD allows for. However, I still CANNOT access these ports.

When I show portopening, the 15 ports are listed, but the applications that
need to access these ports are still failing. I've tried to open the ports
locally and for any source, only to get the same result.

I've done some trouble shooting...
'show state' command results in 'the service has not been started' ... I
assume this is in reference to the sharedaccess service.
'show service' command returns nothing.

What do I need? Help from someone who has successfully configured ports for
applications to access, either in TD or otherwise. Specifically regarding any
extra, components or files included in your configuration.

Thank you in advance. If you need any more information, please let me know.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top