Home All Groups Group Topic Archive Search About

Windows 2003 SP1 Firewall on Domain Controller

Author
4 Apr 2005 4:44 PM
Leighton Earl
I have installed SP1 on one of our Windows 2003 domain controllers.
Unfortunately the Windows firewall is applying the non domain policy
which blocks everything. I think this is because this registry key has
a null value:
NKLM\software\microsoft\windows\currentversion\group
policy\history\networkname

sourced from: http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx

Other servers have correctly assigned network names, it seems only our
domain controllers suffer from this.

Why do only the domain controllers have null network names?

Author
4 Apr 2005 6:35 PM
Derek
I have the same problem. So for my DCs I used the 'standard' Firewall
settings instead of 'domain'.

Show quoteHide quote
"Leighton Earl" <leighton.e***@gmail.com> wrote in message
news:da90d4f3.0504040844.61876686@posting.google.com...
>I have installed SP1 on one of our Windows 2003 domain controllers.
> Unfortunately the Windows firewall is applying the non domain policy
> which blocks everything. I think this is because this registry key has
> a null value:
> NKLM\software\microsoft\windows\currentversion\group
> policy\history\networkname
>
> sourced from:
> http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
>
> Other servers have correctly assigned network names, it seems only our
> domain controllers suffer from this.
>
> Why do only the domain controllers have null network names?
Fix windows and pc errors, click for free system scan

Author
13 Apr 2005 11:50 PM
jerry cantrell
I've seen this too, Null values on our DC's.

jerry.

Show quoteHide quote
"Derek" <dseaman@nospam.nospam> wrote in message
news:elChcUUOFHA.2704@TK2MSFTNGP15.phx.gbl...
> I have the same problem. So for my DCs I used the 'standard' Firewall
> settings instead of 'domain'.
>
> "Leighton Earl" <leighton.e***@gmail.com> wrote in message
> news:da90d4f3.0504040844.61876686@posting.google.com...
> >I have installed SP1 on one of our Windows 2003 domain controllers.
> > Unfortunately the Windows firewall is applying the non domain policy
> > which blocks everything. I think this is because this registry key has
> > a null value:
> > NKLM\software\microsoft\windows\currentversion\group
> > policy\history\networkname
> >
> > sourced from:
> > http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
> >
> > Other servers have correctly assigned network names, it seems only our
> > domain controllers suffer from this.
> >
> > Why do only the domain controllers have null network names?
>
>
Author
18 Apr 2005 6:10 PM
Leon2005
I have seen at least 2 customers of ours that have the same problem.
Fortunately, they use our patch managment tool, Service Pack Manager...no you
do not need to patch anything...but part of our tool is a Windows Firewall
Manager, that is, without use of ActiveDirectory of GroupPolicies, so you can
easily scan all your machines on the network and see what exactly is going
on. You can correct you problem almost instantly - our tool is not dealing
with StandardProfiles only with DomainProfiles and thus it rights 'empty'
standard profile and whatever you configure for DomainProfile and then resets
the firewall (no reboot needed). There are some screenshots available at:
www.securitybastion.com/SPM-WF-Screenshots.doc


Show quoteHide quote
"jerry cantrell" wrote:

> I've seen this too, Null values on our DC's.
>
> jerry.
>
> "Derek" <dseaman@nospam.nospam> wrote in message
> news:elChcUUOFHA.2704@TK2MSFTNGP15.phx.gbl...
> > I have the same problem. So for my DCs I used the 'standard' Firewall
> > settings instead of 'domain'.
> >
> > "Leighton Earl" <leighton.e***@gmail.com> wrote in message
> > news:da90d4f3.0504040844.61876686@posting.google.com...
> > >I have installed SP1 on one of our Windows 2003 domain controllers.
> > > Unfortunately the Windows firewall is applying the non domain policy
> > > which blocks everything. I think this is because this registry key has
> > > a null value:
> > > NKLM\software\microsoft\windows\currentversion\group
> > > policy\history\networkname
> > >
> > > sourced from:
> > > http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
> > >
> > > Other servers have correctly assigned network names, it seems only our
> > > domain controllers suffer from this.
> > >
> > > Why do only the domain controllers have null network names?
> >
> >
>
>
>
Author
16 Jun 2005 8:17 PM
Minh
I have the same problem ... Does anybody (or Microsoft) find the solution for
this yet?

Show quoteHide quote
"Leon2005" wrote:

> I have seen at least 2 customers of ours that have the same problem.
> Fortunately, they use our patch managment tool, Service Pack Manager...no you
> do not need to patch anything...but part of our tool is a Windows Firewall
> Manager, that is, without use of ActiveDirectory of GroupPolicies, so you can
> easily scan all your machines on the network and see what exactly is going
> on. You can correct you problem almost instantly - our tool is not dealing
> with StandardProfiles only with DomainProfiles and thus it rights 'empty'
> standard profile and whatever you configure for DomainProfile and then resets
> the firewall (no reboot needed). There are some screenshots available at:
> www.securitybastion.com/SPM-WF-Screenshots.doc
>
>
> "jerry cantrell" wrote:
>
> > I've seen this too, Null values on our DC's.
> >
> > jerry.
> >
> > "Derek" <dseaman@nospam.nospam> wrote in message
> > news:elChcUUOFHA.2704@TK2MSFTNGP15.phx.gbl...
> > > I have the same problem. So for my DCs I used the 'standard' Firewall
> > > settings instead of 'domain'.
> > >
> > > "Leighton Earl" <leighton.e***@gmail.com> wrote in message
> > > news:da90d4f3.0504040844.61876686@posting.google.com...
> > > >I have installed SP1 on one of our Windows 2003 domain controllers.
> > > > Unfortunately the Windows firewall is applying the non domain policy
> > > > which blocks everything. I think this is because this registry key has
> > > > a null value:
> > > > NKLM\software\microsoft\windows\currentversion\group
> > > > policy\history\networkname
> > > >
> > > > sourced from:
> > > > http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
> > > >
> > > > Other servers have correctly assigned network names, it seems only our
> > > > domain controllers suffer from this.
> > > >
> > > > Why do only the domain controllers have null network names?
> > >
> > >
> >
> >
> >
Author
16 Jun 2005 8:17 PM
Minh
I have the same problem ... Does anybody (or Microsoft) find the solution for
this yet?

Show quoteHide quote
"Leon2005" wrote:

> I have seen at least 2 customers of ours that have the same problem.
> Fortunately, they use our patch managment tool, Service Pack Manager...no you
> do not need to patch anything...but part of our tool is a Windows Firewall
> Manager, that is, without use of ActiveDirectory of GroupPolicies, so you can
> easily scan all your machines on the network and see what exactly is going
> on. You can correct you problem almost instantly - our tool is not dealing
> with StandardProfiles only with DomainProfiles and thus it rights 'empty'
> standard profile and whatever you configure for DomainProfile and then resets
> the firewall (no reboot needed). There are some screenshots available at:
> www.securitybastion.com/SPM-WF-Screenshots.doc
>
>
> "jerry cantrell" wrote:
>
> > I've seen this too, Null values on our DC's.
> >
> > jerry.
> >
> > "Derek" <dseaman@nospam.nospam> wrote in message
> > news:elChcUUOFHA.2704@TK2MSFTNGP15.phx.gbl...
> > > I have the same problem. So for my DCs I used the 'standard' Firewall
> > > settings instead of 'domain'.
> > >
> > > "Leighton Earl" <leighton.e***@gmail.com> wrote in message
> > > news:da90d4f3.0504040844.61876686@posting.google.com...
> > > >I have installed SP1 on one of our Windows 2003 domain controllers.
> > > > Unfortunately the Windows firewall is applying the non domain policy
> > > > which blocks everything. I think this is because this registry key has
> > > > a null value:
> > > > NKLM\software\microsoft\windows\currentversion\group
> > > > policy\history\networkname
> > > >
> > > > sourced from:
> > > > http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
> > > >
> > > > Other servers have correctly assigned network names, it seems only our
> > > > domain controllers suffer from this.
> > > >
> > > > Why do only the domain controllers have null network names?
> > >
> > >
> >
> >
> >

Bookmark and Share