IPSec monitor snap-in
in [Windows XP Basics]
|
Prev: yahoo's email window
Next: Dvd decoder
From: William B. Lurie on 2 Mar 2010 17:21 John John - MVP wrote: > William B. Lurie wrote: >> John John - MVP wrote: >>> William B. Lurie wrote: >>>> I find the following failure repeatedly in my Event Monitor. >>>> Could someone lead me to its resolution? Thank you. >>>> >>>> Event Type: Failure Audit >>>> Event Source: Security >>>> Event Category: Policy Change >>>> Event ID: 615 >>>> Date: 3/2/2010 >>>> Time: 6:51:08 AM >>>> User: NT AUTHORITY\NETWORK SERVICE >>>> Computer: COMPAQ-2006 >>>> Description: >>>> IPSec Services: IPSec Services failed to get the complete list >>>> of network interfaces on the machine. This can be a potential >>>> security hazard to the machine since some of the network interfaces >>>> may not get the protection as desired by the applied IPSec filters. >>>> Please run IPSec monitor snap-in to further diagnose the problem. >>> >>> XP Home or XP Pro? Is the machine part of a network or is it a stand >>> alone? Do you VPN into a server with this machine? >>> >>> John >> See my later message about IPSec, John. I tried the test >> and got no results at all. >> >> It is XP Home/SP2 (SP3 is the same). It is a one-user-desktop, >> hardwired to Ethernet/DSL line. > > I'm not really sure why you would be getting these failure audits on > policy changes on a Windows XP Home machine. I don't think that these > settings can be enabled via the registry and the XP Home version has no > Local Security Policy tool, and it doesn't have a Group Policy snap-in > so I'm not sure how you managed to enable the "Audit policy change" > feature on your machine. > > Unless IPSEC is configured the error is benign, you might have 'phantom' > adapters on your machine, verify and make sure that no phantom adapters > are present. > > http://support.microsoft.com/kb/315539 > Device Manager does not display devices that are not connected to the > Windows XP-based computer > > If you aren't making VPN connections then there is little to no > likelihood that IPSEC is configured or even used on your machine, set > the IPSEC service to Manual and see if these errors persist. > > John I'd be glad to try that, John. But can you lead me to it?
From: John John - MVP on 2 Mar 2010 17:36 William B. Lurie wrote: > John John - MVP wrote: >> William B. Lurie wrote: >>> John John - MVP wrote: >>>> William B. Lurie wrote: >>>>> I find the following failure repeatedly in my Event Monitor. >>>>> Could someone lead me to its resolution? Thank you. >>>>> >>>>> Event Type: Failure Audit >>>>> Event Source: Security >>>>> Event Category: Policy Change >>>>> Event ID: 615 >>>>> Date: 3/2/2010 >>>>> Time: 6:51:08 AM >>>>> User: NT AUTHORITY\NETWORK SERVICE >>>>> Computer: COMPAQ-2006 >>>>> Description: >>>>> IPSec Services: IPSec Services failed to get the complete list >>>>> of network interfaces on the machine. This can be a potential >>>>> security hazard to the machine since some of the network interfaces >>>>> may not get the protection as desired by the applied IPSec filters. >>>>> Please run IPSec monitor snap-in to further diagnose the problem. >>>> >>>> XP Home or XP Pro? Is the machine part of a network or is it a >>>> stand alone? Do you VPN into a server with this machine? >>>> >>>> John >>> See my later message about IPSec, John. I tried the test >>> and got no results at all. >>> >>> It is XP Home/SP2 (SP3 is the same). It is a one-user-desktop, >>> hardwired to Ethernet/DSL line. >> >> I'm not really sure why you would be getting these failure audits on >> policy changes on a Windows XP Home machine. I don't think that these >> settings can be enabled via the registry and the XP Home version has >> no Local Security Policy tool, and it doesn't have a Group Policy >> snap-in so I'm not sure how you managed to enable the "Audit policy >> change" feature on your machine. >> >> Unless IPSEC is configured the error is benign, you might have >> 'phantom' adapters on your machine, verify and make sure that no >> phantom adapters are present. >> >> http://support.microsoft.com/kb/315539 >> Device Manager does not display devices that are not connected to the >> Windows XP-based computer >> >> If you aren't making VPN connections then there is little to no >> likelihood that IPSEC is configured or even used on your machine, set >> the IPSEC service to Manual and see if these errors persist. >> >> John > I'd be glad to try that, John. But can you lead me to it? In the Start menu Run box enter the following command: services.msc this will open the Services management console. Go down the list to the "IPSEC Services" and double click on it and in the drop down box change the "Startup type" to "Manual". Don't forget to click on the "Apply" button to commit the changes. John
From: William B. Lurie on 2 Mar 2010 21:37 John John - MVP wrote: > William B. Lurie wrote: >> John John - MVP wrote: >>> William B. Lurie wrote: >>>> John John - MVP wrote: >>>>> William B. Lurie wrote: >>>>>> I find the following failure repeatedly in my Event Monitor. >>>>>> Could someone lead me to its resolution? Thank you. >>>>>> >>>>>> Event Type: Failure Audit >>>>>> Event Source: Security >>>>>> Event Category: Policy Change >>>>>> Event ID: 615 >>>>>> Date: 3/2/2010 >>>>>> Time: 6:51:08 AM >>>>>> User: NT AUTHORITY\NETWORK SERVICE >>>>>> Computer: COMPAQ-2006 >>>>>> Description: >>>>>> IPSec Services: IPSec Services failed to get the complete list >>>>>> of network interfaces on the machine. This can be a potential >>>>>> security hazard to the machine since some of the network >>>>>> interfaces may not get the protection as desired by the applied >>>>>> IPSec filters. Please run IPSec monitor snap-in to further >>>>>> diagnose the problem. >>>>> >>>>> XP Home or XP Pro? Is the machine part of a network or is it a >>>>> stand alone? Do you VPN into a server with this machine? >>>>> >>>>> John >>>> See my later message about IPSec, John. I tried the test >>>> and got no results at all. >>>> >>>> It is XP Home/SP2 (SP3 is the same). It is a one-user-desktop, >>>> hardwired to Ethernet/DSL line. >>> >>> I'm not really sure why you would be getting these failure audits on >>> policy changes on a Windows XP Home machine. I don't think that >>> these settings can be enabled via the registry and the XP Home >>> version has no Local Security Policy tool, and it doesn't have a >>> Group Policy snap-in so I'm not sure how you managed to enable the >>> "Audit policy change" feature on your machine. >>> >>> Unless IPSEC is configured the error is benign, you might have >>> 'phantom' adapters on your machine, verify and make sure that no >>> phantom adapters are present. >>> >>> http://support.microsoft.com/kb/315539 >>> Device Manager does not display devices that are not connected to the >>> Windows XP-based computer >>> >>> If you aren't making VPN connections then there is little to no >>> likelihood that IPSEC is configured or even used on your machine, set >>> the IPSEC service to Manual and see if these errors persist. >>> >>> John >> I'd be glad to try that, John. But can you lead me to it? > > In the Start menu Run box enter the following command: > > services.msc > > this will open the Services management console. Go down the list to the > "IPSEC Services" and double click on it and in the drop down box change > the "Startup type" to "Manual". Don't forget to click on the "Apply" > button to commit the changes. > > John That was easy, John. Preliminary checks seem to indicate that the error doesn't show up again in the Events Viewer. I'll check it some more. Now if I could get the ATI errors and anomalies to go away, that would be nice, too. I wonder how many other things are starting up, and slowing my startup up every time, that are totally superfluous.
From: John John - MVP on 3 Mar 2010 21:32 William B. Lurie wrote: > [snip] > FYI, John, here's the fat list of test.txt: > These Windows services are started: > > Application Layer Gateway Service > Ati HotKey Poller > Automatic Updates > COM+ Event System > Cryptographic Services > DCOM Server Process Launcher > DHCP Client > Distributed Link Tracking Client > DNS Client > Event Log > Fast User Switching Compatibility > Help and Support > LexBce Server > lxct_device > Machine Debug Manager > Network Connections > Network Location Awareness (NLA) > Norton AntiVirus > Norton Save and Restore > Norton UnErase Protection > Pervasive PSQL Workgroup Engine > Plug and Play > Print Spooler > Protected Storage > Remote Access Connection Manager > Remote Procedure Call (RPC) > Secondary Logon > Security Accounts Manager > Server > Shell Hardware Detection > Speed Disk service > SSDP Discovery Service > System Event Notification > Task Scheduler > TCP/IP NetBIOS Helper > Telephony > Terminal Services > Themes > Universal Plug and Play Device Host > Viewpoint Manager Service > WebClient > Windows Audio > Windows Firewall/Internet Connection Sharing (ICS) > Windows Image Acquisition (WIA) > Windows Management Instrumentation > Windows Time > Wireless Zero Configuration > Workstation > > The command completed successfully. It's a desktop, you are the sole user and it is a stand alone? Do you share files with others on the internet (with things like Limewire)? Do you have/use a wireless router? John
From: William B. Lurie on 4 Mar 2010 06:35
John John - MVP wrote: > William B. Lurie wrote: >> [snip] > >> FYI, John, here's the fat list of test.txt: >> These Windows services are started: >> >> Application Layer Gateway Service >> Ati HotKey Poller >> Automatic Updates >> COM+ Event System >> Cryptographic Services >> DCOM Server Process Launcher >> DHCP Client >> Distributed Link Tracking Client >> DNS Client >> Event Log >> Fast User Switching Compatibility >> Help and Support >> LexBce Server >> lxct_device >> Machine Debug Manager >> Network Connections >> Network Location Awareness (NLA) >> Norton AntiVirus >> Norton Save and Restore >> Norton UnErase Protection >> Pervasive PSQL Workgroup Engine >> Plug and Play >> Print Spooler >> Protected Storage >> Remote Access Connection Manager >> Remote Procedure Call (RPC) >> Secondary Logon >> Security Accounts Manager >> Server >> Shell Hardware Detection >> Speed Disk service >> SSDP Discovery Service >> System Event Notification >> Task Scheduler >> TCP/IP NetBIOS Helper >> Telephony >> Terminal Services >> Themes >> Universal Plug and Play Device Host >> Viewpoint Manager Service >> WebClient >> Windows Audio >> Windows Firewall/Internet Connection Sharing (ICS) >> Windows Image Acquisition (WIA) >> Windows Management Instrumentation >> Windows Time >> Wireless Zero Configuration >> Workstation >> >> The command completed successfully. > > It's a desktop, you are the sole user and it is a stand alone? Do you > share files with others on the internet (with things like Limewire)? Do > you have/use a wireless router? > > John Yes it is a desktop. Yes I am the sole user and it is a stand-alone. No, I share no files with anyone anywhere (except that I have a website friom which people are able to download files which I have placed there. I have no Limewire. I have no wireless router. I have a modem furnished by my ISP and my connection is Ethernet, DSL. |